Archive
12 July 2000
Vulnerabilities first published on this day (UTC), newest first.
140 results · Feed
-
Unscored —
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
-
Unscored —
The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary fil…
-
Unscored —
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which a…
-
Unscored —
The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malfor…
-
Unscored —CVE-2000-0279 Public exploit
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the len…
-
Unscored —
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when…
-
Unscored —CVE-2000-0409 Public exploit
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite fil…
-
Unscored —CVE-2000-0394 Public exploit
NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetPro…
-
Unscored —
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a den…
-
Unscored —CVE-2000-0015 Public exploit
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
-
Unscored —CVE-2000-0403 EPSS 18%
The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a …
-
Unscored —
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
-
Unscored —CVE-2000-0559 Public exploit
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords…
-
Unscored —CVE-2000-0032 Public exploit
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
-
Unscored —
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variab…
-
Unscored —
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
-
Unscored —
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute a…
-
Unscored —
The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame secu…
-
Unscored —
NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web c…
-
Unscored —
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including tha…
-
Unscored —
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.
-
Unscored —CVE-2000-0437 Public exploit
Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause…
-
Unscored —
Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
-
Unscored —CVE-2000-0460 Public exploit
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.
-
Unscored —
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which …
-
Unscored —
Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed in…
-
Unscored —CVE-2000-0396 Public exploit
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, whi…
-
Unscored —
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary c…
-
Unscored —
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
-
Unscored —
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatt…
-
Unscored —
AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range req…
-
Unscored —
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it t…
-
Unscored —
Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file…
-
Unscored —
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensiti…
-
Unscored —CVE-2000-0195 Public exploit
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserver…
-
Unscored —
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a de…
-
Unscored —
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
-
Unscored —
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
-
Unscored —CVE-2000-0526 Public exploit
mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (d…
-
Unscored —CVE-2000-0453 Public exploit
XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet…