Skip to content
OpenAdvisories

Archive

July 2000

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12140
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 1915
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

75 results · Clear filters · Feed

  • Unscored —
    CVE-2000-0592 Public exploit

    Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via lon…

  • Unscored —
    CVE-2000-0607 Public exploit

    Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges…

  • Unscored —
    CVE-2000-0589 Public exploit

    SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modif…

  • Unscored —
    CVE-2000-0572 Public exploit

    The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain pr…

  • Unscored —
    CVE-2000-0617 Public exploit

    Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via …

  • Unscored —
    CVE-2000-0574 Public exploit EPSS 59%

    FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings th…

  • Unscored —
    CVE-2000-0580 Public exploit EPSS 16%

    Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros…

  • Unscored —
    CVE-1999-0959 Public exploit

    IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.

  • Unscored —
    CVE-1999-0820 Public exploit

    FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.

  • Unscored —
    CVE-1999-0416 Public exploit

    Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the…

  • Unscored —
    CVE-2000-0045 Public exploit

    MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.

  • Unscored —
    CVE-2000-0174 Public exploit

    StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-2000-0262 Public exploit

    The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.

  • Unscored —
    CVE-2000-0436 Public exploit

    MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) atta…

  • Unscored —
    CVE-2000-0427 Public exploit

    The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive inf…

  • Unscored —
    CVE-2000-0018 Public exploit

    wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

  • Unscored —
    CVE-2000-0492 Public exploit

    PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the passwo…

  • Unscored —
    CVE-2000-0418 Public exploit

    The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) reques…

  • Unscored —
    CVE-2000-0531 Public exploit

    Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM socket…

  • Unscored —
    CVE-2000-0381 Public exploit

    The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup informat…

  • Unscored —
    CVE-2000-0407 Public exploit

    Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.

  • Unscored —
    CVE-2000-0473 Public exploit

    Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET reque…

  • Unscored —
    CVE-2000-0402 Public exploit EPSS 91%

    The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pl…

  • Unscored —
    CVE-2000-0527 Public exploit

    userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via sh…

  • Unscored —
    CVE-2000-0411 Public exploit

    Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report paramete…

  • Unscored —
    CVE-2000-0545 Public exploit

    Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (…

  • Unscored —
    CVE-2000-0389 Public exploit EPSS 17%

    Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

  • Unscored —
    CVE-2000-0395 Public exploit

    Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.

  • Unscored —
    CVE-2000-0236 Public exploit

    Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web p…

  • Unscored —
    CVE-2000-0336 Public exploit

    Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

  • Unscored —
    CVE-2000-0438 Public exploit

    Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via …

  • Unscored —
    CVE-2000-0342 Public exploit

    Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat b…

  • Unscored —
    CVE-2000-0350 Public exploit

    A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the we…

  • Unscored —
    CVE-2000-0339 Public exploit

    ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to byp…

  • Unscored —
    CVE-2000-0397 Public exploit

    The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote …

  • Unscored —
    CVE-2000-0264 Public exploit

    Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly exe…

  • Unscored —
    CVE-2000-0001 Public exploit

    RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.

  • Unscored —
    CVE-2000-0316 Public exploit

    Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.

  • Unscored —
    CVE-2000-0425 Public exploit

    Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2000-0465 Public exploit EPSS 21%

    Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a re…