Archive
July 2000
Vulnerabilities first published in this month (UTC), newest first.
155 results · Feed
-
Unscored —CVE-2000-0407 Public exploit
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
-
Unscored —
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a…
-
Unscored —CVE-2000-0473 Public exploit
Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET reque…
-
Unscored —CVE-2000-0464 EPSS 13%
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the Active…
-
Unscored —
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pl…
-
Unscored —CVE-2000-0527 Public exploit
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via sh…
-
Unscored —CVE-2000-0411 Public exploit
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report paramete…
-
Unscored —
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom device…
-
Unscored —CVE-2000-0545 Public exploit
Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (…
-
Unscored —
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPa…
-
Unscored —
Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
-
Unscored —CVE-2000-0419 EPSS 21%
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthor…
-
Unscored —
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unpro…
-
Unscored —
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
-
Unscored —
Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental v…
-
Unscored —
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
-
Unscored —CVE-2000-0395 Public exploit
Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
-
Unscored —CVE-2000-0236 Public exploit
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web p…
-
Unscored —
The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D …
-
Unscored —
Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary com…
-
Unscored —CVE-2000-0336 Public exploit
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
-
Unscored —
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
-
Unscored —
Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary comm…
-
Unscored —
NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in …
-
Unscored —CVE-2000-0438 Public exploit
Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via …
-
Unscored —
Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary com…
-
Unscored —
The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
-
Unscored —
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
-
Unscored —CVE-2000-0342 Public exploit
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat b…
-
Unscored —
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capab…
-
Unscored —CVE-2000-0350 Public exploit
A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the we…
-
Unscored —CVE-2000-0339 Public exploit
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to byp…
-
Unscored —CVE-2000-0397 Public exploit
The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote …
-
Unscored —CVE-2000-0264 Public exploit
Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly exe…
-
Unscored —CVE-2000-0001 Public exploit
RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.
-
Unscored —CVE-2000-0316 Public exploit
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
-
Unscored —CVE-2000-0425 Public exploit
Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary comma…
-
Unscored —
The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a re…
-
Unscored —CVE-2000-0424 Public exploit
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.