Archive
July 2000
Vulnerabilities first published in this month (UTC), newest first.
155 results · Feed
-
Unscored —CVE-2000-0362 Public exploit
Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
-
Unscored —
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a …
-
Unscored —
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains …
-
Unscored —
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addr…
-
Unscored —CVE-2000-0304 EPSS 29%
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of …
-
Unscored —CVE-2000-0393 Public exploit
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variab…
-
Unscored —CVE-2000-0463 Public exploit
BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.
-
Unscored —CVE-2000-0454 Public exploit
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
-
Unscored —CVE-2000-0404 EPSS 18%
The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame …
-
Unscored —CVE-2000-0011 Public exploit
Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET requ…
-
Unscored —
Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form fi…
-
Unscored —CVE-2000-0452 Public exploit
Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service …
-
Unscored —
Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
-
Unscored —
Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memo…
-
Unscored —CVE-2000-0544 EPSS 18%
Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX …
-
Unscored —
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
-
Unscored —
The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary fil…
-
Unscored —
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which a…
-
Unscored —
The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malfor…
-
Unscored —CVE-2000-0279 Public exploit
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the len…
-
Unscored —
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when…
-
Unscored —CVE-2000-0409 Public exploit
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite fil…
-
Unscored —CVE-2000-0394 Public exploit
NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetPro…
-
Unscored —
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a den…
-
Unscored —CVE-2000-0015 Public exploit
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
-
Unscored —CVE-2000-0403 EPSS 18%
The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a …
-
Unscored —
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
-
Unscored —CVE-2000-0559 Public exploit
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords…
-
Unscored —CVE-2000-0032 Public exploit
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
-
Unscored —
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variab…
-
Unscored —
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
-
Unscored —
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute a…
-
Unscored —
The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame secu…
-
Unscored —
NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web c…
-
Unscored —
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including tha…
-
Unscored —
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.
-
Unscored —CVE-2000-0437 Public exploit
Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause…
-
Unscored —
Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
-
Unscored —CVE-2000-0460 Public exploit
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.
-
Unscored —
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which …