Skip to content
OpenAdvisories

Archive

July 2000

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12140
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 1915
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

155 results · Feed

  • Unscored —

    Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed in…

  • Unscored —
    CVE-2000-0396 Public exploit

    The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, whi…

  • Unscored —
    CVE-2000-0491 Public exploit EPSS 18%

    Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary c…

  • Unscored —

    Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.

  • Unscored —

    Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatt…

  • Unscored —

    AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range req…

  • Unscored —

    The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it t…

  • Unscored —
    CVE-2000-0168 Public exploit EPSS 20%

    Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file…

  • Unscored —

    ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensiti…

  • Unscored —
    CVE-2000-0195 Public exploit

    setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserver…

  • Unscored —
    CVE-2000-0305 Public exploit EPSS 38%

    Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a de…

  • Unscored —

    mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.

  • Unscored —

    Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.

  • Unscored —
    CVE-2000-0526 Public exploit

    mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (d…

  • Unscored —
    CVE-2000-0453 Public exploit

    XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet…

  • Unscored —

    Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to exec…

  • Unscored —

    Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not …

  • Unscored —
    CVE-2000-0013 Public exploit

    IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which …

  • Unscored —

    Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.

  • Unscored —

    The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS…

  • Unscored —

    Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbit…

  • Unscored —

    Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm varia…

  • Unscored —
    CVE-2000-0379 Public exploit

    The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has…

  • Unscored —

    The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a de…

  • Unscored —
    CVE-2000-0432 Public exploit

    The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2000-0480 Public exploit

    Dragon telnet server allows remote attackers to cause a denial of service via a long username.

  • Unscored —
    CVE-2000-0520 Public exploit

    Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands …

  • Unscored —
    CVE-2000-0405 Public exploit

    Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response p…

  • Unscored —
    CVE-2000-0417 Public exploit

    The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2000-0476 Public exploit

    xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which forc…

  • Unscored —
    CVE-2000-0337 Public exploit

    Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.

  • Unscored —
    CVE-2000-0442 Public exploit

    Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is pr…

  • Unscored —
    CVE-2000-0524 EPSS 15%

    Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages wit…

  • Unscored —

    Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAll…

  • Unscored —

    The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly b…