Archive
September 2000
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 2148
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
48 results · Feed
-
Unscored —
VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Tr…
-
Unscored —
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various …
-
Unscored —
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacke…
-
Unscored —
Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to…
-
Unscored —CVE-2000-0710 EPSS 26%
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the phys…
-
Unscored —CVE-2000-0696 Public exploit
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests …
-
Unscored —
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacte…
-
Unscored —CVE-2000-0691 Public exploit
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink att…
-
Unscored —
Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replac…
-
Unscored —
WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Messag…
-
Unscored —
String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows re…
-
Unscored —
Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long comm…
-
Unscored —CVE-2000-0688 Public exploit
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote att…
-
Unscored —
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local u…
-
Unscored —CVE-2000-0757 Public exploit
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privi…
-
Unscored —
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remot…
-
Unscored —
ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets w…
-
Unscored —CVE-2000-0695 Public exploit
Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command lin…
-
Unscored —CVE-2000-0794 Public exploit
Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to program…
-
Unscored —
WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the …
-
Unscored —
Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers…
-
Unscored —
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows l…
-
Unscored —
The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creat…
-
Medium —
Jakarta Apache Tomcat Reveals Physical Paths
Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
-
Unscored —CVE-2000-0709 EPSS 25%
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of …
-
Unscored —
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execu…
-
Unscored —
DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a syml…
-
Unscored —
Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_M…
-
Unscored —CVE-2000-0689 Public exploit
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote …
-
Unscored —CVE-2000-0798 Public exploit
The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which…
-
Unscored —CVE-2000-0775 Public exploit
Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or e…
-
Unscored —CVE-2000-0734 Public exploit
eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.
-
Unscored —
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user …
-
Unscored —CVE-2000-0680 Public exploit
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, wh…
-
Unscored —
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in…
-
Unscored —
Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /…
-
Unscored —
Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service…
-
Unscored —
The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
-
Unscored —
umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.
-
Unscored —
Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after th…