Skip to content
OpenAdvisories

Archive

September 2000

Vulnerabilities first published in this month (UTC), newest first.

← August 2000 2000 / September October 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 2148
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2000-0760 Public exploit EPSS 62%

    The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacke…

  • Unscored —
    CVE-2000-0696 Public exploit

    The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests …

  • Unscored —
    CVE-2000-0690 Public exploit EPSS 11%

    Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacte…

  • Unscored —
    CVE-2000-0691 Public exploit

    The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink att…

  • Unscored —
    CVE-2000-0688 Public exploit

    Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote att…

  • Unscored —
    CVE-2000-0757 Public exploit

    The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privi…

  • Unscored —
    CVE-2000-0695 Public exploit

    Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command lin…

  • Unscored —
    CVE-2000-0794 Public exploit

    Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to program…

  • Medium —
    CVE-2000-0759 Public exploit EPSS 26%

    Jakarta Apache Tomcat Reveals Physical Paths

    Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2000-0697 Public exploit EPSS 11%

    The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execu…

  • Unscored —
    CVE-2000-0704 Public exploit EPSS 13%

    Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_M…

  • Unscored —
    CVE-2000-0689 Public exploit

    Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote …

  • Unscored —
    CVE-2000-0798 Public exploit

    The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which…

  • Unscored —
    CVE-2000-0775 Public exploit

    Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or e…

  • Unscored —
    CVE-2000-0734 Public exploit

    eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.

  • Unscored —
    CVE-2000-0680 Public exploit

    The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, wh…

  • Unscored —
    CVE-2000-0721 Public exploit

    The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows l…