Archive
13 October 2000
Vulnerabilities first published on this day (UTC), newest first.
261 results · Feed
-
Unscored —CVE-2000-0490 Public exploit
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary comma…
-
Unscored —
RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request por…
-
Unscored —CVE-2000-0482 Public exploit
Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed frag…
-
Unscored —
xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an att…
-
Unscored —
The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by…
-
Unscored —CVE-2000-0263 Public exploit
The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
-
Unscored —
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11…
-
Unscored —CVE-2000-0584 Public exploit
Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with…
-
Unscored —CVE-2000-0282 Public exploit
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2000-0501 Public exploit
Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command…
-
Unscored —CVE-2000-0471 Public exploit
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
-
Unscored —
The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary comma…
-
Unscored —CVE-2000-0641 Public exploit
Savant web server allows remote attackers to execute arbitrary commands via a long GET request.
-
Unscored —CVE-2000-0668 Public exploit
pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display…
-
Unscored —
Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the R…
-
Unscored —
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
-
Unscored —
Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting t…
-
Unscored —
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to th…
-
Unscored —
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession…
-
Unscored —CVE-2000-0537 Public exploit
BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file …
-
Unscored —
Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and conn…
-
Unscored —
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the fi…
-
Unscored —
ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.
-
Unscored —
In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass thro…
-
Unscored —
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a U…
-
Unscored —
The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path …
-
Unscored —
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL…
-
Unscored —
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair gene…
-
Unscored —
Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
-
Unscored —
Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requeste…
-
Unscored —
Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.
-
Unscored —CVE-2000-0467 Public exploit
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in th…
-
Unscored —
Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that …
-
Unscored —
The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to…
-
Unscored —
JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or ob…
-
Unscored —CVE-2000-0705 Public exploit
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to…
-
Unscored —
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary comman…
-
Unscored —
The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows loc…
-
Unscored —
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database …