Archive
13 October 2000
Vulnerabilities first published on this day (UTC), newest first.
261 results · Feed
-
Unscored —
Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" r…
-
High —
Zope does not properly restrict access to the getRoles method
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
-
Unscored —CVE-2000-0751 Public exploit
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allo…
-
Unscored —
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remot…
-
Unscored —
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mai…
-
Unscored —CVE-2000-0470 Public exploit
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication reques…
-
Unscored —CVE-2000-0770 EPSS 15%
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restric…
-
Unscored —
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet wit…
-
Unscored —
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server a…
-
Unscored —CVE-2000-0009 Public exploit
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which …
-
Unscored —CVE-2000-0530 Public exploit
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitr…
-
Unscored —
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file n…
-
Unscored —CVE-2000-0489 Public exploit
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs …
-
Unscored —CVE-2000-0516 Public exploit
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN …
-
Unscored —CVE-2000-0652 Public exploit
IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default Invo…
-
Unscored —
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and …
-
Unscored —
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic…
-
Unscored —CVE-2000-0631 EPSS 25%
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of …
-
Unscored —
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying…
-
Unscored —CVE-2000-0193 Public exploit
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain pr…
-
Unscored —
xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —CVE-2000-0681 EPSS 51%
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long UR…
-
Unscored —
The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with phy…
-
Unscored —
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provide…
-
Unscored —CVE-2000-0640 Public exploit
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, …
-
Unscored —CVE-2000-0116 Public exploit
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restri…
-
Unscored —
The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of H…
-
Unscored —CVE-2000-0507 Public exploit
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
-
Unscored —
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticat…
-
Unscored —
Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed p…
-
Unscored —
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malforme…
-
Unscored —CVE-2000-0670 Public exploit
The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary…
-
Unscored —
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain pas…
-
Unscored —
Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) …
-
Unscored —CVE-2000-0601 Public exploit
LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of er…
-
Unscored —
Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.
-
Unscored —
Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a d…
-
Unscored —
Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS.
-
Unscored —
Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary co…
-
Unscored —
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a …