Archive
13 October 2000
Vulnerabilities first published on this day (UTC), newest first.
261 results · Feed
-
Unscored —CVE-2000-0671 Public exploit
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory conte…
-
Unscored —
Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in…
-
Unscored —CVE-2000-0538 Public exploit
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a lo…
-
Unscored —CVE-2000-0638 Public exploit
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attac…
-
Unscored —CVE-2000-0782 Public exploit
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot do…
-
Unscored —CVE-2000-0521 Public exploit
Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include th…
-
Unscored —
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
-
Unscored —
PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allo…
-
Unscored —CVE-2000-0240 Public exploit
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a…
-
Unscored —CVE-2000-0597 EPSS 12%
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote at…
-
Unscored —
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, w…
-
Unscored —CVE-2000-0706 Public exploit
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
-
Unscored —CVE-2000-0582 Public exploit
Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid …
-
Unscored —
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, s…
-
Unscored —CVE-2000-0588 Public exploit
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the…
-
Unscored —CVE-2000-0613 Public exploit
Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to f…
-
Unscored —CVE-2000-0708 Public exploit
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service vi…
-
Unscored —
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
-
Unscored —CVE-2000-0669 Public exploit
Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
-
Unscored —
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL sessio…
-
Unscored —
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbi…
-
Unscored —
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
-
Unscored —
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable i…
-
Unscored —CVE-2000-0787 Public exploit
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell met…
-
Unscored —CVE-2000-0451 Public exploit
The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICM…
-
Unscored —CVE-2000-0675 Public exploit
Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a lon…
-
Unscored —
Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the …
-
Unscored —
IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which prov…
-
Unscored —CVE-2000-0075 Public exploit
Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a de…
-
Unscored —CVE-2000-0763 Public exploit
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privil…
-
Unscored —CVE-2000-0146 Public exploit
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of servic…
-
Unscored —
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which a…
-
Unscored —
PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion o…
-
Unscored —
The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying t…
-
Unscored —
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via …
-
Unscored —
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed…
-
Unscored —
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attack…
-
Unscored —
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remo…
-
Unscored —
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which…
-
Unscored —
xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host …