Archive
13 October 2000
Vulnerabilities first published on this day (UTC), newest first.
261 results · Feed
-
Unscored —CVE-2000-0703 Public exploit
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error repor…
-
Unscored —CVE-2000-0378 Public exploit
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file des…
-
Unscored —CVE-2000-0257 Public exploit
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service o…
-
Unscored —CVE-2000-0508 Public exploit
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
-
Unscored —
IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of s…
-
Unscored —
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET …
-
Unscored —
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package …
-
Unscored —
The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has …
-
Unscored —
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before t…
-
Unscored —
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal…
-
Unscored —CVE-2000-0634 Public exploit
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files …
-
Unscored —
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary comman…
-
Unscored —CVE-2000-0128 Public exploit
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
-
Unscored —
A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote…
-
Unscored —
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to sy…
-
Unscored —CVE-2000-0780 Public exploit
The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (…
-
Unscored —CVE-2000-0440 Public exploit
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP …
-
Unscored —
nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.
-
Unscored —
Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PAT…
-
Unscored —
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP pro…
-
Unscored —CVE-2000-0446 Public exploit
Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
-
Unscored —
AIX cdmount allows local users to gain root privileges via shell metacharacters.
-
Unscored —
The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify f…
-
Unscored —
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uu…
-
Unscored —
The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connecti…
-
Unscored —CVE-2000-0494 Public exploit
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands i…
-
Unscored —CVE-2000-0340 Public exploit
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environm…
-
Unscored —
The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, whic…
-
Unscored —CVE-2000-0624 Public exploit
Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: ex…
-
Medium —
Zope DocumentTemplate package allows unauthenticated write
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
-
Unscored —
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile a…
-
Unscored —
Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via…
-
Unscored —CVE-2000-0493 Public exploit
Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and poss…
-
Unscored —CVE-2000-0639 Public exploit
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows re…
-
Unscored —
Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
-
Unscored —CVE-2000-0621 EPSS 22%
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's …
-
Unscored —
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "…
-
Unscored —CVE-2000-0586 Public exploit
Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary co…
-
Unscored —CVE-2000-0594 Public exploit
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial…
-
Unscored —
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using th…