Archive
October 2000
Vulnerabilities first published in this month (UTC), newest first.
127 results · Clear filters · Feed
-
Unscored —CVE-2000-0705 Public exploit
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary comman…
-
Unscored —CVE-2000-0179 Public exploit
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to por…
-
Unscored —CVE-2000-0484 Public exploit
Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes in…
-
Unscored —
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
-
Unscored —CVE-2000-0056 Public exploit
IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
-
Unscored —
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
-
Unscored —CVE-2000-0468 Public exploit
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
-
Unscored —CVE-2000-0472 Public exploit
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a l…
-
Unscored —
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "…
-
Unscored —CVE-2000-0664 Public exploit
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) a…
-
Unscored —CVE-2000-0094 Public exploit
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modifie…
-
Unscored —CVE-2000-0552 Public exploit
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allo…
-
Unscored —CVE-2000-0338 Public exploit
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause…
-
Unscored —CVE-2000-0166 Public exploit
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login n…
-
Unscored —
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) atta…
-
Unscored —CVE-2000-0737 Public exploit
The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with conso…
-
Unscored —CVE-2000-0515 Public exploit
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users…
-
Unscored —CVE-2000-0751 Public exploit
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allo…
-
Unscored —
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remot…
-
Unscored —CVE-2000-0470 Public exploit
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication reques…
-
Unscored —
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet wit…
-
Unscored —
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server a…
-
Unscored —CVE-2000-0009 Public exploit
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which …
-
Unscored —CVE-2000-0530 Public exploit
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitr…
-
Unscored —CVE-2000-0489 Public exploit
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs …
-
Unscored —CVE-2000-0516 Public exploit
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN …
-
Unscored —CVE-2000-0652 Public exploit
IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default Invo…
-
Unscored —CVE-2000-0193 Public exploit
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain pr…
-
Unscored —CVE-2000-0640 Public exploit
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, …
-
Unscored —CVE-2000-0116 Public exploit
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restri…
-
Unscored —CVE-2000-0507 Public exploit
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
-
Unscored —CVE-2000-0670 Public exploit
The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary…
-
Unscored —CVE-2000-0601 Public exploit
LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of er…
-
Unscored —CVE-2000-0671 Public exploit
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory conte…
-
Unscored —
Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in…
-
Unscored —CVE-2000-0538 Public exploit
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a lo…
-
Unscored —CVE-2000-0638 Public exploit
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attac…
-
Unscored —CVE-2000-0782 Public exploit
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot do…
-
Unscored —CVE-2000-0521 Public exploit
Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include th…