Archive
October 2000
Vulnerabilities first published in this month (UTC), newest first.
127 results · Clear filters · Feed
-
Unscored —CVE-2000-0240 Public exploit
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a…
-
Unscored —
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, w…
-
Unscored —CVE-2000-0706 Public exploit
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
-
Unscored —CVE-2000-0582 Public exploit
Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid …
-
Unscored —CVE-2000-0588 Public exploit
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the…
-
Unscored —CVE-2000-0613 Public exploit
Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to f…
-
Unscored —CVE-2000-0708 Public exploit
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service vi…
-
Unscored —
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
-
Unscored —CVE-2000-0669 Public exploit
Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
-
Unscored —CVE-2000-0787 Public exploit
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell met…
-
Unscored —CVE-2000-0451 Public exploit
The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICM…
-
Unscored —CVE-2000-0675 Public exploit
Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a lon…
-
Unscored —CVE-2000-0075 Public exploit
Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a de…
-
Unscored —CVE-2000-0763 Public exploit
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privil…
-
Unscored —CVE-2000-0146 Public exploit
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of servic…
-
Unscored —
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which a…
-
Unscored —
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via …
-
Unscored —CVE-2000-0703 Public exploit
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error repor…
-
Unscored —CVE-2000-0378 Public exploit
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file des…
-
Unscored —CVE-2000-0257 Public exploit
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service o…
-
Unscored —CVE-2000-0508 Public exploit
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
-
Unscored —CVE-2000-0634 Public exploit
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files …
-
Unscored —
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary comman…
-
Unscored —CVE-2000-0128 Public exploit
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
-
Unscored —CVE-2000-0780 Public exploit
The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (…
-
Unscored —CVE-2000-0440 Public exploit
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP …
-
Unscored —CVE-2000-0446 Public exploit
Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
-
Unscored —CVE-2000-0494 Public exploit
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands i…
-
Unscored —CVE-2000-0340 Public exploit
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environm…
-
Unscored —CVE-2000-0624 Public exploit
Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: ex…
-
Unscored —
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile a…
-
Unscored —CVE-2000-0493 Public exploit
Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and poss…
-
Unscored —CVE-2000-0639 Public exploit
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows re…
-
Unscored —
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "…
-
Unscored —CVE-2000-0586 Public exploit
Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary co…
-
Unscored —CVE-2000-0594 Public exploit
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial…
-
Unscored —
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denia…
-
Unscored —CVE-2000-0500 Public exploit
The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting …
-
Unscored —CVE-2000-0636 Public exploit
HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via …
-
Unscored —CVE-2000-0660 Public exploit
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.