Skip to content
OpenAdvisories

Archive

October 2000

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13261
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1822
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

283 results · Feed

  • Unscored —

    Sendmail WIZ command enabled, allowing root access.

  • Unscored —
    CVE-1999-0671 Public exploit

    Buffer overflow in ToxSoft NextFTP client through CWD command.

  • Unscored —
    CVE-1999-0791 Public exploit

    Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to…

  • Unscored —

    Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.

  • Unscored —

    A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's creden…

  • Unscored —
    CVE-1999-0759 Public exploit

    Buffer overflow in FuseMAIL POP service via long USER and PASS commands.

  • Unscored —
    CVE-1999-0679 Public exploit

    Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite …

  • Unscored —

    A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.

  • Unscored —

    The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set t…

  • Unscored —

    A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.

  • Unscored —
    CVE-1999-0927 Public exploit

    NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0873 Public exploit

    Buffer overflow in Skyfull mail server via MAIL FROM command.

  • Unscored —

    Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.

  • Unscored —
    CVE-2000-0745 Public exploit EPSS 12%

    admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to g…

  • Unscored —

    Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a deni…

  • Unscored —

    Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.

  • Unscored —

    ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document …

  • Unscored —
    CVE-2000-0426 Public exploit

    UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the …

  • Unscored —

    Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 comma…

  • Unscored —

    Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.

  • Unscored —
    CVE-2000-0332 Public exploit

    UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pat…

  • Unscored —

    Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a…

  • Unscored —
    CVE-2000-0490 Public exploit

    Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary comma…

  • Unscored —

    RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request por…

  • Unscored —
    CVE-2000-0482 Public exploit

    Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed frag…

  • Unscored —

    xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an att…

  • Unscored —
    CVE-2000-0506 Public exploit EPSS 11%

    The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by…

  • Unscored —
    CVE-2000-0263 Public exploit

    The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.

  • Unscored —

    Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11…

  • Unscored —
    CVE-2000-0584 Public exploit

    Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with…

  • Unscored —
    CVE-2000-0282 Public exploit

    TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2000-0501 Public exploit

    Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command…

  • Unscored —
    CVE-2000-0471 Public exploit

    Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.

  • Unscored —

    The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2000-0641 Public exploit

    Savant web server allows remote attackers to execute arbitrary commands via a long GET request.

  • Unscored —
    CVE-2000-0668 Public exploit

    pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display…

  • Unscored —

    Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the R…

  • Unscored —

    makewhatis in Linux man package allows local users to overwrite files via a symlink attack.

  • Unscored —

    Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting t…

  • Unscored —

    Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to th…