Archive
October 2000
Vulnerabilities first published in this month (UTC), newest first.
283 results · Feed
-
Unscored —
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession…
-
Unscored —CVE-2000-0537 Public exploit
BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file …
-
Unscored —
Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and conn…
-
Unscored —
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the fi…
-
Unscored —
ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.
-
Unscored —
In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass thro…
-
Unscored —
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a U…
-
Unscored —
The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path …
-
Unscored —
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL…
-
Unscored —
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair gene…
-
Unscored —
Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
-
Unscored —
Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requeste…
-
Unscored —
Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.
-
Unscored —CVE-2000-0467 Public exploit
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in th…
-
Unscored —
Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that …
-
Unscored —
The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to…
-
Unscored —
JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or ob…
-
Unscored —CVE-2000-0705 Public exploit
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to…
-
Unscored —
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary comman…
-
Unscored —
The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows loc…
-
Unscored —
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database …
-
Unscored —CVE-2000-0179 Public exploit
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to por…
-
Unscored —
Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —CVE-2000-0484 Public exploit
Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes in…
-
Unscored —
Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port.
-
Unscored —
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
-
Unscored —
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
-
Unscored —CVE-2000-0056 Public exploit
IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
-
Unscored —
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
-
Unscored —
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, wh…
-
Unscored —
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP a…
-
Unscored —
libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow lo…
-
Unscored —
Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the A…
-
Unscored —CVE-2000-0468 Public exploit
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
-
Unscored —
Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration…
-
Unscored —CVE-2000-0472 Public exploit
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a l…
-
Unscored —
Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Des…
-
Unscored —
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "…
-
Unscored —CVE-2000-0664 Public exploit
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) a…