Archive
October 2000
Vulnerabilities first published in this month (UTC), newest first.
283 results · Feed
-
Unscored —CVE-2000-0094 Public exploit
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modifie…
-
Unscored —
Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malf…
-
Unscored —CVE-2000-0552 Public exploit
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allo…
-
Unscored —
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, whi…
-
Unscored —CVE-2000-0338 Public exploit
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause…
-
Unscored —CVE-2000-0166 Public exploit
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login n…
-
Unscored —
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long G…
-
Unscored —
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) atta…
-
Unscored —CVE-2000-0737 Public exploit
The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with conso…
-
Unscored —CVE-2000-0515 Public exploit
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users…
-
Unscored —
OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.
-
Unscored —
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain …
-
Unscored —
Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temp…
-
Unscored —
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previous…
-
Unscored —CVE-2000-0596 EPSS 25%
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within Ac…
-
Unscored —
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of a…
-
Unscored —
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow loca…
-
Unscored —
CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attac…
-
Unscored —
The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which c…
-
Unscored —
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
-
Unscored —
WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port.
-
Unscored —
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.
-
Unscored —
Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" r…
-
High —
Zope does not properly restrict access to the getRoles method
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
-
Unscored —CVE-2000-0751 Public exploit
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allo…
-
Unscored —
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remot…
-
Unscored —
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mai…
-
Unscored —CVE-2000-0470 Public exploit
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication reques…
-
Unscored —CVE-2000-0770 EPSS 15%
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restric…
-
Unscored —
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet wit…
-
Unscored —
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server a…
-
Unscored —CVE-2000-0009 Public exploit
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which …
-
Unscored —CVE-2000-0530 Public exploit
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitr…
-
Unscored —
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file n…
-
Unscored —CVE-2000-0489 Public exploit
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs …
-
Unscored —CVE-2000-0516 Public exploit
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN …
-
Unscored —CVE-2000-0652 Public exploit
IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default Invo…
-
Unscored —
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and …
-
Unscored —
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic…
-
Unscored —CVE-2000-0631 EPSS 25%
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of …