Archive
October 2000
Vulnerabilities first published in this month (UTC), newest first.
283 results · Feed
-
Unscored —
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying…
-
Unscored —CVE-2000-0193 Public exploit
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain pr…
-
Unscored —
xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —CVE-2000-0681 EPSS 51%
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long UR…
-
Unscored —
The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with phy…
-
Unscored —
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provide…
-
Unscored —CVE-2000-0640 Public exploit
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, …
-
Unscored —CVE-2000-0116 Public exploit
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restri…
-
Unscored —
The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of H…
-
Unscored —CVE-2000-0507 Public exploit
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
-
Unscored —
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticat…
-
Unscored —
Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed p…
-
Unscored —
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malforme…
-
Unscored —CVE-2000-0670 Public exploit
The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary…
-
Unscored —
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain pas…
-
Unscored —
Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) …
-
Unscored —CVE-2000-0601 Public exploit
LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of er…
-
Unscored —
Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.
-
Unscored —
Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a d…
-
Unscored —
Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS.
-
Unscored —
Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary co…
-
Unscored —
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a …
-
Unscored —CVE-2000-0671 Public exploit
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory conte…
-
Unscored —
Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in…
-
Unscored —CVE-2000-0538 Public exploit
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a lo…
-
Unscored —CVE-2000-0638 Public exploit
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attac…
-
Unscored —CVE-2000-0782 Public exploit
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot do…
-
Unscored —CVE-2000-0521 Public exploit
Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include th…
-
Unscored —
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
-
Unscored —
PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allo…
-
Unscored —CVE-2000-0240 Public exploit
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a…
-
Unscored —CVE-2000-0597 EPSS 12%
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote at…
-
Unscored —
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, w…
-
Unscored —CVE-2000-0706 Public exploit
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
-
Unscored —CVE-2000-0582 Public exploit
Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid …
-
Unscored —
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, s…
-
Unscored —CVE-2000-0588 Public exploit
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the…
-
Unscored —CVE-2000-0613 Public exploit
Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to f…
-
Unscored —CVE-2000-0708 Public exploit
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service vi…
-
Unscored —
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.