Archive
October 2000
Vulnerabilities first published in this month (UTC), newest first.
283 results · Feed
-
Unscored —CVE-2000-0669 Public exploit
Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
-
Unscored —
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL sessio…
-
Unscored —
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbi…
-
Unscored —
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
-
Unscored —
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable i…
-
Unscored —CVE-2000-0787 Public exploit
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell met…
-
Unscored —CVE-2000-0451 Public exploit
The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICM…
-
Unscored —CVE-2000-0675 Public exploit
Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a lon…
-
Unscored —
Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the …
-
Unscored —
IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which prov…
-
Unscored —CVE-2000-0075 Public exploit
Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a de…
-
Unscored —CVE-2000-0763 Public exploit
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privil…
-
Unscored —CVE-2000-0146 Public exploit
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of servic…
-
Unscored —
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which a…
-
Unscored —
PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion o…
-
Unscored —
The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying t…
-
Unscored —
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via …
-
Unscored —
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed…
-
Unscored —
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attack…
-
Unscored —
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remo…
-
Unscored —
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which…
-
Unscored —
xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host …
-
Unscored —CVE-2000-0703 Public exploit
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error repor…
-
Unscored —CVE-2000-0378 Public exploit
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file des…
-
Unscored —CVE-2000-0257 Public exploit
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service o…
-
Unscored —CVE-2000-0508 Public exploit
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
-
Unscored —
IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of s…
-
Unscored —
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET …
-
Unscored —
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package …
-
Unscored —
The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has …
-
Unscored —
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before t…
-
Unscored —
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal…
-
Unscored —CVE-2000-0634 Public exploit
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files …
-
Unscored —
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary comman…
-
Unscored —CVE-2000-0128 Public exploit
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
-
Unscored —
A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote…
-
Unscored —
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to sy…
-
Unscored —CVE-2000-0780 Public exploit
The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (…
-
Unscored —CVE-2000-0440 Public exploit
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP …
-
Unscored —
nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.