Archive
October 2000
Vulnerabilities first published in this month (UTC), newest first.
283 results · Feed
-
Unscored —
Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PAT…
-
Unscored —
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP pro…
-
Unscored —CVE-2000-0446 Public exploit
Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
-
Unscored —
AIX cdmount allows local users to gain root privileges via shell metacharacters.
-
Unscored —
The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify f…
-
Unscored —
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uu…
-
Unscored —
The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connecti…
-
Unscored —CVE-2000-0494 Public exploit
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands i…
-
Unscored —CVE-2000-0340 Public exploit
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environm…
-
Unscored —
The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, whic…
-
Unscored —CVE-2000-0624 Public exploit
Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: ex…
-
Medium —
Zope DocumentTemplate package allows unauthenticated write
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
-
Unscored —
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile a…
-
Unscored —
Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via…
-
Unscored —CVE-2000-0493 Public exploit
Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and poss…
-
Unscored —CVE-2000-0639 Public exploit
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows re…
-
Unscored —
Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
-
Unscored —CVE-2000-0621 EPSS 22%
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's …
-
Unscored —
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "…
-
Unscored —CVE-2000-0586 Public exploit
Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary co…
-
Unscored —CVE-2000-0594 Public exploit
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial…
-
Unscored —
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using th…
-
Unscored —
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denia…
-
Unscored —CVE-2000-0500 Public exploit
The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting …
-
Unscored —
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
-
Unscored —CVE-2000-0636 Public exploit
HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via …
-
Unscored —CVE-2000-0660 Public exploit
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —CVE-2000-0571 Public exploit
LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.
-
Unscored —
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot do…
-
Unscored —CVE-2000-0430 Public exploit
Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
-
Unscored —
Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java a…
-
Unscored —
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST…
-
Unscored —
Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make…
-
Unscored —
Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.
-
Unscored —
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a lo…
-
Unscored —CVE-2000-0644 Public exploit
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIS…
-
Unscored —
BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to c…
-
Unscored —
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size val…
-
Unscored —
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant o…