Archive
November 2000
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 2953
- 30
53 results · Feed
-
Unscored —CVE-2000-0885 EPSS 13%
Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long …
-
Unscored —
Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local a…
-
Unscored —
Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrar…
-
Unscored —
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information …
-
Unscored —
EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via …
-
Unscored —
WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interfac…
-
Unscored —CVE-2000-0971 Public exploit
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via…
-
Unscored —
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read…
-
Unscored —CVE-2000-0955 Public exploit
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which…
-
Unscored —
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY envir…
-
Unscored —CVE-2000-0987 Public exploit
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line para…
-
Unscored —CVE-2000-0999 EPSS 12%
Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers t…
-
Unscored —CVE-2000-0904 Public exploit
Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory…
-
Unscored —
Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise…
-
Unscored —CVE-2000-0903 Public exploit
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to …
-
Unscored —
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and t…
-
Unscored —
Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via…
-
Unscored —
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly …
-
Unscored —CVE-2000-0998 Public exploit
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fu…
-
Unscored —CVE-2000-0817 EPSS 15%
Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute a…
-
Unscored —
Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —CVE-2000-0906 Public exploit
Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to r…
-
Unscored —CVE-2000-0985 Public exploit
Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT T…
-
Unscored —CVE-2000-0916 Public exploit
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate …
-
Unscored —
Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers…
-
Unscored —
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scri…
-
Unscored —CVE-2000-1046 Public exploit
Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a den…
-
Unscored —CVE-2000-1009 Public exploit
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to …
-
Unscored —CVE-2000-1008 Public exploit
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access t…
-
Unscored —CVE-2000-1078 Public exploit
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" charac…
-
Unscored —
Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in pl…
-
Unscored —
The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows rem…
-
Unscored —CVE-2000-1028 Public exploit
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argumen…
-
Unscored —
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allo…
-
Unscored —
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR q…
-
Unscored —
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to r…
-
Unscored —CVE-2000-1037 Public exploit
Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus i…
-
Unscored —
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files …
-
Unscored —CVE-2000-1023 Public exploit
The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers …