Skip to content
OpenAdvisories

Archive

November 2000

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 2953
  30. 30 

22 results · Clear filters · Feed

  • Unscored —
    CVE-2000-0971 Public exploit

    Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via…

  • Unscored —
    CVE-2000-0955 Public exploit

    Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which…

  • Unscored —
    CVE-2000-0987 Public exploit

    Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line para…

  • Unscored —
    CVE-2000-0904 Public exploit

    Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory…

  • Unscored —
    CVE-2000-0903 Public exploit

    Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to …

  • Unscored —
    CVE-2000-0998 Public exploit

    Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fu…

  • Unscored —
    CVE-2000-0906 Public exploit

    Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to r…

  • Unscored —
    CVE-2000-0985 Public exploit

    Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT T…

  • Unscored —
    CVE-2000-0916 Public exploit

    FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate …

  • Unscored —
    CVE-2000-1053 Public exploit EPSS 11%

    Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scri…

  • Unscored —
    CVE-2000-1046 Public exploit

    Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a den…

  • Unscored —
    CVE-2000-1009 Public exploit

    dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to …

  • Unscored —
    CVE-2000-1008 Public exploit

    PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access t…

  • Unscored —
    CVE-2000-1078 Public exploit

    ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" charac…

  • Unscored —
    CVE-2000-1028 Public exploit

    Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argumen…

  • Unscored —
    CVE-2000-1029 Public exploit EPSS 14%

    Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR q…

  • Unscored —
    CVE-2000-1037 Public exploit

    Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus i…

  • Unscored —
    CVE-2000-1023 Public exploit

    The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers …

  • Unscored —
    CVE-2000-1021 Public exploit

    Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possib…

  • Unscored —
    CVE-2000-1025 Public exploit

    eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2000-1033 Public exploit

    Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (pos…

  • Unscored —
    CVE-2000-1035 Public exploit EPSS 13%

    Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possib…