Archive
December 2000
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 1956
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
56 results · Feed
-
Unscored —
Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out…
-
Unscored —
Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows…
-
Unscored —CVE-2000-1083 Public exploit
The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the le…
-
Unscored —
IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbit…
-
Unscored —CVE-2000-1147 Public exploit
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to…
-
Unscored —CVE-2000-1127 Public exploit
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the orig…
-
Unscored —CVE-2000-1125 Public exploit
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which …
-
Unscored —
The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which …
-
Unscored —
Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that …
-
Unscored —CVE-2000-1175 Public exploit
Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
-
Unscored —
The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web…
-
Unscored —
Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.
-
Unscored —CVE-2000-1100 Public exploit
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the we…
-
Unscored —
NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login reque…
-
Unscored —
Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files vi…
-
Unscored —
The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly rest…
-
Unscored —
RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service vi…
-
Unscored —
Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, w…
-
Unscored —CVE-2000-1154 Public exploit
RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service v…
-
Unscored —
24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/.…
-
Unscored —CVE-2000-1093 Public exploit
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a lo…
-
Unscored —
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a sc…
-
Unscored —
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decry…
-
Unscored —CVE-2000-1177 Public exploit
bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allow…
-
Unscored —CVE-2000-1116 Public exploit
Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and …
-
Unscored —CVE-2000-1092 Public exploit
loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data …
-
Unscored —CVE-2000-1081 Public exploit
The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restric…
-
Unscored —
The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict t…
-
Unscored —
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication pa…
-
Unscored —CVE-2000-1129 Public exploit
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
-
Unscored —CVE-2000-1103 Public exploit
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to …
-
Unscored —CVE-2000-1176 Public exploit
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..…
-
Unscored —
Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community na…
-
Unscored —
Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of serv…
-
Unscored —
Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary comma…
-
Unscored —
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or…
-
Unscored —CVE-2000-1173 Public exploit
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the rem…
-
Unscored —
The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict th…
-
Unscored —
Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that c…
-
Unscored —
PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mod…