December 2000

22 results · Clear filters · Feed

• Unscored —
  CVE-2000-1083 Public exploit

  The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the le…

  Dec 19, 2000
• Unscored —
  CVE-2000-1147 Public exploit

  Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to…

  Dec 19, 2000
• Unscored —
  CVE-2000-1127 Public exploit

  registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the orig…

  Dec 19, 2000
• Unscored —
  CVE-2000-1125 Public exploit

  restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which …

  Dec 19, 2000
• Unscored —
  CVE-2000-1175 Public exploit

  Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.

  Dec 19, 2000
• Unscored —
  CVE-2000-1100 Public exploit

  The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the we…

  Dec 19, 2000
• Unscored —
  CVE-2000-1154 Public exploit

  RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service v…

  Dec 19, 2000
• Unscored —
  CVE-2000-1093 Public exploit

  Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a lo…

  Dec 19, 2000
• Unscored —
  CVE-2000-1105 Public exploit EPSS 11%

  The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a sc…

  Dec 19, 2000
• Unscored —
  CVE-2000-1177 Public exploit

  bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allow…

  Dec 19, 2000
• Unscored —
  CVE-2000-1116 Public exploit

  Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and …

  Dec 19, 2000
• Unscored —
  CVE-2000-1092 Public exploit

  loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data …

  Dec 19, 2000
• Unscored —
  CVE-2000-1081 Public exploit

  The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restric…

  Dec 19, 2000
• Unscored —
  CVE-2000-1129 Public exploit

  McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.

  Dec 19, 2000
• Unscored —
  CVE-2000-1103 Public exploit

  rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to …

  Dec 19, 2000
• Unscored —
  CVE-2000-1176 Public exploit

  Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..…

  Dec 19, 2000
• Unscored —
  CVE-2000-1173 Public exploit

  Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the rem…

  Dec 19, 2000
• Unscored —
  CVE-2000-1134 Public exploit

  Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks whe…

  Dec 19, 2000
• Unscored —
  CVE-2000-1085 Public exploit

  The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict …

  Dec 19, 2000
• Unscored —
  CVE-2000-1186 Public exploit

  Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number o…

  Dec 19, 2000
• Unscored —
  CVE-2000-1110 Public exploit

  document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of t…

  Dec 19, 2000
• Unscored —
  CVE-2000-1114 Public exploit

  Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with…

  Dec 19, 2000