Skip to content
OpenAdvisories

Archive

December 2000

Vulnerabilities first published in this month (UTC), newest first.

← November 2000 2000 / December January 2001 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 1956
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Unscored —
    CVE-2000-1156

    StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a …

  • Unscored —
    CVE-2000-1130

    McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII c…

  • Unscored —
    CVE-2000-1152

    Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that…

  • Unscored —
    CVE-2000-1104

    Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a…

  • Unscored —
    CVE-2000-1039 EPSS 46%

    Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target…

  • Unscored —
    CVE-2000-1128

    The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the sear…

  • Unscored —
    CVE-2000-1134 Public exploit

    Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks whe…

  • Unscored —
    CVE-2000-1133

    Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a prote…

  • Unscored —
    CVE-2000-1087

    The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly res…

  • Unscored —
    CVE-2000-1086

    The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly res…

  • Unscored —
    CVE-2000-1085 Public exploit

    The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict …

  • Unscored —
    CVE-2000-1153

    PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that con…

  • Unscored —
    CVE-2000-1186 Public exploit

    Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number o…

  • Unscored —
    CVE-2000-1110 Public exploit

    document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of t…

  • Unscored —
    CVE-2000-1185

    The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connect…

  • Unscored —
    CVE-2000-1114 Public exploit

    Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with…