Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-0302
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
Affected Products: n/a
References: [{'name': 'MS00-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006'}, {'name': '1084', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1084'}, {'name': '20000331 Alert: MS Index Server (CISADV000330)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95453598317340&w=2'}, {'name': '271', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/271'}]
CVE State: PUBLISHED
Explain CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
Affected Products: n/a
References: [{'name': '1169', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1169'}, {'name': '7531', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7531'}, {'name': '20000503 Vulnerability in Quake3Arena Auto-Download Feature', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise50.php3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.quake3arena.com/news/index.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0304
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
Affected Products: n/a
References: [{'name': '1191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1191'}, {'name': 'MS00-031', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031'}, {'name': '20000511 Microsoft IIS Remote Denial of Service Attack', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise52.php3'}]
CVE State: PUBLISHED
Explain CVE-2000-0305
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-029', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-029'}, {'name': '20000519 jolt2 - Remote DoS against NT, W2K, 9x', 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://www.securityfocus.com/templates/advisory.html?id=2240'}, {'name': '1236', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1236'}]
CVE State: PUBLISHED
Explain CVE-2000-0306
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
Affected Products: n/a
References: [{'name': '19981229 Local/remote exploit for SCO UNIX.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=1998-12-29&msg=AAh6GYsGU1%40leshka.chuvashia.su'}, {'name': 'SB-99.02', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.02a'}]
CVE State: PUBLISHED
Explain CVE-2000-0307
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
Affected Products: n/a
References: [{'name': 'SB-99.07', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.07b'}]
CVE State: PUBLISHED
Explain CVE-2000-0308
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
Affected Products: n/a
References: [{'name': 'SB-99.08', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a'}]
CVE State: PUBLISHED
Explain CVE-2000-0309
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
Affected Products: n/a
References: [{'name': '19990212 i386 trace-trap handling when DDB was configured could cause a system crash.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata24.html#trctrap'}, {'name': '6126', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6126'}]
CVE State: PUBLISHED
Explain CVE-2000-0310
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
Affected Products: n/a
References: [{'name': '19990217 IP fragment assembly can bog the machine excessively and cause problems.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata24.html#maxqueue'}, {'name': '7539', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7539'}]
CVE State: PUBLISHED
Explain CVE-2000-0311
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
Affected Products: n/a
References: [{'name': '1145', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1145'}, {'name': 'MS00-026', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-026'}]
CVE State: PUBLISHED
Explain CVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
Affected Products: n/a
References: [{'name': '19990830 In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata25.html#cron'}]
CVE State: PUBLISHED
Explain CVE-2000-0313
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
Affected Products: n/a
References: [{'name': '7540', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7540'}, {'name': '19991109 Any user can change interface media configurations.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#ifmedia'}]
CVE State: PUBLISHED
Explain CVE-2000-0314
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
Affected Products: n/a
References: [{'name': '19990213 traceroute as a flooder', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91893782027835&w=2'}, {'name': '7574', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7574'}, {'name': 'NetBSD-SA1999-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc'}]
CVE State: PUBLISHED
Explain CVE-2000-0315
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
Affected Products: n/a
References: [{'name': '7575', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7575'}, {'name': '19990213 traceroute as a flooder', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91893782027835&w=2'}, {'name': 'NetBSD-SA1999-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc'}]
CVE State: PUBLISHED
Explain CVE-2000-0316
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
Affected Products: n/a
References: [{'name': '1143', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1143'}, {'name': '20000424 Solaris 7 x86 lp exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0191.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0317
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
Affected Products: n/a
References: [{'name': '20000427 Re: Solaris/SPARC 2.7 lpset exploit (well not likely !)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95729763119559&w=2'}, {'name': '1138', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1138'}, {'name': '20000426 Re: Solaris Sparc 2.6 & 7 lp/lpset/lpstat root compromise exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.html'}, {'name': '20000424 Solaris 7 x86 lpset exploit.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0318
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
Affected Products: n/a
References: [{'name': '20000413 Security problems with Atrium Mercur Mailserver 3.20', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0057.html'}, {'name': '1144', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1144'}]
CVE State: PUBLISHED
Explain CVE-2000-0319
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
Affected Products: n/a
References: [{'name': '1146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1146'}, {'name': "20000424 unsafe fgets() in sendmail's mail.local", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424%40SECURITY.NNOV.RU'}]
CVE State: PUBLISHED
Explain CVE-2000-0320
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
Affected Products: n/a
References: [{'name': '20000421 unsafe fgets() in qpopper', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=9763.000421%40SECURITY.NNOV.RU'}, {'name': '1133', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1133'}]
CVE State: PUBLISHED
Explain CVE-2000-0321
Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
Affected Products: n/a
References: [{'name': '20000424 Buffer Overflow in version .14', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0190.html'}, {'name': '1147', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1147'}]
CVE State: PUBLISHED
Explain CVE-2000-0322
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': 'RHSA-2000:014', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-014.html'}, {'name': '1149', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1149'}, {'name': '20000424 piranha default password/exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Enip.BSO.23.0004241601140.28851-100000%40www.whitehats.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0323
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
Affected Products: n/a
References: [{'name': 'MS99-030', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030'}, {'name': '595', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'https://www.securityfocus.com/bid/595'}, {'name': '19990728 Alert : MS Office 97 Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-08-22&msg=19990729195531.25108.qmail%40underground.org'}, {'name': 'jet-text-isam', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://web.archive.org/web/20000819203059/http://xforce.iss.net:80/alerts/vol-4_num-7.php#jet-text-isam'}]
CVE State: PUBLISHED
Explain CVE-2000-0324
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
Affected Products: n/a
References: [{'name': '1150', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1150'}, {'name': '20010212 Re: Symantec pcAnywhere 9.0 DoS / Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0258.html'}, {'name': '1301', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1301'}, {'name': '20010211 Symantec pcAnywhere 9.0 DoS / Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0201.html'}, {'name': 'pcanywhere-tcpsyn-dos(4347)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/4347.php'}, {'name': '20000425 Denial of Service Against pcAnywhere.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000425150157.13567A-100000%40sword.damocles.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0325
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
Affected Products: n/a
References: [{'name': 'jet-vba-shell(3155)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3155'}, {'name': '548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/548'}, {'name': 'MS99-030', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030'}]
CVE State: PUBLISHED
Explain CVE-2000-0326
Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
Affected Products: n/a
References: [{'name': '1151', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1151'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument'}]
CVE State: PUBLISHED
Explain CVE-2000-0327
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability.
Affected Products: n/a
References: [{'name': '19991014 Another Microsoft Java Flaw Disovered', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93993545118416&w=2'}, {'name': 'MS99-045', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-045'}]
CVE State: PUBLISHED
Explain CVE-2000-0328
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
Affected Products: n/a
References: [{'name': '604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/604'}, {'name': '19990824 NT Predictable Initial TCP Sequence numbers - changes observed with SP4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40%40192.168.124.1'}, {'name': 'MS99-046', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-046'}]
CVE State: PUBLISHED
Explain CVE-2000-0329
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
Affected Products: n/a
References: [{'name': 'MS99-048', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048'}]
CVE State: PUBLISHED
Explain CVE-2000-0330
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
Affected Products: n/a
References: [{'name': 'MS99-049', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-049'}]
CVE State: PUBLISHED
Explain CVE-2000-0331
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
Affected Products: n/a
References: [{'name': '20000421 CMD.EXE overflow (CISADV000420)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0147.html'}, {'name': '1135', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1135'}, {'name': 'MS00-027', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-027'}]
CVE State: PUBLISHED
Explain CVE-2000-0332
UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.
Affected Products: n/a
References: [{'name': '4065', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4065'}, {'name': '1309', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1309'}, {'name': '20000502 Fun with UltraBoard V1.6X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000503091316.99073.qmail%40hotmail.com'}, {'name': '1164', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1164'}]
CVE State: PUBLISHED
Explain CVE-2000-0333
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Affected Products: n/a
References: [{'name': '20000502 Denial of service attack against tcpdump', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000%40paranoia.pgci.ca'}, {'name': '1165', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1165'}]
CVE State: PUBLISHED
Explain CVE-2000-0334
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
Affected Products: n/a
References: [{'name': '1181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1181'}, {'name': 'ASB00-10', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=15411&Method=Full'}]
CVE State: PUBLISHED
Explain CVE-2000-0335
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
Affected Products: n/a
References: [{'name': '1166', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1166'}]
CVE State: PUBLISHED
Explain CVE-2000-0336
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': 'RHSA-2000:012', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-012.html'}, {'name': 'TLSA2000010-1', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html'}, {'name': '1232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1232'}, {'name': 'CSSA-2000-009.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0337
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
Affected Products: n/a
References: [{'name': '1140', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1140'}, {'name': '20000424 Solaris x86 Xsun overflow.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0188.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0338
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
Affected Products: n/a
References: [{'name': '20000423 CVS DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl'}, {'name': '1136', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1136'}]
CVE State: PUBLISHED
Explain CVE-2000-0339
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
Affected Products: n/a
References: [{'name': '20000420 ZoneAlarm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com'}, {'name': '1294', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1294'}, {'name': '1137', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1137'}]
CVE State: PUBLISHED
Explain CVE-2000-0340
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
Affected Products: n/a
References: [{'name': '1155', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1155'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.suse.com/us/support/download/updates/axp_63.html'}, {'name': '20000428 SuSE 6.3 Gnomelib buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=00042902575201.09597%40wintermute-pub'}]
CVE State: PUBLISHED
Explain CVE-2000-0341
ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
Affected Products: n/a
References: [{'name': '20000501 Remote DoS attack in CASSANDRA NNTPServer v1.10 from ATRIUM', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=95736106504870&w=2'}, {'name': '1156', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1156'}]
CVE State: PUBLISHED
Explain CVE-2000-0342
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.peacefire.org/security/stealthattach/explanation.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077'}, {'name': '1157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1157'}]
CVE State: PUBLISHED
Explain CVE-2000-0343
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
Affected Products: n/a
References: [{'name': '1158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1158'}, {'name': '20000502 spj-003-000 - S0ftPj Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005021736.TAA01991%40ALuSSi'}]
CVE State: PUBLISHED
Explain CVE-2000-0344
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
Affected Products: n/a
References: [{'name': '20000501 Linux knfsd DoS issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0005012042550.6419-100000%40ferret.lmh.ox.ac.uk'}, {'name': '1160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1160'}]
CVE State: PUBLISHED
Explain CVE-2000-0345
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
Affected Products: n/a
References: [{'name': '1161', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1161'}, {'name': '20000502 Possible issue with Cisco on-line help?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502222246.28423.qmail%40securityfocus.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0346
AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server.
Affected Products: n/a
References: [{'name': '1162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1162'}, {'name': '20000502 INFO:AppleShare IP 6.3.2 squashes security bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502133240.21807.qmail%40securityfocus.com'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://asu.info.apple.com/swupdates.nsf/artnum/n11670'}]
CVE State: PUBLISHED
Explain CVE-2000-0347
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
Affected Products: n/a
References: [{'name': '20000501 el8.org advisory - Win 95/98 DoS (RFParalyze.c)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=95737580922397&w=2'}, {'name': '1163', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1163'}]
CVE State: PUBLISHED
Explain CVE-2000-0348
A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.
Affected Products: n/a
References: [{'name': 'SB-99.10', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.10a'}]
CVE State: PUBLISHED
Explain CVE-2000-0349
Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.
Affected Products: n/a
References: [{'name': 'SB-99.13', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.13a'}]
CVE State: PUBLISHED
Explain CVE-2000-0350
A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events.
Affected Products: n/a
References: [{'name': '1216', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1216'}, {'name': '312', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/312'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advice.networkice.com/advice/Support/KB/q000166/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/templates/advisory.html?id=2220'}]
CVE State: PUBLISHED
Explain CVE-2000-0351
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
Affected Products: n/a
References: [{'name': 'SB-99.09', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.09b'}]
CVE State: PUBLISHED
Explain CVE-2000-0352
Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.
Affected Products: n/a
References: [{'name': 'CSSA-1999-036.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt'}, {'name': '810', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/810'}, {'name': '19991117 Pine: expanding env vars in URLs (seems to be fixed as of 4.21)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com'}, {'name': '19991227 Security hole in Pine < 4.21', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_36.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0353
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
Affected Products: n/a
References: [{'name': '19990628 Execution of commands in Pine 4.x', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_6.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html'}, {'name': '19990911 Update for Pine (fixed IMAP support)', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/pine_update_announcement.html'}, {'name': '1247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1247'}]
CVE State: PUBLISHED
Explain CVE-2000-0354
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
Affected Products: n/a
References: [{'name': '19990928 mirror 2.9 hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=15769.990928%40tomcat.ru'}, {'name': '681', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/681'}, {'name': '19991001 Security hole in mirror', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_22.html'}, {'name': '19991018 Incorrect directory name handling in mirror', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/1999/19991018'}]
CVE State: PUBLISHED
Explain CVE-2000-0355
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
Affected Products: n/a
References: [{'name': '19990920 Security hole in pbpg', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_21.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0356
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
Affected Products: n/a
References: [{'name': 'RHSA-1999:040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.securityfocus.com/templates/advisory.html?id=1789'}, {'name': '697', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/697'}]
CVE State: PUBLISHED
Explain CVE-2000-0357
ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
Affected Products: n/a
References: [{'name': 'RHSA-1999:058-01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/corp/support/errata/RHSA1999058-01.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0358
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
Affected Products: n/a
References: [{'name': 'RHSA-1999:058-01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/corp/support/errata/RHSA1999058-01.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0359
Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.
Affected Products: n/a
References: [{'name': '1248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1248'}, {'name': '19991116 Security hole in thttpd 1.90a - 2.04', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_30.html'}, {'name': '19991113 thttpd 2.04 stack overflow (VD#6)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/1626.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0360
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
Affected Products: n/a
References: [{'name': '19991124 Security hole in inn <= 2.2.1', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_34.html'}, {'name': 'CSSA-1999-038.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-038.0.txt'}, {'name': '1249', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1249'}]
CVE State: PUBLISHED
Explain CVE-2000-0361
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
Affected Products: n/a
References: [{'name': '19991214 Security hole in wvdial <= 1.4', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_35.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0362
Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '738', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/738'}, {'name': '19991019 Security hole in cdwtools < 093', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_25.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0363
Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
Affected Products: n/a
References: [{'name': '738', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/738'}, {'name': '19991019 Security hole in cdwtools < 093', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_25.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0364
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
Affected Products: n/a
References: [{'name': 'RHSA1999014_01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/corp/support/errata/RHSA1999014_01.html'}, {'name': '19990607 Re: RedHat 6.0, /dev/pts permissions bug when using xterm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92886009012161&w=2'}, {'name': '309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/309'}, {'name': '19990606 RedHat 6.0, /dev/pts permissions bug when using xterm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92877527701347&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0365
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.
Affected Products: n/a
References: [{'name': 'RHSA1999014_01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/corp/support/errata/RHSA1999014_01.html'}, {'name': '308', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/308'}, {'name': '19990607 Re: RedHat 6.0, /dev/pts permissions bug when using xterm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92886009012161&w=2'}, {'name': '19990606 RedHat 6.0, /dev/pts permissions bug when using xterm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92877527701347&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0366
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
Affected Products: n/a
References: [{'name': '1442', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1442'}, {'name': '19991202 problem restoring symlinks', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/1999/19991202'}]
CVE State: PUBLISHED
Explain CVE-2000-0367
Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
Affected Products: n/a
References: [{'name': '19990218 Root exploit in eterm', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/1999/19990218'}]
CVE State: PUBLISHED
Explain CVE-2000-0368
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
Affected Products: n/a
References: [{'name': 'J-009', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-009.shtml'}, {'name': '19981014 Cisco IOS Command History Release at Login Prompt', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/ioshist-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2000-0369
The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': '1266', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1266'}, {'name': 'CSSA-1999-029.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-029.1.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0370
The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.
Affected Products: n/a
References: [{'name': 'CSSA-1999-001.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-001.0.txt'}, {'name': '1268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1268'}]
CVE State: PUBLISHED
Explain CVE-2000-0371
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '1269', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1269'}, {'name': 'CSSA-1999-005.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-005.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0372
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
Affected Products: n/a
References: [{'name': 'CSSA-1999-014.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-014.0.txt'}, {'name': 'linux-rmt(2268)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2268'}, {'name': '7940', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7940'}]
CVE State: PUBLISHED
Explain CVE-2000-0373
Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'RHSA-1999:015-01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA1999015_01.html'}, {'name': 'kde-kvt(2266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2266'}, {'name': 'CSSA-1999-015.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-015.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0374
The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.
Affected Products: n/a
References: [{'name': 'MDKSA-2002:025', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025'}, {'name': 'CSSA-1999-021.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt'}, {'name': 'xdmcp-kdm-default-configuration(4856)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4856'}, {'name': '1446', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1446'}]
CVE State: PUBLISHED
Explain CVE-2000-0375
The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.
Affected Products: n/a
References: [{'name': '6084', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6084'}]
CVE State: PUBLISHED
Explain CVE-2000-0376
Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '1324', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1324'}]
CVE State: PUBLISHED
Explain CVE-2000-0377
The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability.
Affected Products: n/a
References: [{'name': '1331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1331'}, {'name': 'oval:org.mitre.oval:def:1021', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1021'}, {'name': 'MS00-040', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-040'}, {'name': 'Q264684', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://www.microsoft.com/technet/support/kb.asp?ID=264684'}]
CVE State: PUBLISHED
Explain CVE-2000-0378
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Affected Products: n/a
References: [{'name': '20000502 pam_console bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0023.html'}, {'name': '1176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1176'}]
CVE State: PUBLISHED
Explain CVE-2000-0379
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.
Affected Products: n/a
References: [{'name': '1177', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.netopia.com/equipment/purchase/fmw_update.html'}, {'name': '20000507 Advisory: Netopia R9100 router vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005082054.NAA32590%40linux.mtndew.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0380
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
Affected Products: n/a
References: [{'name': '20000514 Cisco IOS HTTP Server Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml'}, {'name': '20000426 Cisco HTTP possible bug:', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0261.html'}, {'name': '1302', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1302'}, {'name': '1154', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1154'}]
CVE State: PUBLISHED
Explain CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
Affected Products: n/a
References: [{'name': '1178', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1178'}, {'name': '20000505 Black Watch Labs Vulnerability Alert', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0067.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.perfectotech.com/blackwatchlabs/vul5_05.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0382
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site.
Affected Products: n/a
References: [{'name': '1179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1179'}, {'name': 'ASB00-12', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=15697&Method=Full'}]
CVE State: PUBLISHED
Explain CVE-2000-0383
The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
Affected Products: n/a
References: [{'name': '1180', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1180'}, {'name': '20000507 AOL Instant Messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=002401bfb918%247310d5a0%241ef084ce%40karemor.com'}]
CVE State: PUBLISHED