Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-0852
Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '1559', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1559'}, {'name': '1686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1686'}, {'name': 'freebsd-eject-port(5248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5248'}, {'name': 'FreeBSD-SA-00:49', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2000-09/0110.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0853
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '1668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1668'}, {'name': 'yabb-file-access(5254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5254'}, {'name': '20000909 YaBB 1.9.2000 Vulnerabilitie', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0072.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0854
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
Affected Products: n/a
References: [{'name': '20000918 Double clicking on MS Office documents from Windows Explorer may execute arbitrary programs in some cases', 'tags': ['mailing-list', 'x_refsource_WIN2KSEC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0117.html'}, {'name': '20000922 Eudora + riched20.dll affects WinZip v8.0 as well', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0277.html'}, {'name': '1699', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1699'}, {'name': 'office-dll-execution(5263)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5263'}, {'name': '20000921 Mitigators for possible exploit of Eudora via Guninski #21,2000', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0155.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0855
SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline.
Affected Products: n/a
References: [{'name': '20000901 [EXPL] SunFTP vulnerable to two Denial-of-Service attacks (long buffer, half-open)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html'}, {'name': '1637', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1637'}]
CVE State: PUBLISHED
Explain CVE-2000-0856
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
Affected Products: n/a
References: [{'name': '20000901 [EXPL] SunFTP vulnerable to two Denial-of-Service attacks (long buffer, half-open)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html'}, {'name': '1638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1638'}]
CVE State: PUBLISHED
Explain CVE-2000-0857
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
Affected Products: n/a
References: [{'name': 'muh-log-dos(5215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5215'}, {'name': '20000909 format string bug in muh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0067.html'}, {'name': '1665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1665'}, {'name': '20000909 Re: format string bug in muh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0068.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0858
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.
Affected Products: n/a
References: [{'name': 'iis-invald-url-dos(5202)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5202'}, {'name': '20000906 VIGILANTE-2000009: "Invalid URL" DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/80413'}, {'name': '1642', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1642'}, {'name': 'MS00-063', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'http://archives.neohapsis.com/archives/vendor/2000-q3/0065.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0859
The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
Affected Products: n/a
References: [{'name': '20000904 VIGILANTE-2000008: NTMail Configuration Service DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0471.html'}, {'name': 'ntmail-incomplete-http-requests(5182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5182'}, {'name': '1640', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1640'}]
CVE State: PUBLISHED
Explain CVE-2000-0860
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Affected Products: n/a
References: [{'name': 'php-file-upload(5190)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5190'}, {'name': '20000904 Re: [PHP-DEV] RE: (SRADV00001) Arbitrary file disclosure through PHP file upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0477.html'}, {'name': '1649', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1649'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvsweb.php.net/viewcvs.cgi/php4/main/rfc1867.c.diff?r1=1.38%3Aphp_4_0_2&tr1=1.1&r2=text&tr2=1.45&diff_format=u'}, {'name': '20000903 (SRADV00001) Arbitrary file disclosure through PHP file upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0455.html'}, {'name': 'MDKSA-2000:048', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0150.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0861
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
Affected Products: n/a
References: [{'name': '1667', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1667'}, {'name': 'FreeBSD-SA-00:51', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2000-09/0112.html'}, {'name': 'mailman-execute-external-commands(5493)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5493'}, {'name': '20000907 Mailman 1.1 + external archiver vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0040.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0862
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
Affected Products: n/a
References: [{'name': 'ASB00-23', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://archives.neohapsis.com/archives/vendor/2000-q3/0059.html'}, {'name': 'allaire-spectra-admin-access(5466)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5466'}]
CVE State: PUBLISHED
Explain CVE-2000-0863
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:50', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2000-09/0111.html'}, {'name': 'listmanager-port-bo(5503)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5503'}]
CVE State: PUBLISHED
Explain CVE-2000-0864
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a  symlink attack.
Affected Products: n/a
References: [{'name': '1659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1659'}, {'name': 'gnome-esound-symlink(5213)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5213'}, {'name': 'MDKSA-2000:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0328.htm'}, {'name': '20001008 esound: race condition', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20001008'}, {'name': 'RHSA-2000:077', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-077.html'}, {'name': '20001012 esound daemon race condition', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/esound_daemon_race_condition.html'}, {'name': 'FreeBSD-SA-00:45', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2000-08/0365.html'}, {'name': '20001006 Immunix OS Security Update for esound', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0118.html'}, {'name': '20000911 Patch for esound-0.2.19', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0095.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0865
Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
Affected Products: n/a
References: [{'name': '1697', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1697'}, {'name': 'doublevision-dvtermtype-bo(5261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5261'}, {'name': '20000916 Advisory: Tridia DoubleVision / SCO UnixWare', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0185.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0866
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.
Affected Products: n/a
References: [{'name': '20000907 SEGFAULTING Interbase 6 SS Linux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0027.html'}, {'name': '1654', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1654'}, {'name': 'interbase-query-dos(5205)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5205'}]
CVE State: PUBLISHED
Explain CVE-2000-0867
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.
Affected Products: n/a
References: [{'name': 'klogd-format-string(5259)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5259'}, {'name': '5824', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5824'}, {'name': '20000918 Conectiva Linux Security Announcement - sysklogd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97726239017741&w=2'}, {'name': 'TLSA2000022-2', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000023.html'}, {'name': 'MDKSA-2000:050', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:050'}, {'name': '20000917 klogd format bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0193.html'}, {'name': 'RHSA-2000:061', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-061.html'}, {'name': 'CSSA-2000-032.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-032.0.txt'}, {'name': '20000920 syslogd + klogd format string parsing error', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/adv9_draht_syslogd_txt.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0868
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Affected Products: n/a
References: [{'name': '20000907', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html'}, {'name': '1658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1658'}, {'name': 'A090700-2', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2000/a090700-2.txt'}, {'name': 'suse-apache-cgi-source-code(5197)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5197'}]
CVE State: PUBLISHED
Explain CVE-2000-0869
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Affected Products: n/a
References: [{'name': '20000907', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html'}, {'name': 'apache-webdav-directory-listings(5204)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5204'}, {'name': 'A090700-3', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2000/a090700-3.txt'}, {'name': '1656', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1656'}]
CVE State: PUBLISHED
Explain CVE-2000-0870
Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
Affected Products: n/a
References: [{'name': '1555', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1555'}, {'name': '1675', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1675'}, {'name': 'eftp-bo(5219)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5219'}, {'name': '20000911[EXPL] EFTP vulnerable to two DoS attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0871
Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.
Affected Products: n/a
References: [{'name': '409', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/409'}, {'name': '1677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1677'}, {'name': 'eftp-newline-dos(5220)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5220'}, {'name': '20000911[EXPL] EFTP vulnerable to two DoS attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0872
explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '1650', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1650'}, {'name': 'phpphoto-dir-traverse(5198)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5198'}, {'name': '20000906 PhotoAlbum 0.9.9 explorer.php Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0015.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0873
netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.
Affected Products: n/a
References: [{'name': '1660', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1660'}, {'name': 'aix-clear-netstat(5214)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5214'}, {'name': '20000903 aix allows clearing the interface stats', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0454.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0874
Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
Affected Products: n/a
References: [{'name': '20000907 Eudora disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/80888'}, {'name': '1653', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1653'}, {'name': 'eudora-path-disclosure(5206)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5206'}, {'name': '1545', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1545'}]
CVE State: PUBLISHED
Explain CVE-2000-0875
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wftpd.com/bug_gpf.htm'}, {'name': 'wftpd-long-string-dos(5194)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5194'}, {'name': '20000905 WFTPD/WFTPD Pro 2.41 RC12 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0876
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
Affected Products: n/a
References: [{'name': 'wftpd-path-disclosure(5196)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5196'}, {'name': '20000905 WFTPD/WFTPD Pro 2.41 RC12 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html'}, {'name': '5829', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5829'}]
CVE State: PUBLISHED
Explain CVE-2000-0877
mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.
Affected Products: n/a
References: [{'name': '1670', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1670'}, {'name': 'mailform-attach-file(5224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5224'}, {'name': '20000911 Unsafe passing of variables to mailform.pl in MailForm V2.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0092.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0878
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
Affected Products: n/a
References: [{'name': '20000911 Fwd: Poor variable checking in mailto.cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0088.html'}, {'name': '1669', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1669'}, {'name': 'mailto-piped-address(5241)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5241'}]
CVE State: PUBLISHED
Explain CVE-2000-0879
LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.
Affected Products: n/a
References: [{'name': '1643', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1643'}, {'name': '20000906 Multiple Security Holes in LPPlus', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html'}, {'name': 'lpplus-permissions-dos(5199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5199'}]
CVE State: PUBLISHED
Explain CVE-2000-0880
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
Affected Products: n/a
References: [{'name': '1643', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1643'}, {'name': '20000906 Multiple Security Holes in LPPlus', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html'}, {'name': 'lpplus-process-perms-dos(5200)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5200'}]
CVE State: PUBLISHED
Explain CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Affected Products: n/a
References: [{'name': 'lpplus-dccscan-file-read(5201)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5201'}, {'name': '20000906 Multiple Security Holes in LPPlus', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html'}, {'name': '1644', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1644'}]
CVE State: PUBLISHED
Explain CVE-2000-0882
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash.
Affected Products: n/a
References: [{'name': '1647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1647'}, {'name': '20000906 VIGILANTE-2000010: Intel Express Switch series 500 DoS #2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0533.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0883
The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.
Affected Products: n/a
References: [{'name': '1678', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1678'}, {'name': 'linux-mod-perl(5257)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5257'}, {'name': 'MDKSA-2000:046', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0111.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0884
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:44', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44'}, {'name': 'MS00-078', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078'}, {'name': 'iis-unicode-translation(5377)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5377'}, {'name': '1806', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1806'}, {'name': '436', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/436'}]
CVE State: PUBLISHED
Explain CVE-2000-0885
Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability.  NOTE: It is highly likely that this candidate will be split into multiple candidates.
Affected Products: n/a
References: [{'name': 'network-monitor-bo(5399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5399'}, {'name': 'MS00-083', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083'}]
CVE State: PUBLISHED
Explain CVE-2000-0886
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:191', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A191'}, {'name': 'MS00-086', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-086'}, {'name': '20001107 NSFOCUS SA2000-07 : Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?mid=143604&list=1&fromthread=0&end=2000-11-11&threads=0&start=2000-11-05&'}, {'name': '1912', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1912'}, {'name': 'iis-invalid-filename-passing(5470)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5470'}]
CVE State: PUBLISHED
Explain CVE-2000-0887
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
Affected Products: n/a
References: [{'name': 'RHSA-2000:107', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-107.html'}, {'name': 'MDKSA-2000:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067'}, {'name': '20001115 Trustix Security Advisory - bind and openssh (and modutils)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html'}, {'name': '20001107 BIND 8.2.2-P5 Possible DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/143843'}, {'name': 'CLSA-2000:338', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338'}, {'name': 'CA-2000-20', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-20.html'}, {'name': 'CLSA-2000:339', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339'}, {'name': 'bind-zxfr-dos(5540)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5540'}, {'name': '1923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1923'}, {'name': 'SuSE-SA:2000:45', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html'}, {'name': '20001112 bind: remote Denial of Service', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20001112'}]
CVE State: PUBLISHED
Explain CVE-2000-0888
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
Affected Products: n/a
References: [{'name': 'RHSA-2000:107', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-107.html'}, {'name': 'MDKSA-2000:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067'}, {'name': 'bind-srv-dos(5814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5814'}, {'name': 'CLSA-2000:338', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338'}, {'name': 'CA-2000-20', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-20.html'}, {'name': 'CLSA-2000:339', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339'}, {'name': 'SuSE-SA:2000:45', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html'}, {'name': '20001112 bind: remote Denial of Service', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20001112'}]
CVE State: PUBLISHED
Explain CVE-2000-0889
Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun.
Affected Products: n/a
References: [{'name': '00198', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/198&type=0&nav=sec.sba'}, {'name': 'CA-2000-19', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-19.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0890
periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '2325', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2325'}, {'name': '1754', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1754'}, {'name': 'periodic-temp-file-symlink(6047)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6047'}, {'name': 'VU#626919', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/626919'}]
CVE State: PUBLISHED
Explain CVE-2000-0891
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.
Affected Products: n/a
References: [{'name': 'VU#5962', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/5962'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.notes.net/R5FixList.nsf/Search%21SearchView&Query=CBAT45TU9S'}, {'name': 'lotus-notes-bypass-ecl(5045)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5045'}]
CVE State: PUBLISHED
Explain CVE-2000-0892
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.
Affected Products: n/a
References: [{'name': 'VU#22404', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/22404'}, {'name': 'telnet-obtain-env-variable(6644)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6644'}]
CVE State: PUBLISHED
Explain CVE-2000-0893
The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.
Affected Products: n/a
References: [{'name': 'VU#28027', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/28027'}]
CVE State: PUBLISHED
Explain CVE-2000-0894
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
Affected Products: n/a
References: [{'name': 'watchguard-soho-web-auth(5554)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5554'}, {'name': '4404', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4404'}, {'name': '20001214 Multiple vulnerabilities in the WatchGuard SOHO Firewall', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise70.php'}, {'name': '2119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2119'}]
CVE State: PUBLISHED
Explain CVE-2000-0895
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
Affected Products: n/a
References: [{'name': '4403', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4403'}, {'name': '2114', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2114'}, {'name': 'watchguard-soho-web-dos(5218)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5218'}, {'name': '20001214 Multiple vulnerabilities in the WatchGuard SOHO Firewall', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise70.php'}]
CVE State: PUBLISHED
Explain CVE-2000-0896
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets.
Affected Products: n/a
References: [{'name': '1690', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1690'}, {'name': '2113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2113'}, {'name': 'watchguard-soho-fragmented-packets(5749)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5749'}, {'name': '20001214 Multiple vulnerabilities in the WatchGuard SOHO Firewall', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise70.php'}]
CVE State: PUBLISHED
Explain CVE-2000-0897
Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
Affected Products: n/a
References: [{'name': '20001114 Vulnerabilites in SmallHTTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97421834001092&w=2'}, {'name': '1941', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1941'}, {'name': 'small-http-nofile-dos(5524)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5524'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://home.lanck.net/mf/srv/index.htm'}]
CVE State: PUBLISHED
Explain CVE-2000-0898
Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.
Affected Products: n/a
References: [{'name': '20001114 Vulnerabilites in SmallHTTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97421834001092&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0899
Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
Affected Products: n/a
References: [{'name': '1942', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1942'}, {'name': '20001114 Vulnerabilites in SmallHTTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97421834001092&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0900
Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '1737', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1737'}, {'name': 'FreeBSD-SA-00:73', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:73.thttpd.asc'}, {'name': 'acme-thttpd-ssi(5313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5313'}, {'name': '20001002 thttpd ssi: retrieval of arbitrary world-readable files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0025.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0901
Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.
Affected Products: n/a
References: [{'name': 'screen-format-string(5188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5188'}, {'name': 'MDKSA-2000:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/updates/MDKSA-2000-044.php3'}, {'name': 'RHSA-2000:058', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-058.html'}, {'name': '20000906 screen format string parsing security problem', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/adv6_draht_screen_txt.html'}, {'name': '20000905 screen 3.9.5 root vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/80178'}, {'name': 'FreeBSD-SA-00:46', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:46.screen.asc'}, {'name': '1641', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1641'}, {'name': '20000906 Screen-3.7.6 local compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-08/0530.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0902
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000907 Re: PhotoAlbum 0.9.9 explorer.php Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/80858'}, {'name': 'phpphotoalbum-getalbum-directory-traversal(5209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5209'}]
CVE State: PUBLISHED
Explain CVE-2000-0903
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000901 Multiple QNX Voyager Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/79956'}, {'name': '1648', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1648'}]
CVE State: PUBLISHED
Explain CVE-2000-0904
Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.
Affected Products: n/a
References: [{'name': '20000901 Multiple QNX Voyager Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/79956'}, {'name': '1648', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1648'}]
CVE State: PUBLISHED
Explain CVE-2000-0905
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page.
Affected Products: n/a
References: [{'name': '20000901 Multiple QNX Voyager Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/79956'}, {'name': '1648', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1648'}]
CVE State: PUBLISHED
Explain CVE-2000-0906
Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
Affected Products: n/a
References: [{'name': '20001002 Moreover Cached_Feed CGI Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0013.html'}, {'name': '1762', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1762'}, {'name': 'moreover-cgi-dir-traverse(5334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5334'}]
CVE State: PUBLISHED
Explain CVE-2000-0907
EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.
Affected Products: n/a
References: [{'name': '20000925 DST2K0030: DoS in EServ 2.92 Build 2982', 'tags': ['mailing-list', 'x_refsource_WIN2KSEC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0131.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0908
BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.
Affected Products: n/a
References: [{'name': '20000921 DST2K0031: DoS in BrowseGate(Home) v2.80(H)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96956211605302&w=2'}, {'name': '20000921 DST2K0031: DoS in BrowseGate(Home) v2.80(H)', 'tags': ['mailing-list', 'x_refsource_WIN2KSEC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html'}, {'name': '1702', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1702'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.netcplus.com/browsegate.htm#BGLatest'}, {'name': 'browsegate-http-dos(5270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5270'}]
CVE State: PUBLISHED
Explain CVE-2000-0909
Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:59', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:59.pine.asc'}, {'name': 'RHSA-2000:102', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-102.html'}, {'name': '20001031 FW: Pine 4.30 now available', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0441.html'}, {'name': '1709', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1709'}, {'name': '20000922  [ no subject ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/84901'}, {'name': 'MDKSA-2000:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/MDKSA-2000-073.php3'}, {'name': 'pine-check-mail-bo(5283)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5283'}]
CVE State: PUBLISHED
Explain CVE-2000-0910
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch'}, {'name': '1674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1674'}, {'name': '20000910 imp: remote compromise', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20000910'}, {'name': 'horde-imp-sendmail-command(5278)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5278'}, {'name': '20000908 horde library bug - unchecked from-address', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0051.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0911
IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.
Affected Products: n/a
References: [{'name': '20000912  (SRADV00003) Arbitrary file disclosure through IMP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/82088'}, {'name': '1679', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1679'}, {'name': 'imp-attach-file(5227)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5227'}]
CVE State: PUBLISHED