Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-0912
MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.
Affected Products: n/a
References: [{'name': 'http-cgi-multihtml(5285)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5285'}, {'name': '20000913 MultiHTML vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0914
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
Affected Products: n/a
References: [{'name': '1592', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1592'}, {'name': '20001005 obsd_fun.c', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0078.html'}, {'name': 'bsd-arp-request-dos(5340)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5340'}, {'name': '1759', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1759'}]
CVE State: PUBLISHED
Explain CVE-2000-0915
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
Affected Products: n/a
References: [{'name': '433', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/433'}, {'name': 'FreeBSD-SA-00:54', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc'}, {'name': '20001002 [sa2c@and.or.jp: bin/21704: enabling fingerd makes files world readable]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0017.html'}, {'name': '1803', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1803'}, {'name': 'freebsd-fingerd-files(5385)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5385'}]
CVE State: PUBLISHED
Explain CVE-2000-0916
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:52', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc'}, {'name': '1766', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1766'}]
CVE State: PUBLISHED
Explain CVE-2000-0917
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:56', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:56.lprng.asc'}, {'name': 'CSSA-2000-033.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt'}, {'name': 'CA-2000-22', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-22.html'}, {'name': '20000925 Format strings: bug #2: LPRng', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html'}, {'name': 'RHSA-2000:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-065.html'}, {'name': 'lprng-format-string(5287)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5287'}, {'name': '1712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1712'}]
CVE State: PUBLISHED
Explain CVE-2000-0918
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
Affected Products: n/a
References: [{'name': '20000919 kvt format bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/83914'}, {'name': '1700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1700'}]
CVE State: PUBLISHED
Explain CVE-2000-0919
Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '472', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/472'}, {'name': 'phpix-dir-traversal(5331)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5331'}, {'name': '20001007 PHPix advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0117.html'}, {'name': '1773', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1773'}]
CVE State: PUBLISHED
Explain CVE-2000-0920
Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:60', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:60.boa.asc'}, {'name': '20001006 Vulnerability in BOA web server v0.94.8.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0092.html'}, {'name': 'boa-webserver-get-dir-traversal(5330)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5330'}, {'name': '1770', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1770'}, {'name': '20001009 boa: exposes contents of local files', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20001009'}]
CVE State: PUBLISHED
Explain CVE-2000-0921
Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Affected Products: n/a
References: [{'name': "20001007 Security Advisory: Hassan Consulting's shop.cgi Directory Traversal Vulnerability.", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0115.html'}, {'name': 'hassan-shopping-cart-dir-traversal(5342)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5342'}, {'name': '1777', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1777'}, {'name': '1596', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1596'}]
CVE State: PUBLISHED
Explain CVE-2000-0922
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.
Affected Products: n/a
References: [{'name': '1776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1776'}, {'name': 'web-shopper-directory-traversal(5351)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5351'}, {'name': "20001008 Security Advisory: Bytes Interactive's Web Shopper (shopper.cgi) Directory Traversal Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0120.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0923
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
Affected Products: n/a
References: [{'name': 'uclinux-apliophone-bin-execute(5333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5333'}, {'name': '1784', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1784'}, {'name': '20001006 Fwd: APlio PRO web shell', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0924
Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
Affected Products: n/a
References: [{'name': '461', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/461'}, {'name': 'master-index-directory-traversal(5355)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5355'}, {'name': '20001009 Master Index traverse advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0141.html'}, {'name': '1772', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1772'}]
CVE State: PUBLISHED
Explain CVE-2000-0925
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
Affected Products: n/a
References: [{'name': '1734', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1734'}, {'name': 'cyberoffice-world-readable-directory(5318)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5318'}, {'name': '20001002 DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97050819812055&w=2'}, {'name': '20001002 DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2', 'tags': ['mailing-list', 'x_refsource_WIN2KSEC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0001.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0926
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
Affected Products: n/a
References: [{'name': '1733', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1733'}, {'name': 'cyberoffice-price-modification(5319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5319'}, {'name': '20001002 DST2K0036: Price modification possible in CyberOffice Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97050627707128&w=2'}, {'name': '20001002 DST2K0036: Price modification possible in CyberOffice Shopping Ca rt', 'tags': ['mailing-list', 'x_refsource_WIN2KSEC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0927
WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
Affected Products: n/a
References: [{'name': '1724', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1724'}, {'name': 'quotaadvisor-quota-bypass(5302)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5302'}, {'name': '20000928 DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0173.html'}, {'name': '20000928 DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09//0331.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0928
WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.
Affected Products: n/a
References: [{'name': '1765', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1765'}, {'name': 'quotaadvisor-list-files(5327)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5327'}, {'name': '20001006 DST2K0040: QuotaAdvisor 4.1 by WQuinn susceptible to any user bei ng able to list (not read) all files on any server running QuotaAdvisor.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0091.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0929
Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-068', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-068'}, {'name': '20000929 Malformed Embedded Windows Media Player 7 "OCX Attachment"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97024839222747&w=2'}, {'name': 'mediaplayer-outlook-dos(5309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5309'}, {'name': '1714', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1714'}]
CVE State: PUBLISHED
Explain CVE-2000-0930
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
Affected Products: n/a
References: [{'name': '20001030 Pegasus Mail file reading vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html'}, {'name': '20001003 Pegasus mail file reading vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html'}, {'name': '1738', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1738'}, {'name': 'pegasus-file-forwarding(5326)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5326'}]
CVE State: PUBLISHED
Explain CVE-2000-0931
Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.
Affected Products: n/a
References: [{'name': '20001004 Another Pegasus Mail vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/137518'}, {'name': '1750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1750'}]
CVE State: PUBLISHED
Explain CVE-2000-0932
MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': "20000926 FW: DOS for Content Technologies' MAILsweeper for SMTP.", 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0181.html'}, {'name': 'mailsweeper-smtp-dos(5641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5641'}]
CVE State: PUBLISHED
Explain CVE-2000-0933
The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability.
Affected Products: n/a
References: [{'name': '1729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1729'}, {'name': 'win2k-simplified-chinese-ime(5301)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5301'}, {'name': 'MS00-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-069'}]
CVE State: PUBLISHED
Explain CVE-2000-0934
Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
Affected Products: n/a
References: [{'name': 'glint-symlink(5271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5271'}, {'name': 'RHSA-2000:062', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-062.html'}, {'name': '1703', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1703'}]
CVE State: PUBLISHED
Explain CVE-2000-0935
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
Affected Products: n/a
References: [{'name': '20001030 Samba 2.0.7 SWAT vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html'}, {'name': 'samba-swat-logging-sym-link(5443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5443'}, {'name': '1872', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1872'}]
CVE State: PUBLISHED
Explain CVE-2000-0936
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Affected Products: n/a
References: [{'name': '20001030 Samba 2.0.7 SWAT vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html'}, {'name': 'samba-swat-logfile-info(5445)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5445'}, {'name': '1874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1874'}]
CVE State: PUBLISHED
Explain CVE-2000-0937
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
Affected Products: n/a
References: [{'name': '20001030 Samba 2.0.7 SWAT vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html'}, {'name': 'samba-swat-brute-force(5442)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5442'}, {'name': '1873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1873'}]
CVE State: PUBLISHED
Explain CVE-2000-0938
Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.
Affected Products: n/a
References: [{'name': '20001030 Samba 2.0.7 SWAT vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html'}, {'name': 'samba-swat-brute-force(5442)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5442'}]
CVE State: PUBLISHED
Explain CVE-2000-0939
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
Affected Products: n/a
References: [{'name': '20001030 Samba 2.0.7 SWAT vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html'}, {'name': 'samba-swat-url-filename-dos(5444)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5444'}]
CVE State: PUBLISHED
Explain CVE-2000-0940
Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.
Affected Products: n/a
References: [{'name': 'pagelog-cgi-dir-traverse(5451)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5451'}, {'name': '20001029 Minor bug in Pagelog.cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0422.html'}, {'name': '1864', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1864'}]
CVE State: PUBLISHED
Explain CVE-2000-0941
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
Affected Products: n/a
References: [{'name': '1883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1883'}, {'name': 'kw-whois-meta(5438)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5438'}, {'name': '20001029 Re: Remote command execution via KW Whois 1.0 (addition)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0420.html'}, {'name': '20001029 Remote command execution via KW Whois 1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0419.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kootenayweb.bc.ca/scripts/whois.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0942
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
Affected Products: n/a
References: [{'name': '20001028 IIS 5.0 cross site scripting vulnerability - using .htw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/141903'}, {'name': 'MS00-084', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084'}, {'name': '1861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1861'}, {'name': 'iis-htw-cross-scripting(5441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5441'}]
CVE State: PUBLISHED
Explain CVE-2000-0943
Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.
Affected Products: n/a
References: [{'name': '1858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1858'}, {'name': '20001027 Potential Security Problem in bftpd-1.0.11', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0397.html'}, {'name': 'bftpd-user-bo(5426)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5426'}]
CVE State: PUBLISHED
Explain CVE-2000-0944
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
Affected Products: n/a
References: [{'name': '20001027 CGI-Bug: News Update 1.1 administration password bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html'}, {'name': '1881', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1881'}, {'name': 'news-update-bypass-password(5433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5433'}]
CVE State: PUBLISHED
Explain CVE-2000-0945
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
Affected Products: n/a
References: [{'name': '444', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/444'}, {'name': '20001113 Re: 3500XL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html'}, {'name': 'cisco-catalyst-remote-commands(5415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5415'}, {'name': '20001026 Advisory def-2000-02: Cisco Catalyst remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html'}, {'name': '1846', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1846'}]
CVE State: PUBLISHED
Explain CVE-2000-0946
Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization.
Affected Products: n/a
References: [{'name': '5831', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5831'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www5.compaq.com/support/files/desktops/us/revision/1723.html'}, {'name': 'compaq-ea-elevate-privileges(5718)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5718'}, {'name': '20001012 Security issue with Compaq Easy Access Keyboard software', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0023.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0947
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Affected Products: n/a
References: [{'name': '20001002 Very probable remote root vulnerability in cfengine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html'}, {'name': 'MDKSA-2000:061', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1'}, {'name': 'NetBSD-SA2000-013', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc'}, {'name': 'cfengine-cfd-format-string(5630)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5630'}, {'name': '1757', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1757'}]
CVE State: PUBLISHED
Explain CVE-2000-0948
GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': 'gnorpm-temp-symlink(5317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5317'}, {'name': '1761', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1761'}, {'name': 'RHSA-2000:072', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-072.html'}, {'name': '20001011 Immunix OS Security Update for gnorpm package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0184.html'}, {'name': '20001002 GnoRPM local /tmp vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/136866'}, {'name': 'MDKSA-2000:055', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/MDKSA-2000-055.php3?dis=7.0'}, {'name': '20001003 Conectiva Linux Security Announcement - gnorpm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0043.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0949
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
Affected Products: n/a
References: [{'name': 'TLSA2000023-1', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/pipermail/tl-security-announce/2000-October/000025.html'}, {'name': 'traceroute-heap-overflow(5311)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5311'}, {'name': 'MDKSA-2000:053', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/MDKSA-2000-053.php3?dis=7.1'}, {'name': 'RHSA-2000:078', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-078.html'}, {'name': '20000930 Conectiva Linux Security Announcement - traceroute', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0357.html'}, {'name': '1739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1739'}, {'name': '20001013 traceroute: local root exploit', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20001013'}, {'name': 'CSSA-2000-034.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txt'}, {'name': '20000928 Very interesting traceroute flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0950
Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name.
Affected Products: n/a
References: [{'name': '20001026 FWTK x-gw Security Advisory [GSA2000-01]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0376.html'}, {'name': 'tisfwtk-xgw-execute-code(5420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5420'}]
CVE State: PUBLISHED
Explain CVE-2000-0951
A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.
Affected Products: n/a
References: [{'name': '1756', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1756'}, {'name': 'Q272079', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://www.microsoft.com/technet/support/kb.asp?ID=272079'}, {'name': 'A100400-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2000/a100400-1.txt'}, {'name': 'iis-index-dir-traverse(5335)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5335'}]
CVE State: PUBLISHED
Explain CVE-2000-0952
global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': 'global-execute-remote-commands(5424)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5424'}, {'name': '6486', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6486'}, {'name': 'NetBSD-SA2000-014', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-014.txt.asc'}]
CVE State: PUBLISHED
Explain CVE-2000-0953
Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
Affected Products: n/a
References: [{'name': '20001009 Shambala 4.5 vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html'}, {'name': '1778', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1778'}, {'name': 'shambala-connection-dos(5345)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5345'}]
CVE State: PUBLISHED
Explain CVE-2000-0954
Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
Affected Products: n/a
References: [{'name': 'shambala-password-plaintext(5346)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5346'}, {'name': '20001009 Shambala 4.5 vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html'}, {'name': '1771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1771'}]
CVE State: PUBLISHED
Explain CVE-2000-0955
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
Affected Products: n/a
References: [{'name': 'A102600-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2000/a102600-1.txt'}, {'name': '1885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1885'}, {'name': 'cisco-vco-snmp-passwords(5425)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5425'}]
CVE State: PUBLISHED
Explain CVE-2000-0956
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.
Affected Products: n/a
References: [{'name': 'RHSA-2000:094', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-094.html'}, {'name': '1875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1875'}, {'name': 'cyrus-sasl-gain-access(5427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5427'}]
CVE State: PUBLISHED
Explain CVE-2000-0957
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
Affected Products: n/a
References: [{'name': '20001026 (SRADV00004) Remote and local vulnerabilities in pam_mysql', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html'}, {'name': 'pammysql-auth-input(5447)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5447'}]
CVE State: PUBLISHED
Explain CVE-2000-0958
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window.
Affected Products: n/a
References: [{'name': 'hotjava-browser-dom-access(5428)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5428'}, {'name': '20001025 HotJava Browser 3.0 JavaScript security vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0349.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0959
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
Affected Products: n/a
References: [{'name': '1719', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1719'}, {'name': 'glibc-unset-symlink(5299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5299'}, {'name': '20000926 ld.so bug - LD_DEBUG_OUTPUT follows symlinks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/85028'}]
CVE State: PUBLISHED
Explain CVE-2000-0960
The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.
Affected Products: n/a
References: [{'name': '1787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1787'}, {'name': '20001011 Netscape Messaging server 4.15 poor error strings', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97138100426121&w=2'}, {'name': 'netscape-messaging-email-verify(5364)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5364'}]
CVE State: PUBLISHED
Explain CVE-2000-0961
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
Affected Products: n/a
References: [{'name': '1721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1721'}, {'name': '20000928 commercial products and security [ + new bug ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0334.html'}, {'name': 'netscape-messaging-list-dos(5292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5292'}]
CVE State: PUBLISHED
Explain CVE-2000-0962
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': '1723', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1723'}, {'name': '20000925 Nmap Protocol Scanning DoS against OpenBSD IPSEC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0299.html'}, {'name': '1574', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1574'}, {'name': 'openbsd-nmap-dos(5634)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5634'}]
CVE State: PUBLISHED
Explain CVE-2000-0963
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Affected Products: n/a
References: [{'name': 'gnu-ncurses-term-terminfodirs-bo(44487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/44487'}, {'name': '20001009 ncurses buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/138550'}, {'name': '1142', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1142'}, {'name': 'CSSA-2000-036.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0964
Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
Affected Products: n/a
References: [{'name': 'hinet-ipphone-get-bo(5298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5298'}, {'name': '20000928 Another thingy.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0336.html'}, {'name': '1727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1727'}]
CVE State: PUBLISHED
Explain CVE-2000-0965
The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
Affected Products: n/a
References: [{'name': 'hp-virtualvault-nsapi-dos(5361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5361'}, {'name': 'HPSBUX0010-124', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2000-q4/0012.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0966
Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'hp-lpspooler-bo(5379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5379'}, {'name': '7244', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7244'}, {'name': 'HPSBUX0010-125', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2000-q4/0020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0967
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
Affected Products: n/a
References: [{'name': 'RHSA-2000:095', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-095.html'}, {'name': 'RHSA-2000:088', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-088.html'}, {'name': 'A101200-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2000/a101200-1.txt'}, {'name': 'CSSA-2000-037.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2000-037.0.txt'}, {'name': 'MDKSA-2000:062', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/MDKSA-2000-062.php3?dis=7.1'}, {'name': 'php-logging-format-string(5359)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5359'}, {'name': '20001012 Conectiva Linux Security Announcement - mod_php3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0204.html'}, {'name': 'FreeBSD-SA-00:75', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:75.php.asc'}, {'name': '1786', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1786'}]
CVE State: PUBLISHED
Explain CVE-2000-0968
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
Affected Products: n/a
References: [{'name': '20001024 Tamandua Sekure Labs Security Advisory 2000-01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/141060'}, {'name': '20001016 Half-Life Dedicated Server Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html'}, {'name': '1799', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1799'}, {'name': 'halflife-server-changelevel-bo(5375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5375'}, {'name': '20001027 Re: Half Life dedicated server Patch', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0969
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
Affected Products: n/a
References: [{'name': 'halflife-rcon-format-string(5413)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5413'}, {'name': '20001024 Tamandua Sekure Labs Security Advisory 2000-01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/141060'}, {'name': '20001016 Half-Life Dedicated Server Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html'}, {'name': '6983', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6983'}, {'name': '20001027 Re: Half Life dedicated server Patch', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0970
IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.
Affected Products: n/a
References: [{'name': '7265', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7265'}, {'name': 'session-cookie-remote-retrieval(5396)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5396'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.acrossecurity.com/aspr/ASPR-2000-07-22-1-PUB.txt'}, {'name': 'MS00-080', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-080'}]
CVE State: PUBLISHED
Explain CVE-2000-0971
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.
Affected Products: n/a
References: [{'name': '20001023 Avirt Mail 4.x DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0301.html'}, {'name': 'avirt-mail-from-dos(5397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5397'}, {'name': 'avirt-rcpt-to-dos(5398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5398'}]
CVE State: PUBLISHED
Explain CVE-2000-0972
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
Affected Products: n/a
References: [{'name': 'hp-crontab-read-files(5410)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5410'}, {'name': '20001020 [ Hackerslab bug_paper ] HP-UX crontab temporary file symbolic link vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0317.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0973
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:72', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:72.curl.asc'}, {'name': '1804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1804'}, {'name': 'curl-error-bo(5374)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5374'}, {'name': 'RHBA-2000:092-01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html'}]
CVE State: PUBLISHED