Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-0974
GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.
Affected Products: n/a
References: [{'name': "20001011 GPG 1.0.3 doesn't detect modifications to files with multiple signatures", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0201.html'}, {'name': '20001025 Immunix OS Security Update for gnupg package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0361.html'}, {'name': '20001111 gnupg: incorrect signature verification', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20001111'}, {'name': 'gnupg-message-modify(5386)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5386'}, {'name': 'RHSA-2000:089', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-089.html'}, {'name': 'FreeBSD-SA-00:67', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:67.gnupg.asc'}, {'name': 'CLSA-2000:334', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000334'}, {'name': '1797', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1797'}, {'name': '1608', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1608'}, {'name': 'CSSA-2000-038.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-038.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0975
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '435', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/435'}, {'name': '20001012 Anaconda Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0210.html'}, {'name': 'anaconda-apexec-directory-traversal(5750)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5750'}]
CVE State: PUBLISHED
Explain CVE-2000-0976
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.
Affected Products: n/a
References: [{'name': '1805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1805'}, {'name': 'xfree-xlib-bo(5751)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/5751.php'}, {'name': '20020502-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020502-01-I'}, {'name': '20001012 another Xlib buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0977
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.
Affected Products: n/a
References: [{'name': '20001011 Mail File POST Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.html'}, {'name': 'mailfile-post-file-read(5358)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5358'}, {'name': '1807', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1807'}]
CVE State: PUBLISHED
Explain CVE-2000-0978
bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter.
Affected Products: n/a
References: [{'name': 'bb4-netmon-execute-commands(5719)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5719'}, {'name': '1779', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1779'}, {'name': '20001010 Big Brother Systems and Network Monitor vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0162.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0979
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-072', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-072'}, {'name': 'win9x-share-level-password(5395)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5395'}, {'name': '1780', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1780'}, {'name': '20001012 NSFOCUS SA2000-05: Microsoft Windows 9x NETBIOS password', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97147777618139&w=2'}, {'name': 'oval:org.mitre.oval:def:996', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A996'}]
CVE State: PUBLISHED
Explain CVE-2000-0980
NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network.
Affected Products: n/a
References: [{'name': 'win-nmpi-packet-dos(5357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5357'}, {'name': 'MS00-073', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-073'}, {'name': '1781', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1781'}]
CVE State: PUBLISHED
Explain CVE-2000-0981
MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.
Affected Products: n/a
References: [{'name': 'mysql-authentication(5409)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5409'}, {'name': '20001023 [CORE SDI ADVISORY] MySQL weak authentication', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0318.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mysql.com/documentation/mysql/commented/manual.php?section=Security'}]
CVE State: PUBLISHED
Explain CVE-2000-0982
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
Affected Products: n/a
References: [{'name': '1793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1793'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt'}, {'name': 'ie-cache-info(5367)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5367'}, {'name': 'MS00-076', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076'}]
CVE State: PUBLISHED
Explain CVE-2000-0983
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability.
Affected Products: n/a
References: [{'name': 'netmeeting-desktop-sharing-dos(5368)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5368'}, {'name': 'Q273854', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ273854'}, {'name': 'MS00-077', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-077'}, {'name': '20001018 Denial of Service attack against computers running Microsoft NetMeeting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/140341'}, {'name': '1798', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1798'}]
CVE State: PUBLISHED
Explain CVE-2000-0984
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
Affected Products: n/a
References: [{'name': '20001025 Cisco IOS HTTP Server Query Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ioshttpserverquery-pub.shtml'}, {'name': '1838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1838'}, {'name': 'cisco-ios-query-dos(5412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5412'}]
CVE State: PUBLISHED
Explain CVE-2000-0985
Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
Affected Products: n/a
References: [{'name': '1789', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1789'}, {'name': 'A101200-2', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2000/a101200-2.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0986
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.
Affected Products: n/a
References: [{'name': 'oracle-home-bo(5390)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5390'}, {'name': '20001020 [ Hackerslab bug_paper ] Linux ORACLE 8.1.5 vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0987
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
Affected Products: n/a
References: [{'name': '20001018 vulnerability in Oracle Internet Directory in Oracle 8.1.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/140340'}, {'name': '20001020 In response to posting 10/18/2000 vulnerability in Oracle Internet Directory in Oracle 8.1.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/140709'}, {'name': 'oracle-oidldap-bo(5401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5401'}]
CVE State: PUBLISHED
Explain CVE-2000-0988
WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bardon.com/pwdcrack.htm'}, {'name': '1801', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1801'}, {'name': 'winu-backdoor(5376)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5376'}, {'name': '20001013 WinU Backdoor passwords!!!!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0238.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0989
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username.
Affected Products: n/a
References: [{'name': '6488', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6488'}, {'name': 'intel-email-username-bo(5414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5414'}, {'name': "20001020 DoS in Intel corporation 'InBusiness eMail Station'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0293.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0990
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
Affected Products: n/a
References: [{'name': 'cmd5checkpw-qmail-bypass-authentication(5382)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5382'}, {'name': '1809', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1809'}, {'name': '20001016 Authentication failure in cmd5checkpw 0.21', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0258.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://members.elysium.pl/brush/cmd5checkpw/changes.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0991
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-079', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-079'}, {'name': '1815', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1815'}, {'name': 'win-hyperterminal-telnet-bo(5387)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5387'}]
CVE State: PUBLISHED
Explain CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': 'scp-overwrite-files(5312)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5312'}, {'name': 'MDKSA-2000:057', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:057'}, {'name': '20000930 scp file transfer hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0359.html'}, {'name': '1742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1742'}]
CVE State: PUBLISHED
Explain CVE-2000-0993
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
Affected Products: n/a
References: [{'name': '20001004 Re: OpenBSD Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97068555106135&w=2'}, {'name': '1744', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1744'}, {'name': '20001003 A format string vulnerability exists in the pw_error(3) function.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata27.html#pw_error'}, {'name': 'NetBSD-SA2000-015', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc'}, {'name': 'FreeBSD-SA-00:58', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc'}, {'name': 'bsd-libutil-format(5339)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5339'}]
CVE State: PUBLISHED
Explain CVE-2000-0994
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch'}, {'name': '20001004 Re: OpenBSD Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97068555106135&w=2'}, {'name': 'bsd-fstat-format(5338)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5338'}, {'name': '1746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1746'}]
CVE State: PUBLISHED
Explain CVE-2000-0995
Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch'}, {'name': '6125', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6125'}, {'name': 'bsd-yp-passwd-format(5635)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5635'}]
CVE State: PUBLISHED
Explain CVE-2000-0996
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch'}, {'name': 'bsd-su-format(5636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5636'}, {'name': '6124', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6124'}]
CVE State: PUBLISHED
Explain CVE-2000-0997
Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
Affected Products: n/a
References: [{'name': 'bsd-eeprom-format(5337)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5337'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch'}, {'name': '1752', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1752'}]
CVE State: PUBLISHED
Explain CVE-2000-0998
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
Affected Products: n/a
References: [{'name': '1895', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1895'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch'}, {'name': 'FreeBSD-SA-00:62', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc'}]
CVE State: PUBLISHED
Explain CVE-2000-0999
Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch'}]
CVE State: PUBLISHED
Explain CVE-2000-1000
Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.
Affected Products: n/a
References: [{'name': 'aim-file-transfer-dos(5314)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5314'}, {'name': '1747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1747'}, {'name': '20001003 AOL Instant Messenger DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/137374'}]
CVE State: PUBLISHED
Explain CVE-2000-1001
add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
Affected Products: n/a
References: [{'name': '20001024 Price modification in Element InstantShop', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97240616129614&w=2'}, {'name': 'instantshop-modify-price(5402)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5402'}, {'name': '6487', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6487'}]
CVE State: PUBLISHED
Explain CVE-2000-1002
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
Affected Products: n/a
References: [{'name': 'communigate-email-verify(5363)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5363'}, {'name': '1792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1792'}, {'name': '20001012 Re: Netscape Messaging server 4.15 poor error strings', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/139523'}]
CVE State: PUBLISHED
Explain CVE-2000-1003
NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash.
Affected Products: n/a
References: [{'name': 'win-netbios-driver-type-dos(5370)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5370'}, {'name': '1794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1794'}, {'name': '20001012 NSFOCUS SA2000-04: Microsoft Win9x client driver type comparing vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/139511'}]
CVE State: PUBLISHED
Explain CVE-2000-1004
Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.
Affected Products: n/a
References: [{'name': '20001004 Re: OpenBSD Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97068555106135&w=2'}, {'name': '6123', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6123'}, {'name': 'bsd-photurisd-format(5336)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5336'}]
CVE State: PUBLISHED
Explain CVE-2000-1005
Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Affected Products: n/a
References: [{'name': 'extropia-webstore-fileread(5347)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5347'}, {'name': '20001009 Security Advisory : eXtropia WebStore (web_store.cgi) Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/138495'}, {'name': '1774', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1774'}]
CVE State: PUBLISHED
Explain CVE-2000-1006
Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-082', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-082'}, {'name': '1869', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1869'}, {'name': 'ms-exchange-mime-dos(5448)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5448'}]
CVE State: PUBLISHED
Explain CVE-2000-1007
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.
Affected Products: n/a
References: [{'name': 'igear-invalid-log(5791)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5791'}, {'name': '20001025 I-gear 3.5.x for Microsoft Proxy logging vulnerability + temporary fix.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0048.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
Affected Products: n/a
References: [{'name': '1715', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1715'}, {'name': 'A092600-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2000/a092600-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-1009
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
Affected Products: n/a
References: [{'name': 'linux-dump-execute-code(5437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5437'}, {'name': '1871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1871'}, {'name': '20001030 Redhat 6.2 dump command executes external program with suid priviledge.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1010
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
Affected Products: n/a
References: [{'name': '1764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1764'}, {'name': '20001006 talkd [WAS: Re: OpenBSD Security Advisory]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/137890'}, {'name': 'linux-talkd-overwrite-root(5344)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5344'}]
CVE State: PUBLISHED
Explain CVE-2000-1011
Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:53', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc'}, {'name': '6070', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6070'}, {'name': 'freebsd-catopen-bo(5638)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5638'}]
CVE State: PUBLISHED
Explain CVE-2000-1012
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:53', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc'}]
CVE State: PUBLISHED
Explain CVE-2000-1013
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:53', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc'}]
CVE State: PUBLISHED
Explain CVE-2000-1014
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
Affected Products: n/a
References: [{'name': '20000927 Unixware SCOhelp http server format string vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html'}, {'name': 'unixware-scohelp-format(5291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5291'}, {'name': '1717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1717'}, {'name': '3240', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3240'}]
CVE State: PUBLISHED
Explain CVE-2000-1015
The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.
Affected Products: n/a
References: [{'name': '1731', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1731'}, {'name': 'slashcode-default-admin-passwords(5306)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5306'}, {'name': '20000929 Default admin password with Slashcode.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0366.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1016
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
Affected Products: n/a
References: [{'name': '20000921 httpd.conf in Suse 6.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/84360'}, {'name': 'suse-installed-packages-exposed(5276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5276'}, {'name': '1707', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1707'}]
CVE State: PUBLISHED
Explain CVE-2000-1017
Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database.
Affected Products: n/a
References: [{'name': '20001003 Update to DST2K0039: Webteachers Webdata: Importing files lower t han web root possible in to database', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0032.html'}, {'name': '20001002 DST2K0039: Webteachers Webdata: Importing files lower than web ro ot possible in to database', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-10/0007.html'}, {'name': '1732', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1732'}]
CVE State: PUBLISHED
Explain CVE-2000-1018
shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file.
Affected Products: n/a
References: [{'name': 'shred-recover-files(5722)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5722'}, {'name': '20001011 Shred v1.0 Fix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97131166004145&w=2'}, {'name': '20001010 Shred 1.0 Bug Report', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97119799515246&w=2'}, {'name': '1788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1788'}]
CVE State: PUBLISHED
Explain CVE-2000-1019
Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.
Affected Products: n/a
References: [{'name': 'ultraseek-malformed-url-dos(5439)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5439'}, {'name': '20001030 Ultraseek 3.1.x Remote DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97301487015664&w=2'}, {'name': '1866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1866'}]
CVE State: PUBLISHED
Explain CVE-2000-1020
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
Affected Products: n/a
References: [{'name': '1689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1689'}, {'name': 'mdaemon-url-dos(5250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5250'}, {'name': '20000917 VIGILANTE-2000012: Mdaemon Web Services Heap Overflow DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96925269716274&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-1021
Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
Affected Products: n/a
References: [{'name': '1689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1689'}, {'name': 'mdaemon-url-dos(5250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5250'}, {'name': '20000917 VIGILANTE-2000012: Mdaemon Web Services Heap Overflow DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96925269716274&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-1022
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
Affected Products: n/a
References: [{'name': '1698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1698'}, {'name': 'cisco-pix-smtp-filtering(5277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5277'}, {'name': '20001005 Cisco Secure PIX Firewall Mailguard Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml'}, {'name': '20000920 Re: Cisco PIX Firewall (smtp content filtering hack) - Version 4.2(1) not exploitable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html'}, {'name': '20000919 Cisco PIX Firewall (smtp content filtering hack)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1023
The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.
Affected Products: n/a
References: [{'name': '1710', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1710'}, {'name': 'alabanza-unauthorized-access(5284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5284'}, {'name': '20000924 Major Vulnerability in Alabanza Control Panel', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/84766'}]
CVE State: PUBLISHED
Explain CVE-2000-1024
eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'ewave-servletexec-file-upload(5450)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5450'}, {'name': '1876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1876'}, {'name': '20001101 Unify eWave ServletExec upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97306581513537&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-1025
eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.
Affected Products: n/a
References: [{'name': '1868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1868'}, {'name': '20001030 Unify eWave ServletExec DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97295224226042&w=2'}, {'name': 'ewave-servletexec-dos(5435)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5435'}]
CVE State: PUBLISHED
Explain CVE-2000-1026
Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'tcpdump-afs-packet-overflow(5480)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5480'}, {'name': 'FreeBSD-SA-00:61', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:61.tcpdump.v1.1.asc'}, {'name': '1870', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1870'}, {'name': 'SuSE-SA:2000:46', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://archives.neohapsis.com/archives/linux/suse/2000-q4/0681.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1027
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
Affected Products: n/a
References: [{'name': '1877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1877'}, {'name': '20001003 Cisco PIX Firewall allow external users to discover internal IPs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97059440000367&w=2'}, {'name': '1623', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1623'}, {'name': 'cisco-pix-reveal-address(5646)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5646'}]
CVE State: PUBLISHED
Explain CVE-2000-1028
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.
Affected Products: n/a
References: [{'name': '1886', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1886'}, {'name': 'hp-cu-bo(5460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5460'}, {'name': '20001102 HPUX cu -l option buffer overflow vulnerabilit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/142792'}]
CVE State: PUBLISHED
Explain CVE-2000-1029
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
Affected Products: n/a
References: [{'name': 'isc-bind-axfr-bo(5462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5462'}, {'name': '1887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1887'}, {'name': '20001027 old version of host command vulnearbility', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/141660'}]
CVE State: PUBLISHED
Explain CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
Affected Products: n/a
References: [{'name': 'corporatetime-brute-force(5529)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5529'}, {'name': '20001031 Re: Samba 2.0.7 SWAT vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/142672'}, {'name': '1888', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1888'}]
CVE State: PUBLISHED
Explain CVE-2000-1031
Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.
Affected Products: n/a
References: [{'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': '20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html'}, {'name': '20020902 Happy Labor Day from Snosoft', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/290115'}, {'name': 'HPSBUX0011-128', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2000-q4/0034.html'}, {'name': '1889', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1889'}, {'name': 'VU#320067', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/320067'}, {'name': '20000810 Re: Possible vulnerability in HPUX ( Add vulnerability List )', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/75188'}, {'name': 'hp-dtterm(5461)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5461'}]
CVE State: PUBLISHED
Explain CVE-2000-1032
The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
Affected Products: n/a
References: [{'name': '20001101 Re: Samba 2.0.7 SWAT vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/142808'}, {'name': 'fw1-login-response(5816)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5816'}, {'name': '1632', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1632'}, {'name': '1890', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1890'}]
CVE State: PUBLISHED
Explain CVE-2000-1033
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.
Affected Products: n/a
References: [{'name': 'ftp-servu-brute-force(5436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5436'}, {'name': '20001029 Brute Forcing FTP Servers with enabled anti-hammering (anti brute-force) modus', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/141905'}, {'name': '1860', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1860'}]
CVE State: PUBLISHED
Explain CVE-2000-1034
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.
Affected Products: n/a
References: [{'name': 'system-monitor-activex-bo(5467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5467'}, {'name': '20001106 System Monitor ActiveX Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97349782305448&w=2'}, {'name': 'MS00-085', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-085'}, {'name': '1899', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1899'}]
CVE State: PUBLISHED
Explain CVE-2000-1035
Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.synnergy.net/Archives/Advisories/dethy/typsoft-ftpd.txt'}, {'name': '1690', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1690'}, {'name': '20000912 TYPSoft FTP Server remote DoS Problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96879389027478&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-1036
Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter.
Affected Products: n/a
References: [{'name': 'rbs-isp-directory-traversal(5275)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5275'}, {'name': '1704', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1704'}, {'name': '20000920 Extent RBS directory Transversal.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-09/0252.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1037
Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.
Affected Products: n/a
References: [{'name': '1662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1662'}, {'name': '20000815 Firewall-1 session agent 3.0 -> 4.1, dictionnary and brute force attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/76389'}]
CVE State: PUBLISHED