Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-0124
surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
Affected Products: n/a
References: [{'name': '965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/965'}]
CVE State: PUBLISHED
Explain CVE-2000-0125
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
Affected Products: n/a
References: [{'name': '20000203 RFP2K01 - "How I hacked Packetstorm" (wwwthreads advisory)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net'}, {'name': '967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/967'}]
CVE State: PUBLISHED
Explain CVE-2000-0126
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0126'}]
CVE State: PUBLISHED
Explain CVE-2000-0127
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412&keywords=security%20Webspeed'}, {'name': '969', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/969'}]
CVE State: PUBLISHED
Explain CVE-2000-0128
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.glazed.org/finger/changelog.txt'}, {'name': '7610', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7610'}]
CVE State: PUBLISHED
Explain CVE-2000-0129
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0129'}]
CVE State: PUBLISHED
Explain CVE-2000-0130
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
Affected Products: n/a
References: [{'name': 'SB-00.02a', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-00.02a'}, {'name': '20000127 New SCO patches...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94908470928258&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0131
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
Affected Products: n/a
References: [{'name': '966', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/966'}, {'name': '4677', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4677'}, {'name': '20000201 war-ftpd 1.6x DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94960703721503&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0133
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
Affected Products: n/a
References: [{'name': '961', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/961'}]
CVE State: PUBLISHED
Explain CVE-2000-0138
A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
Affected Products: n/a
References: [{'name': '20000429 Source code to mstream, a DDoS tool', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95715370208598&w=2'}, {'name': '20000502 "mstream" Distributed Denial of Service Tool', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise48.php3'}, {'name': '20000501 Re: Source code to mstream, a DDoS tool', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95722093124322&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0139
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
Affected Products: n/a
References: [{'name': '20000210 remote DoS on Internet Anywhere Mail Server Ver.3.1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95021326417936&w=2'}, {'name': '982', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/982'}]
CVE State: PUBLISHED
Explain CVE-2000-0140
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
Affected Products: n/a
References: [{'name': '20000210 remote DoS on Internet Anywhere Mail Server Ver.3.1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95021326417936&w=2'}, {'name': '980', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/980'}]
CVE State: PUBLISHED
Explain CVE-2000-0141
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
Affected Products: n/a
References: [{'name': '20000211 perl-cgi hole in UltimateBB by Infopop Corp.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-8&msg=20000211224935.A13236%40infomag.ape.relarn.ru'}, {'name': '20000225 FW: Important UBB News For Licensed Users', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ultimatebb.com/home/versions.shtml'}, {'name': '991', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/991'}]
CVE State: PUBLISHED
Explain CVE-2000-0142
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0142'}]
CVE State: PUBLISHED
Explain CVE-2000-0143
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143'}]
CVE State: PUBLISHED
Explain CVE-2000-0144
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '971', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/971'}, {'name': '20000207 Infosec.20000207.axis700.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0034.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0145
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0145'}]
CVE State: PUBLISHED
Explain CVE-2000-0146
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
Affected Products: n/a
References: [{'name': '972', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/972'}, {'name': '20000207 Novell GroupWise 5.5 Enhancement Pack Web Access Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0049.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0147
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
Affected Products: n/a
References: [{'name': '973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/973'}, {'name': '20000207 SNMPD default writable community string', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0045.html'}, {'name': 'SB-00.04a', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-00.04a'}]
CVE State: PUBLISHED
Explain CVE-2000-0148
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
Affected Products: n/a
References: [{'name': '20000208 Remote access vulnerability in all MySQL server versions', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0053.html'}, {'name': '975', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/975'}]
CVE State: PUBLISHED
Explain CVE-2000-0149
Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
Affected Products: n/a
References: [{'name': '20000208 Zeus Web Server: Null Terminated Strings', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html'}, {'name': 'zeus-server-null-string(3982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3982'}, {'name': '977', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/977'}, {'name': '254', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/254'}]
CVE State: PUBLISHED
Explain CVE-2000-0150
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Affected Products: n/a
References: [{'name': 'VU#328867', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/328867'}, {'name': '4417', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4417'}, {'name': '979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/979'}]
CVE State: PUBLISHED
Explain CVE-2000-0151
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
Affected Products: n/a
References: [{'name': '981', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/981'}]
CVE State: PUBLISHED
Explain CVE-2000-0152
Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
Affected Products: n/a
References: [{'name': '976', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/976'}, {'name': '7468', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7468'}]
CVE State: PUBLISHED
Explain CVE-2000-0153
FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000216 Doubledot bug in FrontPage FrontPage Personal Web Server.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000801bf780a%249ad4b2e0%240100007f%40localhost'}, {'name': '989', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/989'}]
CVE State: PUBLISHED
Explain CVE-2000-0154
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.sco.com/security/'}, {'name': '20000215 ARCserve symlink vulnerability', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com'}, {'name': '988', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/988'}]
CVE State: PUBLISHED
Explain CVE-2000-0155
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
Affected Products: n/a
References: [{'name': '993', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/993'}, {'name': '20000218 AUTORUN.INF Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org'}]
CVE State: PUBLISHED
Explain CVE-2000-0156
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
Affected Products: n/a
References: [{'name': 'ie-image-source-redirect(3996)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3996'}, {'name': '7827', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7827'}, {'name': 'MS00-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-009'}]
CVE State: PUBLISHED
Explain CVE-2000-0157
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
Affected Products: n/a
References: [{'name': '1999-012', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-012.txt.asc'}, {'name': '992', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/992'}]
CVE State: PUBLISHED
Explain CVE-2000-0158
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
Affected Products: n/a
References: [{'name': '20000215 Remote Vulnerability in the MMDF SMTP Daemon', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000001bf78af%246d0d47a0%244d2f45a1%40jmagdych.na.nai.com'}, {'name': '997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/997'}, {'name': '20000218 MMDF', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=200002181449.JAA03436%40dragonfly.corp.home.net'}, {'name': 'SB-00.06a', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-00.06a'}]
CVE State: PUBLISHED
Explain CVE-2000-0159
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX0002-111', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000217160216.13708.qmail%40underground.org'}]
CVE State: PUBLISHED
Explain CVE-2000-0160
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
Affected Products: n/a
References: [{'name': '20000221 Microsoft signed software can be install software without prompting users', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000221103938.T21312%40securityfocus.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0161
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
Affected Products: n/a
References: [{'name': 'MS00-010', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-010'}, {'name': '994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/994'}]
CVE State: PUBLISHED
Explain CVE-2000-0162
The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-011'}]
CVE State: PUBLISHED
Explain CVE-2000-0163
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-00:03', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://www.securityfocus.com/templates/advisory.html?id=2092'}, {'name': '996', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/996'}]
CVE State: PUBLISHED
Explain CVE-2000-0164
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
Affected Products: n/a
References: [{'name': '20000220 Sun Internet Mail Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.SOL.4.21.0002200031320.22675-100000%40klayman.hq.formus.pl'}, {'name': '1004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1004'}]
CVE State: PUBLISHED
Explain CVE-2000-0165
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
Affected Products: n/a
References: [{'name': 'delegate-proxy-bo(4105)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4195'}, {'name': 'FreeBSD-SA-00:04', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.BSF.4.21.0002192249290.10784-100000%40freefall.freebsd.org'}, {'name': 'K-023', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/k-023.shtml'}]
CVE State: PUBLISHED
Explain CVE-2000-0166
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
Affected Products: n/a
References: [{'name': '20000223 Pragma Systems response to USSRLabs report', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95142756403323&w=2'}, {'name': '995', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/995'}, {'name': '20000221 Local / Remote Exploiteable Buffer Overflow Vulnerability in InterAccess TelnetD Server 4.0 for Windows NT', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPGEJHCCAA.labs%40ussrback.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0167
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
Affected Products: n/a
References: [{'name': '20000215 Crashing Inetinfo.exe by using a longfilename in the \\mailroot\\pickup directory', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0002&L=ntbugtraq&F=&S=&P=8800'}]
CVE State: PUBLISHED
Explain CVE-2000-0168
Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-017', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'http://www.securityfocus.com/templates/advisory.html?id=2126'}, {'name': '1043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1043'}, {'name': '20000306 con\\con is a old thing (anyway is cool)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCENECCAA.labs%40ussrback.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0169
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Affected Products: n/a
References: [{'name': '1053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1053'}, {'name': '20000314 Oracle Web Listener 4.0.x', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0170
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
Affected Products: n/a
References: [{'name': '1011', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1011'}]
CVE State: PUBLISHED
Explain CVE-2000-0171
atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '1048', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1048'}, {'name': '20000311 TESO advisory -- atsadc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0102.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0172
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
Affected Products: n/a
References: [{'name': '1038', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1038'}]
CVE State: PUBLISHED
Explain CVE-2000-0173
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': 'SB-00.08a', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-00.08a'}]
CVE State: PUBLISHED
Explain CVE-2000-0174
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000308 [SAFER 000309.EXP.1.4] StarScheduler (StarOffice) vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html'}, {'name': '1040', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1040'}]
CVE State: PUBLISHED
Explain CVE-2000-0175
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
Affected Products: n/a
References: [{'name': '1039', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1039'}, {'name': '20000308 [SAFER 000309.EXP.1.4] StarScheduler (StarOffice) vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0176
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
Affected Products: n/a
References: [{'name': '20000228 Serv-U FTP-Server v2.4a showing real path', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0417.html'}, {'name': '1016', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1016'}]
CVE State: PUBLISHED
Explain CVE-2000-0177
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '1028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1028'}, {'name': '20000302 DNSTools v1.08 has no input validation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0000.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0178
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.foundrynet.com/bugTraq.html'}, {'name': '1017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1017'}]
CVE State: PUBLISHED
Explain CVE-2000-0179
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
Affected Products: n/a
References: [{'name': 'HPSBUX0006-115', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0006-115'}, {'name': '20000228 HP Omniback remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0387.html'}, {'name': '1015', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1015'}]
CVE State: PUBLISHED
Explain CVE-2000-0180
Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000313 SOJOURN Search engine exposes files', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0201.html'}, {'name': '1052', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1052'}, {'name': 'sojourn-file-read(4197)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4197'}]
CVE State: PUBLISHED
Explain CVE-2000-0181
Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
Affected Products: n/a
References: [{'name': '1054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1054'}, {'name': '20000311 Our old friend Firewall-1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0119.html'}, {'name': '1256', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1256'}]
CVE State: PUBLISHED
Explain CVE-2000-0182
iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0182'}]
CVE State: PUBLISHED
Explain CVE-2000-0183
Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
Affected Products: n/a
References: [{'name': 'RHSA-2000:008', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-008.html'}, {'name': '20000310 Fwd: ircii-4.4 buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0093.html'}, {'name': '1046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1046'}]
CVE State: PUBLISHED
Explain CVE-2000-0184
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
Affected Products: n/a
References: [{'name': '20000309', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0082.html'}, {'name': '1037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1037'}]
CVE State: PUBLISHED
Explain CVE-2000-0185
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
Affected Products: n/a
References: [{'name': '20000308 RealServer exposes internal IP addresses', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0069.html'}, {'name': '1049', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1049'}]
CVE State: PUBLISHED
Explain CVE-2000-0186
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
Affected Products: n/a
References: [{'name': '1020', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1020'}, {'name': 'RHSA-2000:100', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-100.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '1014', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1014'}, {'name': '20000227 EZ Shopper 3.0 shopping cart CGI remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0188
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '1014', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1014'}, {'name': '20000227 EZ Shopper 3.0 shopping cart CGI remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0189
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
Affected Products: n/a
References: [{'name': '1021', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1021'}]
CVE State: PUBLISHED
Explain CVE-2000-0190
AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
Affected Products: n/a
References: [{'name': '20000303 Aol Instant Messenger DoS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0016.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0191
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '19', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/19'}, {'name': '1025', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1025'}, {'name': '20000229 Infosec.20000229.axisstorpointcd.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=41256894.00492503.00%40mailgw.backupcentralen.se'}]
CVE State: PUBLISHED
Explain CVE-2000-0192
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.
Affected Products: n/a
References: [{'name': '1036', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1036'}, {'name': '20000304 OpenLinux 2.3: rpm_query', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0029.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0193
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
Affected Products: n/a
References: [{'name': '1030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1030'}, {'name': '20000302 Corel Linux 1.0 dosemu default configuration: Local root vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=200003020436.PAA20168%40jawa.chilli.net.au'}]
CVE State: PUBLISHED
Explain CVE-2000-0194
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
Affected Products: n/a
References: [{'name': '1007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1007'}, {'name': '20000224 Corel Linux 1.0 local root compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0195
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
Affected Products: n/a
References: [{'name': '1008', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1008'}, {'name': '20000224 Corel Linux 1.0 local root compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0196
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
Affected Products: n/a
References: [{'name': 'RHSA-2000:006', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-006.html'}, {'name': '1018', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1018'}]
CVE State: PUBLISHED
Explain CVE-2000-0197
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
Affected Products: n/a
References: [{'name': '20000313 AT Jobs - Denial of serice/Privilege Elevation', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/current/0202.html'}, {'name': '1050', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1050'}]
CVE State: PUBLISHED
Explain CVE-2000-0198
Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': '1051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1051'}, {'name': '20000314 Local / Remote Multiples Remote DoS Attacks in MERCUR v3.2* for Windows 98/NT Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/current/0137.html'}, {'name': '20000314 Local / Remote Multiples Remote DoS Attacks in MERCUR v3.2* for Windows 98/NT Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/current/0206.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0199
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
Affected Products: n/a
References: [{'name': '1055', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1055'}]
CVE State: PUBLISHED
Explain CVE-2000-0200
Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-015'}, {'name': '1034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1034'}]
CVE State: PUBLISHED
Explain CVE-2000-0201
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
Affected Products: n/a
References: [{'name': '1033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1033'}]
CVE State: PUBLISHED
Explain CVE-2000-0202
Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.
Affected Products: n/a
References: [{'name': '1041', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1041'}, {'name': 'MS00-014', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-014'}]
CVE State: PUBLISHED
Explain CVE-2000-0203
The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
Affected Products: n/a
References: [{'name': '20000315 Trend Micro release patch for "OfficeScan DoS & Message Replay" V ulnerabilies', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.antivirus.com/download/ofce_patch_35.htm'}, {'name': '20000228 Re: TrendMicro OfficeScan tmlisten.exe DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=412FC0AFD62ED31191B40008C7E9A11A0D481D%40srvnt04.previnet.it'}, {'name': '1013', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1013'}]
CVE State: PUBLISHED
Explain CVE-2000-0204
The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
Affected Products: n/a
References: [{'name': '20000226 DOS in Trendmicro OfficeScan', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-02/0340.html'}, {'name': '20000315 Trend Micro release patch for "OfficeScan DoS & Message Replay" V ulnerabilies', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.antivirus.com/download/ofce_patch_35.htm'}, {'name': '1013', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1013'}]
CVE State: PUBLISHED
Explain CVE-2000-0205
Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
Affected Products: n/a
References: [{'name': '20000303 TrendMicro OfficeScan, numerous security holes, remote files modification.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0015.html'}, {'name': '20000315 Trend Micro release patch for "OfficeScan DoS & Message Replay" V ulnerabilies', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.antivirus.com/download/ofce_patch_35.htm'}, {'name': '1013', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1013'}]
CVE State: PUBLISHED
Explain CVE-2000-0206
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '20000305 Oracle installer problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-03/0023.html'}, {'name': '1035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1035'}]
CVE State: PUBLISHED
Explain CVE-2000-0207
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '1031', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1031'}, {'name': '20000501-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20000501-01-P'}]
CVE State: PUBLISHED
Explain CVE-2000-0208
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
Affected Products: n/a
References: [{'name': '1026', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1026'}]
CVE State: PUBLISHED
Explain CVE-2000-0209
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
Affected Products: n/a
References: [{'name': '1012', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1012'}]
CVE State: PUBLISHED
Explain CVE-2000-0210
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
Affected Products: n/a
References: [{'name': '998', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/998'}]
CVE State: PUBLISHED
Explain CVE-2000-0211
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-013'}, {'name': '1000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1000'}]
CVE State: PUBLISHED
Explain CVE-2000-0212
InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
Affected Products: n/a
References: [{'name': 'interaccess-telnet-dos(4033)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4033'}, {'name': '1001', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1001'}]
CVE State: PUBLISHED
Explain CVE-2000-0213
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '1002', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1002'}, {'name': '20000223 Sambar Server alert!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=38B3E60A.6A84FEC3%40cybcom.net'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sambar.com/session/highlight?url=/syshelp/history.htm&words=security+&color=red'}]
CVE State: PUBLISHED
Explain CVE-2000-0214
FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
Affected Products: n/a
References: [{'name': '1003', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1003'}, {'name': "20000224 How the password could be recover using FTP Explorer's  registry!", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002242035500.30645-100000%40unreal.sekure.org'}]
CVE State: PUBLISHED
Explain CVE-2000-0215
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1019', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1019'}]
CVE State: PUBLISHED
Explain CVE-2000-0216
Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
Affected Products: n/a
References: [{'name': '20000229 mailbombing DoS easily exploitable against mail systems using MS mail clients.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0176.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0217
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
Affected Products: n/a
References: [{'name': '1006', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1006'}]
CVE State: PUBLISHED
Explain CVE-2000-0218
Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
Affected Products: n/a
References: [{'name': '6980', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6980'}, {'name': '7004', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7004'}, {'name': 'CSSA-2000-002.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-002.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0219
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
Affected Products: n/a
References: [{'name': '20000223 redhat 6.0: single user boot security hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=200002230248.NAA19185%40cairo.anu.edu.au'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10053'}, {'name': '1005', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1005'}]
CVE State: PUBLISHED
Explain CVE-2000-0220
ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0220'}]
CVE State: PUBLISHED
Explain CVE-2000-0221
The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
Affected Products: n/a
References: [{'name': '1009', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1009'}]
CVE State: PUBLISHED