Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-0521
Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.
Affected Products: n/a
References: [{'name': 'savant-source-read(4616)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4616'}, {'name': '20000605 MDMA Advisory #5: Reading of CGI Scripts under Savant Webserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0469.html'}, {'name': '1313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1313'}]
CVE State: PUBLISHED
Explain CVE-2000-0522
RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash.
Affected Products: n/a
References: [{'name': "20000608 Potential DoS Attack on RSA's ACE/Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=011a01bfd14c%243c206960%24050010ac%40xtranet.co.uk'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.securid.com/support/outgoing/dos/readme.txt'}, {'name': '1332', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1332'}, {'name': '20000714 Re: RSA Aceserver UDP Flood Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0197.html'}, {'name': 'aceserver-udp-packet-dos(5053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5053'}]
CVE State: PUBLISHED
Explain CVE-2000-0523
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command.
Affected Products: n/a
References: [{'name': 'eserv-logging-overflow(4614)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4614'}, {'name': '20000606 MDMA Advisory #6: EServ Logging Heap Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0009.html'}, {'name': '1315', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1315'}]
CVE State: PUBLISHED
Explain CVE-2000-0524
Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.
Affected Products: n/a
References: [{'name': '20000604 Microsoft Outlook (Express) bug..', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0045.html'}, {'name': '1333', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1333'}]
CVE State: PUBLISHED
Explain CVE-2000-0525
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
Affected Products: n/a
References: [{'name': 'openssh-uselogin-remote-exec(4646)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4646'}, {'name': '20000606 The non-default UseLogin feature in /etc/sshd_config is broken and should not be used.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#uselogin'}, {'name': '341', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/341'}, {'name': "20000609 OpenSSH's UseLogin option allows remote access with root privilege.", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0065.html'}, {'name': '1334', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1334'}]
CVE State: PUBLISHED
Explain CVE-2000-0526
mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000609 Mailstudio2000 CGI Vulnerabilities [S0ftPj.4]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html'}, {'name': '1335', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1335'}]
CVE State: PUBLISHED
Explain CVE-2000-0527
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '20000609 Mailstudio2000 CGI Vulnerabilities [S0ftPj.4]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html'}, {'name': '1335', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1335'}]
CVE State: PUBLISHED
Explain CVE-2000-0528
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files.
Affected Products: n/a
References: [{'name': '1364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1364'}, {'name': '20000619 Net Tools PKI server exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html'}, {'name': '4353', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4353'}, {'name': 'nettools-pki-unauthenticated-access(4743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4743'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0529
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
Affected Products: n/a
References: [{'name': '20000619 Net Tools PKI server exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html'}, {'name': '4352', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4352'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt'}, {'name': 'nettools-pki-http-bo(4744)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4744'}, {'name': '1363', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1363'}]
CVE State: PUBLISHED
Explain CVE-2000-0530
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': '20000531 KDE::KApplication feature?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0387.html'}, {'name': 'kde-configuration-file-creation(4583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4583'}, {'name': 'CSSA-2000-015.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-015.0.txt'}, {'name': '1291', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1291'}, {'name': 'RHSA-2000:032', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-032.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0531
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
Affected Products: n/a
References: [{'name': '20000620 Bug in gpm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006201453090.1812-200000%40apollo.aci.com.pl'}, {'name': '1377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1377'}, {'name': 'RHSA-2000:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-045.html'}, {'name': 'linux-gpm-gpmctl-dos(5010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5010'}, {'name': '20000728 MDKSA:2000-025 gpm update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0409.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0532
A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered.
Affected Products: n/a
References: [{'name': 'freebsd-ssh-ports(4638)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4638'}, {'name': '1387', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1387'}, {'name': 'FreeBSD-SA-00:21', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2000-06/0031.html'}, {'name': '1323', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1323'}]
CVE State: PUBLISHED
Explain CVE-2000-0533
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': '20000601-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://sgigate.sgi.com/security/20000601-01-P'}, {'name': 'irix-workshop-cvconnect-overwrite(4725)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4725'}, {'name': '1379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1379'}]
CVE State: PUBLISHED
Explain CVE-2000-0534
The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user.
Affected Products: n/a
References: [{'name': 'apsfilter-elevate-privileges(4617)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4617'}, {'name': '1325', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1325'}, {'name': '1389', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1389'}]
CVE State: PUBLISHED
Explain CVE-2000-0535
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.
Affected Products: n/a
References: [{'name': '1340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1340'}, {'name': 'FreeBSD-SA-00:25', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0536
xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.synack.net/xinetd/'}, {'name': 'xinetd-improper-restrictions(4986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4986'}, {'name': '1381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1381'}, {'name': '20000619 xinetd: bug in access control mechanism', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20000619'}]
CVE State: PUBLISHED
Explain CVE-2000-0537
BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable.
Affected Products: n/a
References: [{'name': 'bru-execlog-env-variable(4644)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4644'}, {'name': '1321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1321'}, {'name': 'CSSA-2000-018.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2000-018.0.txt'}, {'name': '20000606 BRU Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0013.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0538
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.
Affected Products: n/a
References: [{'name': '20000607 New Allaire ColdFusion DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96045469627806&w=2'}, {'name': 'coldfusion-parse-dos(4611)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4611'}, {'name': '3399', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3399'}, {'name': 'ASB00-14', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full'}, {'name': '1314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1314'}]
CVE State: PUBLISHED
Explain CVE-2000-0539
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
Affected Products: n/a
References: [{'name': 'jrun-read-sample-files(4774)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4774'}, {'name': 'ASB00-015', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full'}, {'name': '818', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/818'}, {'name': '1386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1386'}]
CVE State: PUBLISHED
Explain CVE-2000-0540
JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information.
Affected Products: n/a
References: [{'name': '2713', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2713'}, {'name': 'jrun-read-sample-files(4774)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4774'}, {'name': 'ASB00-015', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full'}, {'name': '1386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1386'}]
CVE State: PUBLISHED
Explain CVE-2000-0541
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.
Affected Products: n/a
References: [{'name': 'panda-antivirus-remote-admin(4707)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4707'}, {'name': '20000617 Infosec.20000617.panda.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0164.html'}, {'name': '1359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1359'}]
CVE State: PUBLISHED
Explain CVE-2000-0542
Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds.
Affected Products: n/a
References: [{'name': '20000612 ACC/Ericsson Tigris Accounting Failure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0104.html'}, {'name': '1345', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1345'}, {'name': 'tigris-radius-login-failure(4705)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4705'}]
CVE State: PUBLISHED
Explain CVE-2000-0543
The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000.
Affected Products: n/a
References: [{'name': '1343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1343'}, {'name': '20000614 Remote DoS attack in Networks Associates PGP Certificate Server Version 2.5 Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0107.html'}, {'name': 'pgp-cert-server-dos(4695)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4695'}]
CVE State: PUBLISHED
Explain CVE-2000-0544
Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length.
Affected Products: n/a
References: [{'name': '1304', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1304'}, {'name': '20000604 anonymous SMBwriteX DoS', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0231.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0545
Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter.
Affected Products: n/a
References: [{'name': '1305', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1305'}, {'name': '20000602 /usr/bin/Mail exploit for Slackware 7.0 (mail-slack.c)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0435.html'}, {'name': '20000605 mailx: mail group exploit in mailx', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2000/20000605'}]
CVE State: PUBLISHED
Explain CVE-2000-0546
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.
Affected Products: n/a
References: [{'name': 'CA-2000-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-11.html'}, {'name': 'K-051', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/k-051.shtml'}, {'name': '1338', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1338'}, {'name': '20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0547
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function.
Affected Products: n/a
References: [{'name': 'CA-2000-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-11.html'}, {'name': 'K-051', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/k-051.shtml'}, {'name': '1338', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1338'}, {'name': '20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0548
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function.
Affected Products: n/a
References: [{'name': 'CA-2000-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-11.html'}, {'name': 'K-051', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/k-051.shtml'}, {'name': '20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt'}, {'name': 'RHSA-2000:031', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-031.html'}, {'name': '4875', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4875'}]
CVE State: PUBLISHED
Explain CVE-2000-0549
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
Affected Products: n/a
References: [{'name': 'CA-2000-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-11.html'}, {'name': 'K-051', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/k-051.shtml'}, {'name': '20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt'}, {'name': 'RHSA-2000:031', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-031.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0550
Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': 'CA-2000-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-11.html'}, {'name': 'K-051', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/k-051.shtml'}, {'name': '20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt'}, {'name': 'RHSA-2000:031', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-031.html'}, {'name': '1465', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1465'}]
CVE State: PUBLISHED
Explain CVE-2000-0551
The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files.
Affected Products: n/a
References: [{'name': '1263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1263'}, {'name': '20000523 I think', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0339.html'}, {'name': 'danware-netop-bypass-security(4569)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4569'}]
CVE State: PUBLISHED
Explain CVE-2000-0552
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.
Affected Products: n/a
References: [{'name': '1307', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1307'}, {'name': '20000606 ICQ2000A ICQmail temparary internet link vulnearbility', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html'}, {'name': 'icq-temp-link(4607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4607'}]
CVE State: PUBLISHED
Explain CVE-2000-0553
Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions.
Affected Products: n/a
References: [{'name': 'ipfilter-firewall-race-condition(4994)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4994'}, {'name': '1308', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1308'}, {'name': '20000525 Security Vulnerability in IPFilter 3.3.15 and 3.4.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.html'}, {'name': '1377', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1377'}]
CVE State: PUBLISHED
Explain CVE-2000-0554
Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field.
Affected Products: n/a
References: [{'name': '20000608 DST2K0010: DoS & Path Revealing Vulnerability in Ceilidh v2.60a', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html'}, {'name': '1320', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1320'}]
CVE State: PUBLISHED
Explain CVE-2000-0555
Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.
Affected Products: n/a
References: [{'name': '20000608 DST2K0010: DoS & Path Revealing Vulnerability in Ceilidh v2.60a', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html'}, {'name': '1320', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1320'}, {'name': 'ceilidh-post-dos(4622)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4622'}]
CVE State: PUBLISHED
Explain CVE-2000-0556
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to the user dialog running on port 8002.
Affected Products: n/a
References: [{'name': '20000608 DST2K0011: DoS & BufferOverrun in CMail v2.4.7 WebMail', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.computalynx.net/news/Jun2000/news0806200001.html'}, {'name': '1319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1319'}, {'name': 'cmail-long-username-dos(4625)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4625'}]
CVE State: PUBLISHED
Explain CVE-2000-0557
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request.
Affected Products: n/a
References: [{'name': '20000608 DST2K0011: DoS & BufferOverrun in CMail v2.4.7 WebMail', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html'}, {'name': '1318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1318'}, {'name': 'cmail-get-overflow-execute(4626)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4626'}]
CVE State: PUBLISHED
Explain CVE-2000-0558
Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345.
Affected Products: n/a
References: [{'name': '1317', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1317'}, {'name': '20000608 DST2K0012: BufferOverrun in HP Openview Network Node Manager v6.1', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0249.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0559
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.
Affected Products: n/a
References: [{'name': '20000607 SessionWall-3 Paper + (links to) code', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net'}, {'name': '1341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1341'}]
CVE State: PUBLISHED
Explain CVE-2000-0561
Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '20000620 DST2K0018: Multiple BufferOverruns in WebBBS HTTP Server v1.15', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0175.html'}, {'name': '1365', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1365'}, {'name': 'webbbs-get-request-overflow(4742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4742'}, {'name': '3544', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3544'}]
CVE State: PUBLISHED
Explain CVE-2000-0562
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower.
Affected Products: n/a
References: [{'name': '20000620 BlackICE by Network ICE Corp vulnerability against Back Orifice 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0190.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0563
The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
Affected Products: n/a
References: [{'name': '20000609 Security Holes Found in URLConnection of MRJ and IE of Mac OS (was Re: Reappearance of an old IE security bug)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0056.html'}, {'name': '1336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1336'}, {'name': '20000513 Re: Reappearance of an old IE security bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-05-8&msg=391C95DE2DA.5E3BTAKAGI%40java-house.etl.go.jp'}]
CVE State: PUBLISHED
Explain CVE-2000-0564
The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter.
Affected Products: n/a
References: [{'name': '20000529 ICQ Web Front Remote DoS Attack Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0218.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0565
SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '1344', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1344'}, {'name': 'smartftp-directory-traversal(4706)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4706'}, {'name': '1394', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1394'}, {'name': '20000613 SmartFTP Daemon v0.2 Beta Build 9 - Remote Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0100.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0566
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
Affected Products: n/a
References: [{'name': 'CSSA-2000-021.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-021.0.txt'}, {'name': 'MDKSA-2000:015', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:015'}, {'name': 'RHSA-2000:041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-041.html'}, {'name': 'linux-man-makewhatis-tmp(4900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4900'}, {'name': '20000727 CONECTIVA LINUX SECURITY ANNOUNCEMENT - MAN', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0390.html'}, {'name': '1434', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1434'}]
CVE State: PUBLISHED
Explain CVE-2000-0567
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability.
Affected Products: n/a
References: [{'name': 'outlook-date-overflow(4953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4953'}, {'name': 'MS00-043', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-043'}, {'name': '1481', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1481'}]
CVE State: PUBLISHED
Explain CVE-2000-0568
Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes.
Affected Products: n/a
References: [{'name': '1417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1417'}, {'name': '20000630 Multiple vulnerabilities in Sybergen Secure Desktop', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=4125690E.00524395.00%40guardianit.se'}]
CVE State: PUBLISHED
Explain CVE-2000-0569
Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface.
Affected Products: n/a
References: [{'name': 'sygate-udp-packet-dos(5049)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5049'}, {'name': '1420', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1420'}, {'name': '20000630 Any LAN user can crash Sygate', 'tags': ['mailing-list', 'x_refsource_WIN2KSEC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0189.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0570
FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header.
Affected Products: n/a
References: [{'name': 'firstclass-large-bcc-dos(4843)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4843'}, {'name': '1421', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1421'}, {'name': '5718', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5718'}, {'name': '20000627 DoS in FirstClass Internet Services 5.770', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0295.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0571
LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.
Affected Products: n/a
References: [{'name': 'localweb-get-bo(4896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4896'}, {'name': '1423', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1423'}, {'name': '20000703 Remote DoS Attack in LocalWEB HTTP Server 1.2.0 Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=NCBBKFKDOLAGKIAPMILPCEIHCFAA.labs%40ussrback.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0572
The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1424', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1424'}, {'name': "20000704 Recovering Passwords in Visible Systems' Razor", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=613309F30B6DD2118C020000F809376C05CABD49%40emss03m09.orl.lmco.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0573
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
Affected Products: n/a
References: [{'name': 'CA-2000-13', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-13.html'}, {'name': '20000707 New Released Version of the WuFTPD Sploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96299933720862&w=2'}, {'name': 'RHSA-2000:039', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-039.html'}, {'name': 'CSSA-2000-020.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt'}, {'name': '20000622 WuFTPD: Providing *remote* root since at least1994', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96171893218000&w=2'}, {'name': '20000702 [Security Announce] wu-ftpd update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html'}, {'name': '20000723 CONECTIVA LINUX SECURITY ANNOUNCEMENT - WU-FTPD (re-release)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html'}, {'name': '1387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1387'}, {'name': 'FreeBSD-SA-00:29', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1'}, {'name': 'AA-2000.02', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02'}, {'name': '20000623 WUFTPD 2.6.0 remote root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96179429114160&w=2'}, {'name': 'NetBSD-SA2000-009', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc'}, {'name': '20000623 ftpd: the advisory version', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com'}, {'name': 'wuftp-format-string-stack-overwrite(4773)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4773'}]
CVE State: PUBLISHED
Explain CVE-2000-0574
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
Affected Products: n/a
References: [{'name': '1425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1425'}, {'name': '20000710 opieftpd setproctitle() patches', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html'}, {'name': '1438', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1438'}, {'name': '20000706 ftpd and setproctitle()', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html'}, {'name': 'NetBSD-SA2000-009', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc'}, {'name': '20000705 proftp advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html'}, {'name': 'CA-2000-13', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-13.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0575
SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.
Affected Products: n/a
References: [{'name': '1426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1426'}, {'name': 'ssh-kerberos-tickets-disclosure(4903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4903'}, {'name': '20000630 Kerberos security vulnerability in SSH-1.2.27', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96256265914116&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0576
Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.
Affected Products: n/a
References: [{'name': '20000704 Oracle Web Listener for AIX DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0027.html'}, {'name': '1427', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1427'}]
CVE State: PUBLISHED
Explain CVE-2000-0577
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000629 (forw) Re: Netscape ftp Server (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0345.html'}, {'name': '20000621 Netscape FTP Server - "Professional" as hell :>', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211351280.23780-100000%40nimue.tpi.pl'}, {'name': '1411', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1411'}]
CVE State: PUBLISHED
Explain CVE-2000-0578
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user.
Affected Products: n/a
References: [{'name': '1412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1412'}, {'name': '20000621 Predictability Problems in IRIX Cron and Compilers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0579
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.
Affected Products: n/a
References: [{'name': '20000621 Predictability Problems in IRIX Cron and Compilers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html'}, {'name': '1413', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1413'}]
CVE State: PUBLISHED
Explain CVE-2000-0580
Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization.
Affected Products: n/a
References: [{'name': '20000630 SecureXpert Advisory [SX-20000620-2]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161935.4619B-100000%40fjord.fscinternet.com'}, {'name': '1415', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1415'}]
CVE State: PUBLISHED
Explain CVE-2000-0581
Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash.
Affected Products: n/a
References: [{'name': '20000630 SecureXpert Advisory [SX-20000620-1]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161841.4619A-100000%40fjord.fscinternet.com'}, {'name': '1414', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1414'}]
CVE State: PUBLISHED
Explain CVE-2000-0582
Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.checkpoint.com/techsupport/alerts/list_vun.html#SMTP_Security'}, {'name': '1438', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1438'}, {'name': '1416', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1416'}, {'name': '20000630 SecureXpert Advisory [SX-20000620-3]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630162106.4619C-100000%40fjord.fscinternet.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0583
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vpopmail.cx/vpopmail-ChangeLog'}, {'name': '1418', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1418'}, {'name': '20000626 vpopmail-3.4.11 problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7%40secureaustin.com'}]
CVE State: PUBLISHED
Explain CVE-2000-0584
Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.
Affected Products: n/a
References: [{'name': '1445', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1445'}, {'name': 'canna-bin-execute-bo(4912)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4912'}, {'name': 'FreeBSD-SA-00:31', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:31.canna.asc.v1.1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://shadowpenguin.backsection.net/advisories/advisory038.html'}]
CVE State: PUBLISHED