DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-1001
add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: element_instantshop
References: http://marc.info/?l=bugtraq&m=97240616129614&w=2, http://www.osvdb.org/6487, https://exchange.xforce.ibmcloud.com/vulnerabilities/5402
CVE-2000-1127
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: hp-ux
References: http://www.securityfocus.com/archive/1/143845, http://www.securityfocus.com/bid/1919, http://www.securityfocus.com/archive/1/143845
CVE-2000-1171
Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cgiforum
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0263.html, http://www.securityfocus.com/bid/1963, https://exchange.xforce.ibmcloud.com/vulnerabilities/5553
CVE-2000-0730
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html, http://www.securityfocus.com/bid/1580, http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html
CVE-2000-0170
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: turbolinux, linux
References: http://www.securityfocus.com/bid/1011, http://www.securityfocus.com/bid/1011
CVE-2000-0533
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: workshop_debugger_and_performance_tools
References: ftp://sgigate.sgi.com/security/20000601-01-P, http://www.securityfocus.com/bid/1379, https://exchange.xforce.ibmcloud.com/vulnerabilities/4725
CVE-2000-0360
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: inn
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-038.0.txt, http://www.novell.com/linux/security/advisories/suse_security_announce_34.html, http://www.securityfocus.com/bid/1249
CVE-2000-0934
Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.redhat.com/support/errata/RHSA-2000-062.html, http://www.securityfocus.com/bid/1703, https://exchange.xforce.ibmcloud.com/vulnerabilities/5271
CVE-2000-1161
The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: adcycle
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0271.html, http://www.securityfocus.com/bid/1969, http://archives.neohapsis.com/archives/bugtraq/2000-11/0271.html
CVE-2000-0008
FTPPro allows local users to read sensitive information, which is stored in plain text.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ftppro
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0008, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0008
CVE-2000-0851
Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://www.atstake.com/research/advisories/2000/a090700-1.txt, http://www.securityfocus.com/bid/1651, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-065
CVE-2000-1071
The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iplanet_ical
References: http://www.atstake.com/research/advisories/2000/a100900-1.txt, http://www.osvdb.org/7213, http://www.securityfocus.com/bid/1767
CVE-2000-0968
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: half-life_dedicated_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html, http://www.securityfocus.com/archive/1/141060
CVE-2000-0103
The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smartcart
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0103, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0103
CVE-2000-0570
FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firstclass_intranet_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0295.html, http://www.osvdb.org/5718, http://www.securityfocus.com/bid/1421
CVE-2000-0633
Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mandrake_linux, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0251.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0117.html, http://www.redhat.com/support/errata/RHSA-2000-053.html
CVE-2000-0173
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-00.08a, ftp://ftp.sco.com/SSE/security_bulletins/SB-00.08a
CVE-2000-1082
The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570878710037&w=2, http://www.securityfocus.com/bid/2031, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-0345
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: router_7500, router_7200, router_2500, ios, router_3600
References: http://www.securityfocus.com/bid/1161, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502222246.28423.qmail%40securityfocus.com, http://www.securityfocus.com/bid/1161
CVE-2000-1180
Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i
References: http://marc.info/?l=bugtraq&m=97474521003453&w=2, http://www.securityfocus.com/bid/1968, https://exchange.xforce.ibmcloud.com/vulnerabilities/5551
CVE-2000-0148
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0053.html, http://www.securityfocus.com/bid/975, http://archives.neohapsis.com/archives/bugtraq/2000-02/0053.html
CVE-2000-0513
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux
References: ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch, http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html, http://www.securityfocus.com/bid/1373
CVE-2000-0277
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: excel
Related CWEs: CWE-254
References: http://www.osvdb.org/1272, http://www.securityfocus.com/bid/1087, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-022
CWE: CWE-254
CVE-2000-0181
Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0119.html, http://www.osvdb.org/1256, http://www.securityfocus.com/bid/1054
CVE-2000-0451
The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: express_8100
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0229.html, http://www.securityfocus.com/bid/1228, http://archives.neohapsis.com/archives/bugtraq/2000-05/0229.html
CVE-2000-0695
Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: raptor_gfx_pgx32
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html
CVE-2000-0962
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0299.html, http://www.osvdb.org/1574, http://www.securityfocus.com/bid/1723
CVE-2000-0475
Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1350, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-020, https://exchange.xforce.ibmcloud.com/vulnerabilities/4714
CVE-2000-0662
Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.securityfocus.com/bid/1474, http://www.securityfocus.com/templates/archive.pike?list=1&msg=396EF9D5.62EEC625%40nat.bg, https://exchange.xforce.ibmcloud.com/vulnerabilities/5107
CVE-2000-1069
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: poll_it_pro, poll_it
References: http://marc.info/?l=bugtraq&m=97236719315352&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/5419, http://marc.info/?l=bugtraq&m=97236719315352&w=2
CVE-2000-0075
Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: msgcore
References: http://www.securityfocus.com/bid/930, http://www.securityfocus.com/bid/930
CVE-2000-0471
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0114.html, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/210, http://www.kb.cert.org/vuls/id/36866
CVE-2000-0044
Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: warftpd
References: http://www.securityfocus.com/bid/919, http://www.securityfocus.com/bid/919
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: qnx
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0072.html, http://www.securityfocus.com/bid/1114, http://archives.neohapsis.com/archives/bugtraq/2000-04/0072.html
CVE-2000-0532
A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://archives.neohapsis.com/archives/freebsd/2000-06/0031.html, http://www.osvdb.org/1387, http://www.securityfocus.com/bid/1323
CVE-2000-0163
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://www.securityfocus.com/bid/996, http://www.securityfocus.com/templates/advisory.html?id=2092, http://www.securityfocus.com/bid/996
CVE-2000-0589
SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sawmill
Related CWEs: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html, http://www.securityfocus.com/bid/1403
CWE: CWE-310
CVE-2000-1225
Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xitami
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html, http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html
CVE-2000-1215
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lotus_domino
References: http://marc.info/?l=bugtraq&m=100094373621813&w=2, http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM, http://www.kb.cert.org/vuls/id/984555
CVE-2000-0561
Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: international_telecommunications_webbbs
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0175.html, http://www.osvdb.org/3544, http://www.securityfocus.com/bid/1365
CVE-2000-1059
The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux
References: http://www.linux-mandrake.com/en/security/MDKSA-2000-052.php3, http://www.securityfocus.com/archive/1/136495, http://www.securityfocus.com/bid/1735
CVE-2000-0142
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: timbuktu_pro
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0142, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0142
CVE-2000-0503
The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html, http://www.securityfocus.com/bid/1311, http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html
CVE-2000-1245
Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware_ftp_server, netware
Related CWEs: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1, http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CWE: CWE-264
CVE-2000-0411
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: formmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0125.html, http://www.perfectotech.com/blackwatchlabs/vul5_10.html, http://www.securityfocus.com/bid/1187
CVE-2000-0592
Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sapporoworks_winproxy
References: http://www.securityfocus.com/bid/1400, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp, http://www.securityfocus.com/bid/1400
CVE-2000-0226
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://www.securityfocus.com/bid/1066, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-018, http://www.securityfocus.com/bid/1066
CVE-2000-0922
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_shopper
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0120.html, http://www.securityfocus.com/bid/1776, https://exchange.xforce.ibmcloud.com/vulnerabilities/5351
CVE-2000-0445
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pgp
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0273.html, http://www.cert.org/advisories/CA-2000-09.html, http://www.osvdb.org/1355
CVE-2000-0122
Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: frontpage
References: http://www.securityfocus.com/archive/1/470458/100/0/threaded, http://www.securityfocus.com/bid/964, https://exchange.xforce.ibmcloud.com/vulnerabilities/34719
CVE-2000-0306
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.02a, http://www.securityfocus.com/templates/archive.pike?list=1&date=1998-12-29&msg=AAh6GYsGU1%40leshka.chuvashia.su, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.02a
CVE-2000-0516
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: shiva_access_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0008.html, http://www.securityfocus.com/bid/1329, https://exchange.xforce.ibmcloud.com/vulnerabilities/4612
CVE-2000-0895
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: soho_firewall
References: http://www.osvdb.org/4403, http://www.securityfocus.com/bid/2114, http://xforce.iss.net/alerts/advise70.php
CVE-2000-1018
shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shred
References: http://marc.info/?l=bugtraq&m=97119799515246&w=2, http://marc.info/?l=bugtraq&m=97131166004145&w=2, http://www.securityfocus.com/bid/1788
CVE-2000-0436
MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: offline_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0254.html, http://www.metaproducts.com/mpOE-HY.html, http://www.securityfocus.com/bid/1231
CVE-2000-1210
Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tomcat
References: http://marc.info/?l=bugtraq&m=95371672300045&w=2, http://www.iss.net/security_center/static/4205.php, http://marc.info/?l=bugtraq&m=95371672300045&w=2
CVE-2000-0638
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: big_brother
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0146.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0147.html, http://bb4.com/README.CHANGES
CVE-2000-0618
Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xconq
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html
CVE-2000-0147
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openserver
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-00.04a, http://archives.neohapsis.com/archives/bugtraq/2000-02/0045.html, http://www.securityfocus.com/bid/973
CVE-2000-0877
mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailform
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0092.html, http://www.securityfocus.com/bid/1670, https://exchange.xforce.ibmcloud.com/vulnerabilities/5224
CVE-2000-0460
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0353.html, http://www.securityfocus.com/bid/1274, http://archives.neohapsis.com/archives/bugtraq/2000-05/0353.html
CVE-2000-0113
The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sygate
References: http://marc.info/?l=bugtraq&m=94934808714972&w=2, http://marc.info/?l=bugtraq&m=94952641025328&w=2, http://marc.info/?l=bugtraq&m=94973281714994&w=2
CVE-2000-0232
Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt, terminal_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0306.html, http://www.securityfocus.com/bid/1082, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-021
CVE-2000-0425
Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: listserv
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0048.html, http://www.lsoft.com/news/default.asp?item=Advisory0, http://www.securityfocus.com/bid/1167
CVE-2000-0758
The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form field.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: list_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0149.html, http://www.lyris.com/lm/lm_updates.html, http://www.securityfocus.com/bid/1584
CVE-2000-0492
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: passwd
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.html, http://www.securityfocus.com/bid/1300, http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.html
CVE-2000-0058
Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: visor_network_hotsync
References: http://www.security-express.com/archives/bugtraq/2000-01/0085.html, http://www.securityfocus.com/bid/920, http://www.security-express.com/archives/bugtraq/2000-01/0085.html
CVE-2000-0753
The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (RTF) files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: outlook
References: http://www.securityfocus.com/archive/1/201422, http://www.securityfocus.com/archive/1/78240, http://www.securityfocus.com/bid/1631
CVE-2000-0139
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_anywhere_mail_server
References: http://marc.info/?l=bugtraq&m=95021326417936&w=2, http://www.securityfocus.com/bid/982, http://marc.info/?l=bugtraq&m=95021326417936&w=2
CVE-2000-0752
Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://archives.neohapsis.com/archives/freebsd/2000-08/0339.html, http://www.securityfocus.com/bid/1629, http://archives.neohapsis.com/archives/freebsd/2000-08/0339.html
CVE-2000-0045
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mysql
References: http://www.securityfocus.com/bid/926, http://www.securityfocus.com/bid/926
CVE-2000-0294
Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: healthd
References: http://www.osvdb.org/606, http://www.securityfocus.com/bid/1107, http://www.securityfocus.com/templates/advisory.html?id=2162
CVE-2000-0174
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: staroffice
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html, http://www.securityfocus.com/bid/1040, http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html
CVE-2000-0843
Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pam_smb, pam_ntdom
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0073.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0114.html, http://www.debian.org/security/2000/20000911
CVE-2000-0049
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winamp
References: http://www.osvdb.org/12022, http://www.securityfocus.com/bid/925, http://www.osvdb.org/12022
CVE-2000-0790
The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file that is listed in the folder.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_98se, windows_98
References: http://www.securityfocus.com/bid/1571, http://www.securityfocus.com/templates/archive.pike?list=1&msg=3998370D.732A03F1%40nat.bg, https://exchange.xforce.ibmcloud.com/vulnerabilities/5097
CVE-2000-0248
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://xforce.iss.net/alerts/advise46.php3, http://xforce.iss.net/alerts/advise46.php3
CVE-2000-0483
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zope, linux_powertools
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A38.zope.asc, http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html
CVE-2000-0268
Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3660_router, system_controller_3640, accesspath, as5200, voice_gateway_as5800
References: http://www.cisco.com/warp/public/707/iostelnetopt-pub.shtml, http://www.osvdb.org/1289, http://www.securityfocus.com/bid/1123
CVE-2000-1229
Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings administrative function, which causes the file to be displayed in admin.php3.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phorum
References: http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html, http://hispahack.ccc.de/mi020.html, http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
CVE-2000-0715
DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux, diskcheck
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://seclists.org/bugtraq/2000/Aug/0082.html, http://seclists.org/bugtraq/2000/Aug/0096.html, http://seclists.org/bugtraq/2000/Jun/0298.html
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2000-0388
Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A17.libmytinfo.asc, http://www.securityfocus.com/bid/1185, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A17.libmytinfo.asc
CVE-2000-0241
vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vqserver
References: http://www.securityfocus.com/bid/1068, http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.20000321084646.0095c7f0%40olga.swip.net, http://www.securityfocus.com/bid/1068
CVE-2000-0450
Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: big_brother
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0216.html, http://www.securityfocus.com/bid/1257, http://archives.neohapsis.com/archives/bugtraq/2000-05/0216.html
CVE-2000-0155
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt, windows_95, windows_98
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://www.securityfocus.com/bid/993, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org, http://www.securityfocus.com/bid/993
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2000-0536
xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xinetd
References: http://www.debian.org/security/2000/20000619, http://www.securityfocus.com/bid/1381, http://www.synack.net/xinetd/
CVE-2000-0094
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-001.txt.asc, http://www.osvdb.org/20760, http://www.securityfocus.com/bid/940
CVE-2000-0576
Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: web_listener
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0027.html, http://www.securityfocus.com/bid/1427, http://archives.neohapsis.com/archives/bugtraq/2000-07/0027.html
CVE-2000-0964
Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hinet_lp
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0336.html, http://www.securityfocus.com/bid/1727, https://exchange.xforce.ibmcloud.com/vulnerabilities/5298
CVE-2000-0093
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0093, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0093
CVE-2000-1195
telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openlinux_eserver, openlinux_edesktop
References: http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/4225, http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txt
CVE-2000-0011
Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: simpleserver_www
References: http://www.analogx.com/contents/download/network/sswww.htm, http://www.osvdb.org/1184, http://www.securityfocus.com/bid/906
CVE-2000-0901
Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weigert_screen
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:46.screen.asc, http://archives.neohapsis.com/archives/bugtraq/2000-08/0530.html, http://www.linux-mandrake.com/en/updates/MDKSA-2000-044.php3
CVE-2000-1139
The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exchange_server
Related CWEs: CWE-798
Related CAPECs: CAPEC-191, CAPEC-70
MITRE ATT&CK Techniques: T1078.001, T1552.001
MITRE ATT&CK Tactics: T1078, T1552
References: http://www.securityfocus.com/bid/1958, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-088, https://exchange.xforce.ibmcloud.com/vulnerabilities/5537
CWE: CWE-798
MITRE ATT&CK techniques: T1078.001, T1552.001
MITRE ATT&CK tactics: T1078, T1552
CVE-2000-0619
Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: appswitch
References: http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0680.html, http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0921.html, http://www.securityfocus.com/bid/1258
CVE-2000-0944
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: script_center_news_update
Related CWEs: CWE-522
Related CAPECs: CAPEC-560, CAPEC-644, CAPEC-653
MITRE ATT&CK Techniques: T1550.003, T1021.002, T1133
MITRE ATT&CK Tactics: T1110, T1114, T1558
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html, http://www.securityfocus.com/bid/1881, https://exchange.xforce.ibmcloud.com/vulnerabilities/5433
CWE: CWE-522
MITRE ATT&CK techniques: T1550.003, T1021.002, T1133, T1114.002, T1110.004, T1543, T1552.004, T1558.003, T1558, T1021, T1550.002, T1078
MITRE ATT&CK tactics: T1110, T1114, T1558, T1550, T1552, T1021
CVE-2000-0484
Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: small_http_server
References: http://marc.info/?l=bugtraq&m=96113651713414&w=2, http://marc.info/?l=ntbugtraq&m=96151775004229&w=2, http://www.securityfocus.com/bid/1355
CVE-2000-1144
Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantrap
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html, http://marc.info/?l=bugtraq&m=97349791405580&w=2
CVE-2000-0266
Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.securityfocus.com/bid/1121, http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FC6130.D6D178FD%40nat.bg, http://www.securityfocus.com/bid/1121
CVE-2000-0650
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: netshield, virusscan
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753, http://www.osvdb.org/1458, http://www.osvdb.org/4200
CVE-2000-0136
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cart32
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0136, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0136
CVE-2000-0061
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer
References: http://www.securityfocus.com/bid/923, http://www.securityfocus.com/bid/923
CVE-2000-0886
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.securityfocus.com/bid/1912, http://www.securityfocus.com/templates/archive.pike?mid=143604&list=1&fromthread=0&end=2000-11-11&threads=0&start=2000-11-05&, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-086