DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-0546
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerbnet, kerberos_5, cygnus_network_security, kerberos
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html, http://ciac.llnl.gov/ciac/bulletins/k-051.shtml, http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt
CWE: CWE-120
CVE-2000-1121
Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=97569466809056&w=2, http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=only
CVE-2000-0251
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: vvos, hp-ux
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0021.html, http://www.securityfocus.com/bid/1090, http://archives.neohapsis.com/archives/bugtraq/2000-04/0021.html
CVE-2000-0386
FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: filemaker
References: http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html, http://www.filemaker.com/support/webcompanion.html, http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html
CVE-2000-0733
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://sgigate.sgi.com/security/20000801-02-P, http://archives.neohapsis.com/archives/bugtraq/2000-08/0154.html, http://www.securityfocus.com/bid/1572
CVE-2000-0884
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.osvdb.org/436, http://www.securityfocus.com/bid/1806, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078
CVE-2000-1162
ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ghostscript
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343, http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt, http://www.debian.org/security/2000/20001123
CVE-2000-0415
Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook, outlook_express
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0140.html, http://www.securityfocus.com/bid/1195, http://archives.neohapsis.com/archives/bugtraq/2000-05/0140.html
CVE-2000-0649
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, internet_information_services
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html, http://www.securityfocus.com/bid/1499, http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2000-0616
Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mpe_ix
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0294.html, http://www.securityfocus.com/bid/1405, http://archives.neohapsis.com/archives/bugtraq/2000-06/0294.html
CVE-2000-1088
The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570884410184&w=2, http://www.securityfocus.com/bid/2043, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-0160
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: outlook, ie, internet_explorer
References: http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000221103938.T21312%40securityfocus.com, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000221103938.T21312%40securityfocus.com
CVE-2000-0316
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0191.html, http://www.securityfocus.com/bid/1143, http://archives.neohapsis.com/archives/bugtraq/2000-04/0191.html
CVE-2000-0998
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc, ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch, http://www.securityfocus.com/bid/1895
CVE-2000-0281
Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: napster_client
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0277.html, http://archives.neohapsis.com/archives/bugtraq/2000-03/0299.html, http://archives.neohapsis.com/archives/bugtraq/2000-03/0277.html
CVE-2000-0412
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: knapster
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:18-gnapster.adv, http://archives.neohapsis.com/archives/bugtraq/2000-05/0124.html, http://archives.neohapsis.com/archives/bugtraq/2000-05/0127.html
CVE-2000-0726
CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: mailers
References: http://www.securityfocus.com/bid/1623, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000829194618.H7744%40thathost.com, https://exchange.xforce.ibmcloud.com/vulnerabilities/5165
CVE-2000-1032
The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: firewall-1
References: http://www.osvdb.org/1632, http://www.securityfocus.com/archive/1/142808, http://www.securityfocus.com/bid/1890
CVE-2000-0587
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: glftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html, http://www.securityfocus.com/bid/1401, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl
CVE-2000-0942
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: indexing_service
References: http://www.securityfocus.com/archive/1/141903, http://www.securityfocus.com/bid/1861, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084
CVE-2000-1189
Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000358, http://www.linux-mandrake.com/en/security/MDKSA-2000-082.php3, http://www.redhat.com/support/errata/RHSA-2000-120.html
CVE-2000-1141
Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantrap
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html, http://marc.info/?l=bugtraq&m=97349791405580&w=2
CVE-2000-0996
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch, http://www.osvdb.org/6124, https://exchange.xforce.ibmcloud.com/vulnerabilities/5636
CVE-2000-0834
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://www.atstake.com/research/advisories/2000/a091400-1.txt, http://www.securityfocus.com/bid/1683, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-067
CVE-2000-0353
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pine
References: http://www.novell.com/linux/security/advisories/pine_update_announcement.html, http://www.novell.com/linux/security/advisories/suse_security_announce_6.html, http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html
CVE-2000-0995
Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch, http://www.osvdb.org/6125, https://exchange.xforce.ibmcloud.com/vulnerabilities/5635
CVE-2000-1087
The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570884410184&w=2, http://www.securityfocus.com/bid/2042, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-0194
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html, http://www.securityfocus.com/bid/1007, http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html
CVE-2000-1221
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, irix, linux
References: ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P, http://rhn.redhat.com/errata/RHSA-2000-002.html, http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
CVE-2000-0904
Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: voyager
References: http://www.securityfocus.com/archive/1/79956, http://www.securityfocus.com/bid/1648, http://www.securityfocus.com/archive/1/79956
CVE-2000-0941
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kootenay_web_inc_whois
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0419.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0420.html, http://www.kootenayweb.bc.ca/scripts/whois.txt
CVE-2000-1122
Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=97569466809056&w=2, http://www-1.ibm.com/support/search.wss?rs=0&q=IY07790&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY07831&apar=only
CVE-2000-0466
AIX cdmount allows local users to gain root privileges via shell metacharacters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.securityfocus.com/bid/1384, http://xforce.iss.net/alerts/advise55.php, http://www.securityfocus.com/bid/1384
CVE-2000-0444
HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jetadmin
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0277.html, http://www.securityfocus.com/bid/1246, http://archives.neohapsis.com/archives/bugtraq/2000-05/0277.html
CVE-2000-0435
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: allmanage
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html, http://www.osvdb.org/1337, http://www.securityfocus.com/bid/1217
CVE-2000-0133
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tiny_ftpdaemon
References: http://www.securityfocus.com/bid/961, http://www.securityfocus.com/bid/961
CVE-2000-0046
Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icq
References: http://www.securityfocus.com/bid/929, http://www.securityfocus.com/bid/929
CVE-2000-1132
DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: dcforum
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html, http://www.dcscripts.com/dcforum/dcfNews/124.html#1, http://www.osvdb.org/1646
CVE-2000-0891
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_notes
References: http://www.kb.cert.org/vuls/id/5962, http://www.notes.net/R5FixList.nsf/Search%21SearchView&Query=CBAT45TU9S, https://exchange.xforce.ibmcloud.com/vulnerabilities/5045
CVE-2000-1146
Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mantrap
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html, http://marc.info/?l=bugtraq&m=97349791405580&w=2
CVE-2000-0724
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: go-gnome_pre-installer
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0351.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0356.html, http://www.securityfocus.com/bid/1622
CVE-2000-0270
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: emacs
References: http://www.securityfocus.com/bid/1126, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de, http://www.securityfocus.com/bid/1126
CVE-2000-0879
LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lpplus
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html, http://www.securityfocus.com/bid/1643, https://exchange.xforce.ibmcloud.com/vulnerabilities/5199
CVE-2000-1009
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html, http://www.securityfocus.com/bid/1871, https://exchange.xforce.ibmcloud.com/vulnerabilities/5437
CVE-2000-0468
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www.securityfocus.com/bid/1302, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.02.10006021014400.4779-100000%40nofud.nwest.attws.com, http://www.securityfocus.com/bid/1302
CVE-2000-0184
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux, mandrake_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0082.html, http://www.securityfocus.com/bid/1037, http://archives.neohapsis.com/archives/bugtraq/2000-03/0082.html
CVE-2000-1243
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shopping_cart
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html, http://archives.neohapsis.com/archives/bugtraq/2000-04/0066.html, http://archives.neohapsis.com/archives/bugtraq/2000-04/0071.html
CVE-2000-0370
The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openlinux
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-001.0.txt, http://www.securityfocus.com/bid/1268, ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-001.0.txt
CVE-2000-0362
Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/suse_security_announce_25.html, http://www.securityfocus.com/bid/738, http://www.novell.com/linux/security/advisories/suse_security_announce_25.html
CVE-2000-0324
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pcanywhere
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0201.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0258.html, http://www.iss.net/security_center/static/4347.php
CVE-2000-0490
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0407.html, http://netwinsite.com/dmail/security.htm, http://www.securityfocus.com/bid/1297
CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: palm_os
References: http://www.atstake.com/research/advisories/2000/a092600-1.txt, http://www.securityfocus.com/bid/1715, http://www.atstake.com/research/advisories/2000/a092600-1.txt
CVE-2000-0354
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mirror
References: http://www.debian.org/security/1999/19991018, http://www.novell.com/linux/security/advisories/suse_security_announce_22.html, http://www.securityfocus.com/bid/681
CVE-2000-0047
Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pager
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0047, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0047
CVE-2000-1214
Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: immunix, iputils, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html, http://marc.info/?l=bugtraq&m=97208562830613&w=2, http://marc.info/?l=bugtraq&m=97249980727834&w=2
CVE-2000-0974
GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: privacy_guard
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:67.gnupg.asc, ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-038.0.txt, http://archives.neohapsis.com/archives/bugtraq/2000-10/0201.html
CVE-2000-0916
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc, http://www.securityfocus.com/bid/1766, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc
CVE-2000-0377
The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://www.microsoft.com/technet/support/kb.asp?ID=264684, http://www.securityfocus.com/bid/1331, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-040
CVE-2000-0574
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wu-ftpd, ftpd
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html
CVE-2000-1020
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mdaemon
References: http://marc.info/?l=bugtraq&m=96925269716274&w=2, http://www.securityfocus.com/bid/1689, https://exchange.xforce.ibmcloud.com/vulnerabilities/5250
CVE-2000-1200
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
References: http://www.securityfocus.com/archive/1/44430, http://www.securityfocus.com/bid/959, https://exchange.xforce.ibmcloud.com/vulnerabilities/4015
CVE-2000-0506
The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: ftp://sgigate.sgi.com/security/20000802-01-P, http://archives.neohapsis.com/archives/bugtraq/2000-06/0062.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0063.html
CVE-2000-1208
Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd, immunix, netbsd, linux
References: http://marc.info/?l=bugtraq&m=96994604300675&w=2, http://online.securityfocus.com/archive/1/137555, http://www.iss.net/security_center/static/5286.php
CVE-2000-0069
The recover program in Solstice Backup allows local users to restore sensitive files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: solstice_backup
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0069, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0069
CVE-2000-0414
Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vvos, hp-ux
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0047.html, http://www.securityfocus.com/bid/1214, http://archives.neohapsis.com/archives/bugtraq/2000-05/0047.html
CVE-2000-0126
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0126, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0126
CVE-2000-0048
get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://linux.corel.com/support/clos_patch1.htm, http://www.securityfocus.com/bid/928, http://linux.corel.com/support/clos_patch1.htm
CVE-2000-0632
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: listserv
References: http://www.lsoft.com/news/default.asp?item=Advisory1, http://www.nai.com/nai_labs/asp_set/advisory/43_Advisory.asp, http://www.securityfocus.com/bid/1490
CVE-2000-1040
Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0356.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html, http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html
CVE-2000-0984
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/ioshttpserverquery-pub.shtml, http://www.securityfocus.com/bid/1838, https://exchange.xforce.ibmcloud.com/vulnerabilities/5412
CVE-2000-0014
Denial of service in Savant web server via a null character in the requested URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: savant_webserver
References: http://www.securityfocus.com/bid/897, http://www.securityfocus.com/bid/897
CVE-2000-1254
crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms.
CVSS v3.0 Score: 7.5 (HIGH)
CVSS v3.0 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openssl
Related CWEs: CWE-310
References: http://marc.info/?l=openssl-users&m=95961024500509, http://www-01.ibm.com/support/docview.wss?uid=swg21995039, http://www.openwall.com/lists/oss-security/2016/05/04/17
CWE: CWE-310
CVE-2000-0021
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: domino_server
References: http://www.securityfocus.com/bid/881, http://www.securityfocus.com/bid/881
CVE-2000-0337
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0188.html, http://www.securityfocus.com/bid/1140, http://archives.neohapsis.com/archives/bugtraq/2000-04/0188.html
CVE-2000-0646
WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html, http://www.securityfocus.com/bid/1506, http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
CVE-2000-0552
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: icq
Related CWEs: CWE-459
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html, http://www.securityfocus.com/bid/1307, https://exchange.xforce.ibmcloud.com/vulnerabilities/4607
CWE: CWE-459
CVE-2000-1113
Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the ".ASX Buffer Overrun" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://www.atstake.com/research/advisories/2000/a112300-1.txt, http://www.securityfocus.com/bid/1980, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-090
CVE-2000-0855
SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xs4all_data_sunftp
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html, http://www.securityfocus.com/bid/1637, http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html
CVE-2000-0529
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: net_tools_pki_server
References: ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt, http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html, http://www.osvdb.org/4352
CVE-2000-0171
atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: atsar_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0102.html, http://www.securityfocus.com/bid/1048, http://archives.neohapsis.com/archives/bugtraq/2000-03/0102.html
CVE-2000-0788
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: access, word
References: http://www.securityfocus.com/bid/1566, http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071
CVE-2000-1213
ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: immunix, iputils, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html, http://marc.info/?l=bugtraq&m=97249980727834&w=2, http://www.redhat.com/support/errata/RHSA-2000-087.html
CVE-2000-1157
Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sniffer_agent
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html, http://www.securityfocus.com/bid/1901, http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html
CVE-2000-0774
The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: java_http_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html, http://www.securityfocus.com/bid/1521, http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html
CVE-2000-0709
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: frontpage
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html, http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp, http://www.securityfocus.com/bid/1608
CVE-2000-0469
Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: webbanner
References: http://www.securityfocus.com/bid/1347, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-22&msg=ILENKALMCAFBLHBGEOFKGEJCCAAA.jwesterink%40jwesterink.daxis.nl, http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.2.0.58.20000620193604.00979950%40mail.clark.net
CVE-2000-0237
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: enterprise_server
References: http://www.securityfocus.com/bid/1075, http://zsh.stupidphat.com/advisory.cgi?000311-1, http://www.securityfocus.com/bid/1075
CVE-2000-1104
Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060
CVE-2000-0456
NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog".
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd
References: ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-005.txt.asc, http://www.osvdb.org/1365, http://www.securityfocus.com/bid/1272
CVE-2000-0714
umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: scheme
References: http://www.redhat.com/support/errata/RHSA-2000-047.html, http://www.securityfocus.com/bid/1551, http://www.redhat.com/support/errata/RHSA-2000-047.html
CVE-2000-0392
Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerbnet, linux, cygnus_network_security, kerberos, kerberos_5
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html, http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html, http://www.cert.org/advisories/CA-2000-06.html
CVE-2000-1043
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux
References: http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1, https://exchange.xforce.ibmcloud.com/vulnerabilities/5731, http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1
CVE-2000-0604
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://www.securityfocus.com/bid/1383, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211209500.22969-100000%40nimue.tpi.pl, http://www.securityfocus.com/bid/1383
CVE-2000-0750
Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd, netbsd, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html, http://archives.neohapsis.com/archives/freebsd/2000-08/0336.html, http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h
CVE-2000-0188
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ezshopper
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html, http://www.securityfocus.com/bid/1014, http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html
CVE-2000-0343
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sniffit
References: http://www.securityfocus.com/bid/1158, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005021736.TAA01991%40ALuSSi, http://www.securityfocus.com/bid/1158
CVE-2000-0236
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: enterprise_server
References: http://www.securityfocus.com/bid/1063, http://www.securityfocus.com/templates/archive.pike?list=1&msg=38D2173D.24E39DD0%40relaygroup.com, http://www.securityfocus.com/bid/1063
CVE-2000-1246
NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.
CVSS v2.0 Score: 3.5 (LOW)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
Affected Products: netware_ftp_server, netware
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1, http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CWE: CWE-119
CVE-2000-0029
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware
References: http://marc.info/?l=bugtraq&m=94780294009285&w=2, http://www.securityfocus.com/bid/901, http://marc.info/?l=bugtraq&m=94780294009285&w=2
CVE-2000-1143
Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantrap
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html, http://marc.info/?l=bugtraq&m=97349791405580&w=2
CVE-2000-0598
Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: proxy\+
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0268.html, http://www.proxyplus.cz/faq/articles/EN/art01002.htm, http://www.securityfocus.com/bid/1395