DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_98se, windows_xp, windows_98
Related CWEs: CWE-346
Related CAPECs: CAPEC-388, CAPEC-142, CAPEC-160
MITRE ATT&CK Techniques: T1134, T1539, T1550.004
MITRE ATT&CK Tactics: T1134, T1584, T1550
References: http://www.kb.cert.org/vuls/id/458659, https://exchange.xforce.ibmcloud.com/vulnerabilities/4280, http://www.kb.cert.org/vuls/id/458659
CWE: CWE-346
MITRE ATT&CK techniques: T1134, T1539, T1550.004, T1557.002, T1134.001, T1584.002, T1528
MITRE ATT&CK tactics: T1134, T1584, T1550, T1557
CVE-2000-0123
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: filemaker
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0123, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0123
CVE-2000-0196
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: turbolinux, nmh, linux
References: http://www.redhat.com/support/errata/RHSA-2000-006.html, http://www.securityfocus.com/bid/1018, http://www.redhat.com/support/errata/RHSA-2000-006.html
CVE-2000-0712
Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lids
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0486.html, http://www.egroups.com/message/lids/1038, http://www.lids.org/changelog.html
CVE-2000-0806
The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#Inter-module_Communications, http://www.osvdb.org/4413, https://exchange.xforce.ibmcloud.com/vulnerabilities/5162
CVE-2000-0846
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: darxite
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0256.html, http://www.securityfocus.com/bid/1598, https://exchange.xforce.ibmcloud.com/vulnerabilities/5134
CVE-2000-0805
Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#Retransmission_of, http://www.osvdb.org/4415, https://exchange.xforce.ibmcloud.com/vulnerabilities/5469
CVE-2000-0012
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: msql
References: http://www.securityfocus.com/bid/898, http://www.securityfocus.com/bid/898
CVE-2000-1209
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: data_engine, insight_manager, insight_manager_xe, msde
References: http://marc.info/?l=bugtraq&m=96333895000350&w=2, http://marc.info/?l=bugtraq&m=96593218804850&w=2, http://marc.info/?l=bugtraq&m=96644570412692&w=2
CVE-2000-0534
The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: apsfilter
References: http://www.osvdb.org/1389, http://www.securityfocus.com/bid/1325, https://exchange.xforce.ibmcloud.com/vulnerabilities/4617
CVE-2000-0422
Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dmail
References: http://marc.info/?l=bugtraq&m=95749276827558&w=2, http://www.securityfocus.com/bid/1171, http://marc.info/?l=bugtraq&m=95749276827558&w=2
CVE-2000-0423
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: dnews
References: http://marc.info/?l=bugtraq&m=95764950403250&w=2, http://www.securityfocus.com/bid/1172, http://marc.info/?l=bugtraq&m=95764950403250&w=2
CVE-2000-0909
Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pine
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:59.pine.asc, http://archives.neohapsis.com/archives/bugtraq/2000-10/0441.html, http://www.linux-mandrake.com/en/security/MDKSA-2000-073.php3
CVE-2000-0192
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openlinux
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0029.html, http://www.securityfocus.com/bid/1036, http://archives.neohapsis.com/archives/bugtraq/2000-03/0029.html
CVE-2000-0390
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerbnet, linux, cygnus_network_security, kerberos, kerberos_5
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html, http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html, http://www.cert.org/advisories/CA-2000-06.html
CVE-2000-0739
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: net_tools_pki_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html, http://download.nai.com/products/licensed/pgp/hf3pki10.txt, http://www.osvdb.org/1489
CVE-2000-1055
Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_access_control_server
References: http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml, http://www.osvdb.org/1569, http://www.securityfocus.com/bid/1706
CVE-2000-0017
Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: https://marc.info/?l=bugtraq&m=94580196627059&w=2, https://marc.info/?l=bugtraq&m=94580196627059&w=2
CVE-2000-0293
aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: suse_linux
References: http://www.securityfocus.com/bid/1130, http://www.securityfocus.com/bid/1130
CVE-2000-0648
WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wftpd
References: http://www.securityfocus.com/bid/1456, http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13BvU6-0007d8-00%40dwarf.box.sk, http://www.securityfocus.com/bid/1456
CVE-2000-0350
A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: icecap_manager
References: http://advice.networkice.com/advice/Support/KB/q000166/, http://www.osvdb.org/312, http://www.securityfocus.com/bid/1216
CVE-2000-0479
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dragon_server
References: http://marc.info/?l=bugtraq&m=96113734714517&w=2, http://www.securityfocus.com/bid/1352, http://marc.info/?l=bugtraq&m=96113734714517&w=2
CVE-2000-0580
Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1415, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161935.4619B-100000%40fjord.fscinternet.com, http://www.securityfocus.com/bid/1415
CVE-2000-0328
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
References: http://www.securityfocus.com/bid/604, http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40%40192.168.124.1, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-046
CVE-2000-1163
ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ghostscript
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343, http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt, http://www.debian.org/security/2000/20001123
CVE-2000-0035
resend command in Majordomo allows local users to gain privileges via shell metacharacters.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: majordomo
References: http://marc.info/?l=bugtraq&m=94780294009285&w=2, http://www.securityfocus.com/bid/902, http://marc.info/?l=bugtraq&m=94780294009285&w=2
CVE-2000-0033
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: interscan_viruswall
References: http://www.securityfocus.com/bid/899, http://www.securityfocus.com/bid/899
CVE-2000-0383
The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: instant_messenger
References: http://www.securityfocus.com/bid/1180, http://www.securityfocus.com/templates/archive.pike?list=1&msg=002401bfb918%247310d5a0%241ef084ce%40karemor.com, http://www.securityfocus.com/bid/1180
CVE-2000-0091
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vpopmail
References: http://www.inter7.com/vpopmail/, http://www.inter7.com/vpopmail/ChangeLog, http://www.securityfocus.com/bid/942
CVE-2000-0391
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerbnet, linux, cygnus_network_security, kerberos, kerberos_5
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html, http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html, http://www.cert.org/advisories/CA-2000-06.html
CVE-2000-0279
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: beos
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0029.html, http://bebugs.be.com/devbugs/detail.php3?oid=2505312, http://www.securityfocus.com/bid/1100
CVE-2000-0582
Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#SMTP_Security, http://www.osvdb.org/1438, http://www.securityfocus.com/bid/1416
CVE-2000-0898
Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: small_http_server
References: http://marc.info/?l=bugtraq&m=97421834001092&w=2, http://marc.info/?l=bugtraq&m=97421834001092&w=2
CVE-2000-1092
loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ezshopper
References: http://marc.info/?l=bugtraq&m=97676270729984&w=2, http://www.securityfocus.com/bid/2109, https://exchange.xforce.ibmcloud.com/vulnerabilities/5740
CVE-2000-0710
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: frontpage
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html, http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp, http://www.securityfocus.com/bid/1608
CVE-2000-0212
InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: interaccess_telnetd_server
References: http://www.securityfocus.com/bid/1001, https://exchange.xforce.ibmcloud.com/vulnerabilities/4033, http://www.securityfocus.com/bid/1001
CVE-2000-0791
Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0179.html, http://www.securityfocus.com/bid/1575, http://archives.neohapsis.com/archives/bugtraq/2000-08/0179.html
CVE-2000-0501
Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0277.html, http://www.securityfocus.com/bid/1366, https://exchange.xforce.ibmcloud.com/vulnerabilities/4745
CVE-2000-1126
Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.securityfocus.com/advisories/2850, http://www.securityfocus.com/bid/1954, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5655
CVE-2000-1014
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html, http://www.osvdb.org/3240, http://www.securityfocus.com/bid/1717
CVE-2000-0051
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: spectra
References: http://www.allaire.com/handlers/index.cfm?ID=13977&Method=Full, http://www.securityfocus.com/bid/916, http://www.allaire.com/handlers/index.cfm?ID=13977&Method=Full
CVE-2000-0731
Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: worm_webserver
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0111.html, http://www.osvdb.org/1535, http://www.securityfocus.com/bid/1626
CVE-2000-0477
Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: norton_antivirus
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html, http://www.securityfocus.com/bid/1351, https://exchange.xforce.ibmcloud.com/vulnerabilities/4710
CVE-2000-0141
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ultimate_bulletin_board
References: http://www.securityfocus.com/bid/991, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-8&msg=20000211224935.A13236%40infomag.ape.relarn.ru
CVE-2000-0068
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inbusiness_email_station
References: http://marc.info/?l=bugtraq&m=94704437920965&w=2, http://marc.info/?l=bugtraq&m=94704437920965&w=2
CVE-2000-0358
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://www.redhat.com/corp/support/errata/RHSA1999058-01.html, http://www.redhat.com/corp/support/errata/RHSA1999058-01.html
CVE-2000-0562
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: blackice_defender, blackice_agent
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0190.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0190.html
CVE-2000-0588
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sawmill
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html, http://www.securityfocus.com/bid/1402
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2000-0221
The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nautica_marlin
References: http://www.securityfocus.com/bid/1009, http://www.securityfocus.com/bid/1009
CVE-2000-0519
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: ie, internet_explorer
References: http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt, http://www.cert.org/advisories/CA-2000-10.html, http://www.securityfocus.com/bid/1309
CVE-2000-1079
Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_95, windows_98
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0116.html, http://www.nai.com/research/covert/advisories/045.asp, http://www.securityfocus.com/bid/1620
CVE-2000-1076
Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iplanet_certificate_management_system, directory_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5422, http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html
CVE-2000-0969
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: half-life_dedicated_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html, http://www.osvdb.org/6983
CVE-2000-1107
in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: suse_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0387.html, http://www.securityfocus.com/bid/2015, https://exchange.xforce.ibmcloud.com/vulnerabilities/5590
CVE-2000-0243
AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: simpleserver_www
References: http://www.analogx.com/contents/download/network/sswww.htm, http://www.osvdb.org/1265, http://www.securityfocus.com/bid/1076
CVE-2000-0865
Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: doublevision
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0185.html, http://www.securityfocus.com/bid/1697, https://exchange.xforce.ibmcloud.com/vulnerabilities/5261
CVE-2000-0465
Internet Explorer 4.x and 5.x does not properly verify the domain of a  frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.microsoft.com/technet/support/kb.asp?ID=251108, http://www.microsoft.com/technet/support/kb.asp?ID=255676, http://www.securityfocus.com/bid/1224
CVE-2000-0401
Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pdg_shopping_cart
References: http://marc.info/?l=bugtraq&m=95928319715983&w=2, http://marc.info/?l=ntbugtraq&m=95928667119963&w=2, http://www.pdgsoft.com/Security/security2.html
CVE-2000-0793
Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: norton_antivirus, client
References: http://www.securityfocus.com/bid/1533, http://www.securityfocus.com/templates/archive.pike?list=1&msg=398222C5%40zathras.cc.vt.edu, http://www.securityfocus.com/bid/1533
CVE-2000-0600
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_server, netware
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0264.html, http://www.securityfocus.com/bid/1393, https://exchange.xforce.ibmcloud.com/vulnerabilities/4780
CVE-2000-0566
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux, openlinux, mandrake_linux
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-021.0.txt, http://archives.neohapsis.com/archives/bugtraq/2000-07/0390.html, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:015
CVE-2000-0260
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: frontpage, visual_interdev
References: http://www.osvdb.org/282, http://www.securityfocus.com/bid/1109, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-025
CVE-2000-0208
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: htdig
References: http://www.securityfocus.com/bid/1026, http://www.securityfocus.com/bid/1026
CVE-2000-0547
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerbnet, kerberos_5, cygnus_network_security, kerberos
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html, http://ciac.llnl.gov/ciac/bulletins/k-051.shtml, http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt
CWE: CWE-120
CVE-2000-0416
NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_2000
References: http://www.gordano.com/support/archives/ntmail/2000-05/00001114.htm, http://www.securityfocus.com/bid/1196, http://www.securityfocus.com/templates/archive.pike?list=1&msg=NABBJLKKPKIHDIMKFKGCMEFANMAB.georger%40nls.net
CVE-2000-0244
The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winframe, metaframe
References: http://www.securityfocus.com/bid/1077, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.20.0003290949280.2640-100000%40naughty.monkey.org, http://www.securityfocus.com/bid/1077
CVE-2000-0273
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pcanywhere
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0031.html, http://www.securityfocus.com/bid/1095, http://archives.neohapsis.com/archives/bugtraq/2000-04/0031.html
CVE-2000-0559
eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: etrust_intrusion_detection
References: http://www.securityfocus.com/bid/1341, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net, http://www.securityfocus.com/bid/1341
CVE-2000-0015
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cascadeview_ux
References: http://www.securityfocus.com/bid/910, http://www.securityfocus.com/bid/910
CVE-2000-1142
Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantrap
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html, http://marc.info/?l=bugtraq&m=97349791405580&w=2
CVE-2000-0310
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://www.openbsd.org/errata24.html#maxqueue, http://www.osvdb.org/7539, http://www.openbsd.org/errata24.html#maxqueue
CVE-2000-0558
Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openview_network_node_manager
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0249.html, http://www.securityfocus.com/bid/1317, http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0249.html
CVE-2000-0921
Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shopping_cart
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0115.html, http://www.osvdb.org/1596, http://www.securityfocus.com/bid/1777
CVE-2000-0880
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: lpplus
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html, http://www.securityfocus.com/bid/1643, https://exchange.xforce.ibmcloud.com/vulnerabilities/5200
CVE-2000-0755
Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openview_network_node_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html, http://www.securityfocus.com/bid/1581, http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html
CVE-2000-0186
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: turbolinux, linux, freebsd, mandrake_linux
References: http://www.redhat.com/support/errata/RHSA-2000-100.html, http://www.securityfocus.com/bid/1020, http://www.redhat.com/support/errata/RHSA-2000-100.html
CVE-2000-0117
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cobalt_raq_3i, cobalt_raq, cobalt_raq_2
References: http://www.securityfocus.com/bid/951, http://www.securityfocus.com/bid/951
CVE-2000-0004
ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zbserver
References: http://marc.info/?l=bugtraq&m=94606572912422&w=2, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556, http://marc.info/?l=bugtraq&m=94606572912422&w=2
CVE-2000-0485
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sql_server
References: http://www.securityfocus.com/archive/1/62771, http://www.securityfocus.com/bid/1292, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041
CVE-2000-0040
glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: glftpd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0040, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0040
CVE-2000-0799
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I, http://www.securityfocus.com/bid/1530, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl
CVE-2000-0629
The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_system_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0163.html, http://www.securityfocus.com/bid/1459, http://www.sun.com/software/jwebserver/faq/jwsca-2000-02.html
CVE-2000-0336
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: turbolinux, mandrake_linux, linux, openldap
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt, http://www.redhat.com/support/errata/RHSA-2000-012.html, http://www.securityfocus.com/bid/1232
CVE-2000-0102
The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: salescart
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0102, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0102
CVE-2000-0970
IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.acrossecurity.com/aspr/ASPR-2000-07-22-1-PUB.txt, http://www.osvdb.org/7265, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-080
CVE-2000-1211
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zope
References: http://www.iss.net/security_center/static/5824.php, http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3, http://www.osvdb.org/6282
CVE-2000-0595
libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://archives.neohapsis.com/archives/freebsd/2000-07/0035.html, http://www.osvdb.org/1446, http://www.securityfocus.com/bid/1437
CVE-2000-0628
The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: apache_asp
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0142.html, http://www.nodeworks.com/asp/changes.html, http://www.securityfocus.com/bid/1457
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sql_server
References: http://www.microsoft.com/technet/support/kb.asp?ID=263968, http://www.securityfocus.com/bid/1281, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-035
CVE-2000-0071
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, internet_information_services
References: http://marc.info/?l=bugtraq&m=94770020309953&w=2, http://marc.info/?l=bugtraq&m=94780058006791&w=2, http://marc.info/?l=bugtraq&m=94770020309953&w=2
CVE-2000-0510
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux
References: ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch, http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html, http://www.securityfocus.com/bid/1373
CVE-2000-1231
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phorum
References: http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html, http://hispahack.ccc.de/mi020.html, http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
CVE-2000-0889
Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
References: http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/198&type=0&nav=sec.sba, http://www.cert.org/advisories/CA-2000-19.html, http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/198&type=0&nav=sec.sba
CVE-2000-0059
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: php
References: http://www.securityfocus.com/bid/911, http://www.securityfocus.com/bid/911
CVE-2000-0771
Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1613, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-062, http://www.securityfocus.com/bid/1613
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mgetty
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0329.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html, http://www.calderasystems.com/support/security/advisories/CSSA-2000-029.0.txt
CVE-2000-1240
Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: anyportal_php
References: http://www.osvdb.org/23983, https://exchange.xforce.ibmcloud.com/vulnerabilities/25441, http://www.osvdb.org/23983
CVE-2000-0368
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ios
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://www.ciac.org/ciac/bulletins/j-009.shtml, http://www.cisco.com/warp/public/770/ioshist-pub.shtml, http://www.ciac.org/ciac/bulletins/j-009.shtml
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2000-0683
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html, http://developer.bea.com/alerts/security_000728.html, http://www.osvdb.org/1480
CVE-2000-0183
Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ircii
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0093.html, http://www.redhat.com/support/errata/RHSA-2000-008.html, http://www.securityfocus.com/bid/1046
CVE-2000-0833
Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winsmtp
References: http://www.securityfocus.com/archive/1/81693, http://www.securityfocus.com/bid/1680, https://exchange.xforce.ibmcloud.com/vulnerabilities/5255
CVE-2000-0966
Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2000-q4/0020.html, http://www.osvdb.org/7244, https://exchange.xforce.ibmcloud.com/vulnerabilities/5379
CVE-2000-0749
Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://archives.neohapsis.com/archives/freebsd/2000-08/0338.html, http://www.osvdb.org/1536, http://www.securityfocus.com/bid/1628
CVE-2000-0522
RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ace_server
References: ftp://ftp.securid.com/support/outgoing/dos/readme.txt, http://archives.neohapsis.com/archives/bugtraq/2000-07/0197.html, http://www.securityfocus.com/bid/1332