DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-0399
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0301.html, http://www.securityfocus.com/bid/1250, http://archives.neohapsis.com/archives/bugtraq/2000-05/0301.html
CVE-2000-0979
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: windows_me, windows_98se, windows_95, windows_98
References: http://marc.info/?l=bugtraq&m=97147777618139&w=2, http://www.securityfocus.com/bid/1780, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-072
CVE-2000-0899
Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: small_http_server
References: http://marc.info/?l=bugtraq&m=97421834001092&w=2, http://www.securityfocus.com/bid/1942, http://marc.info/?l=bugtraq&m=97421834001092&w=2
CVE-2000-0495
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_media_services
References: http://www.securityfocus.com/bid/1282, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-038, https://exchange.xforce.ibmcloud.com/vulnerabilities/4585
CVE-2000-0677
Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: net.data
References: http://xforce.iss.net/alerts/advise60.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/4976, http://xforce.iss.net/alerts/advise60.php
CVE-2000-0452
Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino_enterprise_server, domino_mail_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0219.html, http://www.osvdb.org/321, http://www.securityfocus.com/bid/1229
CVE-2000-1120
Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=97569466809056&w=2, http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=only
CVE-2000-1097
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: soho_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0406.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html, http://www.osvdb.org/1667
CVE-2000-0915
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc, http://archives.neohapsis.com/archives/bugtraq/2000-10/0017.html, http://www.osvdb.org/433
CVE-2000-0571
LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: localweb_http_server
References: http://www.securityfocus.com/bid/1423, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=NCBBKFKDOLAGKIAPMILPCEIHCFAA.labs%40ussrback.com, https://exchange.xforce.ibmcloud.com/vulnerabilities/4896
CVE-2000-0253
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dansie_shopping_cart
References: http://www.securityfocus.com/bid/1115, https://exchange.xforce.ibmcloud.com/vulnerabilities/4621, http://www.securityfocus.com/bid/1115
CVE-2000-1207
userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=97034397026473&w=2, http://marc.info/?l=bugtraq&m=97063854808796&w=2, http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-059.php3
CVE-2000-1174
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ethereal
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:81.ethereal.asc, http://archives.neohapsis.com/archives/bugtraq/2000-11/0251.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000342
CVE-2000-0810
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: auction_weaver
References: http://www.osvdb.org/1600, http://www.securityfocus.com/bid/1782, https://exchange.xforce.ibmcloud.com/vulnerabilities/5371
CVE-2000-1063
Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jetdirect
References: http://marc.info/?l=bugtraq&m=97119729613778&w=2, http://www.securityfocus.com/bid/1775, https://exchange.xforce.ibmcloud.com/vulnerabilities/5353
CVE-2000-1061
Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM ActiveX Component" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ie
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-075, https://exchange.xforce.ibmcloud.com/vulnerabilities/5127, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-075
CVE-2000-0223
Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wmcdplay
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0107.html, http://www.securityfocus.com/bid/1047, http://archives.neohapsis.com/archives/bugtraq/2000-03/0107.html
CVE-2000-0954
Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: shambala_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html, http://www.securityfocus.com/bid/1771, https://exchange.xforce.ibmcloud.com/vulnerabilities/5346
CVE-2000-1064
Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jetdirect
References: http://marc.info/?l=bugtraq&m=97119729613778&w=2, http://www.securityfocus.com/bid/1775, https://exchange.xforce.ibmcloud.com/vulnerabilities/5353
CVE-2000-0668
pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pam_console, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0398.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0455.html, http://www.redhat.com/support/errata/RHSA-2000-044.html
CVE-2000-0813
Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#FTP_Connection, http://www.osvdb.org/4434, https://exchange.xforce.ibmcloud.com/vulnerabilities/5474
CVE-2000-0433
The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/suse_security_announce_47.html, http://www.novell.com/linux/security/advisories/suse_security_announce_47.html
CVE-2000-0382
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: clustercats
References: http://www.allaire.com/handlers/index.cfm?ID=15697&Method=Full, http://www.securityfocus.com/bid/1179, http://www.allaire.com/handlers/index.cfm?ID=15697&Method=Full
CVE-2000-0242
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windmail
References: http://www.securityfocus.com/bid/1073, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-03-22&msg=20000325224146.6839.qmail%40securityfocus.com, http://www.securityfocus.com/bid/1073
CVE-2000-0605
Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: courseinfo
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=NTBUGTRAQ&P=R1647, http://www.securityfocus.com/bid/1460, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=NTBUGTRAQ&P=R1647
CVE-2000-0785
WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) to the specified file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irc_server
References: http://marc.info/?l=bugtraq&m=96353027909756&w=2, http://marc.info/?l=bugtraq&m=96353027909756&w=2
CVE-2000-0458
The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imp
References: http://marc.info/?l=bugtraq&m=95672120116627&w=2, http://www.securityfocus.com/bid/1360, http://marc.info/?l=bugtraq&m=95672120116627&w=2
CVE-2000-0380
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products: ios
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0261.html, http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml, http://www.osvdb.org/1302
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2000-0216
Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook, windows_messaging, exchange_server
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0176.html, http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0176.html
CVE-2000-0060
Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rover
References: http://marc.info/?l=bugtraq&m=94633851427858&w=2, http://marc.info/?l=ntbugtraq&m=94647711311057&w=2, http://www.iss.net/security_center/static/3765.php
CVE-2000-0338
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: concurrent_versions_software
Related CWEs: CWE-667
Related CAPECs: CAPEC-25, CAPEC-27, CAPEC-26
MITRE ATT&CK Techniques: T1499.004
MITRE ATT&CK Tactics: T1499
References: http://www.securityfocus.com/bid/1136, http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl, http://www.securityfocus.com/bid/1136
CWE: CWE-667
MITRE ATT&CK techniques: T1499.004
MITRE ATT&CK tactics: T1499
CVE-2000-0189
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coldfusion_server
References: http://www.securityfocus.com/bid/1021, http://www.securityfocus.com/bid/1021
CVE-2000-0295
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lcdproc
References: http://secunia.com/advisories/7829, http://www.securityfocus.com/archive/1/305589/30/26390/threaded, http://www.securityfocus.com/bid/1131
CVE-2000-0635
The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: minivend
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0150.html, http://www.securityfocus.com/bid/1449, http://www.zdnet.com/zdnn/stories/news/0%2C4586%2C2600258%2C00.html
CVE-2000-0080
AIX techlibss allows local users to overwrite files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=94757136413681&w=2, http://www.securityfocus.com/bid/931, http://marc.info/?l=bugtraq&m=94757136413681&w=2
CVE-2000-0172
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: turbolinux, mtr
References: http://www.securityfocus.com/bid/1038, http://www.securityfocus.com/bid/1038
CVE-2000-0631
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, internet_information_services
References: http://marc.info/?l=bugtraq&m=96390444022878&w=2, http://www.securityfocus.com/bid/1476, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-044
CVE-2000-0315
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debian_linux, netbsd, linux, unix, slackware_linux
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc, http://marc.info/?l=bugtraq&m=91893782027835&w=2, http://www.osvdb.org/7575
CVE-2000-0508
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, linux, mandrake_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0073.html, http://www.securityfocus.com/bid/1372, https://exchange.xforce.ibmcloud.com/vulnerabilities/5050
CVE-2000-0786
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: userv
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0389.html, http://marc.info/?l=bugtraq&m=96473640717095&w=2, http://www.debian.org/security/2000/20000727
CVE-2000-0989
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: inbusiness_email_station
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0293.html, http://www.osvdb.org/6488, https://exchange.xforce.ibmcloud.com/vulnerabilities/5414
CVE-2000-0657
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: proxy
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html, http://www.analogx.com/contents/download/network/proxy.htm, http://www.securityfocus.com/bid/1504
CVE-2000-0987
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i, internet_directory
References: http://www.securityfocus.com/archive/1/140340, http://www.securityfocus.com/archive/1/140709, https://exchange.xforce.ibmcloud.com/vulnerabilities/5401
CVE-2000-0864
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a  symlink attack.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: esound
Related CWEs: CWE-362
Related CAPECs: CAPEC-29, CAPEC-26
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0095.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0328.htm, http://archives.neohapsis.com/archives/bugtraq/2000-10/0118.html
CWE: CWE-362
CVE-2000-0644
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html, http://www.osvdb.org/1477, http://www.securityfocus.com/bid/1506
CVE-2000-0787
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xchat
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0215.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0301.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0305.html
CVE-2000-1138
Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_notes
References: http://marc.info/?l=bugtraq&m=97370725220953&w=2, http://www.securityfocus.com/bid/1925, http://marc.info/?l=bugtraq&m=97370725220953&w=2
CVE-2000-0385
FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: filemaker
References: http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html, http://www.filemaker.com/support/webcompanion.html, http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html
CVE-2000-0653
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: outlook_express
References: http://www.securityfocus.com/bid/1502, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-045, http://www.securityfocus.com/bid/1502
CVE-2000-0643
Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webactive
References: http://www.securityfocus.com/bid/1470, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671%40Rage.Resentment.org, https://exchange.xforce.ibmcloud.com/vulnerabilities/4949
CVE-2000-1004
Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: http://marc.info/?l=bugtraq&m=97068555106135&w=2, http://www.osvdb.org/6123, https://exchange.xforce.ibmcloud.com/vulnerabilities/5336
CVE-2000-0832
Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: htgrep
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0208.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5476, http://archives.neohapsis.com/archives/bugtraq/2000-08/0208.html
CVE-2000-1223
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quikstore
References: http://www.kb.cert.org/vuls/id/671444, http://www.kb.cert.org/vuls/id/671444
CVE-2000-1065
Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jetdirect
References: http://marc.info/?l=bugtraq&m=97119729613778&w=2, http://www.securityfocus.com/bid/1775, https://exchange.xforce.ibmcloud.com/vulnerabilities/5354
CVE-2000-0565
SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: smartftp_daemon
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0100.html, http://www.osvdb.org/1394, http://www.securityfocus.com/bid/1344
CVE-2000-0258
IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.
CVSS v3.0 Score: 7.5 (HIGH)
CVSS v3.0 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, internet_information_services
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.securityfocus.com/bid/1101, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-023, http://www.securityfocus.com/bid/1101
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2000-0725
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zope
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0198.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0259.html, http://www.debian.org/security/2000/20000821
CVE-2000-1068
pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: poll_it_pro, poll_it
References: http://marc.info/?l=bugtraq&m=97236719315352&w=2, http://www.cgi-world.com/pollit.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5792
CVE-2000-0296
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fcheck
References: http://archives.neohapsis.com/archives/bugtraq/current/0011.html, http://www.securityfocus.com/bid/1086, http://archives.neohapsis.com/archives/bugtraq/current/0011.html
CVE-2000-0437
Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: webshield, webshield_e-ppliance, gauntlet_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0249.html, http://www.osvdb.org/322, http://www.pgp.com/jump/gauntlet_advisory.asp
CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerpoint, access, project, word, excel
References: http://www.cert.org/advisories/CA-2000-07.html, http://www.microsoft.com/technet/support/kb.asp?ID=262767, http://www.securityfocus.com/bid/1197
CVE-2000-1168
IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=97502498610979&w=2, http://www.securityfocus.com/bid/1988, http://marc.info/?l=bugtraq&m=97502498610979&w=2
CVE-2000-1182
WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests, which disables proxy handling.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firebox_ii
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0224.html, http://www.securityfocus.com/bid/1953, https://exchange.xforce.ibmcloud.com/vulnerabilities/5535
CVE-2000-0705
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ntop
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0459.html, http://www.osvdb.org/1496, http://www.redhat.com/support/errata/RHSA-2000-049.html
CVE-2000-1194
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp_server
References: http://www.mdma.za.net/fk/FK9.zip, http://www.securityfocus.com/bid/1227, http://www.mdma.za.net/fk/FK9.zip
CVE-2000-0828
Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: documentdirect_for_the_internet
References: http://www.atstake.com/research/advisories/2000/a090800-1.txt, http://www.securityfocus.com/bid/1657, https://exchange.xforce.ibmcloud.com/vulnerabilities/5212
CVE-2000-0985
Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: all-mail
References: http://www.atstake.com/research/advisories/2000/a101200-2.txt, http://www.securityfocus.com/bid/1789, http://www.atstake.com/research/advisories/2000/a101200-2.txt
CVE-2000-0361
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/suse_security_announce_35.html, http://www.novell.com/linux/security/advisories/suse_security_announce_35.html
CVE-2000-1201
Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0085.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0085.html
CVE-2000-0394
NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netprowler
References: http://marc.info/?l=bugtraq&m=95878603510835&w=2, http://www.securityfocus.com/bid/1225, http://www.securityfocus.com/templates/archive.pike?list=1&msg=392AD3B3.3E9BE3EA%40axent.com
CVE-2000-1133
Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: authentix
References: http://marc.info/?l=bugtraq&m=97353881829760&w=2, http://marc.info/?l=bugtraq&m=97362374200478&w=2, http://www.securityfocus.com/bid/1907
CVE-2000-1058
Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openview_network_node_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0274.html, http://marc.info/?l=bugtraq&m=97004856403173&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/5282
CVE-2000-0754
Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openview_network_node_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html, http://www.securityfocus.com/bid/1581, http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html
CVE-2000-0024
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: internet_information_server, site_server, site_server_commerce
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246401, http://www.acrossecurity.com/aspr/ASPR-1999-11-10-1-PUB.txt, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-061
CVE-2000-0499
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
Related CWEs: CWE-178
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0262.htm, http://developer.bea.com/alerts/security_000612.html, http://www.securityfocus.com/bid/1328
CWE: CWE-178
CVE-2000-0034
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0034, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0034
CVE-2000-0207
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix, infosearch
References: ftp://patches.sgi.com/support/free/security/advisories/20000501-01-P, http://www.securityfocus.com/bid/1031, ftp://patches.sgi.com/support/free/security/advisories/20000501-01-P
CVE-2000-0680
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cvs
References: http://www.securityfocus.com/bid/1524, http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org, http://www.securityfocus.com/bid/1524
CVE-2000-0438
Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux, suse_linux, openlinux, turbolinux
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0245.html, http://www.securityfocus.com/bid/1239, http://archives.neohapsis.com/archives/bugtraq/2000-05/0245.html
CVE-2000-0319
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: http://www.securityfocus.com/bid/1146, http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424%40SECURITY.NNOV.RU, http://www.securityfocus.com/bid/1146
CVE-2000-0025
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, site_server, site_server_commerce
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238606, http://www.osvdb.org/8098, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-058
CVE-2000-0101
The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: orderpage
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0101, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0101
CVE-2000-0908
BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: browsegate
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html, http://marc.info/?l=bugtraq&m=96956211605302&w=2, http://www.netcplus.com/browsegate.htm#BGLatest
CVE-2000-0218
Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, openlinux
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-002.0.txt, http://www.osvdb.org/6980, http://www.osvdb.org/7004
CVE-2000-0322
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.redhat.com/support/errata/RHSA-2000-014.html, http://www.securityfocus.com/bid/1149, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Enip.BSO.23.0004241601140.28851-100000%40www.whitehats.com
CVE-2000-0999
Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openssh
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch, ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch
CVE-2000-0409
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: communicator
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html, http://www.securityfocus.com/bid/1201, http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html
CVE-2000-1197
POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imap
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:15.imap-uw.asc, http://marc.info/?l=bugtraq&m=95624629924545&w=2, http://www.securityfocus.com/bid/1132
CVE-2000-0905
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: voyager
References: http://www.securityfocus.com/archive/1/79956, http://www.securityfocus.com/bid/1648, http://www.securityfocus.com/archive/1/79956
CVE-2000-1190
imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: imwheel
References: http://marc.info/?l=bugtraq&m=95984116811100&w=2, http://www.iss.net/security_center/static/4941.php, http://www.redhat.com/support/errata/RHSA-2000-016.html
CVE-2000-1232
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phorum
References: http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html, http://hispahack.ccc.de/mi020.html, http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
CVE-2000-0761
OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: os2_ftp_server
References: ftp://ftp.software.ibm.com/ps/products/tcpip/fixes/v4.3os2/ic27721/README, http://archives.neohapsis.com/archives/bugtraq/2000-08/0166.html, http://www.securityfocus.com/bid/1582
CVE-2000-0764
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: express_8100
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0338.html, http://www.securityfocus.com/bid/1609, https://exchange.xforce.ibmcloud.com/vulnerabilities/5154
CVE-2000-0199
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sql_server
References: http://www.securityfocus.com/bid/1055, http://www.securityfocus.com/bid/1055
CVE-2000-0292
The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mx2800
References: http://www.securityfocus.com/bid/1129, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10004190908140.32750-100000%40localhost.localdomain, http://www.securityfocus.com/bid/1129
CVE-2000-0461
The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:19.semconfig.asc, ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-004.txt.asc, http://www.openbsd.org/errata26.html#semconfig
CVE-2000-0831
Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp\+\+_server
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0109.html, http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0109.html
CVE-2000-0782
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netauth
References: http://netwinsite.com/netauth/updates.htm, http://www.securityfocus.com/bid/1587, http://www.securityfocus.com/templates/archive.pike?list=1&msg=NEBBJCLKGNOGCOIOBJNAGEHLCPAA.marc%40eeye.com
CVE-2000-0868
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: suse_linux, http_server
References: http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html, http://www.atstake.com/research/advisories/2000/a090700-2.txt, http://www.securityfocus.com/bid/1658
CVE-2000-1179
Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 650-st_isdn_router
References: http://marc.info/?l=bugtraq&m=97440068130051&w=2, http://www.securityfocus.com/bid/1952, https://exchange.xforce.ibmcloud.com/vulnerabilities/5536
CVE-2000-0993
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd, openbsd, freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc, ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc, http://marc.info/?l=bugtraq&m=97068555106135&w=2
CVE-2000-0276
BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: beos
References: http://www.securityfocus.com/bid/1098, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000410131628.659.qmail%40securityfocus.com, http://www.securityfocus.com/bid/1098