DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-1238
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: ftp://ftpna.bea.com/pub/releases/patches/SecurityBEA00-0600.zip, http://www.securityfocus.com/bid/5089, https://exchange.xforce.ibmcloud.com/vulnerabilities/5588
CVE-2000-0760
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: tomcat
References: http://www.securityfocus.com/bid/1532, http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719235404.24004A-100000%40grex.cyberspace.org, http://www.securityfocus.com/bid/1532
CVE-2000-0923
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aplio_phone
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html, http://www.securityfocus.com/bid/1784, https://exchange.xforce.ibmcloud.com/vulnerabilities/5333
CVE-2000-0494
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: volume_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html, http://seer.support.veritas.com/tnotes/volumeman/230053.htm, http://www.securityfocus.com/bid/1356
CVE-2000-0756
Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook
References: http://www.securityfocus.com/bid/1633, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Springmail.105.967737080.0.16997300%40www.springmail.com, http://www.securityfocus.com/bid/1633
CVE-2000-0874
Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eudora
References: http://www.osvdb.org/1545, http://www.securityfocus.com/archive/1/80888, http://www.securityfocus.com/bid/1653
CVE-2000-0159
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000217160216.13708.qmail%40underground.org, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000217160216.13708.qmail%40underground.org
CVE-2000-1073
csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iplanet_ical
References: http://www.atstake.com/research/advisories/2000/a100900-1.txt, http://www.osvdb.org/7210, http://www.securityfocus.com/bid/1769
CVE-2000-0512
CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux
References: ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch, http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html, http://www.securityfocus.com/bid/1373
CVE-2000-0919
Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpix
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0117.html, http://www.osvdb.org/472, http://www.securityfocus.com/bid/1773
CVE-2000-0119
The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: norton_antivirus, virusscan
References: http://marc.info/?l=bugtraq&m=94936267131123&w=2, http://marc.info/?l=bugtraq&m=94936267131123&w=2
CVE-2000-0509
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sambar_server
References: http://marc.info/?l=bugtraq&m=95990103207665&w=2, http://www.securityfocus.com/bid/1287, http://marc.info/?l=bugtraq&m=95990103207665&w=2
CVE-2000-0945
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: catalyst_3500_xl
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html, http://www.osvdb.org/444
CVE-2000-0056
IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://www.securityfocus.com/bid/914, http://www.securityfocus.com/bid/914
CVE-2000-0583
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vpopmail_vchkpw
References: http://www.securityfocus.com/bid/1418, http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7%40secureaustin.com, http://www.vpopmail.cx/vpopmail-ChangeLog
CVE-2000-0779
Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#Improper_stderr, http://www.osvdb.org/1487, http://www.securityfocus.com/bid/1534
CVE-2000-0334
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: spectra
References: http://www.allaire.com/handlers/index.cfm?ID=15411&Method=Full, http://www.securityfocus.com/bid/1181, http://www.allaire.com/handlers/index.cfm?ID=15411&Method=Full
CVE-2000-0193
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.securityfocus.com/bid/1030, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200003020436.PAA20168%40jawa.chilli.net.au, http://www.securityfocus.com/bid/1030
CVE-2000-1129
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webshield_smtp
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html, http://www.securityfocus.com/bid/1999, http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html
CVE-2000-0848
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host:  request header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: websphere_application_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0192.html, http://www-4.ibm.com/software/webservers/appserv/doc/v3022/fxpklst.htm#Security, http://www.securityfocus.com/bid/1691
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: quake_3_arena
References: http://www.osvdb.org/7531, http://www.quake3arena.com/news/index.html, http://www.securityfocus.com/bid/1169
CVE-2000-0687
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: auction_weaver
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html, http://www.securityfocus.com/bid/1630, http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html
CVE-2000-0005
HP-UX aserver program allows local users to gain privileges via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, 9000, aserver
References: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5635, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5635
CVE-2000-1005
Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: extropia_webstore
References: http://www.securityfocus.com/archive/1/138495, http://www.securityfocus.com/bid/1774, https://exchange.xforce.ibmcloud.com/vulnerabilities/5347
CVE-2000-1148
The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: volanochatpro
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0072.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0085.html, http://www.securityfocus.com/bid/1906
CVE-2000-0431
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cobalt_raq_3i, cobalt_raq_2
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html, http://www.osvdb.org/1346, http://www.securityfocus.com/bid/1238
CVE-2000-0107
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: http://www.debian.org/security/2000/20000201, http://www.securityfocus.com/bid/958, http://www.debian.org/security/2000/20000201
CVE-2000-0958
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hotjava_browser
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0349.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5428, http://archives.neohapsis.com/archives/bugtraq/2000-10/0349.html
CVE-2000-0367
Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: eterm
References: http://www.debian.org/security/1999/19990218, http://www.debian.org/security/1999/19990218
CVE-2000-0734
eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: iris, capturenet
References: http://marc.info/?l=bugtraq&m=96774637326591&w=2, http://www.securityfocus.com/bid/1627, http://marc.info/?l=bugtraq&m=96774637326591&w=2
CVE-2000-0197
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://archives.neohapsis.com/archives/ntbugtraq/current/0202.html, http://www.securityfocus.com/bid/1050, http://archives.neohapsis.com/archives/ntbugtraq/current/0202.html
CVE-2000-0339
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zonealarm
References: http://www.osvdb.org/1294, http://www.securityfocus.com/bid/1137, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com
CVE-2000-0596
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.cert.org/advisories/CA-2000-16.html, http://www.securityfocus.com/bid/1398, http://www.securityfocus.com/templates/archive.pike?list=1&msg=000d01bfe0fb%24418f59b0%2496217aa8%40src.bu.edu
CVE-2000-1085
The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570884410184&w=2, http://www.securityfocus.com/bid/2040, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-1031
Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, tru64
References: http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html, http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html, http://archives.neohapsis.com/archives/hp/2000-q4/0034.html
CVE-2000-1145
Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devices to identify ManTrap processes or modify arbitrary data files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mantrap
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html, http://marc.info/?l=bugtraq&m=97349791405580&w=2
CVE-2000-0573
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1, ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02, ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc
CVE-2000-0204
The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: officescan
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0340.html, http://www.antivirus.com/download/ofce_patch_35.htm, http://www.securityfocus.com/bid/1013
CVE-2000-0502
Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: virusscan
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0038.html, http://www.osvdb.org/6287, http://www.securityfocus.com/bid/1326
CVE-2000-0128
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: the_finger_server
References: http://www.glazed.org/finger/changelog.txt, http://www.osvdb.org/7610, http://www.glazed.org/finger/changelog.txt
CVE-2000-0862
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: spectra
References: http://archives.neohapsis.com/archives/vendor/2000-q3/0059.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5466, http://archives.neohapsis.com/archives/vendor/2000-q3/0059.html
CVE-2000-0022
Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: domino_server
References: http://www.securityfocus.com/bid/881, http://www.securityfocus.com/bid/881
CVE-2000-0738
WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webshield_smtp
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0101.html, http://www.securityfocus.com/bid/1589, https://exchange.xforce.ibmcloud.com/vulnerabilities/5100
CVE-2000-0110
The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: websitetool
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0110, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0110
CVE-2000-1039
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities.  NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt, windows_me, windows_98se, windows_98, windows_95
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.html, http://razor.bindview.com/publish/advisories/adv_NAPTHA.html, http://www.cert.org/advisories/CA-2000-21.html
CVE-2000-0612
Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_95, windows_98
References: http://www.securityfocus.com/bid/1406, http://www.securityfocus.com/templates/archive.pike?list=1&msg=395B7E64.9FB3D4DB%40starzetz.de, http://www.securityfocus.com/bid/1406
CVE-2000-0850
Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: siteminder
References: http://www.atstake.com/research/advisories/2000/a091100-1.txt, http://www.securityfocus.com/bid/1681, https://exchange.xforce.ibmcloud.com/vulnerabilities/5230
CVE-2000-0321
Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icradius
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0190.html, http://www.securityfocus.com/bid/1147, http://archives.neohapsis.com/archives/bugtraq/2000-04/0190.html
CVE-2000-1081
The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570878710037&w=2, http://www.securityfocus.com/bid/2030, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-0617
Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xconq
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html
CVE-2000-1220
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix, linux
References: ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P, http://seclists.org/lists/bugtraq/2000/Jan/0116.html, http://www.atstake.com/research/advisories/2000/lpd_advisory.txt
CVE-2000-0625
NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zeroport
References: http://www.l0pht.com/advisories/netzero.txt, http://www.securityfocus.com/bid/1483, http://www.l0pht.com/advisories/netzero.txt
CVE-2000-1154
RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: robinhood
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html
CVE-2000-0977
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mail_file
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.html, http://www.securityfocus.com/bid/1807, https://exchange.xforce.ibmcloud.com/vulnerabilities/5358
CVE-2000-0079
The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cern_httpd
References: http://www.securityfocus.com/bid/936, http://www.securityfocus.com/bid/936
CVE-2000-0038
glFtpD includes a default glftpd user account with a default password and a UID of 0.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: glftpd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0038, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0038
CVE-2000-0593
WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sapporoworks_winproxy
References: http://www.securityfocus.com/bid/1400, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp, https://exchange.xforce.ibmcloud.com/vulnerabilities/4831
CVE-2000-0740
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: net_tools_pki_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html, http://download.nai.com/products/licensed/pgp/hf3pki10.txt, http://www.osvdb.org/1488
CVE-2000-1053
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jrun
References: http://marc.info/?l=bugtraq&m=97236125107957&w=2, http://www.allaire.com/handlers/index.cfm?ID=17969&Method=Full, https://exchange.xforce.ibmcloud.com/vulnerabilities/5406
CVE-2000-0517
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: http://www.cert.org/advisories/CA-2000-08.html, http://www.securityfocus.com/bid/1260, https://exchange.xforce.ibmcloud.com/vulnerabilities/4550
CVE-2000-1074
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iplanet_ical
References: http://www.atstake.com/research/advisories/2000/a100900-1.txt, http://www.osvdb.org/7209, http://www.securityfocus.com/bid/1769
CVE-2000-0329
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: outlook, outlook_express, ie, internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048
CVE-2000-1153
PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: postmaster
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html
CVE-2000-0888
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bind, debian_linux
References: http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339
CVE-2000-0906
Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cached_feed.cgi_script
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0013.html, http://www.securityfocus.com/bid/1762, https://exchange.xforce.ibmcloud.com/vulnerabilities/5334
CVE-2000-0446
Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mdbms
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0274.html, http://www.securityfocus.com/bid/1252, http://archives.neohapsis.com/archives/bugtraq/2000-05/0274.html
CVE-2000-0474
Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: realserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0410.html, http://archives.neohapsis.com/archives/bugtraq/2000-05/0427.html, http://www.securityfocus.com/bid/1288
CVE-2000-0427
The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: etoken
References: http://www.l0pht.com/advisories/etoken-piepa.txt, http://www.osvdb.org/3266, http://www.securityfocus.com/bid/1170
CVE-2000-1042
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux
References: http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1, https://exchange.xforce.ibmcloud.com/vulnerabilities/5730, http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1
CVE-2000-0118
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris, linux
References: http://marc.info/?l=bugtraq&m=94935300520617&w=2, http://marc.info/?l=bugtraq&m=94935300520617&w=2
CVE-2000-0395
Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cproxy_server
References: http://www.securityfocus.com/bid/1213, http://www.securityfocus.com/templates/archive.pike?list=1&msg=007d01bfbf48%24e44f0e40%2401dc11ac%40peopletel.org, http://www.securityfocus.com/bid/1213
CVE-2000-0803
GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: groff
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/5280, https://exchange.xforce.ibmcloud.com/vulnerabilities/5280
CVE-2000-1170
Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netsnap
References: http://marc.info/?l=bugtraq&m=97439536016554&w=2, http://www.netsnap.com/new.htm, http://www.securityfocus.com/bid/1956
CVE-2000-0239
Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mercur_mailserver, mercur_pop3_server, mercur_imap4_server
References: http://marc.info/?l=bugtraq&m=95325335825295&w=2, http://www.securityfocus.com/bid/1056, http://www.ussrback.com/labs36.html
CVE-2000-0591
Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: bordermanager
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0038.html, http://www.securityfocus.com/bid/1432, http://archives.neohapsis.com/archives/bugtraq/2000-07/0038.html
CVE-2000-0817
Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: network_monitor
References: http://xforce.iss.net/alerts/index.php, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083, https://exchange.xforce.ibmcloud.com/vulnerabilities/5399
CVE-2000-0830
annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 through 22705.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webtv
References: http://www.securityfocus.com/archive/1/81852, http://www.securityfocus.com/bid/1671, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-074
CVE-2000-1224
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resin
References: http://marc.info/?l=bugtraq&m=97502269408279&w=2, http://www.securityfocus.com/archive/1/146770, http://www.securityfocus.com/bid/1986
CVE-2000-0487
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1295, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-032, http://www.securityfocus.com/bid/1295
CVE-2000-0719
VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: varicad
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0126.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0126.html
CVE-2000-0010
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: webwho\+
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0010, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0010
CVE-2000-0878
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailto_cgi_script
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0088.html, http://www.securityfocus.com/bid/1669, https://exchange.xforce.ibmcloud.com/vulnerabilities/5241
CVE-2000-0249
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.securityfocus.com/bid/1152, http://xforce.iss.net/alerts/advise47.php3, http://www.securityfocus.com/bid/1152
CVE-2000-1106
Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_viruswall
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0016.html, http://www.securityfocus.com/archive/1/147563, http://www.securityfocus.com/bid/2014
CVE-2000-1165
Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: syslog-ng
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:02.syslog-ng.asc, http://archives.neohapsis.com/archives/bugtraq/2000-11/0300.html, http://www.balabit.hu/products/syslog-ng/
CVE-2000-0320
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cobalt_raq_2, cobalt_raq_3i, qpopper
References: http://www.securityfocus.com/bid/1133, http://www.securityfocus.com/templates/archive.pike?list=1&msg=9763.000421%40SECURITY.NNOV.RU, http://www.securityfocus.com/bid/1133
CVE-2000-0308
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: proxy_server, enterprise_server, fasttrack_server, unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a
CVE-2000-0043
Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webcam_http_server
References: http://www.securityfocus.com/bid/905, http://www.securityfocus.com/bid/905
CVE-2000-1216
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://www-1.ibm.com/support/docview.wss?uid=isg1IY07832, http://www.kb.cert.org/vuls/id/433499, https://exchange.xforce.ibmcloud.com/vulnerabilities/7929
CWE: CWE-120
CVE-2000-1241
Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sips
References: http://sourceforge.net/forum/forum.php?forum_id=25971, http://sourceforge.net/forum/forum.php?forum_id=25971
CVE-2000-0867
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, secure_linux, linux, mandrake_linux, slackware_linux
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-032.0.txt, http://archives.neohapsis.com/archives/bugtraq/2000-09/0193.html, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:050
CVE-2000-1134
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, openlinux_edesktop, linux, hp-ux, mandrake_linux
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:76.tcsh-csh.asc, ftp://patches.sgi.com/support/free/security/advisories/20011103-02-P, http://archives.neohapsis.com/archives/bugtraq/2000-10/0418.html
CVE-2000-1111
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/archive/1/147914, http://www.securityfocus.com/bid/2018, https://exchange.xforce.ibmcloud.com/vulnerabilities/5598
CVE-2000-1114
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ewave_servletexec
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0285.html, http://www.securityfocus.com/bid/1970, http://archives.neohapsis.com/archives/bugtraq/2000-11/0285.html
CVE-2000-0078
The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5728, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5728
CVE-2000-0111
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rightfax
References: http://www.securityfocus.com/bid/953, http://www.securityfocus.com/bid/953
CVE-2000-0108
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: intellivend
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0108, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0108
CVE-2000-0406
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt, http://www.cert.org/advisories/CA-2000-05.html, http://www.redhat.com/support/errata/RHSA-2000-028.html
CVE-2000-0227
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0254.html, http://marc.info/?l=bugtraq&m=95421263519558&w=2, http://www.securityfocus.com/bid/1072
CVE-2000-0666
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, suse_linux, secure_linux, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0206.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0230.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0236.html
CVE-2000-0675
Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gatekeeper
References: http://www.securityfocus.com/bid/1477, http://www.securityfocus.com/templates/archive.pike?list=1&msg=00af01bfece2%24a52cbd80%24367e1ec4%40kungphusion, https://exchange.xforce.ibmcloud.com/vulnerabilities/4948
CVE-2000-1124
Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=97569466809056&w=2, http://www-1.ibm.com/support/search.wss?rs=0&q=IY12638&apar=only, http://www.securityfocus.com/bid/2037
CVE-2000-0256
Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: frontpage, windows_nt, personal_web_server
References: http://www.securityfocus.com/archive/1/470458/100/0/threaded, http://www.securityfocus.com/bid/1117, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-028
CVE-2000-0902
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpphotoalbum
References: http://www.securityfocus.com/archive/1/80858, https://exchange.xforce.ibmcloud.com/vulnerabilities/5209, http://www.securityfocus.com/archive/1/80858