DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-1007
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: i-gear
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0048.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5791, http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0048.html
CVE-2000-0129
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt, windows_95, windows_98
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0129, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0129
CVE-2000-0983
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netmeeting
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ273854, http://www.securityfocus.com/archive/1/140341, http://www.securityfocus.com/bid/1798
CVE-2000-1041
Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ypbind
References: http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html, http://www.calderasystems.com/support/security/advisories/CSSA-2000-039.0.txt, http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1
CVE-2000-0459
IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imp
References: http://marc.info/?l=bugtraq&m=95672120116627&w=2, http://www.securityfocus.com/bid/1361, http://marc.info/?l=bugtraq&m=95672120116627&w=2
CVE-2000-0428
Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: interscan_viruswall
References: http://www.nai.com/nai_labs/asp_set/advisory/39_Trend.asp, http://www.securityfocus.com/bid/1168, http://www.nai.com/nai_labs/asp_set/advisory/39_Trend.asp
CVE-2000-0255
The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: edgeblaster
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0022.html, http://www.securityfocus.com/bid/1091, http://archives.neohapsis.com/archives/bugtraq/2000-04/0022.html
CVE-2000-0557
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cmail
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html, http://www.securityfocus.com/bid/1318, https://exchange.xforce.ibmcloud.com/vulnerabilities/4626
CVE-2000-0857
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: muh
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0067.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0068.html, http://www.securityfocus.com/bid/1665
CVE-2000-0179
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openview_omniback_ii
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0387.html, http://www.securityfocus.com/bid/1015, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0006-115
CVE-2000-0074
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: plusmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0074, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0074
CVE-2000-0528
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: net_tools_pki_server
References: ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt, http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html, http://www.osvdb.org/4353
CVE-2000-0717
GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ftp_server_nt_2000, ftp_server_95_98
References: http://www.securityfocus.com/bid/1619, http://www.securityfocus.com/templates/archive.pike?list=1&msg=02ff01c0124c%24e9387660%240201a8c0%40aviram, https://exchange.xforce.ibmcloud.com/vulnerabilities/5166
CVE-2000-0298
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0027.html, http://www.securityfocus.com/bid/1758, https://exchange.xforce.ibmcloud.com/vulnerabilities/4278
CVE-2000-0530
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openlinux, kde
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-015.0.txt, http://archives.neohapsis.com/archives/bugtraq/2000-05/0387.html, http://www.redhat.com/support/errata/RHSA-2000-032.html
CVE-2000-0162
The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: visual_studio, ie, internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-011, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-011
CVE-2000-0228
Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_media_rights_manager
References: http://www.securityfocus.com/bid/1058, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-016, http://www.securityfocus.com/bid/1058
CVE-2000-0907
EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eserv
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0131.html, http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0131.html
CVE-2000-0531
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openlinux_eserver, openlinux, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0409.html, http://www.redhat.com/support/errata/RHSA-2000-045.html, http://www.securityfocus.com/bid/1377
CVE-2000-0434
The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: allmanage
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html, http://www.securityfocus.com/bid/1217, http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html
CVE-2000-0313
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: http://www.openbsd.org/errata.html#ifmedia, http://www.osvdb.org/7540, http://www.openbsd.org/errata.html#ifmedia
CVE-2000-0955
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virtual_central_office_4000
References: http://www.atstake.com/research/advisories/2000/a102600-1.txt, http://www.securityfocus.com/bid/1885, https://exchange.xforce.ibmcloud.com/vulnerabilities/5425
CVE-2000-0408
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.microsoft.com/technet/support/kb.asp?ID=260205, http://www.securityfocus.com/bid/1190, http://www.ussrback.com/labs40.html
CVE-2000-0523
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: eserv
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0009.html, http://www.securityfocus.com/bid/1315, https://exchange.xforce.ibmcloud.com/vulnerabilities/4614
CVE-2000-0217
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ssh, ssh2, openssh
References: http://www.securityfocus.com/bid/1006, http://www.securityfocus.com/bid/1006
CVE-2000-0875
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wftpd, wftpd_pro
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html, http://www.wftpd.com/bug_gpf.htm, https://exchange.xforce.ibmcloud.com/vulnerabilities/5194
CVE-2000-0341
ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cassandra_nntp_server
References: http://marc.info/?l=ntbugtraq&m=95736106504870&w=2, http://www.securityfocus.com/bid/1156, http://marc.info/?l=ntbugtraq&m=95736106504870&w=2
CVE-2000-0581
Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1414, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161841.4619A-100000%40fjord.fscinternet.com, http://www.securityfocus.com/bid/1414
CVE-2000-0706
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ntop
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:36.ntop.asc, http://www.debian.org/security/2000/20000830, http://www.osvdb.org/1513
CVE-2000-0027
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: network_station_manager
References: http://www.iss.net/security_center/static/5381.php, http://www.securityfocus.com/archive/1/39962, http://www.securityfocus.com/bid/900
CVE-2000-1035
Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: typsoft
References: http://marc.info/?l=bugtraq&m=96879389027478&w=2, http://www.securityfocus.com/bid/1690, http://www.synnergy.net/Archives/Advisories/dethy/typsoft-ftpd.txt
CVE-2000-1198
qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: qpopper
Related CWEs: CWE-667
Related CAPECs: CAPEC-25, CAPEC-27, CAPEC-26
MITRE ATT&CK Techniques: T1499.004
MITRE ATT&CK Tactics: T1499
References: http://marc.info/?l=bugtraq&m=95624629924545&w=2, http://marc.info/?l=bugtraq&m=95634229925906&w=2, http://www.securityfocus.com/bid/1132
CWE: CWE-667
MITRE ATT&CK techniques: T1499.004
MITRE ATT&CK tactics: T1499
CVE-2000-0031
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0031, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0031
CVE-2000-0894
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: soho_firewall
References: http://www.osvdb.org/4404, http://www.securityfocus.com/bid/2119, http://xforce.iss.net/alerts/advise70.php
CVE-2000-0647
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html, http://www.securityfocus.com/bid/1506, http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
CVE-2000-0073
Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt, windows_98
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249973, http://xforce.iss.net/search.php3?type=2&pattern=win-malformed-rtf-control-word, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-005
CVE-2000-1199
PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postgresql
References: http://marc.info/?l=bugtraq&m=95659987018649&w=2, http://www.securityfocus.com/bid/1139, https://exchange.xforce.ibmcloud.com/vulnerabilities/4364
CVE-2000-0655
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mozilla, communicator
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc, ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-011.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2000-07/0456.html
CVE-2000-0861
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailman
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0040.html, http://archives.neohapsis.com/archives/freebsd/2000-09/0112.html, http://www.securityfocus.com/bid/1667
CVE-2000-0700
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios, gigabit_switch_router_12012, gigabit_switch_router_12008, gigabit_switch_router_12016
References: http://www.cisco.com/warp/public/707/gsraclbypassdos-pub.shtml, http://www.osvdb.org/793, http://www.osvdb.org/798
CVE-2000-0926
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cyberoffice_shopping_cart
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html, http://marc.info/?l=bugtraq&m=97050627707128&w=2, http://www.securityfocus.com/bid/1733
CVE-2000-0112
The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: http://marc.info/?l=bugtraq&m=94973075614088&w=2, http://www.securityfocus.com/bid/960, http://marc.info/?l=bugtraq&m=94973075614088&w=2
CVE-2000-1217
Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://www.kb.cert.org/vuls/id/818496, http://www.securityfocus.com/bid/1973, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-089
CVE-2000-0975
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: foundation_directory
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0210.html, http://www.osvdb.org/435, https://exchange.xforce.ibmcloud.com/vulnerabilities/5750
CVE-2000-0134
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: check_it_out
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0134, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0134
CVE-2000-0371
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: kde
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-005.0.txt, http://www.securityfocus.com/bid/1269, ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-005.0.txt
CVE-2000-1118
24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 24link
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0369.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0369.html
CVE-2000-1002
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communigate_pro
References: http://www.securityfocus.com/archive/1/139523, http://www.securityfocus.com/bid/1792, https://exchange.xforce.ibmcloud.com/vulnerabilities/5363
CVE-2000-0351
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.09b, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.09b
CVE-2000-0287
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: technology_bizdb
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0058.html, http://www.securityfocus.com/bid/1104, http://archives.neohapsis.com/archives/bugtraq/2000-04/0058.html
CVE-2000-0220
ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zonealarm
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0220, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0220
CVE-2000-0182
iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: iplanet_web_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0182, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0182
CVE-2000-1057
Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openview_network_node_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0140.html, http://www.securityfocus.com/bid/1682, https://exchange.xforce.ibmcloud.com/vulnerabilities/5229
CVE-2000-0259
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt, terminal_server
References: http://www.securityfocus.com/bid/1105, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-024, http://www.securityfocus.com/bid/1105
CVE-2000-0882
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: express_520t, express_550f, express_550t, express_510t
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0533.html, http://www.securityfocus.com/bid/1647, http://archives.neohapsis.com/archives/bugtraq/2000-08/0533.html
CVE-2000-0973
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: curl
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:72.curl.asc, http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html, http://www.securityfocus.com/bid/1804
CVE-2000-0065
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inetserv
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0065, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0065
CVE-2000-0924
Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: master_index
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0141.html, http://www.osvdb.org/461, http://www.securityfocus.com/bid/1772
CVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd
References: http://www.openbsd.org/errata25.html#cron, http://www.openbsd.org/errata25.html#cron
CVE-2000-0681
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: weblogic_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0186.html, http://www.securityfocus.com/bid/1570, http://archives.neohapsis.com/archives/bugtraq/2000-08/0186.html
CVE-2000-0887
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bind
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html, http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338
CVE-2000-0718
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: mandrake_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0146.html, http://www.securityfocus.com/bid/1567, http://archives.neohapsis.com/archives/bugtraq/2000-08/0146.html
CVE-2000-0417
The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3220-h_dsl_router, gatorsurf
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0075.html, http://archives.neohapsis.com/archives/bugtraq/2000-05/0280.html, http://www.securityfocus.com/bid/1219
CVE-2000-0603
Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server
References: http://www.securityfocus.com/bid/1444, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-048, https://exchange.xforce.ibmcloud.com/vulnerabilities/4921
CVE-2000-1062
Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jetdirect
References: http://marc.info/?l=bugtraq&m=97119729613778&w=2, http://www.securityfocus.com/bid/1775, https://exchange.xforce.ibmcloud.com/vulnerabilities/5353
CVE-2000-0728
xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xpdf
References: http://marc.info/?l=bugtraq&m=96766355023239&w=2, http://marc.info/?l=bugtraq&m=96886599829687&w=2, http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt
CVE-2000-1051
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://marc.info/?l=bugtraq&m=97236692714978&w=2, http://www.allaire.com/handlers/index.cfm?ID=17968&Method=Full, https://exchange.xforce.ibmcloud.com/vulnerabilities/5405
CVE-2000-0095
The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://www.securityfocus.com/bid/944, http://www.securityfocus.com/templates/advisory.html?id=2041, http://www.securityfocus.com/bid/944
CVE-2000-0860
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0455.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0477.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0150.html
CVE-2000-0652
IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: websphere_application_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0342.html, http://www.securityfocus.com/bid/1500, https://exchange.xforce.ibmcloud.com/vulnerabilities/5012
CVE-2000-0527
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailstudio_2000
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html, http://www.securityfocus.com/bid/1335, http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html
CVE-2000-0280
Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: realplayer
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0018.html, http://www.securityfocus.com/bid/1088, http://archives.neohapsis.com/archives/bugtraq/2000-04/0018.html
CVE-2000-0443
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jetadmin
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0281.html, http://www.osvdb.org/1350, http://www.securityfocus.com/bid/1243
CVE-2000-0976
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xlib
References: ftp://patches.sgi.com/support/free/security/advisories/20020502-01-I, http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html, http://www.iss.net/security_center/static/5751.php
CVE-2000-0656
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: proxy
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html, http://www.analogx.com/contents/download/network/proxy.htm, http://www.securityfocus.com/bid/1504
CVE-2000-0624
Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winamp
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0289.html, http://www.securityfocus.com/bid/1496, http://www.winamp.com/getwinamp/newfeatures.jhtml
CVE-2000-0157
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-012.txt.asc, http://www.securityfocus.com/bid/992, ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-012.txt.asc
CVE-2000-0766
Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vqserver
References: http://www.securityfocus.com/bid/1610, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008270354.UAA10952%40user4.hushmail.com, https://exchange.xforce.ibmcloud.com/vulnerabilities/5152
CVE-2000-0669
Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netware
References: http://www.securityfocus.com/bid/1467, http://www.securityfocus.com/templates/archive.pike?list=1&msg=000501bfeab5%249330c3d0%24d801a8c0%40dimuthu.baysidegrp.com.au, http://www.securityfocus.com/bid/1467
CVE-2000-0854
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: office
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0277.html, http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0155.html, http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0117.html
CVE-2000-0116
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.osvdb.org/1212, http://www.securityfocus.com/bid/954, http://www.osvdb.org/1212
CVE-2000-0678
PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pgp
References: http://www.cert.org/advisories/CA-2000-18.html, http://www.osvdb.org/4354, http://www.securityfocus.com/bid/1606
CVE-2000-1175
Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: koules
References: http://www.securityfocus.com/archive/1/145823, http://www.securityfocus.com/bid/1967, http://www.securityfocus.com/archive/1/145823
CVE-2000-0482
Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0473.html, http://www.checkpoint.com/techsupport/alerts/list_vun.html#IP_Fragmentation, http://www.osvdb.org/1379
CVE-2000-0713
Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: acrobat_business_tools, acrobat, acrobat_reader
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0382.html, http://www.adobe.com/misc/pdfsecurity.html, http://www.securityfocus.com/bid/1509
CVE-2000-0389
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerbnet, linux, cygnus_network_security, kerberos, kerberos_5
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html, http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html, http://www.cert.org/advisories/CA-2000-06.html
CVE-2000-0673
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt
References: http://www.nai.com/research/covert/advisories/044.asp, http://www.securityfocus.com/bid/1514, http://www.securityfocus.com/bid/1515
CVE-2000-0569
Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sygate
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0189.html, http://www.securityfocus.com/bid/1420, https://exchange.xforce.ibmcloud.com/vulnerabilities/5049
CVE-2000-1247
The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jserv
Related CWEs: CWE-16
References: http://archive.apache.org/dist/java/java.apache.org-www.tar.gz, http://marc.info/?l=java-apache-users&m=97036799917909&w=2, http://securityreason.com/securityalert/8412
CWE: CWE-16
CVE-2000-1047
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: domino_enterprise_server, domino_mail_server
References: http://www.osvdb.org/442, http://www.securityfocus.com/archive/1/143071, http://www.securityfocus.com/bid/1905
CVE-2000-0252
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dansie_shopping_cart
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html, http://www.securityfocus.com/bid/1115, https://exchange.xforce.ibmcloud.com/vulnerabilities/4975
CVE-2000-0535
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openssl, freebsd
References: http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html, http://www.securityfocus.com/bid/1340, http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html
CVE-2000-0177
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dnstools
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0000.html, http://www.securityfocus.com/bid/1028, http://archives.neohapsis.com/archives/bugtraq/2000-03/0000.html
CVE-2000-0876
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wftpd, wftpd_pro
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html, http://www.osvdb.org/5829, https://exchange.xforce.ibmcloud.com/vulnerabilities/5196
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2000-0776
Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: statistics_server_livestats
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0118.html, http://www.securityfocus.com/bid/1568, https://exchange.xforce.ibmcloud.com/vulnerabilities/5113
CVE-2000-0146
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: groupwise
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0049.html, http://www.securityfocus.com/bid/972, http://archives.neohapsis.com/archives/bugtraq/2000-02/0049.html
CVE-2000-0743
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gopherd
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0112.html, http://www.securityfocus.com/bid/1569, http://archives.neohapsis.com/archives/bugtraq/2000-08/0112.html
CVE-2000-1136
elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: elvis_tiny
References: http://marc.info/?l=bugtraq&m=97502995616099&w=2, http://www.securityfocus.com/bid/1984, https://exchange.xforce.ibmcloud.com/vulnerabilities/5632
CVE-2000-0746
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks.  They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, frontpage, internet_information_services
References: http://www.securityfocus.com/bid/1594, http://www.securityfocus.com/bid/1595, http://www.securityfocus.com/templates/archive.pike?list=1&msg=39A12BD6.E811BF4F%40nat.bg
CVE-2000-0115
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: https://marc.info/?l=ntbugtraq&m=94881904724731&w=2, https://marc.info/?l=ntbugtraq&m=94881904724731&w=2
CVE-2000-0961
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netscape_messaging_server_multiplexor, messaging_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0334.html, http://www.securityfocus.com/bid/1721, https://exchange.xforce.ibmcloud.com/vulnerabilities/5292
CVE-2000-0932
MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mailsweeper_for_smtp
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0181.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5641, http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0181.html
CVE-2000-0041
Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: macos
References: http://www.securityfocus.com/bid/890, http://www.securityfocus.com/bid/890
CVE-2000-0777
The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: money
References: http://www.securityfocus.com/bid/1615, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-061, http://www.securityfocus.com/bid/1615