DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-1116
Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: broker_ftp_server
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0041.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5388, http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0041.html
CVE-2000-0413
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, frontpage, internet_information_services
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0084.html, http://www.securityfocus.com/bid/1174, http://archives.neohapsis.com/archives/bugtraq/2000-05/0084.html
CVE-2000-0639
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: big_brother
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html, http://www.osvdb.org/1472, http://www.securityfocus.com/bid/1494
CVE-2000-0735
Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: becky_internet_mail
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0234.html, http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt, http://www.securityfocus.com/bid/1588
CVE-2000-1192
Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: snmp_trap_watcher
References: http://www.bttsoftware.co.uk/snmptrap.html, http://www.securiteam.com/windowsntfocus/5ZP0C000KC.html, http://www.securityfocus.com/bid/985
CVE-2000-0105
Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: outlook_express
References: http://www.securityfocus.com/bid/962, http://www.securityfocus.com/bid/962
CVE-2000-0300
The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pcanywhere
References: http://www.securityfocus.com/bid/1093, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000406030958.23902.qmail%40securityfocus.com, http://www.securityfocus.com/bid/1093
CVE-2000-0176
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: serv-u
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0417.html, http://www.securityfocus.com/bid/1016, http://archives.neohapsis.com/archives/bugtraq/2000-02/0417.html
CVE-2000-0254
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dansie_shopping_cart
References: http://www.securityfocus.com/bid/1115, https://exchange.xforce.ibmcloud.com/vulnerabilities/4954, http://www.securityfocus.com/bid/1115
CVE-2000-0982
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt, http://www.securityfocus.com/bid/1793, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076
CVE-2000-1054
Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_access_control_server
References: http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml, http://www.securityfocus.com/bid/1705, https://exchange.xforce.ibmcloud.com/vulnerabilities/5272
CVE-2000-0057
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?ID=13978&Method=Full, http://www.securityfocus.com/bid/917, http://www.allaire.com/handlers/index.cfm?ID=13978&Method=Full
CVE-2000-0463
BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: beos
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0197.html, http://www.securityfocus.com/bid/1222, http://archives.neohapsis.com/archives/bugtraq/2000-05/0197.html
CVE-2000-1029
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bind
References: http://www.securityfocus.com/archive/1/141660, http://www.securityfocus.com/bid/1887, https://exchange.xforce.ibmcloud.com/vulnerabilities/5462
CVE-2000-1038
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: as400_firewall
References: http://as400service.rochester.ibm.com/n_dir/nas4apar.NSF/5ec6cdc6ab42894a862568f90073c74a/9ce636030a58807186256955003d128d?OpenDocument, http://www-1.ibm.com/support/search.wss?rs=0&q=SA90544&apar=only, https://exchange.xforce.ibmcloud.com/vulnerabilities/5266
CVE-2000-0556
Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to the user dialog running on port 8002.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cmail
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html, http://www.computalynx.net/news/Jun2000/news0806200001.html, http://www.securityfocus.com/bid/1319
CVE-2000-0852
Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://archives.neohapsis.com/archives/freebsd/2000-09/0110.html, http://www.osvdb.org/1559, http://www.securityfocus.com/bid/1686
CVE-2000-0748
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openldap
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.html, http://www.securityfocus.com/bid/1511, http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.html
CVE-2000-0654
Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server
References: http://www.securityfocus.com/bid/1466, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041, https://exchange.xforce.ibmcloud.com/vulnerabilities/4582
CVE-2000-0375
The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: freebsd
References: http://www.osvdb.org/6084, http://www.osvdb.org/6084
CVE-2000-0672
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tomcat
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html, http://www.securityfocus.com/bid/1548, https://exchange.xforce.ibmcloud.com/vulnerabilities/5160
CVE-2000-0050
The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: spectra
References: http://www.allaire.com/handlers/index.cfm?ID=13976&Method=Full, http://www.securityfocus.com/bid/915, http://www.allaire.com/handlers/index.cfm?ID=13976&Method=Full
CVE-2000-0261
The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ken
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0073.html, http://www.osvdb.org/1282, http://www.securityfocus.com/bid/1103
CVE-2000-0871
Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: eftp
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html, http://www.osvdb.org/409, http://www.securityfocus.com/bid/1677
CVE-2000-0795
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://www.osvdb.org/1485, http://www.securityfocus.com/bid/1529, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl
CVE-2000-0318
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mercur_mailserver
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0057.html, http://www.securityfocus.com/bid/1144, http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0057.html
CVE-2000-0838
Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fur_http_server
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0111.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5237, http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0111.html
CVE-2000-0933
The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1729, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-069, https://exchange.xforce.ibmcloud.com/vulnerabilities/5301
CVE-2000-0130
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-00.02a, http://marc.info/?l=bugtraq&m=94908470928258&w=2, ftp://ftp.sco.com/SSE/security_bulletins/SB-00.02a
CVE-2000-0931
Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pegasus_mail
References: http://www.securityfocus.com/archive/1/137518, http://www.securityfocus.com/bid/1750, http://www.securityfocus.com/archive/1/137518
CVE-2000-1019
Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: search_software
References: http://marc.info/?l=bugtraq&m=97301487015664&w=2, http://www.securityfocus.com/bid/1866, https://exchange.xforce.ibmcloud.com/vulnerabilities/5439
CVE-2000-0481
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: k-mail
References: http://securityfocus.com/templates/archive.pike?list=82&date=2000-06-22&msg=00060200422401.01667%40lez, http://www.securityfocus.com/bid/1380, https://exchange.xforce.ibmcloud.com/vulnerabilities/4993
CVE-2000-0978
bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: big_brother_network_monitor
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0162.html, http://www.securityfocus.com/bid/1779, https://exchange.xforce.ibmcloud.com/vulnerabilities/5719
CVE-2000-0692
ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: realsecure
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0267.html, http://www.securityfocus.com/bid/1597, http://archives.neohapsis.com/archives/bugtraq/2000-08/0267.html
CVE-2000-1044
Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html, http://www.securityfocus.com/bid/1820, https://exchange.xforce.ibmcloud.com/vulnerabilities/5394
CVE-2000-0903
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: voyager
References: http://www.securityfocus.com/archive/1/79956, http://www.securityfocus.com/bid/1648, http://www.securityfocus.com/archive/1/79956
CVE-2000-1244
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inoculateit_agent_for_exchange
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0158.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0158.html
CVE-2000-1089
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: http://www.securityfocus.com/bid/2048, http://www.stake.com/research/advisories/2000/a120400-1.txt, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094
CVE-2000-0674
ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ftp_browser
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0177.html, http://www.securityfocus.com/bid/1471, https://exchange.xforce.ibmcloud.com/vulnerabilities/5187
CVE-2000-0393
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html, http://www.novell.com/linux/security/advisories/suse_security_announce_50.html, http://www.securityfocus.com/bid/1206
CVE-2000-0606
Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, linux, mandrake_linux
References: http://www.securityfocus.com/bid/1371, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk, http://www.securityfocus.com/bid/1371
CVE-2000-1230
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phorum
References: http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html, http://hispahack.ccc.de/mi020.html, http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
CVE-2000-0722
Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: gnome_updater
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0240.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.html, http://www.securityfocus.com/bid/1593
CVE-2000-0959
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: glibc
References: http://www.securityfocus.com/archive/1/85028, http://www.securityfocus.com/bid/1719, https://exchange.xforce.ibmcloud.com/vulnerabilities/5299
CVE-2000-0185
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: realserver_g2, realserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0069.html, http://www.securityfocus.com/bid/1049, http://archives.neohapsis.com/archives/bugtraq/2000-03/0069.html
CVE-2000-0708
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: telnetserver
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=NTBUGTRAQ&P=R4247, http://www.pragmasys.com/TelnetServer/, http://www.securityfocus.com/bid/1605
CVE-2000-1206
Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://www.apacheweek.com/issues/00-01-07#status, https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E, https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E
CVE-2000-1149
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://www.securityfocus.com/archive/1/143991, http://www.securityfocus.com/bid/1924, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087
CVE-2000-0751
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd, netbsd, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html, http://archives.neohapsis.com/archives/freebsd/2000-08/0336.html, http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h
CVE-2000-0913
mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0352.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0174.html, http://archives.neohapsis.com/archives/hp/2000-q4/0021.html
CVE-2000-0542
Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: axc_tigris_multiservice_access_platform
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0104.html, http://www.securityfocus.com/bid/1345, https://exchange.xforce.ibmcloud.com/vulnerabilities/4705
CVE-2000-0230
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: halloween_linux, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0168.html, http://www.redhat.com/support/errata/RHSA-2000-016.html, http://www.securityfocus.com/bid/1060
CVE-2000-0013
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://www.securityfocus.com/bid/909, http://www.securityfocus.com/bid/909
CVE-2000-0352
Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pine
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt, http://www.novell.com/linux/security/advisories/suse_security_announce_36.html, http://www.securityfocus.com/bid/810
CVE-2000-0812
The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: java_system_web_server
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/197&type=0&nav=sec.sba, http://www.securityfocus.com/bid/1600, http://www.securityfocus.com/templates/advisory.html?id=2542
CVE-2000-0847
Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pine, imap
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0425.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0437.html, http://archives.neohapsis.com/archives/freebsd/2000-09/0108.html
CVE-2000-1034
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://marc.info/?l=bugtraq&m=97349782305448&w=2, http://www.securityfocus.com/bid/1899, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-085
CVE-2000-0290
Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webstar_http_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0005.html, http://www.securityfocus.com/bid/1822, https://exchange.xforce.ibmcloud.com/vulnerabilities/4792
CVE-2000-0577
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: professional_services_ftpserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0345.html, http://www.securityfocus.com/bid/1411, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211351280.23780-100000%40nimue.tpi.pl
CVE-2000-0599
Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imesh
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0335.html, http://www.imesh.com/download/download.html, http://www.securityfocus.com/bid/1407
CVE-2000-0893
The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: http://www.kb.cert.org/vuls/id/28027, http://www.kb.cert.org/vuls/id/28027
CVE-2000-0376
Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: filo
References: http://www.securityfocus.com/bid/1324, http://www.securityfocus.com/bid/1324
CVE-2000-0009
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: optivity_net_architect
References: http://www.securityfocus.com/bid/907, http://www.securityfocus.com/bid/907
CVE-2000-0355
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pbpg, suse_linux, linux
References: http://www.novell.com/linux/security/advisories/suse_security_announce_21.html, http://www.novell.com/linux/security/advisories/suse_security_announce_21.html
CVE-2000-0514
GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerberos_5
References: http://web.mit.edu/kerberos/www/advisories/ftp.txt, http://www.osvdb.org/4885, http://www.securityfocus.com/bid/1374
CVE-2000-0440
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, freebsd
References: ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-002.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2000-05/0088.html, http://www.securityfocus.com/bid/1173
CVE-2000-0917
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, linux, openlinux_edesktop, openlinux, openlinux_ebuilder
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:56.lprng.asc, http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html, http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt
CVE-2000-0454
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0367.html, http://archives.neohapsis.com/archives/bugtraq/2000-05/0434.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0019.html
CVE-2000-0797
Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040104-01-P.asc, http://www.osvdb.org/3815, http://www.securityfocus.com/bid/1526
CVE-2000-0066
WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: website_professional
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0066, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0066
CVE-2000-0201
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.securityfocus.com/bid/1033, http://www.securityfocus.com/bid/1033
CVE-2000-0900
Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thttpd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:73.thttpd.asc, http://archives.neohapsis.com/archives/bugtraq/2000-10/0025.html, http://www.securityfocus.com/bid/1737
CVE-2000-0579
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: irix
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html, http://www.securityfocus.com/bid/1413, http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html
CVE-2000-0634
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communigate_pro
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0223.html, http://www.osvdb.org/5774, http://www.securityfocus.com/bid/1493
CVE-2000-1202
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server_ssl_module_common
References: http://www.securityfocus.com/archive/1/54073, http://www.securityfocus.com/bid/1092, https://exchange.xforce.ibmcloud.com/vulnerabilities/4235
CVE-2000-0042
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mail_server
References: http://www.securityfocus.com/bid/895, http://www.securityfocus.com/bid/895
CVE-2000-0524
Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook, exchange_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0045.html, http://www.securityfocus.com/bid/1333, http://archives.neohapsis.com/archives/bugtraq/2000-06/0045.html
CVE-2000-0853
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: yabb
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0072.html, http://www.securityfocus.com/bid/1668, https://exchange.xforce.ibmcloud.com/vulnerabilities/5254
CVE-2000-0567
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: outlook, outlook_express
References: http://www.securityfocus.com/bid/1481, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-043, https://exchange.xforce.ibmcloud.com/vulnerabilities/4953
CVE-2000-0555
Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ceilidh
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html, http://www.securityfocus.com/bid/1320, https://exchange.xforce.ibmcloud.com/vulnerabilities/4622
CVE-2000-0039
AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: search_intranet
References: http://www.osvdb.org/15, http://www.securityfocus.com/bid/896, http://www.osvdb.org/15
CVE-2000-0081
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. j&#x41;vascript.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hotmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0081, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0081
CVE-2000-0289
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel, debian_linux, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0284.html, http://www.novell.com/linux/security/advisories/suse_security_announce_48.html, http://www.securityfocus.com/bid/1078
CVE-2000-0537
BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bru
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0013.html, http://www.calderasystems.com/support/security/advisories/CSSA-2000-018.0.txt, http://www.securityfocus.com/bid/1321
CVE-2000-0802
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: personal_privacy
References: http://marc.info/?l=bugtraq&m=96430372326912&w=2, http://marc.info/?l=bugtraq&m=96430372326912&w=2
CVE-2000-0702
The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0261.html, http://www.securityfocus.com/bid/1602, https://exchange.xforce.ibmcloud.com/vulnerabilities/5131
CVE-2000-0131
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: warftpd
References: http://marc.info/?l=bugtraq&m=94960703721503&w=2, http://www.osvdb.org/4677, http://www.securityfocus.com/bid/966
CVE-2000-1048
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wingate
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0245.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5373, http://archives.neohapsis.com/archives/bugtraq/2000-10/0245.html
CVE-2000-1152
Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: beos
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html
CVE-2000-0055
Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/918, http://www.securityfocus.com/bid/918
CVE-2000-1155
RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: robinhood
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html
CVE-2000-0849
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: windows_media_services
References: http://www.securityfocus.com/bid/1655, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-064, https://exchange.xforce.ibmcloud.com/vulnerabilities/5193
CVE-2000-0716
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: mdaemon
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=459, http://www.securityfocus.com/bid/1553, https://exchange.xforce.ibmcloud.com/vulnerabilities/5070
CVE-2000-1123
Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=97569466809056&w=2, http://www-1.ibm.com/support/search.wss?rs=0&q=IY12638&apar=only, http://www.securityfocus.com/bid/2036
CVE-2000-0089
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249108, http://www.securityfocus.com/bid/947, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-004
CVE-2000-0092
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: netbsd, openbsd, freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:01.make.asc, http://www.securityfocus.com/bid/939, ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:01.make.asc
CVE-2000-0379
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: r-series_routers
References: http://www.netopia.com/equipment/purchase/fmw_update.html, http://www.securityfocus.com/bid/1177, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005082054.NAA32590%40linux.mtndew.com
CVE-2000-0883
The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mandrake_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0111.html, http://www.securityfocus.com/bid/1678, https://exchange.xforce.ibmcloud.com/vulnerabilities/5257
CVE-2000-1164
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: winvnc
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html, http://www.securityfocus.com/bid/1961, https://exchange.xforce.ibmcloud.com/vulnerabilities/5545
CVE-2000-0498
Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ewave_servletexec
Related CWEs: CWE-178
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html, http://www.securityfocus.com/bid/1328, https://exchange.xforce.ibmcloud.com/vulnerabilities/4649
CWE: CWE-178
CVE-2000-1075
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: iplanet_certificate_management_system, directory_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html, http://www.iplanet.com/downloads/patches/0122.html, http://www.osvdb.org/4086
CVE-2000-0563
The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_runtime_for_java
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0056.html, http://www.securityfocus.com/bid/1336, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-05-8&msg=391C95DE2DA.5E3BTAKAGI%40java-house.etl.go.jp
CVE-2000-0839
WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wincom_lpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0212.html, http://www.securityfocus.com/bid/1701, https://exchange.xforce.ibmcloud.com/vulnerabilities/5258
CVE-2000-0866
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: interbase_superserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0027.html, http://www.securityfocus.com/bid/1654, https://exchange.xforce.ibmcloud.com/vulnerabilities/5205
CVE-2000-0150
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pix_firewall_software, firewall-1
References: http://www.kb.cert.org/vuls/id/328867, http://www.osvdb.org/4417, http://www.securityfocus.com/bid/979