DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-0686
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: auction_weaver
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html, http://www.securityfocus.com/bid/1630, http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html
CVE-2000-0990
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cmd5checkpw
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0258.html, http://members.elysium.pl/brush/cmd5checkpw/changes.html, http://www.securityfocus.com/bid/1809
CVE-2000-1156
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: staroffice
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0115.html, http://www.securityfocus.com/bid/1922, https://exchange.xforce.ibmcloud.com/vulnerabilities/5487
CVE-2000-0037
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: majordomo
References: http://marc.info/?l=bugtraq&m=94780294009285&w=2, http://www.redhat.com/support/errata/RHSA-2000-005.html, http://www.securityfocus.com/bid/903
CVE-2000-0309
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://www.openbsd.org/errata24.html#trctrap, http://www.osvdb.org/6126, http://www.openbsd.org/errata24.html#trctrap
CVE-2000-0794
Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://www.iss.net/security_center/static/5063.php, http://www.osvdb.org/8568, http://www.securityfocus.com/bid/1527
CVE-2000-0407
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0141.html, http://www.securityfocus.com/bid/1200, http://archives.neohapsis.com/archives/bugtraq/2000-05/0141.html
CVE-2000-1090
Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: http://www.nsfocus.com/english/homepage/sa_08.htm, http://www.securityfocus.com/bid/2100, https://exchange.xforce.ibmcloud.com/vulnerabilities/5729
CVE-2000-0621
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook, outlook_express
References: http://www.cert.org/advisories/CA-2000-14.html, http://www.securityfocus.com/bid/1501, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-046
CVE-2000-0016
Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_anywhere_mail_server
References: http://www.securityfocus.com/bid/730, http://www.securityfocus.com/bid/730
CVE-2000-0699
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.html, http://www.securityfocus.com/bid/1560, http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.html
CVE-2000-0670
The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cvsweb
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:37.cvsweb.asc, http://archives.neohapsis.com/archives/bugtraq/2000-07/0178.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0196.html
CVE-2000-0613
Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pix_firewall
References: http://www.cisco.com/warp/public/707/pixtcpreset-pub.shtml, http://www.osvdb.org/1457, http://www.securityfocus.com/bid/1454
CVE-2000-0505
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://www.securityfocus.com/bid/1284, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSF.4.20.0006031912360.45740-100000%40alive.znep.com, https://exchange.xforce.ibmcloud.com/vulnerabilities/4575
CVE-2000-1181
Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admin/includes/ URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: realserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0236.html, http://service.real.com/help/faq/security/memory.html, http://www.securityfocus.com/bid/1957
CVE-2000-0636
HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jetdirect
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0265.html, http://www.securityfocus.com/bid/1491, https://exchange.xforce.ibmcloud.com/vulnerabilities/4947
CVE-2000-0153
FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: frontpage, personal_web_server
References: http://www.securityfocus.com/bid/989, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000801bf780a%249ad4b2e0%240100007f%40localhost, http://www.securityfocus.com/bid/989
CVE-2000-0798
The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://www.osvdb.org/8569, http://www.securityfocus.com/bid/1540, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl
CVE-2000-0145
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0145, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0145
CVE-2000-0778
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_services
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=5212, http://www.securityfocus.com/bid/1578, http://www.securityfocus.com/templates/archive.pike?list=1&msg=080D5336D882D211B56B0060080F2CD696A7C9%40beta.mia.cz
CVE-2000-0704
Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wnn4, freewnn, worldview
References: ftp://sgigate.sgi.com/security/20000803-01-A, http://www.osvdb.org/11080, http://www.securityfocus.com/bid/1603
CVE-2000-0359
Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: thttpd
References: http://archives.neohapsis.com/archives/bugtraq/1626.html, http://www.novell.com/linux/security/advisories/suse_security_announce_30.html, http://www.securityfocus.com/bid/1248
CVE-2000-0473
Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: simpleserver_www
References: http://www.analogx.com/contents/download/network/sswww.htm, http://www.securityfocus.com/bid/1349, http://www.analogx.com/contents/download/network/sswww.htm
CVE-2000-0331
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt, terminal_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0147.html, http://www.securityfocus.com/bid/1135, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-027
CVE-2000-1159
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sniffer_agent
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html, http://www.securityfocus.com/bid/1902, http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html
CVE-2000-0030
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/878, http://www.securityfocus.com/bid/878
CVE-2000-0283
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: irix
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html, http://www.securityfocus.com/bid/1106, http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rxvt, eterm, putty, x11r6
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html, http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html, http://www.openwall.com/lists/oss-security/2024/06/09/1
CVE-2000-1160
NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sniffer_agent
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html, http://www.securityfocus.com/bid/1903, http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html
CVE-2000-1022
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pix_firewall_software
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html, http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml
CVE-2000-0124
surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: superscout
References: http://www.securityfocus.com/bid/965, http://www.securityfocus.com/bid/965
CVE-2000-0856
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xs4all_data_sunftp
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html, http://www.securityfocus.com/bid/1638, http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html
CVE-2000-0344
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://www.securityfocus.com/bid/1160, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0005012042550.6419-100000%40ferret.lmh.ox.ac.uk, http://www.securityfocus.com/bid/1160
CVE-2000-0219
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
Related CWEs: CWE-264
References: http://www.securityfocus.com/bid/1005, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200002230248.NAA19185%40cairo.anu.edu.au, https://kc.mcafee.com/corporate/index?page=content&id=SB10053
CWE: CWE-264
CVE-2000-0659
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: proxy
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html, http://www.securityfocus.com/bid/1504, http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html
CVE-2000-1196
PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: publishingxpert
References: http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.html, http://packetstormsecurity.org/0004-exploits/ooo1.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/7362
CVE-2000-1203
Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino
References: http://marc.info/?l=vuln-dev&m=95886062521327&w=2, http://www.securityfocus.com/archive/1/209754, http://www.securityfocus.com/bid/3212
CVE-2000-1083
The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570878710037&w=2, http://www.securityfocus.com/bid/2038, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-0829
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tmpwatch, linux
References: http://www.redhat.com/support/errata/RHSA-2000-080.html, http://www.securityfocus.com/archive/1/81364, http://www.securityfocus.com/bid/1664
CVE-2000-0002
Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zbserver
References: http://marc.info/?l=bugtraq&m=94598388530358&w=2, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556, http://www.securityfocus.com/bid/889
CVE-2000-0225
The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: poc32
References: http://www.osvdb.org/259, http://www.securityfocus.com/bid/1032, http://www.securityfocus.com/templates/archive.pike?list=1&msg=003601bf854b%246893a090%240100a8c0%40FIREWALKER
CVE-2000-0925
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cyberoffice_shopping_cart
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0001.html, http://marc.info/?l=bugtraq&m=97050819812055&w=2, http://www.securityfocus.com/bid/1734
CVE-2000-1095
modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux, suse_linux, immunix, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0179.html, http://archives.neohapsis.com/archives/linux/suse/2000-q4/0596.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000340
CVE-2000-0143
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh, openssh
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143
CVE-2000-0257
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware
References: http://www.securityfocus.com/bid/1118, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0004171825340.10088-100000%40nimue.tpi.pl, http://www.securityfocus.com/bid/1118
CVE-2000-0357
ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://www.redhat.com/corp/support/errata/RHSA1999058-01.html, http://www.redhat.com/corp/support/errata/RHSA1999058-01.html
CVE-2000-0572
The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: razor
References: http://www.securityfocus.com/bid/1424, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=613309F30B6DD2118C020000F809376C05CABD49%40emss03m09.orl.lmco.com, http://www.securityfocus.com/bid/1424
CVE-2000-0911
IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imp
References: http://www.securityfocus.com/archive/1/82088, http://www.securityfocus.com/bid/1679, https://exchange.xforce.ibmcloud.com/vulnerabilities/5227
CVE-2000-0285
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: x11r6
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0076.html, http://www.securityfocus.com/bid/1306, http://archives.neohapsis.com/archives/bugtraq/2000-04/0076.html
CVE-2000-0275
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cryptoadmin
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html, http://www.l0pht.com/advisories/cc-pinextract.txt, http://www.securityfocus.com/bid/1097
CVE-2000-0497
IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: websphere_application_server
Related CWEs: CWE-178
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0263.html, http://www-4.ibm.com/software/webservers/appserv/efix.html, http://www.securityfocus.com/bid/1328
CWE: CWE-178
CVE-2000-1026
Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tcpdump
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:61.tcpdump.v1.1.asc, http://archives.neohapsis.com/archives/linux/suse/2000-q4/0681.html, http://www.securityfocus.com/bid/1870
CVE-2000-0396
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: carello
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0285.html, http://www.securityfocus.com/bid/1245, http://archives.neohapsis.com/archives/bugtraq/2000-05/0285.html
CVE-2000-0326
Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: meeting_maker
References: http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument, http://www.securityfocus.com/bid/1151, http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument
CVE-2000-0667
Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0273.html, http://www.securityfocus.com/bid/1512, http://archives.neohapsis.com/archives/bugtraq/2000-07/0273.html
CVE-2000-0070
NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ247869, http://www.bindview.com/security/advisory/adv_NtImpersonate.html, http://www.securityfocus.com/bid/934
CVE-2000-0859
The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ntmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0471.html, http://www.securityfocus.com/bid/1640, https://exchange.xforce.ibmcloud.com/vulnerabilities/5182
CVE-2000-0114
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0114, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0114
CVE-2000-1012
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc, ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc
CVE-2000-0767
The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka the "Scriptlet Rendering" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.securityfocus.com/bid/1564, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055, http://www.securityfocus.com/bid/1564
CVE-2000-0957
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pam_mysql
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5447, http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html
CVE-2000-0665
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: telsrv
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0031.html, http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0056.html, http://www.osvdb.org/373
CVE-2000-0403
The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://www.microsoft.com/technet/support/kb.asp?ID=263307, http://www.securityfocus.com/bid/1261, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-036
CVE-2000-0209
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: lynx
References: http://www.securityfocus.com/bid/1012, http://www.securityfocus.com/bid/1012
CVE-2000-0679
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cvs
References: http://www.securityfocus.com/bid/1523, http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org, http://www.securityfocus.com/bid/1523
CVE-2000-0120
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: spectra
References: http://www.securityfocus.com/bid/955, https://exchange.xforce.ibmcloud.com/vulnerabilities/4025, http://www.securityfocus.com/bid/955
CVE-2000-1204
Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://www.apacheweek.com/issues/00-10-13, https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E, https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E
CVE-2000-0210
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: workshop
References: http://www.securityfocus.com/bid/998, http://www.securityfocus.com/bid/998
CVE-2000-0950
Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_firewall_toolkit
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0376.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5420, http://archives.neohapsis.com/archives/bugtraq/2000-10/0376.html
CVE-2000-0808
The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#One-time_Password, http://www.osvdb.org/4421, https://exchange.xforce.ibmcloud.com/vulnerabilities/5137
CVE-2000-1050
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://marc.info/?l=bugtraq&m=97236316510117&w=2, http://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full, http://www.osvdb.org/500
CVE-2000-0086
Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: timbuktu_pro
References: http://www.securityfocus.com/bid/935, http://www.securityfocus.com/bid/935
CVE-2000-0036
Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: outlook_express, ie
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249082, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-060, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249082
CVE-2000-0247
Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gnqs
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:13.generic-nqs.asc, http://archives.neohapsis.com/archives/bugtraq/2000-03/0236.html, http://ftp.gnqs.org/pub/gnqs/source/by-version-number/v3.50/Generic-NQS-3.50.8-ChangeLog.txt
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ssh, openssh
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0359.html, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:057, http://www.securityfocus.com/bid/1742
CVE-2000-0203
The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: officescan
References: http://www.antivirus.com/download/ofce_patch_35.htm, http://www.securityfocus.com/bid/1013, http://www.securityfocus.com/templates/archive.pike?list=1&msg=412FC0AFD62ED31191B40008C7E9A11A0D481D%40srvnt04.previnet.it
CVE-2000-0311
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1145, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-026, http://www.securityfocus.com/bid/1145
CVE-2000-0986
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5390, http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.html
CVE-2000-0099
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: http://marc.info/?l=bugtraq&m=94848865112897&w=2, http://marc.info/?l=bugtraq&m=94848865112897&w=2
CVE-2000-0062
The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zope
References: http://www.securityfocus.com/bid/922, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000104222219.B41650%40schvin.net, http://www.securityfocus.com/bid/922
CVE-2000-0759
Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: tomcat
References: http://www.iss.net/security_center/static/4967.php, http://www.securityfocus.com/bid/1531, http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org
CVE-2000-1184
telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:69.telnetd.v1.1.asc, http://www.osvdb.org/6083, https://exchange.xforce.ibmcloud.com/vulnerabilities/5959
CVE-2000-0800
String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/suse_security_announce_58.html, http://www.novell.com/linux/security/advisories/suse_security_announce_58.html
CVE-2000-0003
Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: http://marc.info/?l=bugtraq&m=94908470928258&w=2, http://marc.info/?l=bugtraq&m=94908470928258&w=2
CVE-2000-0154
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: unixware
References: http://www.sco.com/security/, http://www.securityfocus.com/bid/988, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com
CVE-2000-0520
Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pop_dump
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=11880, http://marc.info/?l=bugtraq&m=96240393814071&w=2, http://www.securityfocus.com/bid/1330
CVE-2000-0054
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: home_free
References: http://www.securityfocus.com/bid/921, http://www.securityfocus.com/bid/921
CVE-2000-0658
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: proxy
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html, http://www.analogx.com/contents/download/network/proxy.htm, http://www.securityfocus.com/bid/1504
CVE-2000-0215
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: http://www.securityfocus.com/bid/1019, http://www.securityfocus.com/bid/1019
CVE-2000-0697
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris_answerbook2
References: http://archives.neohapsis.com/archives/sun/2000-q3/0001.html, http://seclists.org/bugtraq/2000/Aug/0105.html, http://www.iss.net/security_center/static/5058.php
CVE-2000-1226
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: snort
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.html
CVE-2000-0325
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jet
References: http://www.securityfocus.com/bid/548, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030, https://exchange.xforce.ibmcloud.com/vulnerabilities/3155
CVE-2000-0809
Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#Getkey_Buffer, http://www.osvdb.org/4422, https://exchange.xforce.ibmcloud.com/vulnerabilities/5139
CVE-2000-1102
PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ptlink_irc_services, ptlink_ircd
References: http://www.securityfocus.com/archive/1/147115, http://www.securityfocus.com/bid/2008, http://www.securityfocus.com/archive/1/147115
CVE-2000-0180
Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sojourn
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0201.html, http://www.securityfocus.com/bid/1052, https://exchange.xforce.ibmcloud.com/vulnerabilities/4197
CVE-2000-0981
MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mysql
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0318.html, http://www.mysql.com/documentation/mysql/commented/manual.php?section=Security, https://exchange.xforce.ibmcloud.com/vulnerabilities/5409
CVE-2000-0789
WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winu
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0201.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0201.html
CVE-2000-0836
Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: camshot_webcam
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0176.html, http://www.securityfocus.com/bid/1685, https://exchange.xforce.ibmcloud.com/vulnerabilities/5246
CVE-2000-1183
Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: socks_5
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0219.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0219.html
CVE-2000-1028
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.securityfocus.com/archive/1/142792, http://www.securityfocus.com/bid/1886, https://exchange.xforce.ibmcloud.com/vulnerabilities/5460
CVE-2000-0500
The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
References: http://marc.info/?l=bugtraq&m=96161462915381&w=2, http://www.securityfocus.com/bid/1378, http://www.weblogic.com/docs51/admindocs/http.html#file
CVE-2000-1186
Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phf
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0221.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5970, http://archives.neohapsis.com/archives/bugtraq/2000-11/0221.html
CVE-2000-0630
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, internet_information_services
References: http://www.securityfocus.com/bid/1488, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-044, https://exchange.xforce.ibmcloud.com/vulnerabilities/5104
CVE-2000-1233
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html, http://hispahack.ccc.de/mi020.html, http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
CVE-2000-0019
IMail POP3 daemon uses weak encryption, which allows local users to read files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0019, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0019
CVE-2000-0772
The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: messaging_management_system
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html, http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm, http://www.securityfocus.com/bid/1562
CVE-2000-0550
Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerbnet, kerberos_5, cygnus_network_security, kerberos
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html, http://ciac.llnl.gov/ciac/bulletins/k-051.shtml, http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt