DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-0918
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kvt
References: http://www.securityfocus.com/archive/1/83914, http://www.securityfocus.com/bid/1700, http://www.securityfocus.com/archive/1/83914
CVE-2000-0736
Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: becky_internet_mail
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0234.html, http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt, http://www.securityfocus.com/bid/1588
CVE-2000-0660
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: worldclient
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0173.html, http://www.altn.com/Downloads/WorldClient/Release/RelNotes.txt, http://www.osvdb.org/1459
CVE-2000-1011
Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc, http://www.osvdb.org/6070, https://exchange.xforce.ibmcloud.com/vulnerabilities/5638
CVE-2000-1212
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: zope
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086, http://www.debian.org/security/2001/dsa-007
CVE-2000-0384
NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netstructure_7180, netstructure_7110
References: http://216.188.41.136/, http://www.l0pht.com/advisories/ipivot7180.html, http://www.lopht.com/advisories/ipivot7110.html
CVE-2000-0405
Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: antisniff
References: http://www.l0pht.com/advisories/asniff_advisory.txt, http://www.osvdb.org/3179, http://www.securityfocus.com/bid/1207
CVE-2000-1006
Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
References: http://www.securityfocus.com/bid/1869, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-082, https://exchange.xforce.ibmcloud.com/vulnerabilities/5448
CVE-2000-0077
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5549, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5549
CVE-2000-0222
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/990, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000215155750.M4500%40safe.hsc.fr, http://www.securityfocus.com/bid/990
CVE-2000-0845
kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: unix
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0204.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0204.html
CVE-2000-1193
Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20020407-01-I, http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/4284
CVE-2000-1086
The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570884410184&w=2, http://www.securityfocus.com/bid/2041, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-0356
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://www.securityfocus.com/bid/697, http://www.securityfocus.com/templates/advisory.html?id=1789, http://www.securityfocus.com/bid/697
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: corporatetime_for_the_web
References: http://www.securityfocus.com/archive/1/142672, http://www.securityfocus.com/bid/1888, https://exchange.xforce.ibmcloud.com/vulnerabilities/5529
CVE-2000-0578
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: mipspro_compilers
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html, http://www.securityfocus.com/bid/1412, http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html
CVE-2000-0775
Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: viking_server
References: http://www.robtex.com/viking/bugs.htm, http://www.securityfocus.com/bid/1614, http://www.securityfocus.com/templates/archive.pike?list=1&msg=399a01c01122%240d7f2310%240201a8c0%40aviram
CVE-2000-1135
fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux
References: http://www.debian.org/security/2000/20001130, http://www.osvdb.org/7208, https://exchange.xforce.ibmcloud.com/vulnerabilities/5633
CVE-2000-0873
netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aix
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0454.html, http://www.securityfocus.com/bid/1660, https://exchange.xforce.ibmcloud.com/vulnerabilities/5214
CVE-2000-1110
document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: net.data
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0384.html, http://www.securityfocus.com/bid/2017, http://archives.neohapsis.com/archives/bugtraq/2000-11/0384.html
CVE-2000-0301
Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://marc.info/?l=bugtraq&m=95505800117143&w=2, http://support.ipswitch.com/kb/IM-20000208-DM02.htm, http://www.securityfocus.com/bid/1094
CVE-2000-1099
Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: jdk
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba, http://www.osvdb.org/7255, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132
CVE-2000-0707
PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysqldatabase_admin_tool
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0015.html, http://pccs-linux.com/public/view.php3?bn=agora_pccslinux&key=965951324, http://www.securityfocus.com/bid/1557
CVE-2000-1056
CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_access_control_server
References: http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml, http://www.securityfocus.com/bid/1708, https://exchange.xforce.ibmcloud.com/vulnerabilities/5274
CVE-2000-0271
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: emacs
References: http://www.securityfocus.com/bid/1125, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de, http://www.securityfocus.com/bid/1125
CVE-2000-0378
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0023.html, http://www.securityfocus.com/bid/1176, http://archives.neohapsis.com/archives/bugtraq/2000-05/0023.html
CVE-2000-1236
SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
CVE-2000-0374
The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openlinux
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025, http://www.securityfocus.com/bid/1446
CVE-2000-0637
Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: excel
References: http://www.securityfocus.com/bid/1451, http://www.securityfocus.com/templates/archive.pike?list=1&msg=396B3F8F.9244D290%40nat.bg, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-051
CVE-2000-0263
The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html, http://www.securityfocus.com/bid/1111, http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html
CVE-2000-0420
The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0112.html, http://www.securityfocus.com/bid/1198, http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0112.html
CVE-2000-0811
Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: auction_weaver
References: http://www.osvdb.org/4053, http://www.securityfocus.com/bid/1783, https://exchange.xforce.ibmcloud.com/vulnerabilities/5372
CVE-2000-1003
NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: windows_98se, windows_95, windows_98
References: http://www.securityfocus.com/archive/1/139511, http://www.securityfocus.com/bid/1794, https://exchange.xforce.ibmcloud.com/vulnerabilities/5370
CVE-2000-0167
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0002&L=ntbugtraq&F=&S=&P=8800, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0002&L=ntbugtraq&F=&S=&P=8800
CVE-2000-1084
The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://marc.info/?l=bugtraq&m=97570878710037&w=2, http://www.securityfocus.com/bid/2039, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE-2000-0462
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netbsd
References: ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-006.txt.asc, http://www.osvdb.org/1366, http://www.securityfocus.com/bid/1273
CVE-2000-1070
pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: poll_it_pro, poll_it
References: http://marc.info/?l=bugtraq&m=97236719315352&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/5794, http://marc.info/?l=bugtraq&m=97236719315352&w=2
CVE-2000-0195
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html, http://www.securityfocus.com/bid/1008, http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html
CVE-2000-0457
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://marc.info/?l=bugtraq&m=95810120719608&w=2, http://www.securityfocus.com/bid/1193, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031
CVE-2000-0609
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dmailweb, cwmail
References: http://www.securityfocus.com/bid/1376, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-15&msg=4.1.20000621113334.00996820%40qlink.queensu.ca, http://www.securityfocus.com/bid/1376
CVE-2000-0965
The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vvos
References: http://archives.neohapsis.com/archives/hp/2000-q4/0012.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5361, http://archives.neohapsis.com/archives/hp/2000-q4/0012.html
CVE-2000-0642
The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webactive
References: http://www.securityfocus.com/bid/1497, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671%40Rage.Resentment.org, https://exchange.xforce.ibmcloud.com/vulnerabilities/5184
CVE-2000-0125
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wwwthreads
References: http://www.securityfocus.com/bid/967, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net, http://www.securityfocus.com/bid/967
CVE-2000-0235
Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:10-orville-write.asc, http://www.osvdb.org/1263, http://www.securityfocus.com/bid/1070
CVE-2000-0663
The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: http://www.microsoft.com/technet/support/kb.asp?ID=269049, http://www.securityfocus.com/bid/1507, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-052
CVE-2000-0693
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: raptor_gfx_pgx32
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html, http://www.osvdb.org/1501, http://www.securityfocus.com/bid/1563
CVE-2000-0165
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: delegate
References: http://www.ciac.org/ciac/bulletins/k-023.shtml, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.BSF.4.21.0002192249290.10784-100000%40freefall.freebsd.org, https://exchange.xforce.ibmcloud.com/vulnerabilities/4195
CVE-2000-1049
Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jrun
References: http://marc.info/?l=bugtraq&m=97310314724964&w=2, http://www.allaire.com/handlers/index.cfm?ID=18085&Method=Full, https://exchange.xforce.ibmcloud.com/vulnerabilities/5452
CVE-2000-0491
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gdm, suse_linux, openlinux
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt, http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html, http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html
CVE-2000-0032
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.osvdb.org/7582, http://www.securityfocus.com/bid/878, http://www.osvdb.org/7582
CVE-2000-1077
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iplanet_web_server
References: http://www.securityfocus.com/archive/1/141435, https://exchange.xforce.ibmcloud.com/vulnerabilities/5446, http://www.securityfocus.com/archive/1/141435
CVE-2000-1094
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aim
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://marc.info/?l=bugtraq&m=97668265628917&w=2, http://marc.info/?l=bugtraq&m=97683774417132&w=2, http://www.atstake.com/research/advisories/2000/a121200-1.txt
CWE: CWE-120
CVE-2000-0956
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cyrus-sasl
References: http://www.redhat.com/support/errata/RHSA-2000-094.html, http://www.securityfocus.com/bid/1875, https://exchange.xforce.ibmcloud.com/vulnerabilities/5427
CVE-2000-0980
NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_me, windows_98se, windows_95, windows_98
References: http://www.securityfocus.com/bid/1781, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-073, https://exchange.xforce.ibmcloud.com/vulnerabilities/5357
CVE-2000-0773
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: java_http_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html, http://www.securityfocus.com/bid/1522, https://exchange.xforce.ibmcloud.com/vulnerabilities/5021
CVE-2000-0023
Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino_server
References: http://www.osvdb.org/51, http://www.securityfocus.com/bid/881, http://www.osvdb.org/51
CVE-2000-1219
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: g\+\+, gcc
References: http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html, http://www.kb.cert.org/vuls/id/540517, http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html
CVE-2000-1158
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sniffer_agent
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html
CVE-2000-1117
The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lotus_notes
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0341.html, http://www.securityfocus.com/bid/1994, http://archives.neohapsis.com/archives/bugtraq/2000-11/0341.html
CWE: CWE-203
CVE-2000-1119
Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=97569466809056&w=2, http://www-1.ibm.com/support/search.wss?rs=0&q=IY08812&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY10721&apar=only
CVE-2000-0106
The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: easycart
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0106, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0106
CVE-2000-0842
The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: unixware
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0086.html, http://www.securityfocus.com/bid/1663, http://archives.neohapsis.com/archives/bugtraq/2000-09/0086.html
CVE-2000-0896
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: soho_firewall
References: http://www.osvdb.org/1690, http://www.securityfocus.com/bid/2113, http://xforce.iss.net/alerts/advise70.php
CVE-2000-0190
AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: instant_messenger
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0016.html, http://archives.neohapsis.com/archives/bugtraq/2000-03/0016.html
CVE-2000-0960
The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: messaging_server
References: http://marc.info/?l=bugtraq&m=97138100426121&w=2, http://www.securityfocus.com/bid/1787, https://exchange.xforce.ibmcloud.com/vulnerabilities/5364
CVE-2000-0927
WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quotaadvisor
References: http://archives.neohapsis.com/archives/bugtraq/2000-09//0331.html, http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0173.html, http://www.securityfocus.com/bid/1724
CVE-2000-0272
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: realserver
References: http://marc.info/?l=bugtraq&m=95625288231045&w=2, http://service.real.com/help/faq/servg270.html, http://www.securityfocus.com/bid/1128
CVE-2000-0584
Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:31.canna.asc.v1.1, http://shadowpenguin.backsection.net/advisories/advisory038.html, http://www.securityfocus.com/bid/1445
CVE-2000-0397
The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: emurl
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0160.html, http://www.securityfocus.com/bid/1203, http://archives.neohapsis.com/archives/bugtraq/2000-05/0160.html
CVE-2000-0135
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: atretail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0135, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0135
CVE-2000-0373
Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kvt
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-015.0.txt, http://www.redhat.com/support/errata/RHSA1999015_01.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/2266
CVE-2000-0213
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sambar_server
References: http://www.sambar.com/session/highlight?url=/syshelp/history.htm&words=security+&color=red, http://www.securityfocus.com/bid/1002, http://www.securityfocus.com/templates/archive.pike?list=1&msg=38B3E60A.6A84FEC3%40cybcom.net
CVE-2000-0178
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: serveriron
References: http://www.foundrynet.com/bugTraq.html, http://www.securityfocus.com/bid/1017, http://www.foundrynet.com/bugTraq.html
CVE-2000-0608
NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dmailweb, cwmail
References: http://www.securityfocus.com/bid/1376, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-15&msg=4.1.20000621113334.00996820%40qlink.queensu.ca, http://www.securityfocus.com/bid/1376
CVE-2000-0429
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cart32
References: http://marc.info/?l=bugtraq&m=95686068203138&w=2, http://www.cart32.com/kbshow.asp?article=c048, http://marc.info/?l=bugtraq&m=95686068203138&w=2
CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ezshopper
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html, http://www.securityfocus.com/bid/1014, http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html
CVE-2000-0302
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: index_server
References: http://marc.info/?l=bugtraq&m=95453598317340&w=2, http://www.osvdb.org/271, http://www.securityfocus.com/bid/1084
CVE-2000-0914
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0078.html, http://www.osvdb.org/1592, http://www.securityfocus.com/bid/1759
CVE-2000-0369
The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openlinux
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-029.1.txt, http://www.securityfocus.com/bid/1266, ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-029.1.txt
CVE-2000-0305
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: beos, terminal_server, windows_2000, windows_nt, windows_98
Related CWEs: CWE-399
References: http://www.securityfocus.com/bid/1236, http://www.securityfocus.com/templates/advisory.html?id=2240, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-029
CWE: CWE-399
CVE-2000-0972
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hp-ux
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0317.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5410, http://archives.neohapsis.com/archives/bugtraq/2000-10/0317.html
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2000-0770
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: internet_information_server, internet_information_services
References: http://www.securityfocus.com/bid/1565, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057, http://www.securityfocus.com/bid/1565
CVE-2000-0684
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: weblogic_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html, http://developer.bea.com/alerts/security_000731.html, http://www.securityfocus.com/bid/1525
CVE-2000-0783
Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firebox
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0162.html, http://www.securityfocus.com/bid/1573, https://exchange.xforce.ibmcloud.com/vulnerabilities/5098
CVE-2000-0097
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: index_server
References: http://www.osvdb.org/1210, http://www.securityfocus.com/bid/950, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006
CVE-2000-0349
Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.13a, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.13a
CVE-2000-0611
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dmailweb, cwmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0243.html, http://www.securityfocus.com/bid/1391, https://exchange.xforce.ibmcloud.com/vulnerabilities/4771
CVE-2000-0478
In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: norton_antivirus
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html, http://www.osvdb.org/6266, http://www.securityfocus.com/bid/1351
CVE-2000-1187
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: navigator, communicator
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:66.netscape.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000344, http://lists.suse.com/archives/suse-security-announce/2000-Nov/0005.html
CVE-2000-1173
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cyberpatrol
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0323.html, http://www.securityfocus.com/bid/1977, http://archives.neohapsis.com/archives/bugtraq/2000-11/0323.html
CVE-2000-0348
A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.10a, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.10a
CVE-2000-0064
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: contivity
References: http://www.osvdb.org/7583, http://www.securityfocus.com/bid/938, http://www.osvdb.org/7583
CVE-2000-0442
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cobalt_raq_2, cobalt_raq_3i, qpopper
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0267.html, http://www.novell.com/linux/security/advisories/suse_security_announce_51.html, http://www.securityfocus.com/bid/1242
CVE-2000-0278
The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: corporation_eviewer
References: http://archives.neohapsis.com/archives/bugtraq/current/0006.html, http://www.securityfocus.com/bid/1089, http://archives.neohapsis.com/archives/bugtraq/current/0006.html
CVE-2000-0158
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-00.06a, http://www.securityfocus.com/bid/997, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000001bf78af%246d0d47a0%244d2f45a1%40jmagdych.na.nai.com
CVE-2000-0132
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: virtual_machine
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://www.securityfocus.com/bid/957, http://www.securityfocus.com/bid/957
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2000-0518
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: ie, internet_explorer
References: http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt, http://www.cert.org/advisories/CA-2000-10.html, http://www.securityfocus.com/bid/1309
CVE-2000-0314
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, netbsd, linux, unix, slackware_linux
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc, http://marc.info/?l=bugtraq&m=91893782027835&w=2, http://www.osvdb.org/7574
CVE-2000-0347
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_95, windows_98
References: http://marc.info/?l=ntbugtraq&m=95737580922397&w=2, http://www.securityfocus.com/bid/1163, http://marc.info/?l=ntbugtraq&m=95737580922397&w=2