DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-0028
Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: ie, internet_explorer
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0028, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0028
CVE-2000-0940
Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: pagelog.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0422.html, http://www.securityfocus.com/bid/1864, https://exchange.xforce.ibmcloud.com/vulnerabilities/5451
CVE-2000-0480
Dragon telnet server allows remote attackers to cause a denial of service via a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: dragon_server
References: http://marc.info/?l=bugtraq&m=96113734714517&w=2, http://www.securityfocus.com/bid/1352, http://marc.info/?l=bugtraq&m=96113734714517&w=2
CVE-2000-0721
The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: flagship
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0114.html, http://www.securityfocus.com/bid/1586, http://archives.neohapsis.com/archives/bugtraq/2000-08/0114.html
CVE-2000-1112
Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://www.securityfocus.com/bid/1976, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-090, https://exchange.xforce.ibmcloud.com/vulnerabilities/5575
CVE-2000-1205
Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code.  NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache.  The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: http_server
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archive.cert.uni-stuttgart.de/bugtraq/2002/12/msg00243.html, http://archives.neohapsis.com/archives/bugtraq/2002-12/0233.html, http://httpd.apache.org/info/css-security/apache_specific.html
CWE: CWE-79
CVE-2000-0539
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: jrun
References: http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full, http://www.osvdb.org/818, http://www.securityfocus.com/bid/1386
CVE-2000-0297
Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: forums
References: http://www.osvdb.org/1270, http://www.securityfocus.com/bid/1085, http://www2.allaire.com/handlers/index.cfm?ID=15099&Method=Full
CVE-2000-0504
libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gdm, x, x11r6
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0170.html, http://www.securityfocus.com/bid/1369, http://www.xfree86.org/security/
CVE-2000-0404
The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: terminal_server, windows_2000, windows_nt, windows_98, windows_95
References: http://www.microsoft.com/technet/support/kb.asp?ID=262694, http://www.securityfocus.com/bid/1262, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-036
CVE-2000-1017
Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webdata
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0007.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0032.html, http://www.securityfocus.com/bid/1732
CVE-2000-0747
The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0379.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5036, http://archives.neohapsis.com/archives/bugtraq/2000-07/0379.html
CVE-2000-0299
Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webobjects
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0020.html, http://archives.neohapsis.com/archives/bugtraq/2000-04/0020.html
CVE-2000-0291
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: staroffice
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0077.html, http://www.securityfocus.com/bid/1112, http://archives.neohapsis.com/archives/bugtraq/2000-04/0077.html
CVE-2000-0671
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html, http://www.securityfocus.com/bid/1510
CVE-2000-0698
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: minicom
References: http://www.securityfocus.com/archive/1/77361, http://www.securityfocus.com/bid/1599, https://exchange.xforce.ibmcloud.com/vulnerabilities/5151
CVE-2000-0109
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: multicsp
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0109, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0109
CVE-2000-1234
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phorum
References: http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html, http://hispahack.ccc.de/mi020.html, http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
CVE-2000-0863
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://archives.neohapsis.com/archives/freebsd/2000-09/0111.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5503, http://archives.neohapsis.com/archives/freebsd/2000-09/0111.html
CVE-2000-0441
Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aix
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0275.html, http://www.securityfocus.com/bid/1241, http://archives.neohapsis.com/archives/bugtraq/2000-05/0275.html
CVE-2000-1176
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: yabb
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0110.html, http://www.securityfocus.com/bid/1921, http://archives.neohapsis.com/archives/bugtraq/2000-11/0110.html
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: dbman
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0067.html, http://www.perfectotech.com/blackwatchlabs/vul5_05.html, http://www.securityfocus.com/bid/1178
CVE-2000-0439
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.osvdb.org/1326, http://www.securityfocus.com/bid/1194, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000511135609.D7774%40securityfocus.com
CVE-2000-0844
Some functions that implement the locale subsystem on Unix do not  properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, suse_linux, secure_linux, aix, linux
Related CWEs: CWE-264
References: ftp://patches.sgi.com/support/free/security/advisories/20000901-01-P, http://archives.neohapsis.com/archives/bugtraq/2000-08/0436.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0457.html
CWE: CWE-264
CVE-2000-0231
Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, halloween_linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0162.html, http://www.securityfocus.com/bid/1061, http://archives.neohapsis.com/archives/bugtraq/2000-03/0162.html
CVE-2000-0554
Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ceilidh
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html, http://www.securityfocus.com/bid/1320, http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html
CVE-2000-0935
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: samba
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html, http://www.securityfocus.com/bid/1872, https://exchange.xforce.ibmcloud.com/vulnerabilities/5443
CVE-2000-1046
Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: domino
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0093.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0093.html
CVE-2000-0470
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rom_pager
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0398.html, http://www.securityfocus.com/bid/1290, https://exchange.xforce.ibmcloud.com/vulnerabilities/4588
CVE-2000-0224
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: unixware
References: http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com
CVE-2000-0763
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xlock
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0212.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0294.html, http://archives.neohapsis.com/archives/freebsd/2000-08/0340.html
CVE-2000-1235
The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
CVE-2000-0001
RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: realserver
References: http://www.securityfocus.com/bid/888, http://www.securityfocus.com/bid/888
CVE-2000-1101
Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0386.html, http://www.iss.net/security_center/static/5608.php, http://www.securityfocus.com/bid/2005
CVE-2000-0489
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, openbsd, freebsd
References: http://www.securityfocus.com/bid/622, http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org
CVE-2000-0626
Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: alibaba
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0237.html, http://www.securityfocus.com/bid/1482, http://archives.neohapsis.com/archives/bugtraq/2000-07/0237.html
CVE-2000-1045
nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: nss_ldap
References: http://www.linux-mandrake.com/en/security/MDKSA-2000-066-1.php3, http://www.redhat.com/support/errata/RHSA-2000-024.html, http://www.securityfocus.com/bid/1863
CVE-2000-0568
Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: secure_desktop
References: http://www.securityfocus.com/bid/1417, http://www.securityfocus.com/templates/archive.pike?list=1&msg=4125690E.00524395.00%40guardianit.se, http://www.securityfocus.com/bid/1417
CVE-2000-1066
The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:63.getnameinfo.asc, http://www.securityfocus.com/bid/1894, https://exchange.xforce.ibmcloud.com/vulnerabilities/5454
CVE-2000-1227
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt
References: http://www.securityfocus.com/archive/1/63322, http://www.securityfocus.com/bid/1301, http://www.securityfocus.com/archive/1/63322
CVE-2000-0515
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.securityfocus.com/bid/1327, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006070511.OAA05492%40dogfoot.hackerslab.org, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006090640.XAA00779%40hpchs.cup.hp.com
CVE-2000-0929
Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_media_player
References: http://marc.info/?l=bugtraq&m=97024839222747&w=2, http://www.securityfocus.com/bid/1714, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-068
CVE-2000-0892
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: openlinux, u_win
References: http://www.kb.cert.org/vuls/id/22404, https://exchange.xforce.ibmcloud.com/vulnerabilities/6644, http://www.kb.cert.org/vuls/id/22404
CVE-2000-0151
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: make
References: http://www.securityfocus.com/bid/981, http://www.securityfocus.com/bid/981
CVE-2000-0963
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ncurses, immunix, freebsd, linux
References: http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt, http://www.securityfocus.com/archive/1/138550, http://www.securityfocus.com/bid/1142
CVE-2000-0526
mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailstudio_2000
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html, http://www.securityfocus.com/bid/1335, http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html
CVE-2000-0264
Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: panda_security
References: http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip, http://www.securityfocus.com/bid/1119, http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FB45F2.550EA000%40teleline.es
CVE-2000-1013
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc, ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc
CVE-2000-0246
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: commercial_internet_system, proxy_server, internet_information_server, site_server_commerce, internet_information_services
References: http://www.microsoft.com/technet/support/kb.asp?ID=249599, http://www.securityfocus.com/bid/1081, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019
CVE-2000-0549
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerbnet, kerberos_5, cygnus_network_security, kerberos
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html, http://ciac.llnl.gov/ciac/bulletins/k-051.shtml, http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt
CVE-2000-0087
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: navigator, communicator
References: http://marc.info/?l=bugtraq&m=94790377622943&w=2, http://www.iss.net/security_center/static/4385.php, http://marc.info/?l=bugtraq&m=94790377622943&w=2
CVE-2000-0651
The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bordermanager
References: http://www.securityfocus.com/bid/1440, http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com, https://exchange.xforce.ibmcloud.com/vulnerabilities/5186
CVE-2000-0229
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, suse_linux, gpm, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0242.html, http://www.novell.com/linux/security/advisories/suse_security_announce_45.html, http://www.redhat.com/support/errata/RHSA-2000-009.html
CVE-2000-1052
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://marc.info/?l=bugtraq&m=97236692714978&w=2, http://marc.info/?l=bugtraq&m=97236692714978&w=2
CVE-2000-0762
The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: etrust_access_control
References: http://support.ca.com/techbases/eTrust/etrust_access_control-response.html, http://www.osvdb.org/1517, http://www.securityfocus.com/bid/1583
CVE-2000-0269
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: emacs
References: http://www.securityfocus.com/bid/1125, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de, http://www.securityfocus.com/bid/1125
CVE-2000-0540
JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full, http://www.osvdb.org/2713, http://www.securityfocus.com/bid/1386
CVE-2000-0342
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: eudora
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077, http://www.peacefire.org/security/stealthattach/explanation.html, http://www.securityfocus.com/bid/1157
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2000-0696
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: solaris_answerbook2
References: http://archives.neohapsis.com/archives/sun/2000-q3/0001.html, http://seclists.org/bugtraq/2000/Aug/0105.html, http://www.s21sec.com/en/avisos/s21sec-004-en.txt
CVE-2000-0198
Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mercur_mailserver, mercur_pop3_server, mercur_imap4_server
References: http://archives.neohapsis.com/archives/bugtraq/current/0137.html, http://archives.neohapsis.com/archives/ntbugtraq/current/0206.html, http://www.securityfocus.com/bid/1051
CVE-2000-0939
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: samba
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5444, http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
CVE-2000-0694
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: raptor_gfx_pgx32
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html, http://www.osvdb.org/5740, http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html
CVE-2000-1239
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: tivoli_management_framework
References: http://www-1.ibm.com/support/docview.wss?uid=swg21082896, http://www.securityfocus.com/bid/17085, https://exchange.xforce.ibmcloud.com/vulnerabilities/3927
CVE-2000-0286
X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html, http://www.securityfocus.com/bid/1111, http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html
CVE-2000-1015
The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: slashcode
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0366.html, http://www.securityfocus.com/bid/1731, https://exchange.xforce.ibmcloud.com/vulnerabilities/5306
CVE-2000-0127
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webspeed
References: http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412&keywords=security%20Webspeed, http://www.securityfocus.com/bid/969, http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412&keywords=security%20Webspeed
CVE-2000-0211
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_media_services
References: http://www.securityfocus.com/bid/1000, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-013, http://www.securityfocus.com/bid/1000
CVE-2000-0711
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virtual_machine, communicator
References: http://www.cert.org/advisories/CA-2000-15.html, http://www.securityfocus.com/bid/1545, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com
CVE-2000-0398
Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailsite
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0286.html, http://www.securityfocus.com/bid/1244, http://archives.neohapsis.com/archives/bugtraq/2000-05/0286.html
CVE-2000-0765
Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: excel, powerpoint, word
References: http://www.securityfocus.com/bid/1561, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-056, http://www.securityfocus.com/bid/1561
CVE-2000-0720
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gwscripts_news_publisher
References: http://www.securityfocus.com/bid/1621, http://www.securityfocus.com/templates/archive.pike?list=1&msg=003301c0123b%2418f8c1a0%24953b29d4%40e8s9s4, https://exchange.xforce.ibmcloud.com/vulnerabilities/5169
CVE-2000-0594
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openlinux_edesktop, mandrake_linux, openlinux_desktop, freebsd, openlinux_ebuilder
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0026.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0098.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0105.html
CVE-2000-1078
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icq_web_front
References: http://www.securityfocus.com/archive/1/138332, https://exchange.xforce.ibmcloud.com/vulnerabilities/5332, http://www.securityfocus.com/archive/1/138332
CVE-2000-1016
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: suse_linux
References: http://www.securityfocus.com/archive/1/84360, http://www.securityfocus.com/bid/1707, https://exchange.xforce.ibmcloud.com/vulnerabilities/5276
CVE-2000-0937
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: samba
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html, http://www.securityfocus.com/bid/1873, https://exchange.xforce.ibmcloud.com/vulnerabilities/5442
CVE-2000-0067
CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: merchant_connection_kit
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0067, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0067
CVE-2000-0741
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: net_tools_pki_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html, http://download.nai.com/products/licensed/pgp/hf3pki10.txt, http://www.osvdb.org/1490
CVE-2000-1109
Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: midnight_commander
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0373.html, http://www.debian.org/security/2001/dsa-036, http://www.novell.com/linux/security/advisories/2001_011_mc.html
CVE-2000-0511
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux
References: ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch, http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html, http://www.securityfocus.com/bid/1373
CVE-2000-0365
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=92877527701347&w=2, http://marc.info/?l=bugtraq&m=92886009012161&w=2, http://www.redhat.com/corp/support/errata/RHSA1999014_01.html
CVE-2000-0053
Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: commercial_internet_system
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246731, http://www.securityfocus.com/bid/912, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-001
CVE-2000-0063
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: contivity
References: http://www.securityfocus.com/bid/938, http://www.securityfocus.com/bid/938
CVE-2000-0140
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_anywhere_mail_server
References: http://marc.info/?l=bugtraq&m=95021326417936&w=2, http://www.securityfocus.com/bid/980, http://marc.info/?l=bugtraq&m=95021326417936&w=2
CVE-2000-0084
CuteFTP uses weak encryption to store password information in its tree.dat file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cuteftp
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0084, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0084
CVE-2000-0620
libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: x, x11r6
References: http://marc.info/?l=bugtraq&m=96146116627474&w=2, http://www.securityfocus.com/bid/1409, https://exchange.xforce.ibmcloud.com/vulnerabilities/4996
CVE-2000-0161
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: site_server
References: http://www.securityfocus.com/bid/994, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-010, http://www.securityfocus.com/bid/994
CVE-2000-0214
FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp_explorer
References: http://www.securityfocus.com/bid/1003, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002242035500.30645-100000%40unreal.sekure.org, http://www.securityfocus.com/bid/1003
CVE-2000-0768
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: ie, internet_explorer
References: http://www.securityfocus.com/bid/1564, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055, http://www.securityfocus.com/bid/1564
CVE-2000-0858
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, windows_nt
References: http://archives.neohapsis.com/archives/vendor/2000-q3/0065.html, http://www.securityfocus.com/archive/1/80413, http://www.securityfocus.com/bid/1642
CVE-2000-0640
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: guildftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html, http://www.osvdb.org/573, http://www.securityfocus.com/bid/1452
CVE-2000-0920
Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: boa_webserver
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:60.boa.asc, http://archives.neohapsis.com/archives/bugtraq/2000-10/0092.html, http://www.debian.org/security/2000/20001009
CVE-2000-0323
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: jet
References: http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-08-22&msg=19990729195531.25108.qmail%40underground.org, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030, https://web.archive.org/web/20000819203059/http://xforce.iss.net:80/alerts/vol-4_num-7.php#jet-text-isam
CVE-2000-1105
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: indexing_service
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html, http://www.securityfocus.com/archive/1/144270, http://www.securityfocus.com/bid/1933
CVE-2000-0149
Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zeus_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html, http://www.osvdb.org/254, http://www.securityfocus.com/bid/977
CVE-2000-0333
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcpdump, ethereal
References: http://www.securityfocus.com/bid/1165, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000%40paranoia.pgci.ca, http://www.securityfocus.com/bid/1165
CVE-2000-0521
Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: savant_webserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0469.html, http://www.securityfocus.com/bid/1313, https://exchange.xforce.ibmcloud.com/vulnerabilities/4616
CVE-2000-0601
LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: leafchat
References: http://www.leafdigital.com/Software/leafChat/history.html, http://www.securityfocus.com/bid/1396, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSF.4.10.10006252056110.74551-100000%40unix.za.net
CVE-2000-0602
Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environmental variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_locate
References: http://www.securityfocus.com/bid/1385, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211209500.22969-100000%40nimue.tpi.pl, http://www.securityfocus.com/bid/1385
CVE-2000-0307
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unixware, openserver, open_desktop
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.07b, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.07b
CVE-2000-0953
Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: shambala_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html, http://www.securityfocus.com/bid/1778, https://exchange.xforce.ibmcloud.com/vulnerabilities/5345