DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-0175
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: staroffice
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html, http://www.securityfocus.com/bid/1039, http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html
CVE-2000-0949
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lbl_traceroute, sunos
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.html, http://archives.neohapsis.com/archives/bugtraq/2000-09/0357.html, http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txt
CVE-2000-0449
Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: studio
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0311.html, http://www.securityfocus.com/bid/1255, http://archives.neohapsis.com/archives/bugtraq/2000-05/0311.html
CVE-2000-0597
Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: excel, powerpoint
References: http://www.securityfocus.com/bid/1399, http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589349.ED9DBCAB%40nat.bg, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049
CVE-2000-0872
explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpphotoalbum
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0015.html, http://www.securityfocus.com/bid/1650, https://exchange.xforce.ibmcloud.com/vulnerabilities/5198
CVE-2000-0096
Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: qpopper
References: http://www.securityfocus.com/bid/948, http://www.securityfocus.com/bid/948
CVE-2000-1147
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server
References: http://www.securityfocus.com/archive/1/143070, http://www.securityfocus.com/bid/1911, https://exchange.xforce.ibmcloud.com/vulnerabilities/5510
CVE-2000-0387
The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: golddig
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:16.golddig.asc, http://www.securityfocus.com/bid/1184, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:16.golddig.asc
CVE-2000-0869
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: suse_linux, http_server
References: http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html, http://www.atstake.com/research/advisories/2000/a090700-3.txt, http://www.securityfocus.com/bid/1656
CVE-2000-0870
Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eftp
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html, http://www.osvdb.org/1555, http://www.securityfocus.com/bid/1675
CVE-2000-0202
Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sql_server, data_engine
References: http://www.securityfocus.com/bid/1041, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-014, http://www.securityfocus.com/bid/1041
CVE-2000-0020
DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dns_pro
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0020, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0020
CVE-2000-0083
HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www.securityfocus.com/templates/advisory.html?id=2031, http://www.securityfocus.com/templates/advisory.html?id=2031
CVE-2000-0807
The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#OPSEC_Authentication, http://www.osvdb.org/4420, https://exchange.xforce.ibmcloud.com/vulnerabilities/5471
CVE-2000-1060
The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xfce
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0022.html, http://www.securityfocus.com/bid/1736, https://exchange.xforce.ibmcloud.com/vulnerabilities/5305
CVE-2000-0688
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: subscribe_me_lite
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html, http://marc.info/?l=bugtraq&m=96722957421029&w=2, http://www.cgiscriptcenter.com/subscribe/
CVE-2000-0233
SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux_imap_server
References: http://archives.neohapsis.com/archives/vendor/2000-q1/0035.html, http://archives.neohapsis.com/archives/vendor/2000-q1/0035.html
CVE-2000-0840
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0001.html, http://www.securityfocus.com/bid/1652, https://exchange.xforce.ibmcloud.com/vulnerabilities/5192
CVE-2000-0885
Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability.  NOTE: It is highly likely that this candidate will be split into multiple candidates.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt, windows_2000, systems_management_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083, https://exchange.xforce.ibmcloud.com/vulnerabilities/5399, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083
CVE-2000-0841
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0001.html, http://www.securityfocus.com/bid/1652, https://exchange.xforce.ibmcloud.com/vulnerabilities/5191
CVE-2000-0701
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailman, linux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0474.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0479.html, http://www.redhat.com/support/errata/RHSA-2000-030.html
CVE-2000-0732
Worm HTTP server allows remote attackers to cause a denial of service via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: worm_webserver
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0111.html, http://www.securityfocus.com/bid/1626, https://exchange.xforce.ibmcloud.com/vulnerabilities/5149
CVE-2000-0742
The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_95, windows_98
References: http://www.securityfocus.com/bid/1544, http://www.securityfocus.com/templates/archive.pike?list=1&mid=63120, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-054
CVE-2000-0801
Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0388.html, http://www.securityfocus.com/bid/1520, http://archives.neohapsis.com/archives/bugtraq/2000-07/0388.html
CVE-2000-0088
Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: powerpoint, office, office_converter_pack, word
References: http://www.securityfocus.com/bid/946, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-002, http://www.securityfocus.com/bid/946
CVE-2000-0421
The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0128.html, http://www.securityfocus.com/bid/1199, http://archives.neohapsis.com/archives/bugtraq/2000-05/0128.html
CVE-2000-0689
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: account_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html, http://www.cgiscriptcenter.com/acctlite/, http://www.osvdb.org/13341
CVE-2000-0930
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pegasus_mail
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html, http://www.securityfocus.com/bid/1738
CVE-2000-0737
The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/1535, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-053, http://www.securityfocus.com/bid/1535
CVE-2000-0169
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html, http://www.securityfocus.com/bid/1053, http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html
CVE-2000-0274
The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_trustees
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0035.html, http://www.braysystems.com/linux/trustees.html, http://www.securityfocus.com/bid/1096
CVE-2000-1096
crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: vixie_cron
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0237.html, http://www.securityfocus.com/bid/1960, https://exchange.xforce.ibmcloud.com/vulnerabilities/5543
CVE-2000-0615
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lprng
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html, http://www.securityfocus.com/bid/1447, https://exchange.xforce.ibmcloud.com/vulnerabilities/7361
CVE-2000-0723
Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: gnome_installer
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.html, http://www.securityfocus.com/bid/1596, http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu
CVE-2000-0994
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch, http://marc.info/?l=bugtraq&m=97068555106135&w=2, http://www.securityfocus.com/bid/1746
CVE-2000-1024
eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ewave_servletexec
References: http://marc.info/?l=bugtraq&m=97306581513537&w=2, http://www.securityfocus.com/bid/1876, https://exchange.xforce.ibmcloud.com/vulnerabilities/5450
CVE-2000-0206
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: oracle8i
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0023.html, http://www.securityfocus.com/bid/1035, http://archives.neohapsis.com/archives/bugtraq/2000-03/0023.html
CVE-2000-0284
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imap
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0074.html, http://archives.neohapsis.com/archives/bugtraq/2000-04/0085.html, http://www.securityfocus.com/bid/1110
CVE-2000-1010
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd, linux
References: http://www.securityfocus.com/archive/1/137890, http://www.securityfocus.com/bid/1764, https://exchange.xforce.ibmcloud.com/vulnerabilities/5344
CVE-2000-1098
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: soho_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0439.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html
CVE-2000-0827
Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: documentdirect_for_the_internet
References: http://www.atstake.com/research/advisories/2000/a090800-1.txt, http://www.securityfocus.com/bid/1657, https://exchange.xforce.ibmcloud.com/vulnerabilities/5211
CVE-2000-1169
OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openssh
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0195.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000345
CVE-2000-0448
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webshield
References: http://www.osvdb.org/326, http://www.securityfocus.com/bid/1253, http://www.securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net
CVE-2000-0052
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: turbolinux, linux, mandrake_linux
References: http://www.l0pht.com/advisories/pam_advisory, http://www.redhat.com/support/errata/RHSA-2000-001.html, http://www.securityfocus.com/bid/913
CVE-2000-0548
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerbnet, kerberos_5, cygnus_network_security, kerberos
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html, http://ciac.llnl.gov/ciac/bulletins/k-051.shtml, http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt
CWE: CWE-120
CVE-2000-0971
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: avirt_mail_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0301.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5397, https://exchange.xforce.ibmcloud.com/vulnerabilities/5398
CVE-2000-0100
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: systems_management_server
References: http://archives.neohapsis.com/archives/ntbugtraq/current/0045.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-012, http://archives.neohapsis.com/archives/ntbugtraq/current/0045.html
CVE-2000-0486
Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tacacs\+, ios
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0369.html, http://archives.neohapsis.com/archives/bugtraq/2000-05/0370.html, http://www.securityfocus.com/bid/1293
CVE-2000-0026
Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware, wmmon
References: http://marc.info/?l=bugtraq&m=94606167110764&w=2, http://www.osvdb.org/6310, http://www.securityfocus.com/bid/876
CVE-2000-0525
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openssh
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0065.html, http://www.openbsd.org/errata.html#uselogin, http://www.osvdb.org/341
CVE-2000-0804
Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.checkpoint.com/techsupport/alerts/list_vun.html#One-way_Connection, http://www.osvdb.org/4419, https://exchange.xforce.ibmcloud.com/vulnerabilities/5468
CVE-2000-1072
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iplanet_ical
References: http://www.atstake.com/research/advisories/2000/a100900-1.txt, http://www.osvdb.org/7212, http://www.securityfocus.com/bid/1768
CVE-2000-0138
A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: http://marc.info/?l=bugtraq&m=95715370208598&w=2, http://marc.info/?l=bugtraq&m=95722093124322&w=2, http://xforce.iss.net/alerts/advise48.php3
CVE-2000-0835
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sambar_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0175.html, http://www.securityfocus.com/bid/1684, http://archives.neohapsis.com/archives/bugtraq/2000-09/0175.html
CVE-2000-0267
Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: catos
References: http://www.cisco.com/warp/public/707/catos-enable-bypass-pub.shtml, http://www.osvdb.org/1288, http://www.securityfocus.com/bid/1122
CVE-2000-0340
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.securityfocus.com/bid/1155, http://www.securityfocus.com/templates/archive.pike?list=1&msg=00042902575201.09597%40wintermute-pub, http://www.suse.com/us/support/download/updates/axp_63.html
CVE-2000-0240
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vqserver
References: http://www.osvdb.org/270, http://www.securityfocus.com/bid/1067, http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.20000321084646.0095c7f0%40olga.swip.net
CVE-2000-0910
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: horde
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0051.html, http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch, http://www.debian.org/security/2000/20000910
CVE-2000-0947
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cfengine
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html, http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1
CVE-2000-1033
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: serv-u
References: http://www.securityfocus.com/archive/1/141905, http://www.securityfocus.com/bid/1860, https://exchange.xforce.ibmcloud.com/vulnerabilities/5436
CVE-2000-0818
The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: listener
References: http://otn.oracle.com/deploy/security/pdf/listener_alert.pdf, http://xforce.iss.net/alerts/advise66.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/5380
CVE-2000-0205
Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: officescan
References: http://archives.neohapsis.com/archives/bugtraq/2000-03/0015.html, http://www.antivirus.com/download/ofce_patch_35.htm, http://www.securityfocus.com/bid/1013
CVE-2000-0590
Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: poll_it
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0076.html, http://www.securityfocus.com/bid/1431, https://exchange.xforce.ibmcloud.com/vulnerabilities/4878
CVE-2000-0304
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.securityfocus.com/bid/1191, http://xforce.iss.net/alerts/advise52.php3, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031
CVE-2000-0282
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web\+
References: ftp://ftp.talentsoft.com/Download/Webplus/Unix/Patches/Webplus46p%20Read%20me.html, http://archives.neohapsis.com/archives/bugtraq/2000-04/0050.html, http://www.securityfocus.com/bid/1102
CVE-2000-0936
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: samba
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html, http://www.securityfocus.com/bid/1874, https://exchange.xforce.ibmcloud.com/vulnerabilities/5445
CVE-2000-0144
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 700_network_document_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-02/0034.html, http://www.securityfocus.com/bid/971, http://archives.neohapsis.com/archives/bugtraq/2000-02/0034.html
CVE-2000-1140
Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantrap
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html, http://www.securityfocus.com/bid/1908
CVE-2000-0781
uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: arcserve_backup
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0431.html, http://www.securityfocus.com/bid/1519, https://exchange.xforce.ibmcloud.com/vulnerabilities/5023
CVE-2000-0897
Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: small_http_server
References: http://home.lanck.net/mf/srv/index.htm, http://marc.info/?l=bugtraq&m=97421834001092&w=2, http://www.securityfocus.com/bid/1941
CVE-2000-0564
The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icq
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0218.html, http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0218.html
CVE-2000-0072
Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: visual_casel
References: http://marc.info/?l=bugtraq&m=94823061421676&w=2, http://www.iss.net/security_center/static/3867.php, http://www.securityfocus.com/bid/937
CVE-2000-0493
Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: time_sync
References: http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0843.html, http://www.securityfocus.com/bid/1289, https://exchange.xforce.ibmcloud.com/vulnerabilities/4602
CVE-2000-0946
Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: easy_access_keyboard_software
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0023.html, http://www.osvdb.org/5831, http://www5.compaq.com/support/files/desktops/us/revision/1723.html
CVE-2000-1137
GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ed
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000359, http://www.debian.org/security/2000/20001129, http://www.linux-mandrake.com/en/security/MDKSA-2000-076.php3
CVE-2000-0703
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: perl
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0022.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0086.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0113.html
CVE-2000-0346
AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: appleshare
References: http://asu.info.apple.com/swupdates.nsf/artnum/n11670, http://www.securityfocus.com/bid/1162, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502133240.21807.qmail%40securityfocus.com
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: dmailweb, cwmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0243.html, http://www.securityfocus.com/bid/1390, https://exchange.xforce.ibmcloud.com/vulnerabilities/4770
CVE-2000-0082
WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webtv
References: http://net4tv.com/voice/story.cfm?StoryID=1823, http://www.wired.com/news/technology/0%2C1282%2C33420%2C00.html, http://net4tv.com/voice/story.cfm?StoryID=1823
CVE-2000-0553
Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: ipfilter
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.html, http://www.osvdb.org/1377, http://www.securityfocus.com/bid/1308
CVE-2000-0641
Savant web server allows remote attackers to execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: savant_webserver
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html, http://www.securityfocus.com/bid/1453, https://exchange.xforce.ibmcloud.com/vulnerabilities/4901
CVE-2000-0645
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE).
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: wftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html, http://www.securityfocus.com/bid/1506, http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
CVE-2000-1128
The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virusscan
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0073.html, http://www.securityfocus.com/bid/1920, http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0073.html
CVE-2000-1000
Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: instant_messenger
References: http://www.securityfocus.com/archive/1/137374, http://www.securityfocus.com/bid/1747, https://exchange.xforce.ibmcloud.com/vulnerabilities/5314
CVE-2000-0363
Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/suse_security_announce_25.html, http://www.securityfocus.com/bid/738, http://www.novell.com/linux/security/advisories/suse_security_announce_25.html
CVE-2000-0575
SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ssh
References: http://marc.info/?l=bugtraq&m=96256265914116&w=2, http://www.securityfocus.com/bid/1426, https://exchange.xforce.ibmcloud.com/vulnerabilities/4903
CVE-2000-1178
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: joe
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356, http://marc.info/?l=bugtraq&m=97500174210821&w=2
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2000-0729
FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: http://archives.neohapsis.com/archives/freebsd/2000-08/0337.html, http://www.osvdb.org/1534, http://www.securityfocus.com/bid/1625
CVE-2000-1131
Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gbook.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0144.html, http://www.securityfocus.com/bid/1940, https://exchange.xforce.ibmcloud.com/vulnerabilities/5509
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lpplus
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html, http://www.securityfocus.com/bid/1644, https://exchange.xforce.ibmcloud.com/vulnerabilities/5201
CVE-2000-0952
global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: global
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-014.txt.asc, http://www.osvdb.org/6486, https://exchange.xforce.ibmcloud.com/vulnerabilities/5424
CVE-2000-0168
Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_98se, windows_95, windows_98
References: http://www.securityfocus.com/bid/1043, http://www.securityfocus.com/templates/advisory.html?id=2126, http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCENECCAA.labs%40ussrback.com
CVE-2000-0538
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion_server
References: http://marc.info/?l=bugtraq&m=96045469627806&w=2, http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full, http://www.osvdb.org/3399
CVE-2000-0467
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: splitvt
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0125.html, http://www.securityfocus.com/bid/1346, http://archives.neohapsis.com/archives/bugtraq/2000-06/0125.html
CVE-2000-0432
The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: calendar_script
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0173.html, http://www.securityfocus.com/bid/1215, http://archives.neohapsis.com/archives/bugtraq/2000-05/0173.html
CVE-2000-0622
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: website_professional
References: http://website.oreilly.com/support/software/wspro25_releasenotes.txt, http://www.nai.com/research/covert/advisories/043.asp, http://www.securityfocus.com/bid/1487
CVE-2000-1228
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phorum
References: http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html, http://hispahack.ccc.de/mi020.html, http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
CVE-2000-0455
Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xlock
References: ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-003.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2000-05/0375.html, http://www.nai.com/nai_labs/asp_set/advisory/41initialized.asp
CVE-2000-0364
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=92877527701347&w=2, http://marc.info/?l=bugtraq&m=92886009012161&w=2, http://www.redhat.com/corp/support/errata/RHSA1999014_01.html
CVE-2000-0288
Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0049.html, http://archives.neohapsis.com/archives/bugtraq/2000-04/0049.html
CVE-2000-1093
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: instant_messenger
References: http://www.atstake.com/research/advisories/2000/a121200-1.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/5732, http://www.atstake.com/research/advisories/2000/a121200-1.txt
CVE-2000-0627
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: courseinfo
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0254.html, http://www.securityfocus.com/bid/1486, http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000719151904.I17986%40securityfocus.com