DuyTa/cve-kgrag-db huggingface dataset:
CVE-2000-1103
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd_os
References: http://www.securityfocus.com/archive/1/147120, http://www.securityfocus.com/bid/2009, http://www.securityfocus.com/archive/1/147120
CVE-2000-0400
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://marc.info/?l=bugtraq&m=95868514521257&w=2, http://www.securityfocus.com/bid/1221, http://marc.info/?l=bugtraq&m=95868514521257&w=2
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2000-1130
McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webshield_smtp
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html, http://www.securityfocus.com/bid/1993, http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html
CVE-2000-0757
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: totalbill
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0074.html, http://www.securityfocus.com/bid/1555, http://archives.neohapsis.com/archives/bugtraq/2000-08/0074.html
CVE-2000-0426
UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ultraboard
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0059.html, http://www.securityfocus.com/bid/1175, http://archives.neohapsis.com/archives/bugtraq/2000-05/0059.html
CVE-2000-0623
Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: website_professional
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=5946, http://www.securityfocus.com/bid/1492, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=5946
CVE-2000-0544
Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt
References: http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0231.html, http://www.securityfocus.com/bid/1304, http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0231.html
CVE-2000-0447
Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webshield
References: http://www.osvdb.org/327, http://www.securityfocus.com/bid/1254, http://www.securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net
CVE-2000-0191
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: storpoint_cd
References: http://www.osvdb.org/19, http://www.securityfocus.com/bid/1025, http://www.securityfocus.com/templates/archive.pike?list=1&msg=41256894.00492503.00%40mailgw.backupcentralen.se
CVE-2000-1237
The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ftgate
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html, http://www.iss.net/security_center/static/4793.php, http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html
CVE-2000-1185
The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ridewaypn
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0201.html, http://www.securityfocus.com/bid/1938, http://archives.neohapsis.com/archives/bugtraq/2000-11/0201.html
CVE-2000-0586
Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ircd
References: http://archives.neohapsis.com/archives/vuln-dev/2000-q2/1092.html, http://www.securityfocus.com/bid/1404, http://archives.neohapsis.com/archives/vuln-dev/2000-q2/1092.html
CVE-2000-0006
strace allows local users to read arbitrary files via memory mapped file names.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:N
Affected Products: linux_kernel, strace
References: http://online.securityfocus.com/archive/1/39831, https://exchange.xforce.ibmcloud.com/vulnerabilities/4554, http://online.securityfocus.com/archive/1/39831
CVE-2000-0366
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debian_linux
References: http://www.debian.org/security/1999/19991202, http://www.securityfocus.com/bid/1442, http://www.debian.org/security/1999/19991202
CVE-2000-0507
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imate_webmail_server
References: http://marc.info/?l=bugtraq&m=95990195708509&w=2, http://www.securityfocus.com/bid/1286, https://exchange.xforce.ibmcloud.com/vulnerabilities/4586
CVE-2000-0018
wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wmmon
References: http://www.osvdb.org/1169, http://www.securityfocus.com/bid/885, http://www.osvdb.org/1169
CVE-2000-0156
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.osvdb.org/7827, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-009, https://exchange.xforce.ibmcloud.com/vulnerabilities/3996
CVE-2000-0938
Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: samba
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5442, http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html
CVE-2000-1167
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:70.ppp-nat.asc, http://www.osvdb.org/1655, http://www.securityfocus.com/bid/1974
CVE-2000-0676
Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc, http://archives.neohapsis.com/archives/bugtraq/2000-08/0019.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0115.html
CVE-2000-0330
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: windows_95, windows_98
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-049, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-049
CVE-2000-0335
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bind, glibc
References: http://www.securityfocus.com/bid/1166, http://www.securityfocus.com/bid/1166
CVE-2000-0453
XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: x11r6
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-012.0.txt, http://archives.neohapsis.com/archives/bugtraq/2000-05/0223.html, http://www.securityfocus.com/bid/1235
CVE-2000-0951
A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_services
References: http://www.atstake.com/research/advisories/2000/a100400-1.txt, http://www.microsoft.com/technet/support/kb.asp?ID=272079, http://www.securityfocus.com/bid/1756
CVE-2000-0200
Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: greetings, clip_art, home_publishing
References: http://www.securityfocus.com/bid/1034, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-015, http://www.securityfocus.com/bid/1034
CVE-2000-1037
Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.securityfocus.com/archive/1/76389, http://www.securityfocus.com/bid/1662, http://www.securityfocus.com/archive/1/76389
CVE-2000-1025
eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ewave_servletexec
References: http://marc.info/?l=bugtraq&m=97295224226042&w=2, http://www.securityfocus.com/bid/1868, https://exchange.xforce.ibmcloud.com/vulnerabilities/5435
CVE-2000-0585
ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dhcp_client
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:34.dhclient.asc, ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-008.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2000-06/0247.html
CVE-2000-0690
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: auction_weaver
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0370.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0452.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0370.html
CVE-2000-1036
Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: rbs_isp
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0252.html, http://www.securityfocus.com/bid/1704, https://exchange.xforce.ibmcloud.com/vulnerabilities/5275
CVE-2000-1172
Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gaim
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0204.html, http://www.securityfocus.com/bid/1948, http://archives.neohapsis.com/archives/bugtraq/2000-11/0204.html
CVE-2000-0418
The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3220-h_dsl_router, gatorsurf
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0280.html, http://www.securityfocus.com/bid/1240, http://archives.neohapsis.com/archives/bugtraq/2000-05/0280.html
CVE-2000-0607
Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, linux, mandrake_linux
References: http://www.securityfocus.com/bid/1371, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk, http://www.securityfocus.com/bid/1371
CVE-2000-1177
bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: big_brother_network_monitor
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0284.html, http://bb4.com/incident.nov21, http://www.securityfocus.com/bid/1971
CVE-2000-0928
WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: diskadvisor
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0091.html, http://www.securityfocus.com/bid/1765, https://exchange.xforce.ibmcloud.com/vulnerabilities/5327
CVE-2000-0943
Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0397.html, http://www.securityfocus.com/bid/1858, https://exchange.xforce.ibmcloud.com/vulnerabilities/5426
CVE-2000-0912
MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: multihtml
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5285, http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html
CVE-2000-0948
GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gnorpm
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0043.html, http://archives.neohapsis.com/archives/bugtraq/2000-10/0184.html, http://www.linux-mandrake.com/en/security/MDKSA-2000-055.php3?dis=7.0
CVE-2000-0317
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.html, http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.html, http://marc.info/?l=bugtraq&m=95729763119559&w=2
CVE-2000-0780
The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: imail
References: http://marc.info/?l=bugtraq&m=96767207207553&w=2, http://www.ipswitch.com/Support/IMail/news.html, http://www.securityfocus.com/bid/1617
CVE-2000-1166
Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhosts as an argument to the index.php3 program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: twig
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0351.html, http://twig.screwdriver.net/file.php3?file=CHANGELOG, http://www.securityfocus.com/bid/1998
CVE-2000-0824
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: glibc
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0436.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0509.html, http://archives.neohapsis.com/archives/bugtraq/2000-08/0525.html
CVE-2000-0238
Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_antivirus
References: http://www.securityfocus.com/bid/1064, http://www.securityfocus.com/templates/archive.pike?list=1&msg=s8d1f3e3.036%40kib.co.kodiak.ak.us, http://www.securityfocus.com/bid/1064
CVE-2000-0464
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer
References: http://www.microsoft.com/technet/support/kb.asp?ID=261257, http://www.securityfocus.com/bid/1223, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033
CVE-2000-1100
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postaci_webmail
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0433.html, http://www.securityfocus.com/bid/2029, http://archives.neohapsis.com/archives/bugtraq/2000-11/0433.html
CVE-2000-0792
Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gnome-lokkit
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0252.html, http://www.osvdb.org/1520, http://www.securityfocus.com/bid/1590
CVE-2000-0784
sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rapidstream
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0216.html, http://www.securityfocus.com/bid/1574, http://archives.neohapsis.com/archives/bugtraq/2000-08/0216.html
CVE-2000-1222
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.kb.cert.org/vuls/id/17566, https://exchange.xforce.ibmcloud.com/vulnerabilities/6432, http://www.kb.cert.org/vuls/id/17566
CVE-2000-0541
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: panda_antivirus
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0164.html, http://www.securityfocus.com/bid/1359, https://exchange.xforce.ibmcloud.com/vulnerabilities/4707
CVE-2000-0988
WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winu
References: http://archives.neohapsis.com/archives/bugtraq/2000-10/0238.html, http://www.bardon.com/pwdcrack.htm, http://www.securityfocus.com/bid/1801
CVE-2000-1242
The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: powerchute
References: http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php, http://www.osvdb.org/30768, http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php
CVE-2000-0090
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: workstation
References: http://www.osvdb.org/1205, http://www.securityfocus.com/bid/943, http://www.osvdb.org/1205
CVE-2000-0085
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hotmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0085, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0085
CVE-2000-1027
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pix_firewall_software
References: http://marc.info/?l=bugtraq&m=97059440000367&w=2, http://www.osvdb.org/1623, http://www.securityfocus.com/bid/1877
CVE-2000-0372
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openlinux
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-014.0.txt, http://www.osvdb.org/7940, https://exchange.xforce.ibmcloud.com/vulnerabilities/2268
CVE-2000-0796
Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://www.osvdb.org/1484, http://www.securityfocus.com/bid/1528, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl
CVE-2000-1108
cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: midnight_commander
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0192.html, http://www.debian.org/security/2000/20001125, http://www.linux-mandrake.com/en/security/MDKSA-2000-078.php3
CVE-2000-0424
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cgi_counter
References: http://www.securityfocus.com/bid/1202, http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005151024.aa01811%40blaze.arl.mil, http://www.securityfocus.com/bid/1202
CVE-2000-0543
The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: certificate_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-06/0107.html, http://www.securityfocus.com/bid/1343, https://exchange.xforce.ibmcloud.com/vulnerabilities/4695
CVE-2000-0545
Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailx
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0435.html, http://www.debian.org/security/2000/20000605, http://www.securityfocus.com/bid/1305
CVE-2000-1021
Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mdaemon
References: http://marc.info/?l=bugtraq&m=96925269716274&w=2, http://www.securityfocus.com/bid/1689, https://exchange.xforce.ibmcloud.com/vulnerabilities/5250
CVE-2000-1188
Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quikstore
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0283.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0283.html
CVE-2000-0166
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: interaccess_telnetd_server
References: http://marc.info/?l=bugtraq&m=95142756403323&w=2, http://www.securityfocus.com/bid/995, http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPGEJHCCAA.labs%40ussrback.com
CVE-2000-0685
BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: weblogic_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html, http://developer.bea.com/alerts/security_000731.html, http://www.securityfocus.com/bid/1525
CVE-2000-0890
periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: freebsd
References: http://www.kb.cert.org/vuls/id/626919, http://www.osvdb.org/1754, http://www.securityfocus.com/bid/2325
CVE-2000-0472
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: inn
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-016.0.txt, http://archives.neohapsis.com/archives/bugtraq/2000-06/0003.html, http://archives.neohapsis.com/archives/bugtraq/2000-07/0097.html
CVE-2000-0682
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html, http://developer.bea.com/alerts/security_000731.html, http://www.osvdb.org/1481
CVE-2000-0664
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: simpleserver_www
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0374.html, http://www.analogx.com/contents/download/network/sswww.htm, http://www.osvdb.org/388
CVE-2000-1191
htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: htdig
Related CWEs: CWE-209
Related CAPECs: CAPEC-215, CAPEC-54, CAPEC-7
References: http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html, http://www.securityfocus.com/bid/4366, https://exchange.xforce.ibmcloud.com/vulnerabilities/7367
CWE: CWE-209
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cobalt_raq_3i, cobalt_raq_2
References: http://www.securityfocus.com/bid/1083, http://www.securityfocus.com/templates/advisory.html?id=2150, http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000330220757.28456.qmail%40securityfocus.com
CVE-2000-0769
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: website_pro
References: http://marc.info/?l=bugtraq&m=96715834610888&w=2, http://www.securityfocus.com/bid/1611, http://marc.info/?l=bugtraq&m=96715834610888&w=2
CVE-2000-0727
xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: xpdf
References: http://marc.info/?l=bugtraq&m=96766355023239&w=2, http://marc.info/?l=bugtraq&m=96886599829687&w=2, http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt
CVE-2000-0825
Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0071.html, http://marc.info/?l=bugtraq&m=96659012127444&w=2, http://marc.info/?l=ntbugtraq&m=96654521004571&w=2
CVE-2000-0137
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cartit
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0137, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0137
CVE-2000-0164
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris_isp_server
References: http://www.securityfocus.com/bid/1004, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.SOL.4.21.0002200031320.22675-100000%40klayman.hq.formus.pl, http://www.securityfocus.com/bid/1004
CVE-2000-0098
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: index_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006
CVE-2000-0488
Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ithouse_mail_server
References: http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0148.html, http://www.securityfocus.com/bid/1285, https://exchange.xforce.ibmcloud.com/vulnerabilities/4580
CVE-2000-0332
UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ultraboard
References: http://www.osvdb.org/1309, http://www.osvdb.org/4065, http://www.securityfocus.com/bid/1164
CVE-2000-0991
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hyperterminal
References: http://www.securityfocus.com/bid/1815, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-079, https://exchange.xforce.ibmcloud.com/vulnerabilities/5387
CVE-2000-0076
nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: nvi, debian_linux
References: http://marc.info/?l=bugtraq&m=94709988232618&w=2, http://www.securityfocus.com/bid/1439, http://marc.info/?l=bugtraq&m=94709988232618&w=2
CVE-2000-1023
The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: control_panel
References: http://www.securityfocus.com/archive/1/84766, http://www.securityfocus.com/bid/1710, https://exchange.xforce.ibmcloud.com/vulnerabilities/5284
CVE-2000-0104
The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shoptron
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0104, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0104
CVE-2000-1151
Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: baxter
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html
CVE-2000-0745
admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2000-08/0243.html, http://www.osvdb.org/1521, http://www.securityfocus.com/bid/1592
CVE-2000-1150
Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: felix
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html, http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html
CVE-2000-0121
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248399, http://www.securityfocus.com/bid/963, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-007
CVE-2000-0614
Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://archives.neohapsis.com/archives/vendor/2000-q3/0002.html, http://www.securityfocus.com/bid/1450, http://archives.neohapsis.com/archives/vendor/2000-q3/0002.html
CVE-2000-1115
Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 602pro_lan_suite
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0299.html, http://www.securityfocus.com/bid/1979, http://www.software602.com/products/ls/support/newbuild.html
CVE-2000-0262
The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ken
References: http://archives.neohapsis.com/archives/bugtraq/2000-04/0073.html, http://www.securityfocus.com/bid/1103, http://www.securityfocus.com/templates/archive.pike?list=1&msg=383085010.956159226625.JavaMail.root%40web305-mc.mail.com
CVE-2000-0152
Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bordermanager
References: http://www.osvdb.org/7468, http://www.securityfocus.com/bid/976, http://www.osvdb.org/7468
CVE-2000-0661
WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irc_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-07/0120.html, http://www.securityfocus.com/bid/1448, https://exchange.xforce.ibmcloud.com/vulnerabilities/4914
CVE-2000-0410
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion_server
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0005&L=ntbugtraq&F=&S=&P=4843, http://www.securityfocus.com/bid/1192, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0005&L=ntbugtraq&F=&S=&P=4843
CVE-2000-0245
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://sgigate.sgi.com/security/20000303-01-PX, http://www.ciac.org/ciac/bulletins/k-030.shtml, http://www.osvdb.org/1267
CVE-2000-1080
Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: proquake, quake
References: http://marc.info/?l=bugtraq&m=97318797630246&w=2, http://proquake.ai.mit.edu/, http://www.securityfocus.com/bid/1900
CVE-2000-0826
Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: documentdirect_for_the_internet
References: http://www.atstake.com/research/advisories/2000/a090800-1.txt, http://www.securityfocus.com/bid/1657, https://exchange.xforce.ibmcloud.com/vulnerabilities/5210
CVE-2000-0967
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: php
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:75.php.asc, http://archives.neohapsis.com/archives/bugtraq/2000-10/0204.html, http://www.atstake.com/research/advisories/2000/a101200-1.txt
CVE-2000-1125
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=97336034309944&w=2, http://www.securityfocus.com/bid/1914, http://marc.info/?l=bugtraq&m=97336034309944&w=2
CVE-2000-0837
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ftp_serv-u
References: http://www.securityfocus.com/archive/1/73843, http://www.securityfocus.com/bid/1543, https://exchange.xforce.ibmcloud.com/vulnerabilities/5029
CVE-2000-0816
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux
References: http://www.linux-mandrake.com/en/security/MDKSA-2000-056.php3?dis=7.1, http://www.redhat.com/support/errata/RHSA-2000-080.html, http://www.securityfocus.com/bid/1785
CVE-2000-0997
Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd, netbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch, http://www.securityfocus.com/bid/1752, https://exchange.xforce.ibmcloud.com/vulnerabilities/5337
CVE-2000-0007
Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pc-cillin
References: http://www.securityfocus.com/bid/1740, https://exchange.xforce.ibmcloud.com/vulnerabilities/4491, http://www.securityfocus.com/bid/1740
CVE-2000-0551
The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netop
References: http://archives.neohapsis.com/archives/bugtraq/2000-05/0339.html, http://www.securityfocus.com/bid/1263, https://exchange.xforce.ibmcloud.com/vulnerabilities/4569
CVE-2000-0265
Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: panda_security
References: http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip, http://www.securityfocus.com/bid/1119, http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FB45F2.550EA000%40teleline.es
CVE-2000-0327
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: virtual_machine
References: http://marc.info/?l=bugtraq&m=93993545118416&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-045, http://marc.info/?l=bugtraq&m=93993545118416&w=2
CVE-2000-0430
Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cart32
References: http://marc.info/?l=bugtraq&m=95738697301956&w=2, http://www.securityfocus.com/bid/1358, http://marc.info/?l=bugtraq&m=95738697301956&w=2