Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-0920 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "." Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:60.boa.asc - http://archives.neohapsis.com/archives/bugtraq/2000-10/0092.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5330 - http://www.securityfocus.com/bid/1770 - http://w
0092.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5330 - http://www.securityfocus.com/bid/1770 - http://www.debian.org/security/2000/20001009
CVE ID: CVE-2000-0921 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0115.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5342 - http://www.securityfocus.com/bid/1777 - http://www.osvdb.org/1596
CVE ID: CVE-2000-0922 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5351 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0120.html
CVE ID: CVE-2000-0923 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5333 - http://www.securityfocus.com/bid/1784 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html
CVE ID: CVE-2000-0924 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5355 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0141.html - http://www.securityfocus.com/bid/1772
CVE ID: CVE-2000-0925 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5318 - http://marc.info/?l=bugtraq&m=97050819812055&w=2 - http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0001.html
CVE ID: CVE-2000-0926 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5319 - http://marc.info/?l=bugtraq&m=97050627707128&w=2 - http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html
CVE ID: CVE-2000-0927 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:37:31.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5302 - http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0173.html - http://archives.neohapsis.com/archives/bugtraq/2000-09//0331.html
CVE ID: CVE-2000-0928 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5327 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0091.html
CVE ID: CVE-2000-0929 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-068 - http://marc.info/?l=bugtraq&m=97024839222747&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5309 - http://www.securityfocus.com/bid/1714
CVE ID: CVE-2000-0930 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html - http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html - http://www.securityfocus.com/bid/1738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5326
CVE ID: CVE-2000-0931 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:31.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/137518 - http://www.securityfocus.com/bid/1750
CVE ID: CVE-2000-0932 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0181.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5641
CVE ID: CVE-2000-0933 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5301 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-069
CVE ID: CVE-2000-0934 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5271 - http://www.redhat.com/support/errata/RHSA-2000-062.html - http://www.securityfocus.com/bid/1703
CVE ID: CVE-2000-0935 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5443 - http://www.securityfocus.com/bid/1872
CVE ID: CVE-2000-0936 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5445 - http://www.securityfocus.com/bid/1874
CVE ID: CVE-2000-0937 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5442 - http://www.securityfocus.com/bid/1873
CVE ID: CVE-2000-0938 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5442
CVE ID: CVE-2000-0939 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:31.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5444
CVE ID: CVE-2000-0940 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:31.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5451 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0422.html - http://www.securityfocus.com/bid/1864
CVE ID: CVE-2000-0941 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5438 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0420.html - http://archives.neohapsis.com/archives/bugtraq/2000-10/0419.html - http://www.kootenayweb.bc.ca/scripts/whois.txt
CVE ID: CVE-2000-0942 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/141903 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084 - http://www.securityfocus.com/bid/1861 - https://exchange.xforce.ibmcloud.co
ty-updates/securitybulletins/2000/ms00-084 - http://www.securityfocus.com/bid/1861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5441
CVE ID: CVE-2000-0943 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1858 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0397.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5426
CVE ID: CVE-2000-0944 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html - http://www.securityfocus.com/bid/1881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5433
CVE ID: CVE-2000-0945 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T05:37:31.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/444 - http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5415 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html - http://www.securityfocus.co
om/vulnerabilities/5415 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html - http://www.securityfocus.com/bid/1846
CVE ID: CVE-2000-0946 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5831 - http://www5.compaq.com/support/files/desktops/us/revision/1723.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5718 - http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0023.html
CVE ID: CVE-2000-0947 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html - http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1 - ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/5630 - http://www.securit
ty/advisories/NetBSD-SA2000-013.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/5630 - http://www.securityfocus.com/bid/1757
CVE ID: CVE-2000-0948 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5317 - http://www.securityfocus.com/bid/1761 - http://www.redhat.com/support/errata/RHSA-2000-072.html - http://archives.neohapsis.com/archives/bugtraq/2000-10/0184.html - http://www.securityfocus.com/archive/1/136866 - http://www.linux-mandrake.com/en/security/MDKSA-2000-055.php3?dis=7.0 - http://archives.neohapsis.com/archiv
/1/136866 - http://www.linux-mandrake.com/en/security/MDKSA-2000-055.php3?dis=7.0 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0043.html
CVE ID: CVE-2000-0949 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. Additional Analyst Notes: - CVE Program Container: References: - http://www.turbolinux.com/pipermail/tl-security-announce/2000-October/000025.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5311 - http://www.linux-mandrake.com/en/security/MDKSA-2000-053.php3?dis=7.1 - http://www.redhat.com/support/errata/RHSA-2000-078.html - http://archives.neohapsis.com/archives/bugtraq/2000-0
is=7.1 - http://www.redhat.com/support/errata/RHSA-2000-078.html - http://archives.neohapsis.com/archives/bugtraq/2000-09/0357.html - http://www.securityfocus.com/bid/1739 - http://www.debian.org/security/2000/20001013 - http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txt - http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.html
CVE ID: CVE-2000-0950 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0376.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5420
CVE ID: CVE-2000-0951 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1756 - http://www.microsoft.com/technet/support/kb.asp?ID=272079 - http://www.atstake.com/research/advisories/2000/a100400-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/5335
CVE ID: CVE-2000-0952 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5424 - http://www.osvdb.org/6486 - ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-014.txt.asc
CVE ID: CVE-2000-0953 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html - http://www.securityfocus.com/bid/1778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5345
CVE ID: CVE-2000-0954 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5346 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html - http://www.securityfocus.com/bid/1771
CVE ID: CVE-2000-0955 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:31.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2000/a102600-1.txt - http://www.securityfocus.com/bid/1885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5425
CVE ID: CVE-2000-0956 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2000-094.html - http://www.securityfocus.com/bid/1875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5427
CVE ID: CVE-2000-0957 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:31.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5447