Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-0645 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:41.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html - http://www.securityfocus.com/bid/1506
CVE ID: CVE-2000-0646 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:41.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html - http://www.securityfocus.com/bid/1506
CVE ID: CVE-2000-0647 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:40.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html - http://www.securityfocus.com/bid/1506
CVE ID: CVE-2000-0648 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:40.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13BvU6-0007d8-00%40dwarf.box.sk - http://www.securityfocus.com/bid/1456
CVE ID: CVE-2000-0649 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:41.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html - http://www.securityfocus.com/bid/1499
CVE ID: CVE-2000-0650 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:28:40.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5177 - http://www.osvdb.org/1458 - http://www.osvdb.org/4200 - http://www.ntbugtraq.com/default.asp?pid=36&s
erabilities/5177 - http://www.osvdb.org/1458 - http://www.osvdb.org/4200 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753
CVE ID: CVE-2000-0651 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5186 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.n
vulnerabilities/5186 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com
CVE ID: CVE-2000-0652 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5012 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0342.html
CVE ID: CVE-2000-0653 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:41.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1502 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-045
CVE ID: CVE-2000-0654 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/4582 - http://www.securityfocus.com/bid/1466 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041
CVE ID: CVE-2000-0655 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2000-046.html - http://www.securityfocus.com/bid/1503 - http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000016.html - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc - http://ww
ce/2000-August/000016.html - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc - http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D200007242356.DAA01274%40false.com - http://www.novell.com/linux/security/advisories/suse_security_announce_60.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0456.html - http://archives.neohapsis.com/archives/bugtraq/2000-08/0116.html - ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-011.txt.asc
CVE ID: CVE-2000-0656 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:40.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html - http://www.securityfocus.com/bid/1504 - http://www.analogx.com/contents/download/network/proxy.htm
CVE ID: CVE-2000-0657 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:40.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html - http://www.securityfocus.com/bid/1504 - http://www.analogx.com/contents/download/network/proxy.htm
CVE ID: CVE-2000-0658 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:40.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html - http://www.securityfocus.com/bid/1504 - http://www.analogx.com/contents/download/network/proxy.htm
CVE ID: CVE-2000-0659 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:40.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html - http://www.securityfocus.com/bid/1504
CVE ID: CVE-2000-0660 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.altn.com/Downloads/WorldClient/Release/RelNotes.txt - http://www.osvdb.org/1459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4913 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0173.html - http://www.securityfocus.com/bid/1462
CVE ID: CVE-2000-0661 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/4914 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0120.html - http://www.securityfocus.com/bid/1448
CVE ID: CVE-2000-0662 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T05:28:40.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5107 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=396EF9D5.62EEC625%40nat.bg
CVE ID: CVE-2000-0663 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.microsoft.com/technet/support/kb.asp?ID=269049 - http://www.securityfocus.com/bid/1507 - https://docs.microsoft.com/en-us/security-updates/securitybul
kb.asp?ID=269049 - http://www.securityfocus.com/bid/1507 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5040
CVE ID: CVE-2000-0664 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots. Additional Analyst Notes: - CVE Program Container: References: - http://www.analogx.com/contents/download/network/sswww.htm - http://archives.neohapsis.com/archives/bugtraq/2000-07/0374.html - http://www.securityfocus.com/bid/1508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4999 - http://www.osvdb.org/388
CVE ID: CVE-2000-0665 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/4945 - http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0056.html - http://www.securityfocus.com/bid/1478 - http://www.osvdb.org/373 - http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0031.html
CVE ID: CVE-2000-0666 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2000-043.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0206.html - http://www.securityfocus.com/bid/1480 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0230.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0236.ht
chives.neohapsis.com/archives/bugtraq/2000-07/0230.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0236.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/4939 - http://www.calderasystems.com/support/security/advisories/CSSA-2000-025.0.txt - http://www.cert.org/advisories/CA-2000-17.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0260.html
CVE ID: CVE-2000-0667 State: PUBLISHED Published: 2000-08-03T04:00:00 Last Updated: 2024-08-08T05:28:40.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1512 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0273.html
CVE ID: CVE-2000-0668 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0455.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0398.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5001 - http://www.securityfocus.com/bid/1513 - http://www.redhat.com/support/errata/RHSA-2000-044.html
CVE ID: CVE-2000-0669 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&msg=000501bfeab5%249330c3d0%24d801a8c0%40dimuthu.baysidegrp.com.au - http://www.securityfocus.com/bid/1467
CVE ID: CVE-2000-0670 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:37.cvsweb.asc - http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000015.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0178.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/4925 - http://www.securityfoc
/archives/bugtraq/2000-07/0178.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/4925 - http://www.securityfocus.com/bid/1469 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0196.html
CVE ID: CVE-2000-0671 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html - http://www.securityfocus.com/bid/1510 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/4965
CVE ID: CVE-2000-0672 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:28:40.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5160 - http://www.securityfocus.com/bid/1548
CVE ID: CVE-2000-0673 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.nai.com/research/covert/advisories/044.asp - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5035 - http://www.
curity-updates/securitybulletins/2000/ms00-047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5035 - http://www.securityfocus.com/bid/1515 - http://www.securityfocus.com/bid/1514
CVE ID: CVE-2000-0674 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0177.html - http://www.securityfocus.com/bid/1471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5187
CVE ID: CVE-2000-0675 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&msg=00af01bfece2%24a52cbd80%24367e1ec4%40kungphusion - https://exchange.xforce.ibmcloud.com/vulnerabilities/4948 - http://www.securityfocus.com/bid/1477
CVE ID: CVE-2000-0676 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-08/0019.html - http://www.securityfocus.com/bid/1546 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc - http://archives.neohapsis.com/arc
46 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc - http://archives.neohapsis.com/archives/bugtraq/2000-08/0115.html - http://www.novell.com/linux/security/advisories/suse_security_announce_60.html - http://archives.neohapsis.com/archives/bugtraq/2000-08/0236.html - http://www.calderasystems.com/support/security/advisories/CSSA-2000-027.1.txt - http://archives.neohapsis.com/archives/bugtraq/2000-08/0265.html - http://www.cert.org/advisories/CA-2000-15.html - http://www.redhat.com/support/errata/RHSA-2000-054.html
CVE ID: CVE-2000-0677 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/alerts/advise60.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/4976
CVE ID: CVE-2000-0678 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2000-18.html - http://www.osvdb.org/4354 - http://www.securityfocus.com/bid/1606
CVE ID: CVE-2000-0679 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:28:41.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org - http://www.securityfocus.com/bid/1523
CVE ID: CVE-2000-0680 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:40.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org - http://www.securityfocus.com/bid/1524
CVE ID: CVE-2000-0681 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-08/0186.html - http://www.securityfocus.com/bid/1570