Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-0682 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet. Additional Analyst Notes: - CVE Program Container: References: - http://developer.bea.com/alerts/security_000731.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html - http://www.osvdb.org/1481 - http://www.securityfocus.com/bid/1518
CVE ID: CVE-2000-0683 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/1480 - http://www.securityfocus.com/bid/1517 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html - http://developer.bea.com/alerts/security_000728.html
CVE ID: CVE-2000-0684 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file. Additional Analyst Notes: - CVE Program Container: References: - http://developer.bea.com/alerts/security_000731.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html - http://www.securityfocus.com/bid/1525
CVE ID: CVE-2000-0685 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file. Additional Analyst Notes: - CVE Program Container: References: - http://developer.bea.com/alerts/security_000731.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html - http://www.securityfocus.com/bid/1525
CVE ID: CVE-2000-0686 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1630 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html
CVE ID: CVE-2000-0687 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:40.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1630 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html
CVE ID: CVE-2000-0688 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cgiscriptcenter.com/subscribe/ - http://www.securityfocus.com/bid/1607 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html - http://marc.info/?l=bugtraq&m=96722957421029&w=2
CVE ID: CVE-2000-0689 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:40.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html - http://www.securityfocus.com/bid/1604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5125 - http://www.osvdb.org/13341 - http://www.cgiscriptcenter.
4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5125 - http://www.osvdb.org/13341 - http://www.cgiscriptcenter.com/acctlite/
CVE ID: CVE-2000-0690 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:40.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-08/0452.html - http://archives.neohapsis.com/archives/bugtraq/2000-08/0370.html
CVE ID: CVE-2000-0691 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1612 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html - http://archives.neohapsis.com/archives/bugtraq/2000-08/0329.html - http://www.calderasystems.com/support/security/advisories/CSSA-2000-029.0.txt
CVE ID: CVE-2000-0692 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1597 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0267.html
CVE ID: CVE-2000-0693 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:28:41.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html - http://www.osvdb.org/1501 - http://www.securityfocus.com/bid/1563
CVE ID: CVE-2000-0694 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:28:41.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html - http://www.osvdb.org/5740
CVE ID: CVE-2000-0695 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:40.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html
CVE ID: CVE-2000-0696 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script. Additional Analyst Notes: - CVE Program Container: References: - http://www.s21sec.com/en/avisos/s21sec-004-en.txt - http://www.securityfocus.com/bid/1554 - http://archives.neohapsis.com/archives/sun/2000-q3/0001.html - http://seclists.org/bugtraq/2000/Aug/0105.html - htt
54 - http://archives.neohapsis.com/archives/sun/2000-q3/0001.html - http://seclists.org/bugtraq/2000/Aug/0105.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5069
CVE ID: CVE-2000-0697 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/5058.php - http://www.s21sec.com/en/avisos/s21sec-004-en.txt - http://www.securityfocus.com/bid/1556 - http://archives.neohapsis.com/archives/sun/2000-q3/0001.html - http://seclists.org/bugtraq/2000/Aug/0105.html
CVE ID: CVE-2000-0698 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:28:40.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/77361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5151 - http://www.securityfocus.com/bid/1599
CVE ID: CVE-2000-0699 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T05:28:41.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1560 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.html
CVE ID: CVE-2000-0700 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/798 - http://www.cisco.com/warp/public/707/gsraclbypassdos-pub.shtml - http://www.securityfocus.com/bid/1541 - http://www.osvdb.org/793
CVE ID: CVE-2000-0701 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/73220 - http://www.redhat.com/support/errata/RHSA-2000-030.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0479.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0474.html - http://www.securityfocus.com/bid/1539 - http://www.securityfocus.com/templates
.com/archives/bugtraq/2000-07/0474.html - http://www.securityfocus.com/bid/1539 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000802105050.A11733%40rak.isternet.sk
CVE ID: CVE-2000-0702 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:28:41.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5131 - http://www.securityfocus.com/bid/1602 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0261.html
CVE ID: CVE-2000-0703 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000017.html - http://www.securityfocus.com/bid/1547 - http://www.redhat.com/support/errata/RHSA-2000-048.htm
2000-August/000017.html - http://www.securityfocus.com/bid/1547 - http://www.redhat.com/support/errata/RHSA-2000-048.html - http://www.calderasystems.com/support/security/advisories/CSSA-2000-026.0.txt - http://archives.neohapsis.com/archives/bugtraq/2000-08/0086.html - http://archives.neohapsis.com/archives/bugtraq/2000-08/0153.html - http://archives.neohapsis.com/archives/bugtraq/2000-08/0022.html - http://www.novell.com/linux/security/advisories/suse_security_announce_59.html - http://archives.neohapsis.com/archives/bugtraq/2000-08/0113.html
CVE ID: CVE-2000-0704 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands. Additional Analyst Notes: - CVE Program Container: References: - ftp://sgigate.sgi.com/security/20000803-01-A - http://www.securityfocus.com/bid/1603 - http://www.osvdb.org/11080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5163
CVE ID: CVE-2000-0705 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1550 - http://www.redhat.com/support/errata/RHSA-2000-049.html - http://archives.neohapsis.com/archives/bugtraq/2000-07/0459.html - http://www.osvdb.org/1496
CVE ID: CVE-2000-0706 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2000/20000830 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:36.ntop.asc - http://www.osvdb.org/1513 - http://www.securityfocus.com/bid/1576
CVE ID: CVE-2000-0707 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1557 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0015.html - http://pccs-linux.com/public/view.php3?bn=agora_pccslinux&key=965951324
CVE ID: CVE-2000-0708 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1605 - http://www.pragmasys.com/TelnetServer/ - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=NTBUGTRAQ&P=R4247
CVE ID: CVE-2000-0709 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name. Additional Analyst Notes: - CVE Program Container: References: - http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp - http://www.securityfocus.com/bid/1608 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html
CVE ID: CVE-2000-0710 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:40.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name. Additional Analyst Notes: - CVE Program Container: References: - http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp - http://www.securityfocus.com/bid/1608 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html
CVE ID: CVE-2000-0711 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:40.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp - http://www.securityfocus.com/bid/1545 - http://www.cert.org/advisories/CA-2000-15.html - http://www.securityfocus.
.jp - http://www.securityfocus.com/bid/1545 - http://www.cert.org/advisories/CA-2000-15.html - http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com
CVE ID: CVE-2000-0712 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. Additional Analyst Notes: - CVE Program Container: References: - http://www.egroups.com/message/lids/1038 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0486.html - http://www.lids.org/changelog.html - http://www.osvdb.org/1495 - http://www.securityfocus.com/bid/1549
CVE ID: CVE-2000-0713 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/misc/pdfsecurity.html - http://www.securityfocus.com/bid/1509 - http://archives.neohapsis.com/archives/bugtraq/2000-07/0382.html
CVE ID: CVE-2000-0714 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2000-047.html - http://www.securityfocus.com/bid/1551
CVE ID: CVE-2000-0715 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:40.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2000/Aug/0096.html - http://seclists.org/bugtraq/2000/Jun/0298.html - http://www.securityfocus.com/bid/1552 - http://seclists.org/bugtraq/2000/Aug/0082.html
CVE ID: CVE-2000-0716 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:28:41.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5070 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=459
CVE ID: CVE-2000-0717 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:28:40.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&msg=02ff01c0124c%24e9387660%240201a8c0%40aviram - http://www.securityfocus.com/bid/1619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5166
CVE ID: CVE-2000-0718 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:28:41.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1567 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0146.html
CVE ID: CVE-2000-0719 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-08/0126.html
CVE ID: CVE-2000-0720 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:28:41.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5169 - http://www.securityfocus.com/bid/1621 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=003
lities/5169 - http://www.securityfocus.com/bid/1621 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=003301c0123b%2418f8c1a0%24953b29d4%40e8s9s4
CVE ID: CVE-2000-0721 State: PUBLISHED Published: 2000-09-21T04:00:00 Last Updated: 2024-08-08T05:28:41.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1586 - http://archives.neohapsis.com/archives/bugtraq/2000-08/0114.html