Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-1189 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:37.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2000-120.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5747 - http://www.linux-mandrake.com/en/security/MDKSA-2000-082.php3 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000358
CVE ID: CVE-2000-1190 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T05:45:37.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/4941.php - http://marc.info/?l=bugtraq&m=95984116811100&w=2 - http://www.redhat.com/support/errata/RHSA-2000-016.html
CVE ID: CVE-2000-1191 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4366 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7367 - htt
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7367 - http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html
CVE ID: CVE-2000-1192 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap. Additional Analyst Notes: - CVE Program Container: References: - http://www.bttsoftware.co.uk/snmptrap.html - http://www.securiteam.com/windowsntfocus/5ZP0C000KC.html - http://www.securityfocus.com/bid/985
CVE ID: CVE-2000-1193 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T05:45:37.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html - ftp://patches.sgi.com/support/free/security/advisories/20020407-01-I - https://exchange.xforce.ibmcloud.com/vulnerabilities/4284
CVE ID: CVE-2000-1194 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.mdma.za.net/fk/FK9.zip - http://www.securityfocus.com/bid/1227
CVE ID: CVE-2000-1195 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T05:45:37.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/4225 - http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txt
CVE ID: CVE-2000-1196 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T05:45:37.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7362 - http://packetstormsecurity.org/0004-exploits/ooo1.txt - http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.html
CVE ID: CVE-2000-1197 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:15.imap-uw.asc - http://marc.info/?l=bugtraq&m=95624629924545&w=2 - http://www.securityfocus.com/bid/1132
CVE ID: CVE-2000-1198 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=95624629924545&w=2 - http://marc.info/?l=bugtraq&m=95634229925906&w=2 - http://www.securityfocus.com/bid/1132
CVE ID: CVE-2000-1199 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=95659987018649&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4364 - http://www.securityfocus.com/bid/1139
CVE ID: CVE-2000-1200 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T05:45:37.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/44430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4015 - http://www.securityfocus.com/bid/959
CVE ID: CVE-2000-1201 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-07/0085.html
CVE ID: CVE-2000-1202 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-08T05:45:37.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4235 - http://www.securityfocus.com/archive/1/54073
CVE ID: CVE-2000-1203 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T05:45:37.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7012 - http://www.securityfocus.com/archive/1/209754 - http://marc.info/?l=vuln-dev&m=95886062521327&w=2 - http://www.securityfocus.com/bid/3212 - http://www.securityfocus.com/cgi
://marc.info/?l=vuln-dev&m=95886062521327&w=2 - http://www.securityfocus.com/bid/3212 - http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-21&end=2002-01-27&mid=209116&threads=1
CVE ID: CVE-2000-1204 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T05:45:37.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root. Additional Analyst Notes: - CVE Program Container: References: - http://www.apacheweek.com/issues/00-10-13 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274
4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2000-1205 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T05:45:37.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as
e. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0233.html - http://marc.info/?l=bugtraq&m=118529436424127&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35597 - http://archive.cert.uni-stuttgart.de/bugtraq/2002/12/msg00243.html - http://httpd.apache.org/info/css-
abilities/35597 - http://archive.cert.uni-stuttgart.de/bugtraq/2002/12/msg00243.html - http://httpd.apache.org/info/css-security/apache_specific.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3
dbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2000-1206 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T05:45:37.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.apacheweek.com/issues/00-01-07#status - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%4
s.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2000-1207 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T05:45:37.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97063854808796&w=2 - http://marc.info/?l=bugtraq&m=97034397026473&w=2 - http://www.redhat.com/support/errata/RHSA-2000-075.html - http://www.linux-
/marc.info/?l=bugtraq&m=97034397026473&w=2 - http://www.redhat.com/support/errata/RHSA-2000-075.html - http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-059.php3
CVE ID: CVE-2000-1208 State: PUBLISHED Published: 2002-08-01T04:00:00 Last Updated: 2024-08-08T05:45:37.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=96994604300675&w=2 - http://www.iss.net/security_center/static/5286.php - http://www.securityfocus.com/bid/1711 - http://online.securityfocus.com/archive/1/137555 - http://www.redhat.com/support/errata/RHSA-2000-066
cus.com/bid/1711 - http://online.securityfocus.com/archive/1/137555 - http://www.redhat.com/support/errata/RHSA-2000-066.html
CVE ID: CVE-2000-1209 State: PUBLISHED Published: 2002-08-10T04:00:00 Last Updated: 2024-08-08T05:45:37.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3570 - http://www.securityfocus.com/bid/4797 -
nalyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3570 - http://www.securityfocus.com/bid/4797 - http://marc.info/?l=bugtraq&m=96333895000350&w=2 - http://www.kb.cert.org/vuls/id/635463 - http://www.iss.net/security_center/static/1459.php - http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp - http://marc.info/?l=bugtraq&m=96644570412692&w=2 - http://online.securityfocus.com/archive/1/273639 - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418 - http://marc.info/?l=bugtraq&m=96593218804850&w=2 - http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081 - http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html
CVE ID: CVE-2000-1210 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T05:45:37.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/4205.php - http://marc.info/?l=bugtraq&m=95371672300045&w=2
CVE ID: CVE-2000-1211 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T05:45:37.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert - http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 - http://www.iss.net/security_center/static/5824.php - http://www.redhat.com/support/errata/RHSA-2000-125.html - http://www.o
p://www.iss.net/security_center/static/5824.php - http://www.redhat.com/support/errata/RHSA-2000-125.html - http://www.osvdb.org/6282
CVE ID: CVE-2000-1212 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T05:45:37.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects. Additional Analyst Notes: - CVE Program Container: References: - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086 - http://www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alert - http://www.debian.org/security/2001/dsa-007 - http://www.redhat.com/support/errata/RHSA-2000-135.html - https://exchange.xforce.ibmcl
bian.org/security/2001/dsa-007 - http://www.redhat.com/support/errata/RHSA-2000-135.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5778 - http://www.osvdb.org/6283 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
CVE ID: CVE-2000-1213 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T05:45:37.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2000-087.html - http://marc.info/?l=bugtraq&m=97249980727834&w=2 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html
CVE ID: CVE-2000-1214 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T05:45:37.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/5431.php - http://www.redhat.com/support/errata/RHSA-2000-087.html - http://marc.info/?l=bugtraq&m=97249980727834&w=2 - http://www.securityfocus.com/bid/1813 - http://marc.info/?l=bugtraq&m=97208562830613&w=2 - htt
aq&m=97249980727834&w=2 - http://www.securityfocus.com/bid/1813 - http://marc.info/?l=bugtraq&m=97208562830613&w=2 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html
CVE ID: CVE-2000-1215 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T05:45:37.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100094373621813&w=2 - http://www.kb.cert.org/vuls/id/984555 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM - https
list.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM - https://exchange.xforce.ibmcloud.com/vulnerabilities/10685
CVE ID: CVE-2000-1216 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T05:45:37.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/433499 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY07832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7929
CVE ID: CVE-2000-1217 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T05:45:37.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
osoft.com/en-us/security-updates/securitybulletins/2000/ms00-089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5585 - http://www.securityfocus.com/bid/1973 - http://www.kb.cert.org/vuls/id/818496
CVE ID: CVE-2000-1218 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T05:45:37.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/4280 - http://www.kb.cert.org/vuls/id/458659