Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-0995 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch - http://www.osvdb.org/6125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5635
CVE ID: CVE-2000-0996 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/5636 - http://www.osvdb.org/6124
CVE ID: CVE-2000-0997 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5337 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch - http://www.securityfocus.com/bid/1752
CVE ID: CVE-2000-0998 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1895 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc
CVE ID: CVE-2000-0999 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch
CVE ID: CVE-2000-1000 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5314 - http://www.securityfocus.com/bid/1747 - http://www.securityfocus.com/archive/1/137374
CVE ID: CVE-2000-1001 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97240616129614&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5402 - http://www.osvdb.org/6487
CVE ID: CVE-2000-1002 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5363 - http://www.securityfocus.com/bid/1792 - http://www.securityfocus.com/archive/1/139523
CVE ID: CVE-2000-1003 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5370 - http://www.securityfocus.com/bid/1794 - http://www.securityfocus.com/archive/1/139511
CVE ID: CVE-2000-1004 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97068555106135&w=2 - http://www.osvdb.org/6123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5336
CVE ID: CVE-2000-1005 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5347 - http://www.securityfocus.com/archive/1/138495 - http://www.securityfocus.com/bid/1774
CVE ID: CVE-2000-1006 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-082 - http://www.securityfocus.com/bid/1869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5448
CVE ID: CVE-2000-1007 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5791 - http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0048.html
CVE ID: CVE-2000-1008 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1715 - http://www.atstake.com/research/advisories/2000/a092600-1.txt
CVE ID: CVE-2000-1009 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5437 - http://www.securityfocus.com/bid/1871 - http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html
CVE ID: CVE-2000-1010 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1764 - http://www.securityfocus.com/archive/1/137890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5344
CVE ID: CVE-2000-1011 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc - http://www.osvdb.org/6070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5638
CVE ID: CVE-2000-1012 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc
CVE ID: CVE-2000-1013 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc
CVE ID: CVE-2000-1014 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5291 - http://www.securityfocus.com/bid/1717 - http://www.osvdb.org/3240
CVE ID: CVE-2000-1015 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5306 - http://archives.neohapsis.com/archives/bugtraq/2000-09/0366.html
CVE ID: CVE-2000-1016 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/84360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5276 - http://www.securityfocus.com/bid/1707
CVE ID: CVE-2000-1017 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0032.html - http://archives.neohapsis.com/archives/bugtraq/2000-10/0007.html - http://www.securityfocus.com/bid/1732
CVE ID: CVE-2000-1018 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5722 - http://marc.info/?l=bugtraq&m=97131166004145&w=2 - http://marc.info/?l=bugtraq&m=97119799515246&w=2 - http://www.securityfocus.com/bid/1788
CVE ID: CVE-2000-1019 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5439 - http://marc.info/?l=bugtraq&m=97301487015664&w=2 - http://www.securityfocus.com/bid/1866
CVE ID: CVE-2000-1020 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5250 - http://marc.info/?l=bugtraq&m=96925269716274&w=2
CVE ID: CVE-2000-1021 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5250 - http://marc.info/?l=bugtraq&m=96925269716274&w=2
CVE ID: CVE-2000-1022 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5277 - http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml - http://archives.neohapsis.com/archives/bugtraq/
- http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml - http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html - http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html
CVE ID: CVE-2000-1023 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5284 - http://www.securityfocus.com/archive/1/84766
CVE ID: CVE-2000-1024 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5450 - http://www.securityfocus.com/bid/1876 - http://marc.info/?l=bugtraq&m=97306581513537&w=2
CVE ID: CVE-2000-1025 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1868 - http://marc.info/?l=bugtraq&m=97295224226042&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5435
CVE ID: CVE-2000-1026 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5480 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:61.tcpdump.v1.1.asc - http://www.securityfocus.com/bid/1870 - http://archives.neohapsis.com/archives/linux/suse/2000-q4/0681.html
CVE ID: CVE-2000-1027 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1877 - http://marc.info/?l=bugtraq&m=97059440000367&w=2 - http://www.osvdb.org/1623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5646
CVE ID: CVE-2000-1028 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5460 - http://www.securityfocus.com/archive/1/142792
CVE ID: CVE-2000-1029 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5462 - http://www.securityfocus.com/bid/1887 - http://www.securityfocus.com/archive/1/141660
CVE ID: CVE-2000-1030 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5529 - http://www.securityfocus.com/archive/1/142672 - http://www.securityfocus.com/bid/1888
CVE ID: CVE-2000-1031 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option. Additional Analyst Notes: - CVE Program Container: References: - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://www.securityfocus.com/archive/1/290115 - http://archives.neohapsis.com
rchives/fulldisclosure/2002-q3/1203.html - http://www.securityfocus.com/archive/1/290115 - http://archives.neohapsis.com/archives/hp/2000-q4/0034.html - http://www.securityfocus.com/bid/1889 - http://www.kb.cert.org/vuls/id/320067 - http://www.securityfocus.com/archive/1/75188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5461
CVE ID: CVE-2000-1032 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/142808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5816 - http://www.osvdb.org/1632 - http://www.securityfocus.com/bid/1890
CVE ID: CVE-2000-1033 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5436 - http://www.securityfocus.com/archive/1/141905 - http://www.securityfocus.com/bid/1860
CVE ID: CVE-2000-1034 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:37:32.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5467 - http://marc.info/?l=bugtraq&m=97349782305448&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-085 - http://www.securityfocus.com/bid/1899
CVE ID: CVE-2000-1035 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:37:32.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.synnergy.net/Archives/Advisories/dethy/typsoft-ftpd.txt - http://www.securityfocus.com/bid/1690 - http://marc.info/?l=bugtraq&m=96879389027478&w=2