Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-0125 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:54.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net - http://www.securityfocus.com/bid/967
CVE ID: CVE-2000-0126 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:54.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0126
CVE ID: CVE-2000-0127 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:05:54.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412&keywords=security%20Webspeed - http://www.securityfocus.com/bid/969
CVE ID: CVE-2000-0128 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:05:53.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.glazed.org/finger/changelog.txt - http://www.osvdb.org/7610
CVE ID: CVE-2000-0129 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:53.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0129
CVE ID: CVE-2000-0130 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:05:53.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SCO scohelp program allows remote attackers to execute commands. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/SSE/security_bulletins/SB-00.02a - http://marc.info/?l=bugtraq&m=94908470928258&w=2
CVE ID: CVE-2000-0131 State: PUBLISHED Published: 2000-04-18T04:00:00 Last Updated: 2024-08-08T05:05:53.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/966 - http://www.osvdb.org/4677 - http://marc.info/?l=bugtraq&m=94960703721503&w=2
CVE ID: CVE-2000-0132 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:53.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/957
CVE ID: CVE-2000-0133 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:53.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/961
CVE ID: CVE-2000-0134 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:53.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0134
CVE ID: CVE-2000-0135 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:53.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0135
CVE ID: CVE-2000-0136 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:53.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0136
CVE ID: CVE-2000-0137 State: PUBLISHED Published: 2000-02-08T05:00:00 Last Updated: 2024-08-08T05:05:54.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0137
CVE ID: CVE-2000-0138 State: PUBLISHED Published: 2000-02-15T05:00:00 Last Updated: 2024-08-08T05:05:54.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=95715370208598&w=2 - http://xforce.iss.net/alerts/advise48.php3 - http://marc.info/?l=bugtraq&m=95722093124322&w=2
CVE ID: CVE-2000-0139 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=95021326417936&w=2 - http://www.securityfocus.com/bid/982
CVE ID: CVE-2000-0140 State: PUBLISHED Published: 2000-04-18T04:00:00 Last Updated: 2024-08-08T05:05:54.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=95021326417936&w=2 - http://www.securityfocus.com/bid/980
CVE ID: CVE-2000-0141 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:05:54.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-8&msg=20000211224935.A13236%40infomag.ape.relarn.ru - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl - http://www.ultimatebb.com/home/versions.shtml - http://www.securityfocus
OLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl - http://www.ultimatebb.com/home/versions.shtml - http://www.securityfocus.com/bid/991
CVE ID: CVE-2000-0142 State: PUBLISHED Published: 2000-02-16T05:00:00 Last Updated: 2024-08-08T05:05:53.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0142
CVE ID: CVE-2000-0143 State: PUBLISHED Published: 2000-02-16T05:00:00 Last Updated: 2024-08-08T05:05:54.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143
CVE ID: CVE-2000-0144 State: PUBLISHED Published: 2000-04-18T04:00:00 Last Updated: 2024-08-08T05:05:54.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/971 - http://archives.neohapsis.com/archives/bugtraq/2000-02/0034.html
CVE ID: CVE-2000-0145 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0145
CVE ID: CVE-2000-0146 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:05:53.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/972 - http://archives.neohapsis.com/archives/bugtraq/2000-02/0049.html
CVE ID: CVE-2000-0147 State: PUBLISHED Published: 2000-02-16T05:00:00 Last Updated: 2024-08-08T05:05:53.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/973 - http://archives.neohapsis.com/archives/bugtraq/2000-02/0045.html - ftp://ftp.sco.com/SSE/security_bulletins/SB-00.04a
CVE ID: CVE-2000-0148 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-02/0053.html - http://www.securityfocus.com/bid/975
CVE ID: CVE-2000-0149 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/3982 - http://www.securityfocus.com/bid/977 - http://www.osvdb.org/254
CVE ID: CVE-2000-0150 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/328867 - http://www.osvdb.org/4417 - http://www.securityfocus.com/bid/979
CVE ID: CVE-2000-0151 State: PUBLISHED Published: 2000-02-16T05:00:00 Last Updated: 2024-08-08T05:05:54.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/981
CVE ID: CVE-2000-0152 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/976 - http://www.osvdb.org/7468
CVE ID: CVE-2000-0153 State: PUBLISHED Published: 2000-02-23T05:00:00 Last Updated: 2024-08-08T05:05:54.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000801bf780a%249ad4b2e0%240100007f%40localhost - http://www.securityfocus.com/bid/989
CVE ID: CVE-2000-0154 State: PUBLISHED Published: 2000-02-23T05:00:00 Last Updated: 2024-08-08T05:05:53.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.sco.com/security/ - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com - http://www.securityfocus.com/bid/988
CVE ID: CVE-2000-0155 State: PUBLISHED Published: 2000-02-23T05:00:00 Last Updated: 2024-08-08T05:05:53.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/993 - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org
CVE ID: CVE-2000-0156 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/3996 - http://www.osvdb.org/7827 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-009
CVE ID: CVE-2000-0157 State: PUBLISHED Published: 2000-07-12T04:00:00 Last Updated: 2024-08-08T05:05:53.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-012.txt.asc - http://www.securityfocus.com/bid/992
CVE ID: CVE-2000-0158 State: PUBLISHED Published: 2000-02-23T05:00:00 Last Updated: 2024-08-08T05:05:54.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000001bf78af%246d0d47a0%244d2f45a1%40jmagdych.na.nai.com - http://www.securityfocus.com/bid/997 - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=200002181449.JAA03436%40dragonfly.corp.home.net - ftp://ftp.sco.com/SSE/security_bulleti
pike?list=1&date=2000-02-15&msg=200002181449.JAA03436%40dragonfly.corp.home.net - ftp://ftp.sco.com/SSE/security_bulletins/SB-00.06a
CVE ID: CVE-2000-0159 State: PUBLISHED Published: 2000-04-18T04:00:00 Last Updated: 2024-08-08T05:05:54.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000217160216.13708.qmail%40underground.org
CVE ID: CVE-2000-0160 State: PUBLISHED Published: 2000-02-23T05:00:00 Last Updated: 2024-08-08T05:05:53.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000221103938.T21312%40securityfocus.com
CVE ID: CVE-2000-0161 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:54.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-010 - http://www.securityfocus.com/bid/994
CVE ID: CVE-2000-0162 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-011
CVE ID: CVE-2000-0163 State: PUBLISHED Published: 2000-02-23T05:00:00 Last Updated: 2024-08-08T05:05:53.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/advisory.html?id=2092 - http://www.securityfocus.com/bid/996
CVE ID: CVE-2000-0164 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:05:54.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.SOL.4.21.0002200031320.22675-100000%40klayman.hq.formus.pl - http://www.securityfocus.com/bid/1004
CVE ID: CVE-2000-0165 State: PUBLISHED Published: 2000-04-25T04:00:00 Last Updated: 2024-08-08T05:05:54.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/4195 - http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.BSF.4.21.0002192249290.10784-100000%40freefall.freebsd.org - http://www.ciac.org/ciac/bulletins/k-023.shtml
CVE ID: CVE-2000-0166 State: PUBLISHED Published: 2000-10-13T04:00:00 Last Updated: 2024-08-08T05:05:53.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=95142756403323&w=2 - http://www.securityfocus.com/bid/995 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPGEJHCCAA.labs%40ussrback.com
CVE ID: CVE-2000-0167 State: PUBLISHED Published: 2000-02-23T05:00:00 Last Updated: 2024-08-08T05:05:54.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0002&L=ntbugtraq&F=&S=&P=8800
CVE ID: CVE-2000-0168 State: PUBLISHED Published: 2000-07-12T04:00:00 Last Updated: 2024-08-08T05:05:54.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/templates/advisory.html?id=2126 - http://www.securityfocus.com/bid/1043 - http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCENECCAA.labs%40ussrback.com
CVE ID: CVE-2000-0169 State: PUBLISHED Published: 2000-06-02T04:00:00 Last Updated: 2024-08-08T05:05:54.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1053 - http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html
CVE ID: CVE-2000-0170 State: PUBLISHED Published: 2000-04-10T04:00:00 Last Updated: 2024-08-08T05:05:54.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1011
CVE ID: CVE-2000-0171 State: PUBLISHED Published: 2000-06-02T04:00:00 Last Updated: 2024-08-08T05:05:54.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1048 - http://archives.neohapsis.com/archives/bugtraq/2000-03/0102.html
CVE ID: CVE-2000-0172 State: PUBLISHED Published: 2000-04-10T04:00:00 Last Updated: 2024-08-08T05:05:53.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1038
CVE ID: CVE-2000-0173 State: PUBLISHED Published: 2000-03-22T05:00:00 Last Updated: 2024-08-08T05:05:53.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/SSE/security_bulletins/SB-00.08a