Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2000-1076 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:45:37.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5422
CVE ID: CVE-2000-1077 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:36.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/141435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5446
CVE ID: CVE-2000-1078 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:45:37.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5332 - http://www.securityfocus.com/archive/1/138332
CVE ID: CVE-2000-1079 State: PUBLISHED Published: 2000-11-29T05:00:00 Last Updated: 2024-08-08T05:45:36.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1620 - http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0116.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5168 - http://www.nai.com/research/covert/advi
/2000-q3/0116.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5168 - http://www.nai.com/research/covert/advisories/045.asp - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1079
CVE ID: CVE-2000-1080 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:37.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://proquake.ai.mit.edu/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/5527 - http://marc.info/?l=bugtraq&m=97318797630246&w=2 - http://www.securityfocus.com/bid/1900
CVE ID: CVE-2000-1081 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - https://oval.cise
alyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A231 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092 - http://www.securityfocus.com/bid/2030
CVE ID: CVE-2000-1082 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - http://www.securityf
st Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - http://www.securityfocus.com/bid/2031 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE ID: CVE-2000-1083 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:36.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - https://docs.microsoft.co
tes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092 - http://www.securityfocus.com/bid/2038
CVE ID: CVE-2000-1084 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:36.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - https://docs.microsof
t Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570878710037&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092 - http://www.securityfocus.com/bid/2039
CVE ID: CVE-2000-1085 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:36.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2040 - http://marc.info/?l=bugtraq&m=
yst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2040 - http://marc.info/?l=bugtraq&m=97570884410184&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE ID: CVE-2000-1086 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2041 - http://marc.info/?l=bugt
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2041 - http://marc.info/?l=bugtraq&m=97570884410184&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE ID: CVE-2000-1087 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:36.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570884410184&w=2 - https://docs.
l Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=97570884410184&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092 - http://www.securityfocus.com/bid/2042
CVE ID: CVE-2000-1088 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2043 - http://marc.info/?l=bugtr
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2043 - http://marc.info/?l=bugtraq&m=97570884410184&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092
CVE ID: CVE-2000-1089 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:36.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2048 - http://www.stake.com/research/advisories/2000/a120400-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/5623 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094
CVE ID: CVE-2000-1090 State: PUBLISHED Published: 2001-02-02T05:00:00 Last Updated: 2024-08-08T05:45:37.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character. Additional Analyst Notes: - CVE Program Container: References: - http://www.nsfocus.com/english/homepage/sa_08.htm - http://www.securityfocus.com/bid/2100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5729
CVE ID: CVE-2000-1092 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5740 - http://marc.info/?l=bugtraq&m=97676270729984&w=2 - http://www.securityfocus.com/bid/2109
CVE ID: CVE-2000-1093 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:36.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5732 - http://www.atstake.com/research/advisories/2000/a121200-1.txt
CVE ID: CVE-2000-1094 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:36.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2000/a121200-1.txt - http://www.osvdb.org/1692 - http://marc.info/?l=bugtraq&m=97683774417132&w=2 - http://marc.info/?l=bugtraq&m=97668265628917&w=2
CVE ID: CVE-2000-1095 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:36.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1936 - http://www.redhat.com/support/errata/RHSA-2000-108.html - http://www.linux-mandrake.com/en/security/MDKSA-2000-071-1.php3?dis=7.1 - http://archives.neohapsis.com/archives/linux/suse/2000-q4/0596.html - http://archives.neohapsis.com/archives/bugtraq/2000-11/0179.html - http://distro.conectiva.co
x/suse/2000-q4/0596.html - http://archives.neohapsis.com/archives/bugtraq/2000-11/0179.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000340 - http://www.debian.org/security/2000/20001120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5516
CVE ID: CVE-2000-1096 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:37.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5543 - http://archives.neohapsis.com/arc
m Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5543 - http://archives.neohapsis.com/archives/bugtraq/2000-11/0237.html - http://www.securityfocus.com/bid/1960
CVE ID: CVE-2000-1097 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:36.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html - http://www.securityfocus.com/bid/2013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5596 - http://www.osvdb.org/1667 - http://archives.neohapsis.com/archives/bugtraq/2000-11/0406.html
CVE ID: CVE-2000-1098 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html - http://archives.neohapsis.com/archives/bugtraq/2000-11/0439.html
CVE ID: CVE-2000-1099 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:36.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7255 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba - https://exchange.xforce.ibmcloud.com/vulnerabilities/5605 - http://www1.itrc.hp.com/service/cki/docDisplay.d
v=sec.sba - https://exchange.xforce.ibmcloud.com/vulnerabilities/5605 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132
CVE ID: CVE-2000-1100 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-11/0433.html - http://www.securityfocus.com/bid/2029
CVE ID: CVE-2000-1101 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T05:45:37.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/5608.php - http://www.securityfocus.com/bid/2005 - http://archives.neohapsis.com/archives/bugtraq/2000-11/0386.html
CVE ID: CVE-2000-1102 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/147115 - http://www.securityfocus.com/bid/2008
CVE ID: CVE-2000-1103 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/147120 - http://www.securityfocus.com/bid/2009
CVE ID: CVE-2000-1104 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:36.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060
CVE ID: CVE-2000-1105 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:36.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1933 - http://www.securityfocus.com/archive/1/144270 - http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html
CVE ID: CVE-2000-1106 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:37.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0016.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5606 - http://www.securityfocus.com/bid/2014 - http://www.securityfocus.com/archive/1/147563
CVE ID: CVE-2000-1107 State: PUBLISHED Published: 2001-01-22T05:00:00 Last Updated: 2024-08-08T05:45:37.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-11/0387.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5590 - http://www.securityfocus.com/bid/2015
CVE ID: CVE-2000-1108 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:45:36.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-11/0192.html - http://www.securityfocus.com/bid/1945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5519 - http://www.linux-mandrake.com/en/
curityfocus.com/bid/1945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5519 - http://www.linux-mandrake.com/en/security/MDKSA-2000-078.php3 - http://www.debian.org/security/2000/20001125
CVE ID: CVE-2000-1109 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T05:45:36.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2016 - http://archives.neohapsis.com/archives/bugtraq/2000-11/0373.html - http://www.novell.com/linux/security/advisories/2001_011_mc.html - https://exchange.xfo
ives/bugtraq/2000-11/0373.html - http://www.novell.com/linux/security/advisories/2001_011_mc.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5929 - http://www.debian.org/security/2001/dsa-036
CVE ID: CVE-2000-1110 State: PUBLISHED Published: 2000-12-19T05:00:00 Last Updated: 2024-08-08T05:45:37.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2017 - http://archives.neohapsis.com/archives/bugtraq/2000-11/0384.html