morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1053.

assistant: Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1054.

assistant: Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1055.

assistant: Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1056.

assistant: CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1057.

assistant: Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1058.

assistant: Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1059.

assistant: The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1060.

assistant: The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1061.

assistant: Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM ActiveX Component" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1062.

assistant: Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1063.

assistant: Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1064.

assistant: Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1065.

assistant: Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1066.

assistant: The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1068.

assistant: pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1069.

assistant: pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1070.

assistant: pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1071.

assistant: The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1072.

assistant: iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1073.

assistant: csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1074.

assistant: csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1075.

assistant: Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1076.

assistant: Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1077.

assistant: Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1078.

assistant: ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1079.

assistant: Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1080.

assistant: Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1081.

assistant: The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1082.

assistant: The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1083.

assistant: The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1084.

assistant: The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1085.

assistant: The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1086.

assistant: The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1087.

assistant: The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1088.

assistant: The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1089.

assistant: Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1090.

assistant: Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1092.

assistant: loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1093.

assistant: Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1094.

assistant: Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1095.

assistant: modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1096.

assistant: crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1097.

assistant: The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1098.

assistant: The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1099.

assistant: Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1100.

assistant: The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1101.

assistant: Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1102.

assistant: PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1103.

assistant: rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1104.

assistant: Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1105.

assistant: The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1106.

assistant: Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1107.

assistant: in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1108.

assistant: cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1109.

assistant: Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1110.

assistant: document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1111.

assistant: Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1112.

assistant: Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1113.

assistant: Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the ".ASX Buffer Overrun" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1114.

assistant: Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1115.

assistant: Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1116.

assistant: Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1117.

assistant: The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1118.

assistant: 24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1119.

assistant: Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1120.

assistant: Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1121.

assistant: Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1122.

assistant: Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1123.

assistant: Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1124.

assistant: Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1125.

assistant: restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1126.

assistant: Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1127.

assistant: registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1128.

assistant: The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1129.

assistant: McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1130.

assistant: McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1131.

assistant: Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1132.

assistant: DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1133.

assistant: Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1134.

assistant: Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1135.

assistant: fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1136.

assistant: elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1137.

assistant: GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1138.

assistant: Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1139.

assistant: The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1140.

assistant: Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1141.

assistant: Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1142.

assistant: Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1143.

assistant: Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1144.

assistant: Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1145.

assistant: Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devices to identify ManTrap processes or modify arbitrary data files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1146.

assistant: Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1147.

assistant: Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1148.

assistant: The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1149.

assistant: Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1150.

assistant: Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1151.

assistant: Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1152.

assistant: Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1153.

assistant: PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1154.

assistant: RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1155.

assistant: RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1156.

assistant: StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1157.

assistant: Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1158.

assistant: NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1159.

assistant: NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1160.

assistant: NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1161.

assistant: The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1162.

assistant: ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1163.

assistant: ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1164.

assistant: WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1165.

assistant: Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1166.

assistant: Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhosts as an argument to the index.php3 program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1167.

assistant: ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1168.

assistant: IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1169.

assistant: OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1170.

assistant: Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1171.

assistant: Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1172.

assistant: Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1173.

assistant: Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1174.

assistant: Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1175.

assistant: Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1176.

assistant: Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1177.

assistant: bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1178.

assistant: Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1179.

assistant: Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1180.

assistant: Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1181.

assistant: Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admin/includes/ URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1182.

assistant: WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests, which disables proxy handling.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1183.

assistant: Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1184.

assistant: telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1185.

assistant: The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1186.

assistant: Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1187.

assistant: Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1188.

assistant: Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1189.

assistant: Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1190.

assistant: imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1191.

assistant: htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1192.

assistant: Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1193.

assistant: Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1194.

assistant: Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1195.

assistant: telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1196.

assistant: PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1197.

assistant: POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1198.

assistant: qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1199.

assistant: PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1200.

assistant: Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1201.

assistant: Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1202.

assistant: ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1203.

assistant: Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1204.

assistant: Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1205.

assistant: Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code.  NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache.  The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1206.

assistant: Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.