morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0891.

assistant: A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0892.

assistant: Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0893.

assistant: The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0894.

assistant: HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0895.

assistant: Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0896.

assistant: WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0897.

assistant: Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0898.

assistant: Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0899.

assistant: Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0900.

assistant: Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0901.

assistant: Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0902.

assistant: getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0903.

assistant: Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0904.

assistant: Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0905.

assistant: QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0906.

assistant: Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0907.

assistant: EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0908.

assistant: BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0909.

assistant: Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0910.

assistant: Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0911.

assistant: IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0912.

assistant: MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0913.

assistant: mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0914.

assistant: OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0915.

assistant: fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0916.

assistant: FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0917.

assistant: Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0918.

assistant: Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0919.

assistant: Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0920.

assistant: Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0921.

assistant: Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0922.

assistant: Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0923.

assistant: authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0924.

assistant: Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0925.

assistant: The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0926.

assistant: SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0927.

assistant: WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0928.

assistant: WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0929.

assistant: Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0930.

assistant: Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0931.

assistant: Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0932.

assistant: MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0933.

assistant: The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0934.

assistant: Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0935.

assistant: Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0936.

assistant: Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0937.

assistant: Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0938.

assistant: Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0939.

assistant: Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0940.

assistant: Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0941.

assistant: Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0942.

assistant: The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0943.

assistant: Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0944.

assistant: CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0945.

assistant: The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0946.

assistant: Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0947.

assistant: Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0948.

assistant: GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0949.

assistant: Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0950.

assistant: Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0951.

assistant: A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0952.

assistant: global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0953.

assistant: Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0954.

assistant: Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0955.

assistant: Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0956.

assistant: cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0957.

assistant: The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0958.

assistant: HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0959.

assistant: glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0960.

assistant: The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0961.

assistant: Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0962.

assistant: The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0963.

assistant: Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0964.

assistant: Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0965.

assistant: The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0966.

assistant: Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0967.

assistant: PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0968.

assistant: Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0969.

assistant: Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0970.

assistant: IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0971.

assistant: Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0972.

assistant: HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0973.

assistant: Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0974.

assistant: GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0975.

assistant: Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0976.

assistant: Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0977.

assistant: mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0978.

assistant: bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0979.

assistant: File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0980.

assistant: NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0981.

assistant: MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0982.

assistant: Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0983.

assistant: Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0984.

assistant: The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0985.

assistant: Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0986.

assistant: Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0987.

assistant: Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0988.

assistant: WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0989.

assistant: Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0990.

assistant: cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0991.

assistant: Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0992.

assistant: Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0993.

assistant: Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0994.

assistant: Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0995.

assistant: Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0996.

assistant: Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0997.

assistant: Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0998.

assistant: Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0999.

assistant: Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1000.

assistant: Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1001.

assistant: add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1002.

assistant: POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1003.

assistant: NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1004.

assistant: Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1005.

assistant: Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1006.

assistant: Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1007.

assistant: I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1008.

assistant: PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1009.

assistant: dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1010.

assistant: Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1011.

assistant: Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1012.

assistant: The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1013.

assistant: The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1014.

assistant: Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1015.

assistant: The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1016.

assistant: The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1017.

assistant: Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1018.

assistant: shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1019.

assistant: Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1020.

assistant: Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1021.

assistant: Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1022.

assistant: The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1023.

assistant: The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1024.

assistant: eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1025.

assistant: eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1026.

assistant: Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1027.

assistant: Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1028.

assistant: Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1029.

assistant: Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1030.

assistant: CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1031.

assistant: Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1032.

assistant: The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1033.

assistant: Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1034.

assistant: Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1035.

assistant: Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1036.

assistant: Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1037.

assistant: Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1038.

assistant: The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1039.

assistant: Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities.  NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1040.

assistant: Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1041.

assistant: Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1042.

assistant: Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1043.

assistant: Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1044.

assistant: Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1045.

assistant: nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1046.

assistant: Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1047.

assistant: Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1048.

assistant: Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1049.

assistant: Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1050.

assistant: Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1051.

assistant: Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-1052.

assistant: Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.