rainbutterfly/cve_corpus huggingface dataset:
CVE-2000-0300 
The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-26T04:00:00.000Z
CVE-2000-0301 
Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0302 
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0303 
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0304 
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0305 
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0306 
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0307 
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0308 
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0309 
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0310 
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0311 
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0312 
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-02-14T05:00:00.000Z
CVE-2000-0313 
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0314 
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0315 
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0316 
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0317 
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-18T04:00:00.000Z
CVE-2000-0318 
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0319 
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0320 
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0321 
Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-18T04:00:00.000Z
CVE-2000-0322 
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0323 
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-2000-0324 
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0325 
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-18T04:00:00.000Z
CVE-2000-0326 
Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-18T04:00:00.000Z
CVE-2000-0327 
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-2000-0328 
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-2000-0329 
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-2000-0330 
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-2000-0331 
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0332 
UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0333 
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-18T04:00:00.000Z
CVE-2000-0334 
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0335 
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0336 
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0337 
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0338 
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0339 
ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0340 
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0341 
ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0342 
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0343 
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-18T04:00:00.000Z
CVE-2000-0344 
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0345 
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-18T04:00:00.000Z
CVE-2000-0346 
AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0347 
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0348 
A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0349 
Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0350 
A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0351 
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0352 
Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0353 
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0354 
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0355 
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-24T04:00:00.000Z
CVE-2000-0356 
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0357 
ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-24T04:00:00.000Z
CVE-2000-0358 
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-24T04:00:00.000Z
CVE-2000-0359 
Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0360 
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0361 
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0362 
Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0363 
Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0364 
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-24T04:00:00.000Z
CVE-2000-0365 
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-05-24T04:00:00.000Z
CVE-2000-0366 
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0367 
Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0368 
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0369 
The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0370 
The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0371 
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0372 
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0373 
Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0374 
The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0375 
The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0376 
Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0377 
The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0378 
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0379 
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0380 
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0381 
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0382 
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0383 
The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-15T04:00:00.000Z
CVE-2000-0384 
NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-15T04:00:00.000Z
CVE-2000-0385 
FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-15T04:00:00.000Z