rainbutterfly/cve_corpus huggingface dataset:
CVE-2000-0967 
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0968 
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0969 
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0970 
IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0971 
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0972 
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0973 
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0974 
GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0975 
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0976 
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-2000-0977 
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0978 
bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0979 
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0980 
NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0981 
MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0982 
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0983 
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0984 
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0985 
Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0986 
Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0987 
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0988 
WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0989 
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0990 
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0991 
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0992 
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0993 
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0994 
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0995 
Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0996 
Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0997 
Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0998 
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0999 
Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1000 
Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1001 
add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1002 
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1003 
NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1004 
Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1005 
Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1006 
Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1007 
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1008 
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1009 
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1010 
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1011 
Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1012 
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1013 
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1014 
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1015 
The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1016 
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1017 
Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1018 
shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1019 
Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1020 
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1021 
Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1022 
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1023 
The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1024 
eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1025 
eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1026 
Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1027 
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1028 
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1029 
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1030 
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1031 
Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1032 
The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1033 
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1034 
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1035 
Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1036 
Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1037 
Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1038 
The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1039 
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities.  NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1040 
Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1041 
Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1042 
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1043 
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z