rainbutterfly/cve_corpus huggingface dataset:
CVE-2000-0123 
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0124 
surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0125 
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0126 
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0127 
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0128 
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0129 
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0130 
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0131 
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-18T04:00:00.000Z
CVE-2000-0132 
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0133 
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0134 
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0135 
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0136 
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0137 
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-08T05:00:00.000Z
CVE-2000-0138 
A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-15T05:00:00.000Z
CVE-2000-0139 
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0140 
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-18T04:00:00.000Z
CVE-2000-0141 
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0142 
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-16T05:00:00.000Z
CVE-2000-0143 
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-16T05:00:00.000Z
CVE-2000-0144 
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-18T04:00:00.000Z
CVE-2000-0145 
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0146 
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0147 
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-16T05:00:00.000Z
CVE-2000-0148 
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0149 
Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0150 
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0151 
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-16T05:00:00.000Z
CVE-2000-0152 
Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0153 
FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-23T05:00:00.000Z
CVE-2000-0154 
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-23T05:00:00.000Z
CVE-2000-0155 
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-23T05:00:00.000Z
CVE-2000-0156 
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0157 
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0158 
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-23T05:00:00.000Z
CVE-2000-0159 
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-18T04:00:00.000Z
CVE-2000-0160 
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-23T05:00:00.000Z
CVE-2000-0161 
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0162 
The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0163 
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-23T05:00:00.000Z
CVE-2000-0164 
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0165 
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-2000-0166 
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0167 
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-23T05:00:00.000Z
CVE-2000-0168 
Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0169 
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-2000-0170 
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0171 
atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-2000-0172 
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0173 
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0174 
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0175 
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0176 
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0177 
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0178 
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0179 
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0180 
Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0181 
Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-2000-0182 
iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0183 
Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-18T04:00:00.000Z
CVE-2000-0184 
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-2000-0185 
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-2000-0186 
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0187 
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0188 
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0189 
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0190 
AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0191 
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0192 
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-2000-0193 
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-2000-0194 
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0195 
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-07-12T04:00:00.000Z
CVE-2000-0196 
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0197 
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0198 
Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0199 
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0200 
Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0201 
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0202 
Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0203 
The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0204 
The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0205 
Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-2000-0206 
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-2000-0207 
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0208 
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0209 
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0210 
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z
CVE-2000-0211 
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-10T04:00:00.000Z