rainbutterfly/cve_corpus huggingface dataset:
CVE-2000-1196 
PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-1197 
POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-2000-1198 
qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-2000-1199 
PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-2000-1200 
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-1201 
Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-2000-1202 
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-2000-1203 
Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2000-1204 
Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2000-1205 
Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code.  NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache.  The printenv.pl/acuparam vector, discloser on 20070724, is one such variant.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2000-1206 
Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2000-1207 
userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-31T04:00:00.000Z
CVE-2000-1208 
Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-01T04:00:00.000Z
CVE-2000-1209 
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-10T04:00:00.000Z
CVE-2000-1210 
Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2000-1211 
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2000-1212 
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2000-1213 
ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2000-1214 
Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2000-1215 
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1216 
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1217 
Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain Account Lockout" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1218 
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1219 
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1220 
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1221 
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1222 
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1223 
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-21T04:00:00.000Z
CVE-2000-1224 
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-05-19T04:00:00.000Z
CVE-2000-1225 
Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-21T04:00:00.000Z
CVE-2000-1226 
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-21T04:00:00.000Z
CVE-2000-1227 
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2000-1228 
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1229 
Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings administrative function, which causes the file to be displayed in admin.php3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1230 
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1231 
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1232 
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1233 
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1234 
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1235 
The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1236 
SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1237 
The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-07-14T04:00:00.000Z
CVE-2000-1238 
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2000-1239 
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T17:00:00.000Z
CVE-2000-1240 
Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2000-1241 
Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2000-1242 
The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-10T11:00:00.000Z
CVE-2000-1243 
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T10:00:00.000Z
CVE-2000-1244 
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2000-1245 
Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2000-1246 
NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2000-1247 
The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T01:00:00.000Z
CVE-2000-1254 
crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-05T01:00:00.000Z
CVE-2001-0001 
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2001-0002 
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0003 
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0004 
IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-18T04:00:00.000Z
CVE-2001-0005 
Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0006 
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0007 
Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2001-0008 
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0009 
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0010 
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0011 
Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0012 
BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0013 
Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0014 
Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0015 
Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0016 
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0017 
Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2001-0018 
Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z