rainbutterfly/cve_corpus huggingface dataset:
CVE-2000-0887 
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0888 
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0889 
Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-02-02T05:00:00.000Z
CVE-2000-0890 
periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0891 
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0892 
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0893 
The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-02-02T05:00:00.000Z
CVE-2000-0894 
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2000-0895 
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2000-0896 
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0897 
Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-18T04:00:00.000Z
CVE-2000-0898 
Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-0899 
Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-0900 
Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0901 
Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0902 
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0903 
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0904 
Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0905 
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0906 
Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0907 
EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0908 
BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0909 
Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0910 
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0911 
IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0912 
MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0913 
mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0914 
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0915 
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0916 
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0917 
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0918 
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0919 
Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0920 
Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0921 
Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0922 
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0923 
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0924 
Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0925 
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0926 
SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0927 
WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0928 
WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0929 
Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0930 
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0931 
Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0932 
MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0933 
The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0934 
Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0935 
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0936 
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0937 
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0938 
Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0939 
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0940 
Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0941 
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0942 
The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0943 
Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0944 
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0945 
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-18T04:00:00.000Z
CVE-2000-0946 
Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0947 
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0948 
GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0949 
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0950 
Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0951 
A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0952 
global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0953 
Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0954 
Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0955 
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0956 
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0957 
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0958 
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0959 
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0960 
The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0961 
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0962 
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0963 
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0964 
Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0965 
The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0966 
Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z