rainbutterfly/cve_corpus huggingface dataset:
CVE-2000-1044 
Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1045 
nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1046 
Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1047 
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-18T04:00:00.000Z
CVE-2000-1048 
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1049 
Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1050 
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1051 
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1052 
Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1053 
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1054 
Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1055 
Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1056 
CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1057 
Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1058 
Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1059 
The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1060 
The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1061 
Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM ActiveX Component" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1062 
Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1063 
Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1064 
Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1065 
Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1066 
The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1068 
pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1069 
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1070 
pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1071 
The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1072 
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1073 
csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1074 
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1075 
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-1076 
Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1077 
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1078 
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1079 
Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-1080 
Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1081 
The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1082 
The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1083 
The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1084 
The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1085 
The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1086 
The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1087 
The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1088 
The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1089 
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1090 
Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-02-02T05:00:00.000Z
CVE-2000-1092 
loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1093 
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1094 
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1095 
modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1096 
crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1097 
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1098 
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1099 
Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1100 
The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1101 
Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-1102 
PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1103 
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1104 
Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1105 
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1106 
Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1107 
in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1108 
cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-1109 
Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-1110 
document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z
CVE-2000-1111 
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-1112 
Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1113 
Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the ".ASX Buffer Overrun" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-1114 
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-12-19T05:00:00.000Z