rainbutterfly/cve_corpus huggingface dataset:
CVE-2000-0801 
Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-09-21T04:00:00.000Z
CVE-2000-0802 
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-09-21T04:00:00.000Z
CVE-2000-0803 
GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0804 
Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0805 
Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0806 
The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0807 
The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0808 
The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0809 
Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0810 
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0811 
Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0812 
The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0813 
Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0816 
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0817 
Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0818 
The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0824 
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0825 
Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0826 
Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0827 
Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0828 
Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0829 
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0830 
annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 through 22705.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0831 
Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0832 
Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0833 
Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0834 
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0835 
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0836 
Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0837 
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0838 
Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0839 
WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0840 
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0841 
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0842 
The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0843 
Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0844 
Some functions that implement the locale subsystem on Unix do not  properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0845 
kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0846 
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0847 
Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0848 
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host:  request header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0849 
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0850 
Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0851 
Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0852 
Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0853 
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0854 
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0855 
SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0856 
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0857 
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0858 
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0859 
The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-2000-0860 
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0861 
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0862 
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0863 
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0864 
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a  symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0865 
Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0866 
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0867 
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0868 
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0869 
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0870 
Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0871 
Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0872 
explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0873 
netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0874 
Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0875 
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0876 
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-2000-0877 
mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-18T04:00:00.000Z
CVE-2000-0878 
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0879 
LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0880 
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0881 
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0882 
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-18T04:00:00.000Z
CVE-2000-0883 
The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0884 
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z
CVE-2000-0885 
Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability.  NOTE: It is highly likely that this candidate will be split into multiple candidates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-11-29T05:00:00.000Z
CVE-2000-0886 
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-01-22T05:00:00.000Z