stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2000-0224 (severity: LOW, weakness: NVD-CWE-Other)
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
CVE-2000-0225 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.
CVE-2000-0226 (severity: MEDIUM, weakness: NVD-CWE-Other)
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
CVE-2000-0227 (severity: LOW, weakness: NVD-CWE-Other)
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets.
CVE-2000-0228 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability.
CVE-2000-0229 (severity: HIGH, weakness: NVD-CWE-Other)
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
CVE-2000-0230 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
CVE-2000-0231 (severity: HIGH, weakness: NVD-CWE-Other)
Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.
CVE-2000-0232 (severity: LOW, weakness: NVD-CWE-Other)
Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.
CVE-2000-0233 (severity: HIGH, weakness: NVD-CWE-Other)
SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.
CVE-2000-0234 (severity: MEDIUM, weakness: NVD-CWE-Other)
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
CVE-2000-0235 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
CVE-2000-0236 (severity: MEDIUM, weakness: NVD-CWE-Other)
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
CVE-2000-0237 (severity: MEDIUM, weakness: NVD-CWE-Other)
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
CVE-2000-0238 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.
CVE-2000-0239 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.
CVE-2000-0240 (severity: MEDIUM, weakness: NVD-CWE-Other)
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.
CVE-2000-0241 (severity: MEDIUM, weakness: NVD-CWE-Other)
vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges.
CVE-2000-0242 (severity: MEDIUM, weakness: NVD-CWE-Other)
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.
CVE-2000-0243 (severity: MEDIUM, weakness: NVD-CWE-Other)
AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
CVE-2000-0244 (severity: HIGH, weakness: NVD-CWE-Other)
The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.
CVE-2000-0245 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
CVE-2000-0246 (severity: MEDIUM, weakness: NVD-CWE-Other)
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
CVE-2000-0247 (severity: HIGH, weakness: NVD-CWE-Other)
Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges.
CVE-2000-0248 (severity: HIGH, weakness: NVD-CWE-Other)
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2000-0249 (severity: HIGH, weakness: NVD-CWE-Other)
The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
CVE-2000-0250 (severity: HIGH, weakness: NVD-CWE-Other)
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
CVE-2000-0251 (severity: MEDIUM, weakness: NVD-CWE-Other)
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
CVE-2000-0252 (severity: MEDIUM, weakness: NVD-CWE-Other)
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
CVE-2000-0253 (severity: HIGH, weakness: NVD-CWE-Other)
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
CVE-2000-0254 (severity: MEDIUM, weakness: NVD-CWE-Other)
The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
CVE-2000-0255 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.
CVE-2000-0256 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.
CVE-2000-0257 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
CVE-2000-0258 (severity: HIGH, weakness: CWE-20)
IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.
CVE-2000-0259 (severity: HIGH, weakness: NVD-CWE-Other)
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
CVE-2000-0260 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability.
CVE-2000-0261 (severity: MEDIUM, weakness: NVD-CWE-Other)
The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0262 (severity: MEDIUM, weakness: NVD-CWE-Other)
The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
CVE-2000-0263 (severity: LOW, weakness: NVD-CWE-Other)
The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
CVE-2000-0264 (severity: LOW, weakness: NVD-CWE-Other)
Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods.
CVE-2000-0265 (severity: MEDIUM, weakness: NVD-CWE-Other)
Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
CVE-2000-0266 (severity: LOW, weakness: NVD-CWE-Other)
Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
CVE-2000-0267 (severity: MEDIUM, weakness: NVD-CWE-Other)
Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
CVE-2000-0268 (severity: MEDIUM, weakness: NVD-CWE-Other)
Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
CVE-2000-0269 (severity: LOW, weakness: NVD-CWE-Other)
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
CVE-2000-0270 (severity: LOW, weakness: NVD-CWE-Other)
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.
CVE-2000-0271 (severity: MEDIUM, weakness: NVD-CWE-Other)
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
CVE-2000-0272 (severity: HIGH, weakness: NVD-CWE-Other)
RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
CVE-2000-0273 (severity: MEDIUM, weakness: NVD-CWE-Other)
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
CVE-2000-0274 (severity: LOW, weakness: NVD-CWE-Other)
The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
CVE-2000-0275 (severity: LOW, weakness: NVD-CWE-Other)
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
CVE-2000-0276 (severity: LOW, weakness: NVD-CWE-Other)
BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.
CVE-2000-0277 (severity: HIGH, weakness: CWE-254)
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
CVE-2000-0278 (severity: MEDIUM, weakness: NVD-CWE-Other)
The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user.
CVE-2000-0279 (severity: MEDIUM, weakness: NVD-CWE-Other)
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
CVE-2000-0280 (severity: LOW, weakness: NVD-CWE-Other)
Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.
CVE-2000-0281 (severity: LOW, weakness: NVD-CWE-Other)
Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.
CVE-2000-0282 (severity: MEDIUM, weakness: NVD-CWE-Other)
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
CVE-2000-0283 (severity: MEDIUM, weakness: NVD-CWE-Other)
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
CVE-2000-0284 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
CVE-2000-0285 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
CVE-2000-0286 (severity: LOW, weakness: NVD-CWE-Other)
X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
CVE-2000-0287 (severity: HIGH, weakness: NVD-CWE-Other)
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.
CVE-2000-0288 (severity: MEDIUM, weakness: NVD-CWE-Other)
Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
CVE-2000-0289 (severity: MEDIUM, weakness: NVD-CWE-Other)
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
CVE-2000-0290 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
CVE-2000-0291 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
CVE-2000-0292 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash.
CVE-2000-0293 (severity: LOW, weakness: NVD-CWE-Other)
aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.
CVE-2000-0294 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
CVE-2000-0295 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
CVE-2000-0296 (severity: HIGH, weakness: NVD-CWE-Other)
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
CVE-2000-0297 (severity: MEDIUM, weakness: NVD-CWE-Other)
Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.
CVE-2000-0298 (severity: HIGH, weakness: NVD-CWE-Other)
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
CVE-2000-0299 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
CVE-2000-0300 (severity: HIGH, weakness: NVD-CWE-Other)
The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
CVE-2000-0301 (severity: MEDIUM, weakness: NVD-CWE-Other)
Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
CVE-2000-0302 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
CVE-2000-0303 (severity: MEDIUM, weakness: NVD-CWE-Other)
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
CVE-2000-0304 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
CVE-2000-0305 (severity: HIGH, weakness: CWE-399)
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
CVE-2000-0306 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
CVE-2000-0307 (severity: MEDIUM, weakness: NVD-CWE-Other)
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
CVE-2000-0308 (severity: HIGH, weakness: NVD-CWE-Other)
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
CVE-2000-0309 (severity: LOW, weakness: NVD-CWE-Other)
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
CVE-2000-0310 (severity: MEDIUM, weakness: NVD-CWE-Other)
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
CVE-2000-0311 (severity: LOW, weakness: NVD-CWE-Other)
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
CVE-2000-0312 (severity: HIGH, weakness: NVD-CWE-Other)
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
CVE-2000-0313 (severity: MEDIUM, weakness: NVD-CWE-Other)
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
CVE-2000-0314 (severity: MEDIUM, weakness: NVD-CWE-Other)
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
CVE-2000-0315 (severity: MEDIUM, weakness: NVD-CWE-Other)
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
CVE-2000-0316 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
CVE-2000-0317 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
CVE-2000-0318 (severity: HIGH, weakness: NVD-CWE-Other)
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
CVE-2000-0319 (severity: MEDIUM, weakness: NVD-CWE-Other)
mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
CVE-2000-0320 (severity: MEDIUM, weakness: NVD-CWE-Other)
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
CVE-2000-0321 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
CVE-2000-0322 (severity: HIGH, weakness: NVD-CWE-Other)
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2000-0323 (severity: HIGH, weakness: NVD-CWE-Other)
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
CVE-2000-0324 (severity: MEDIUM, weakness: NVD-CWE-Other)
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
CVE-2000-0325 (severity: HIGH, weakness: NVD-CWE-Other)
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
CVE-2000-0326 (severity: MEDIUM, weakness: NVD-CWE-Other)
Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
CVE-2000-0327 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability.
CVE-2000-0328 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
CVE-2000-0329 (severity: MEDIUM, weakness: NVD-CWE-Other)
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
CVE-2000-0330 (severity: HIGH, weakness: NVD-CWE-Other)
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
CVE-2000-0331 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
CVE-2000-0332 (severity: MEDIUM, weakness: NVD-CWE-Other)
UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.
CVE-2000-0333 (severity: MEDIUM, weakness: NVD-CWE-Other)
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
CVE-2000-0334 (severity: LOW, weakness: NVD-CWE-Other)
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
CVE-2000-0335 (severity: HIGH, weakness: NVD-CWE-Other)
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
CVE-2000-0336 (severity: LOW, weakness: NVD-CWE-Other)
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
CVE-2000-0337 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
CVE-2000-0338 (severity: MEDIUM, weakness: CWE-667)
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.