stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2000-0105 (severity: MEDIUM, weakness: NVD-CWE-Other)
Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
CVE-2000-0106 (severity: HIGH, weakness: NVD-CWE-Other)
The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0107 (severity: HIGH, weakness: NVD-CWE-Other)
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
CVE-2000-0108 (severity: HIGH, weakness: NVD-CWE-Other)
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0109 (severity: HIGH, weakness: NVD-CWE-Other)
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
CVE-2000-0110 (severity: HIGH, weakness: NVD-CWE-Other)
The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0111 (severity: HIGH, weakness: NVD-CWE-Other)
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
CVE-2000-0112 (severity: HIGH, weakness: NVD-CWE-Other)
The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.
CVE-2000-0113 (severity: HIGH, weakness: NVD-CWE-Other)
The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics.
CVE-2000-0114 (severity: MEDIUM, weakness: NVD-CWE-Other)
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
CVE-2000-0115 (severity: MEDIUM, weakness: NVD-CWE-Other)
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
CVE-2000-0116 (severity: HIGH, weakness: NVD-CWE-Other)
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
CVE-2000-0117 (severity: HIGH, weakness: NVD-CWE-Other)
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
CVE-2000-0118 (severity: HIGH, weakness: NVD-CWE-Other)
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
CVE-2000-0119 (severity: HIGH, weakness: NVD-CWE-Other)
The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.
CVE-2000-0120 (severity: HIGH, weakness: NVD-CWE-Other)
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
CVE-2000-0121 (severity: LOW, weakness: NVD-CWE-Other)
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
CVE-2000-0122 (severity: MEDIUM, weakness: NVD-CWE-Other)
Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
CVE-2000-0123 (severity: HIGH, weakness: NVD-CWE-Other)
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0124 (severity: LOW, weakness: NVD-CWE-Other)
surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
CVE-2000-0125 (severity: HIGH, weakness: NVD-CWE-Other)
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
CVE-2000-0126 (severity: MEDIUM, weakness: NVD-CWE-Other)
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
CVE-2000-0127 (severity: HIGH, weakness: NVD-CWE-Other)
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
CVE-2000-0128 (severity: HIGH, weakness: NVD-CWE-Other)
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
CVE-2000-0129 (severity: LOW, weakness: NVD-CWE-Other)
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
CVE-2000-0130 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
CVE-2000-0131 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
CVE-2000-0132 (severity: LOW, weakness: CWE-200)
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
CVE-2000-0133 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
CVE-2000-0134 (severity: HIGH, weakness: NVD-CWE-Other)
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0135 (severity: HIGH, weakness: NVD-CWE-Other)
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0136 (severity: HIGH, weakness: NVD-CWE-Other)
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0137 (severity: HIGH, weakness: NVD-CWE-Other)
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
CVE-2000-0138 (severity: MEDIUM, weakness: NVD-CWE-Other)
A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
CVE-2000-0139 (severity: LOW, weakness: NVD-CWE-Other)
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
CVE-2000-0140 (severity: MEDIUM, weakness: NVD-CWE-Other)
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
CVE-2000-0141 (severity: HIGH, weakness: NVD-CWE-Other)
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
CVE-2000-0142 (severity: MEDIUM, weakness: NVD-CWE-Other)
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
CVE-2000-0143 (severity: MEDIUM, weakness: NVD-CWE-Other)
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
CVE-2000-0144 (severity: HIGH, weakness: NVD-CWE-Other)
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
CVE-2000-0145 (severity: HIGH, weakness: NVD-CWE-Other)
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
CVE-2000-0146 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
CVE-2000-0147 (severity: LOW, weakness: NVD-CWE-Other)
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
CVE-2000-0148 (severity: HIGH, weakness: NVD-CWE-Other)
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
CVE-2000-0149 (severity: MEDIUM, weakness: NVD-CWE-Other)
Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
CVE-2000-0150 (severity: HIGH, weakness: NVD-CWE-Other)
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
CVE-2000-0151 (severity: MEDIUM, weakness: NVD-CWE-Other)
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
CVE-2000-0152 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
CVE-2000-0153 (severity: MEDIUM, weakness: NVD-CWE-Other)
FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
CVE-2000-0154 (severity: LOW, weakness: NVD-CWE-Other)
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
CVE-2000-0155 (severity: HIGH, weakness: CWE-94)
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
CVE-2000-0156 (severity: MEDIUM, weakness: NVD-CWE-Other)
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
CVE-2000-0157 (severity: HIGH, weakness: NVD-CWE-Other)
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
CVE-2000-0158 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
CVE-2000-0159 (severity: HIGH, weakness: NVD-CWE-Other)
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
CVE-2000-0160 (severity: HIGH, weakness: NVD-CWE-Other)
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
CVE-2000-0161 (severity: HIGH, weakness: NVD-CWE-Other)
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
CVE-2000-0162 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
CVE-2000-0163 (severity: MEDIUM, weakness: NVD-CWE-Other)
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
CVE-2000-0164 (severity: HIGH, weakness: NVD-CWE-Other)
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
CVE-2000-0165 (severity: HIGH, weakness: NVD-CWE-Other)
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
CVE-2000-0166 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
CVE-2000-0167 (severity: LOW, weakness: NVD-CWE-Other)
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
CVE-2000-0168 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
CVE-2000-0169 (severity: HIGH, weakness: NVD-CWE-Other)
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
CVE-2000-0170 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
CVE-2000-0171 (severity: HIGH, weakness: NVD-CWE-Other)
atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
CVE-2000-0172 (severity: HIGH, weakness: NVD-CWE-Other)
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
CVE-2000-0173 (severity: MEDIUM, weakness: NVD-CWE-Other)
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
CVE-2000-0174 (severity: MEDIUM, weakness: NVD-CWE-Other)
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0175 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
CVE-2000-0176 (severity: MEDIUM, weakness: NVD-CWE-Other)
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
CVE-2000-0177 (severity: HIGH, weakness: NVD-CWE-Other)
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2000-0178 (severity: HIGH, weakness: NVD-CWE-Other)
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
CVE-2000-0179 (severity: MEDIUM, weakness: NVD-CWE-Other)
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
CVE-2000-0180 (severity: MEDIUM, weakness: NVD-CWE-Other)
Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0181 (severity: MEDIUM, weakness: NVD-CWE-Other)
Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
CVE-2000-0182 (severity: MEDIUM, weakness: NVD-CWE-Other)
iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
CVE-2000-0183 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
CVE-2000-0184 (severity: LOW, weakness: NVD-CWE-Other)
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
CVE-2000-0185 (severity: MEDIUM, weakness: NVD-CWE-Other)
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
CVE-2000-0186 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
CVE-2000-0187 (severity: HIGH, weakness: NVD-CWE-Other)
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
CVE-2000-0188 (severity: HIGH, weakness: NVD-CWE-Other)
EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
CVE-2000-0189 (severity: MEDIUM, weakness: NVD-CWE-Other)
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
CVE-2000-0190 (severity: MEDIUM, weakness: NVD-CWE-Other)
AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
CVE-2000-0191 (severity: HIGH, weakness: NVD-CWE-Other)
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
CVE-2000-0192 (severity: MEDIUM, weakness: NVD-CWE-Other)
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.
CVE-2000-0193 (severity: HIGH, weakness: NVD-CWE-Other)
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
CVE-2000-0194 (severity: HIGH, weakness: NVD-CWE-Other)
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
CVE-2000-0195 (severity: HIGH, weakness: NVD-CWE-Other)
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
CVE-2000-0196 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
CVE-2000-0197 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
CVE-2000-0198 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
CVE-2000-0199 (severity: HIGH, weakness: NVD-CWE-Other)
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
CVE-2000-0200 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.
CVE-2000-0201 (severity: MEDIUM, weakness: NVD-CWE-Other)
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
CVE-2000-0202 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.
CVE-2000-0203 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
CVE-2000-0204 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
CVE-2000-0205 (severity: MEDIUM, weakness: NVD-CWE-Other)
Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
CVE-2000-0206 (severity: MEDIUM, weakness: NVD-CWE-Other)
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
CVE-2000-0207 (severity: HIGH, weakness: NVD-CWE-Other)
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
CVE-2000-0208 (severity: MEDIUM, weakness: NVD-CWE-Other)
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
CVE-2000-0209 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
CVE-2000-0210 (severity: LOW, weakness: NVD-CWE-Other)
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
CVE-2000-0211 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
CVE-2000-0212 (severity: MEDIUM, weakness: NVD-CWE-Other)
InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
CVE-2000-0213 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
CVE-2000-0214 (severity: MEDIUM, weakness: NVD-CWE-Other)
FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
CVE-2000-0215 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
CVE-2000-0216 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
CVE-2000-0217 (severity: MEDIUM, weakness: NVD-CWE-Other)
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
CVE-2000-0218 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
CVE-2000-0219 (severity: HIGH, weakness: CWE-264)
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
CVE-2000-0220 (severity: MEDIUM, weakness: NVD-CWE-Other)
ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
CVE-2000-0221 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
CVE-2000-0222 (severity: HIGH, weakness: NVD-CWE-Other)
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
CVE-2000-0223 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.