yahoo-inc/cve-impacts huggingface dataset:
CVE-2000-1020: Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, heap overflow
CVE-2000-1021: Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, heap overflow
CVE-2000-1022: The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
Key phrases: execute restricted commands by sending a DATA command
CVE-2000-1023: The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.
Key phrases: modify domain name information via the nsManager.cgi CGI
CVE-2000-1024: eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
Key phrases: execute arbitrary commands, upload files and execute arbitrary commands
CVE-2000-1025: eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.
Key phrases: cause a denial of service via a URL
CVE-2000-1026: Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflows
CVE-2000-1027: Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
Key phrases: determine the real IP address of a target
CVE-2000-1028: Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.
Key phrases: gain privileges, gain privileges via a long -l command line, buffer overflow
CVE-2000-1029: Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long response to, buffer overflow
CVE-2000-1030: CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
Key phrases: determine valid usernames on the server, invalid usernames, invalid passwords
CVE-2000-1031: Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.
Key phrases: execute arbitrary code, execute arbitrary code via a long -tn option, buffer overflow
CVE-2000-1032: The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.
Key phrases: identify valid usernames on the firewall, invalid usernames, invalid passwords
CVE-2000-1033: Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.
Key phrases: bypass its anti-hammering feature by first logging
CVE-2000-1034: Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long LogFileName parameter, buffer overflow, activex parameter validation
CVE-2000-1035: Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflows
CVE-2000-1036: Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter.
Key phrases: read sensitive information via a .. (dot, directory traversal, dot dot attack
CVE-2000-1037: Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.
Key phrases: determine valid usernames and guess a password via, invalid user names, invalid passwords, brute force
CVE-2000-1038: The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request.
Key phrases: cause a denial of service via an empty, empty get request
CVE-2000-1039: Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities.  NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
Key phrases: cause a denial of service by flooding a, naptha
CVE-2000-1040: Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
Key phrases: cause a denial of service, format string
CVE-2000-1041: Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2000-1042: Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
Key phrases: gain root privileges, gain root privileges when ypserv is built without, buffer overflow
CVE-2000-1043: Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
Key phrases: gain root privileges, gain root privileges when ypserv is built without, format string
CVE-2000-1044: Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges.
Key phrases: gain root privileges, format string
CVE-2000-1045: nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.
Key phrases: cause a denial of service via a flood
CVE-2000-1046: Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2000-1047: Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-1048: Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2000-1049: Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.
Key phrases: cause a denial of service via a URL
CVE-2000-1050: Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").
Key phrases: directly access the WEB-INF directory via
CVE-2000-1051: Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
Key phrases: read arbitrary files, read arbitrary files via the SSIFilter servlet, directory traversal
CVE-2000-1052: Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.
Key phrases: obtain source code for executable content by directly calling
CVE-2000-1053: Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
Key phrases: compile and execute JSP code by inserting it, cross-site scripting (css)
CVE-2000-1054: Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-1055: Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-1056: CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.
Key phrases: bypass LDAP authentication, bypass LDAP authentication on the server if the, null passwords
CVE-2000-1057: Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions.
Key phrases: gain privileges, database configuration scripts, insecure permissions
CVE-2000-1058: Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem."
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow, java snmp mib browser object id parsing problem
CVE-2000-1059: The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.
Key phrases: gain privileges, sniff X Windows events and gain privileges
CVE-2000-1060: The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges.
Key phrases: gain privileges, sniff X Windows traffic and gain privileges
CVE-2000-1061: Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM ActiveX Component" vulnerability.
Key phrases: execute arbitrary commands, bypass Internet Explorer's security settings and execute arbitrary commands, create and use ActiveX controls, microsoft vm activex component
CVE-2000-1062: Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, buffer overflow
CVE-2000-1063: Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, buffer overflow
CVE-2000-1064: Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, buffer overflow
CVE-2000-1065: Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.
Key phrases: denial of service (printer crash), cause a denial of service (printer crash
CVE-2000-1066: The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname.
Key phrases: cause a denial of service via a long, long dns hostname
CVE-2000-1068: pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-1069: pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.
Key phrases: access administrative functions without knowing the real password
CVE-2000-1070: pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.
Key phrases: access sensitive or private information
CVE-2000-1071: The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
Key phrases: gain privileges, monitor X Windows events and gain privileges
CVE-2000-1072: iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.
Key phrases: execute arbitrary commands, modify the iCal configuration and execute arbitrary commands, world-writeable permissions
CVE-2000-1073: csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory.
Key phrases: gain root privileges, gain root privileges by creating a Trojan Horse
CVE-2000-1074: csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.
Key phrases: gain root privileges, gain root privileges by creating a Trojan Horse
CVE-2000-1075: Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-1076: Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server.
Key phrases: gain administrative privileges, gain administrative privileges on the server, plaintext
CVE-2000-1077: Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long filename with, buffer overflow
CVE-2000-1078: ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
Key phrases: cause a denial of service by requesting a
CVE-2000-1079: Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
Key phrases: modify dynamic NetBIOS name cache entries via a, spoofing
CVE-2000-1080: Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
Key phrases: cause a denial of service via a malformed, malformed (empty) udp packet
CVE-2000-1081: The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1082: The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1083: The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1084: The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1085: The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1086: The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1087: The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1088: The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, extended stored procedure parameter parsing
CVE-2000-1089: Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
Key phrases: execute arbitrary commands, buffer overflow, phone book service buffer overflow
CVE-2000-1090: Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.
Key phrases: read source code for parsed pages via a, malformed url
CVE-2000-1092: loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.
Key phrases: list and read files in the EZshopper data
CVE-2000-1093: Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long "goim, buffer overflow
CVE-2000-1094: Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
Key phrases: execute arbitrary commands, execute arbitrary commands via a "buddyicon", buffer overflow
CVE-2000-1095: modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2000-1096: crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file.
Key phrases: execute arbitrary commands, the crontab spool directory to execute arbitrary commands, world-writeable temporary files
CVE-2000-1097: The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.
Key phrases: cause a denial of service via a long, long username
CVE-2000-1098: The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.
Key phrases: cause a denial of service via an empty, empty get or post request
CVE-2000-1099: Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.
Key phrases: call into a disallowed class, escape the Java sandbox and conduct unauthorized activities, untrusted java class
CVE-2000-1100: The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request.
Key phrases: read sensitive information such as database usernames and
CVE-2000-1101: Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack.
Key phrases: escape the home directory via a "/, directory traversal, .. (dot dot), dot dot attack
CVE-2000-1102: PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands.
Key phrases: denial of service (server crash), cause a denial of service (server crash
CVE-2000-1103: rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
Key phrases: gain privileges, gain privileges by specifying an alternate Trojan horse, rcvtty
CVE-2000-1104: Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site.
Key phrases: embed scripts in a link to a trusted, iis cross-site scripting
CVE-2000-1105: The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
Key phrases: embed a script that remotely determines the existence
CVE-2000-1106: Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs.
Key phrases: gain privileges, gain privileges by modifying the VirusWall programs
CVE-2000-1107: in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash.
Key phrases: cause a denial of service via a long, null pointer, crash
CVE-2000-1108: cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument.
Key phrases: corrupt files by creating a symbolic link to
CVE-2000-1109: Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed.
Key phrases: gain privileges, gain privileges by creating directories that contain special, malformed directory names
CVE-2000-1110: document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.
Key phrases: determine the physical path of the web server, nonexistent command
CVE-2000-1111: Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input.
Key phrases: cause a denial of service by connecting to, incomplete connection attempts
CVE-2000-1112: Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.
Key phrases: gain privileges, gain privileges via a skin that contains a, .wms script execution
CVE-2000-1113: Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the ".ASX Buffer Overrun" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed Active Stream, buffer overflow, .asx buffer overrun
CVE-2000-1114: Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
Key phrases: read source code for JSP pages via an
CVE-2000-1115: Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-1116: Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long command.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-1117: The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method.
Key phrases: determine the existence of files on the client
CVE-2000-1118: 24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request.
Key phrases: bypass access restrictions, bypass access restrictions by prepending strings such as
CVE-2000-1119: Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long "x=, buffer overflow
CVE-2000-1120: Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-2000-1121: Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long -M argument, buffer overflow
CVE-2000-1122: Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long argument, buffer overflow
CVE-2000-1123: Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-2000-1124: Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.
Key phrases: gain privileges, gain privileges via long environmental variables, buffer overflow
CVE-2000-1125: restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
Key phrases: obtain root privileges, obtain root privileges by modifying the RSH variable
CVE-2000-1126: Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service.
Key phrases: execute arbitrary commands, execute arbitrary commands or cause a denial of, auto_parms, set_parms, denial of service
CVE-2000-1127: registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable.
Key phrases: modify arbitrary files, read and modify arbitrary files by renaming the, world readable
CVE-2000-1128: The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\\\\Program Files directory.
Key phrases: place a Trojan horse "common.exe" program
CVE-2000-1129: McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
Key phrases: cause a denial of service via a malformed, malformed recipient field
CVE-2000-1130: McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.
Key phrases: bypass email content filtering, bypass email content filtering rules by including Extended, extended ascii characters
CVE-2000-1131: Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-1132: DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.
Key phrases: read arbitrary files, malformed forum variable
CVE-2000-1133: Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory.
Key phrases: bypass authentication, bypass authentication by inserting a
CVE-2000-1134: Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
Key phrases: overwrite files of other users via a symlink, symlinks
CVE-2000-1135: fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.
Key phrases: overwrite files of other users via a symlink
CVE-2000-1136: elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack.
Key phrases: overwrite files of other users via a symlink, elvis-tiny
CVE-2000-1137: GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.
Key phrases: overwrite the files of other users via a, symlink
CVE-2000-1138: Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected.
Key phrases: modify the email in transit without being detected
CVE-2000-1139: The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
Key phrases: gain privileges, exchange user account
CVE-2000-1140: Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem.
Key phrases: determine that they are in a honeypot system
CVE-2000-1141: Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system.
Key phrases: determine that they are in a honeypot system
CVE-2000-1142: Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system.
Key phrases: determine that they are in a honeypot system
CVE-2000-1143: Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system.
Key phrases: determine that they are in a honeypot system
CVE-2000-1144: Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment.
Key phrases: determine that they are in a chroot environment, inode number
CVE-2000-1145: Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devices to identify ManTrap processes or modify arbitrary data files.
Key phrases: modify arbitrary data files, use utilities such as crash or fsdb to, root access, gain root access
CVE-2000-1146: Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd.
Key phrases: cause a denial of service via a sequence, recourse mantrap, execute commands
CVE-2000-1147: Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long string to, buffer overflow
CVE-2000-1148: The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server.
Key phrases: gain privileges, gain privileges on the server, world-readable permissions, plaintext
CVE-2000-1149: Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long username, buffer overflow
CVE-2000-1150: Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
Key phrases: conduct a denial of service via a message, long url
CVE-2000-1151: Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
Key phrases: conduct a denial of service via a message, long url
CVE-2000-1152: Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
Key phrases: conduct a denial of service via a message, long url
CVE-2000-1153: PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
Key phrases: conduct a denial of service via a message, postmaster, long url
CVE-2000-1154: RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
Key phrases: cause a denial of service via long HTTP, long http request
CVE-2000-1155: RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
Key phrases: cause a denial of service via long HTTP, long http request
CVE-2000-1156: StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
Key phrases: read files of the user who is using, world-readable permissions
CVE-2000-1157: Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long SNMP community, buffer overflow
CVE-2000-1158: NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
Key phrases: sniff the network and easily decrypt usernames and
CVE-2000-1159: NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.
Key phrases: gain privileges, gain privileges on the agent by sniffing the, nai sniffer agent, spoofing
CVE-2000-1160: NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.
Key phrases: denial of service (crash), cause a denial of service (crash), nai sniffer agent
CVE-2000-1161: The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases.
Key phrases: execute the program and view passwords or delete, web-accessible directory, delete databases
CVE-2000-1162: ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.
Key phrases: overwrite files of other users via a symlink
CVE-2000-1163: ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript.
Key phrases: execute commands as other users by placing a
CVE-2000-1164: WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
Key phrases: gain access, read and modify sensitive information such as passwords
CVE-2000-1165: Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.
Key phrases: denial of service (application crash), cause a denial of service (application crash, malformed log message
CVE-2000-1166: Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhosts as an argument to the index.php3 program.
Key phrases: insert arbitrary PHP, insert arbitrary PHP (PHP3) code by, alternate vhosts
CVE-2000-1167: ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system.
Key phrases: connect to the target system
CVE-2000-1168: IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, long get request
CVE-2000-1169: OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
Key phrases: gain access, gain access to the X11 display and sniff, agent forwarding
CVE-2000-1170: Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long GET request, buffer overflow
CVE-2000-1171: Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter.
Key phrases: ready arbitrary files, ready arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-1172: Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag.
Key phrases: execute arbitrary commands, conduct a denial of service and possibly execute, buffer overflow
CVE-2000-1173: Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.
Key phrases: obtain this sensitive information, sniff network traffic and obtain this sensitive information, weak encryption, trivial encoding, no encryption, obtain sensitive information
CVE-2000-1174: Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
Key phrases: execute arbitrary commands, execute arbitrary commands via a packet with a, buffer overflows
CVE-2000-1175: Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long command line, buffer overflow
CVE-2000-1176: Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-1177: bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.
Key phrases: determine the existence of files and user ID
CVE-2000-1178: Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.
Key phrases: overwrite the files of other users whose joe, symbolic links, deadjoe, crash
CVE-2000-1179: Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters.
Key phrases: read system logs without authentication by directly connecting
CVE-2000-1180: Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
Key phrases: gain privileges, gain privileges via a long command line argument, buffer overflow
CVE-2000-1181: Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admin/includes/ URL.
Key phrases: obtain portions of RealServer's memory contents, possibly including sensitive information
CVE-2000-1182: WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests, which disables proxy handling.
Key phrases: cause a denial of service by flooding the, proxy handling
CVE-2000-1183: Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long connection request, buffer overflow