yahoo-inc/cve-impacts huggingface dataset:
CVE-2000-0848: Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host:  request header.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long Host:, buffer overflow
CVE-2000-0849: Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.
Key phrases: cause a denial of service in the Windows, race condition, malformed request
CVE-2000-0850: Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.
Key phrases: bypass its authentication, bypass its authentication mechanism by appending "$, bypass authentication
CVE-2000-0851: Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.
Key phrases: gain additional privileges, gain additional privileges via a long WM_USER message, buffer overflow, still image service privilege escalation
CVE-2000-0852: Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflows
CVE-2000-0853: YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-2000-0854: When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
Key phrases: execute arbitrary commands, execute arbitrary commands by inserting a Trojan Horse
CVE-2000-0855: SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline.
Key phrases: cause a denial of service by connecting to
CVE-2000-0856: Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
Key phrases: execute arbitrary commands, cause a denial of service or possibly execute, buffer overflow
CVE-2000-0857: The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, user-injected format strings, malformed nickname
CVE-2000-0858: Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.
Key phrases: cause a denial of service in IIS by
CVE-2000-0859: The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
Key phrases: cause a denial of service via a series
CVE-2000-0860: The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Key phrases: read arbitrary files, read arbitrary files by setting hidden form fields, file upload capability
CVE-2000-0861: Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-0862: Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
Key phrases: read and modify sensitive configuration information
CVE-2000-0863: Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
Key phrases: gain additional privileges, buffer overflow
CVE-2000-0864: Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a  symlink attack.
Key phrases: gain additional privileges, change the permissions of arbitrary files and directories, race condition, symlink
CVE-2000-0865: Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
Key phrases: gain root privileges, gain root privileges via a long terminal type, buffer overflow
CVE-2000-0866: Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.
Key phrases: cause a denial of service via a query, query containing 0 bytes
CVE-2000-0867: Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.
Key phrases: gain root privileges, gain root privileges by triggering malformed kernel messages, user-injected format strings
CVE-2000-0868: The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Key phrases: read source code for CGI scripts by replacing
CVE-2000-0869: The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Key phrases: list arbitrary directories, list arbitrary directories via the PROPFIND HTTP request
CVE-2000-0870: Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0871: Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.
Key phrases: cause a denial of service by sending a, buffer overflow
CVE-2000-0872: explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-2000-0873: netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.
Key phrases: clear network interface statistics and possibly hide evidence
CVE-2000-0874: Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
CVE-2000-0875: WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.
Key phrases: cause a denial of service by sending a
CVE-2000-0876: WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
Key phrases: obtain the  full pathname of the server
CVE-2000-0877: mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.
Key phrases: read arbitrary files, read arbitrary files by specifying the file name
CVE-2000-0878: The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-0879: LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.
Key phrases: start and stop various LPD services, setuid root, world executable
CVE-2000-0880: LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.
Key phrases: kill arbitrary processes, kill arbitrary processes by specifying an alternate process, world-writeable permissions
CVE-2000-0881: The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Key phrases: print arbitrary files
CVE-2000-0882: Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash.
Key phrases: cause a denial of service via a malformed, malformed icmp packet, crash
CVE-2000-0883: The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.
Key phrases: list the contents of that directory, browseable
CVE-2000-0884: IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Key phrases: execute arbitrary commands, read documents outside of the web root, web server folder traversal
CVE-2000-0885: Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability.  NOTE: It is highly likely that this candidate will be split into multiple candidates.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long Browser Name, buffer overflows, netmon protocol parsing
CVE-2000-0886: IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed request for, web server file request parsing
CVE-2000-0887: named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
Key phrases: cause a denial of service by making a, zxfr bug
CVE-2000-0888: named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
Key phrases: cause a denial of service by sending an, srv bug
CVE-2000-0889: Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun.
Key phrases: insert malicious code such as applets and make, compromised
CVE-2000-0890: periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2000-0891: A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.
Key phrases: execute arbitrary commands, execute arbitrary commands by attaching a malicious program, ecl
CVE-2000-0892: Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.
Key phrases: obtain the information, request environment variables from the client that may, sensitive information
CVE-2000-0893: The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.
Key phrases: identify the target host as an SGI system
CVE-2000-0894: HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.
Key phrases: cause a denial of service or conduct unauthorized, reboot
CVE-2000-0895: Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2000-0896: WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets.
Key phrases: cause a denial of service via a flood, flood of fragmented ip packets, drop connections
CVE-2000-0897: Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.
Key phrases: cause a denial of service by repeatedly requesting
CVE-2000-0898: Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.
Key phrases: cause the server to crash by inserting the, null values
CVE-2000-0899: Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
Key phrases: cause a denial of service by connecting to
CVE-2000-0900: Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a "%2e%2e, directory traversal, .. (dot dot), dot dot attack
CVE-2000-0901: Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.
Key phrases: gain root privileges, gain root privileges via format characters in the, format string
CVE-2000-0902: getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-2000-0903: Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2000-0904: Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.
Key phrases: obtain that information
CVE-2000-0905: QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page.
Key phrases: read sensitive system statistics information via the embedded.html
CVE-2000-0906: Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-0907: EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, long helo
CVE-2000-0908: BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute
CVE-2000-0909: Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long From:, buffer overflow
CVE-2000-0910: Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-0911: IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.
Key phrases: delete arbitrary files, read and delete arbitrary files by modifying the
CVE-2000-0912: MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.
Key phrases: read arbitrary files, read arbitrary files and possibly execute arbitrary commands
CVE-2000-0913: mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
Key phrases: read arbitrary files, read arbitrary files if a RewriteRule directive is
CVE-2000-0914: OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
Key phrases: cause a denial of service by flooding the
CVE-2000-0915: fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
Key phrases: read arbitrary files, read arbitrary files by specifying the target file
CVE-2000-0916: FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
Key phrases: spoof TCP connections, insufficient random number generator, spoofing
CVE-2000-0917: Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, format string
CVE-2000-0918: Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.
Key phrases: execute arbitrary commands, execute arbitrary commands via a DISPLAY environmental variable, format string
CVE-2000-0919: Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2000-0920: Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
Key phrases: read arbitrary files, read arbitrary files via a modified .. (, directory traversal, modified .. (dot dot), dot dot attack
CVE-2000-0921: Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-0922: Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2000-0923: authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-0924: Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-0925: The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
Key phrases: obtain sensitive information, world readable permissions
CVE-2000-0926: SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.
Key phrases: modify price information by changing the "Price
CVE-2000-0927: WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
Key phrases: bypass quota restrictions, alternative data streams
CVE-2000-0928: WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.
Key phrases: list directories and files by running a report
CVE-2000-0929: Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
Key phrases: cause a denial of service in RTF-, embedded ocx control, ocx attachment
CVE-2000-0930: Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
Key phrases: read arbitrary files, read arbitrary files via an embedded URL that, embedded url
CVE-2000-0931: Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-0932: MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, corrupt cda documents, hang
CVE-2000-0933: The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability.
Key phrases: gain privileges, simplified chinese ime state recognition
CVE-2000-0934: Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files and cause a denial of, glint, denial of service, symlink
CVE-2000-0935: Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2000-0936: Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Key phrases: read sensitive information such as user names and, world readable permissions
CVE-2000-0937: Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
Key phrases: conduct brute force password guessing attacks
CVE-2000-0938: Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.
Key phrases: identify valid users on the server
CVE-2000-0939: Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
Key phrases: cause a denial of service by repeatedly submitting, nonstandard url
CVE-2000-0940: Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-0941: Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-0942: The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.
Key phrases: conduct a cross site scripting (CSS), indexing services cross site scripting
CVE-2000-0943: Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-0944: CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
Key phrases: modify the password without knowing the original password
CVE-2000-0945: The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
Key phrases: execute arbitrary commands, execute arbitrary commands without authentication when the enable
CVE-2000-0946: Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization.
Key phrases: gain privileges, gain privileges or execute programs without authorization
CVE-2000-0947: Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Key phrases: execute arbitrary commands, execute arbitrary commands via format characters in the, format string
CVE-2000-0948: GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
Key phrases: modify arbitrary files, modify arbitrary files via a symlink attack
CVE-2000-0949: Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
Key phrases: execute arbitrary commands, execute arbitrary commands via the -g option, heap overflow
CVE-2000-0950: Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed display name, format string
CVE-2000-0951: A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.
Key phrases: list directories in the web root via a
CVE-2000-0952: global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2000-0953: Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
Key phrases: cause a denial of service by opening then
CVE-2000-0954: Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
Key phrases: obtain the passwords, obtain the passwords and compromise the server, plaintext
CVE-2000-0955: Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.
Key phrases: gain privileges, crack the password and gain privileges, weak encryption
CVE-2000-0956: cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.
Key phrases: bypass specified access restrictions
CVE-2000-0957: The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
Key phrases: obtain plaintext passwords, obtain plaintext passwords or hashes
CVE-2000-0958: HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window.
Key phrases: access the DOM of a web page by
CVE-2000-0959: glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
Key phrases: overwrite files via a symlink attack
CVE-2000-0960: The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.
Key phrases: determine valid users on the system and harvest, incorrect user names, incorrect passwords, spam abuse
CVE-2000-0961: Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long LIST command, buffer overflow
CVE-2000-0962: The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, empty ah esp packets
CVE-2000-0963: Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Key phrases: execute arbitrary commands, execute arbitrary commands via long environmental information such, buffer overflow
CVE-2000-0964: Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-0965: The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
Key phrases: denial of service (high CPU utilization), cause a denial of service (high CPU, nsapi plugins for tga, java servlet proxy
CVE-2000-0966: Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
Key phrases: gain privileges, buffer overflows
CVE-2000-0967: PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
Key phrases: execute arbitrary commands, execute arbitrary commands by triggering error messages that, user-injected format strings
CVE-2000-0968: Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long rcon command, buffer overflow
CVE-2000-0969: Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
Key phrases: execute arbitrary commands, execute arbitrary commands by injecting format strings into
CVE-2000-0970: IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.
Key phrases: hijack the secure web session of the user, session id cookie marking
CVE-2000-0971: Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute
CVE-2000-0972: HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
Key phrases: read arbitrary files, read arbitrary files via the -e option by
CVE-2000-0973: Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
Key phrases: execute arbitrary commands, execute arbitrary commands by forcing a long error, buffer overflow, long error message
CVE-2000-0974: GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection.
Key phrases: modify contents of all documents but the first
CVE-2000-0975: Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-0976: Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long DISPLAY environment, buffer overflow
CVE-2000-0977: mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.
Key phrases: read arbitrary files, read arbitrary files by specifying the target file
CVE-2000-0978: bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter.
Key phrases: execute arbitrary commands, execute arbitrary commands via the "&", bbd server, shell metacharacters
CVE-2000-0979: File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
Key phrases: bypass share access controls, bypass share access controls by sending a 1, share level password
CVE-2000-0980: NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network.
Key phrases: cause a broadcast storm and flood the network
CVE-2000-0981: MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.
Key phrases: weak authentication method, leaks information, leak information
CVE-2000-0982: Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
Key phrases: obtain the credentials, obtain the credentials by monitoring connections to the, cached web credentials
CVE-2000-0983: Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability.
Key phrases: denial of service (CPU utilization), cause a denial of service (CPU utilization, netmeeting desktop sharing
CVE-2000-0984: The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.
Key phrases: denial of service (crash and reload), cause a denial of service (crash and
CVE-2000-0985: Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long "MAIL, buffer overflow
CVE-2000-0986: Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.
Key phrases: gain privileges, gain privileges via a long ORACLE_HOME environmental variable, buffer overflow
CVE-2000-0987: Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
Key phrases: gain privileges, gain privileges via a long "connect", buffer overflow
CVE-2000-0988: WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.
Key phrases: gain access, gain access to its administrative interface and modify, backdoor password
CVE-2000-0989: Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username.
Key phrases: cause a denial of service and possibly execute, buffer overflow, execute commands
CVE-2000-0990: cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
Key phrases: cause a denial of service via an "
CVE-2000-0991: Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long telnet URL, buffer overflow, hyperterminal buffer overflow
CVE-2000-0992: Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2000-0993: Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
Key phrases: gain root privileges, gain root privileges via a malformed password in, format string
CVE-2000-0994: Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
Key phrases: gain root privileges, gain root privileges via the PWD environmental variable, format string
CVE-2000-0995: Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name.
Key phrases: gain root privileges, gain root privileges a malformed name, format string
CVE-2000-0996: Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.
Key phrases: gain root privileges, gain root privileges via a malformed shell, format string
CVE-2000-0997: Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges.
Key phrases: gain root privileges, format string
CVE-2000-0998: Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
Key phrases: gain root privileges, gain root privileges via the "kill", format string
CVE-2000-0999: Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
Key phrases: gain root privileges, format string
CVE-2000-1000: Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, format string
CVE-2000-1001: add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
Key phrases: modify price information via the "price"
CVE-2000-1002: POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
Key phrases: determine valid email addresses on the server for, invalid usernames, invalid passwords, spam
CVE-2000-1003: NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash.
Key phrases: cause a denial of service by changing a, unknown driver type, crash
CVE-2000-1004: Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.
Key phrases: execute arbitrary commands, execute arbitrary commands via a configuration file directory, format string
CVE-2000-1005: Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2000-1006: Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability.
Key phrases: cause a denial of service via a charset=, malformed mime header
CVE-2000-1007: I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.
Key phrases: cause reporting errors
CVE-2000-1008: PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.
Key phrases: gain access, the Palm device to decrypt the password and, weak encryption, decrypt password
CVE-2000-1009: dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
Key phrases: obtain root privileges, obtain root privileges by modifying the RSH variable
CVE-2000-1010: Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
Key phrases: execute arbitrary commands, execute arbitrary commands via a user name that, format string
CVE-2000-1011: Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
Key phrases: gain root privileges, gain root privileges via a long environmental variable, buffer overflow
CVE-2000-1012: The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Key phrases: read arbitrary files, read arbitrary files via the LANG environmental variable
CVE-2000-1013: The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Key phrases: read arbitrary files, read arbitrary files via the LANG environmental variable
CVE-2000-1014: Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via format characters in the, format string
CVE-2000-1015: The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.
Key phrases: execute arbitrary commands, gain Slashcode privileges, gain Slashcode privileges and possibly execute arbitrary commands, default administrative password
CVE-2000-1016: The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.
Key phrases: obtain system configuration information, read package documentation and obtain system configuration information, alias
CVE-2000-1017: Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database.
Key phrases: read arbitrary files, read arbitrary files by posting a request to
CVE-2000-1018: shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file.
Key phrases: recover the file
CVE-2000-1019: Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.
Key phrases: cause a denial of service via a malformed, malformed url