yahoo-inc/cve-impacts huggingface dataset:
CVE-2000-0277: Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability.
Key phrases: execute a macro virus, xlm text macro
CVE-2000-0278: The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user.
Key phrases: cause a denial of service by accessing the
CVE-2000-0279: BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
Key phrases: cause a denial of service via malformed packets
CVE-2000-0280: Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0281: Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0282: TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-2000-0283: The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
Key phrases: access sensitive system information via the pmcd daemon
CVE-2000-0284: Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
Key phrases: execute commands via LIST or other commands, buffer overflow
CVE-2000-0285: Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long -xkbmap parameter, buffer overflow
CVE-2000-0286: X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
Key phrases: cause a denial of service via malformed input
CVE-2000-0287: The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-0288: Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.
Key phrases: bypass the payment phase for accessing documents via, modified form variable
CVE-2000-0289: IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
Key phrases: route UDP packets through the internal interface by, ip masquerading
CVE-2000-0290: Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0291: Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
Key phrases: cause a denial of service by embedding a, buffer overflow
CVE-2000-0292: The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash.
Key phrases: cause a denial of service via a ping, ping flood, crash
CVE-2000-0293: aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.
Key phrases: delete arbitrary files, delete arbitrary files by creating files whose names
CVE-2000-0294: Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2000-0295: Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
Key phrases: gain root privileges, gain root privileges via the screen_add command, buffer overflow
CVE-2000-0296: fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
Key phrases: gain privileges, gain privileges by embedding shell metacharacters into file
CVE-2000-0297: Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.
Key phrases: bypass access restrictions, bypass access restrictions to secure conferences via the, rightaccessallforums, rightmoderateallforums
CVE-2000-0298: The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
Key phrases: insecure permissions
CVE-2000-0299: Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
Key phrases: cause a denial of service via an HTTP, buffer overflow
CVE-2000-0300: The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
Key phrases: sniff and decrypt PcAnywhere or NT domain accounts, weak encryption
CVE-2000-0301: Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
Key phrases: cause a denial of service via the AUTH, auth command
CVE-2000-0302: Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
Key phrases: view the source code of ASP files by
CVE-2000-0303: Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
Key phrases: read or modify files on a client via
CVE-2000-0304: Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
Key phrases: cause a denial of service via a malformed, undelimited .htr request
CVE-2000-0305: Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
Key phrases: cause a denial of service by sending a, ip fragment reassembly
CVE-2000-0306: Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
Key phrases: gain root access, gain root access via a long message, buffer overflow
CVE-2000-0307: Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
Key phrases: cause a denial of service which prevents access
CVE-2000-0308: Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
Key phrases: gain root privileges, insecure file permissions
CVE-2000-0309: The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
Key phrases: cause a denial of service
CVE-2000-0310: IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
Key phrases: cause a denial of service by sending a, ip fragment assembly
CVE-2000-0311: The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
Key phrases: modify Active Directory information by modifying an unprotected, unprotected attribute, mixed object access
CVE-2000-0312: cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
Key phrases: gain root privileges, gain root privileges via an argv[]
CVE-2000-0313: Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
Key phrases: change interface media configurations
CVE-2000-0314: traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
Key phrases: flood other systems by providing traceroute with a
CVE-2000-0315: traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
Key phrases: modify the source address of the packets, spoofing
CVE-2000-0316: Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
Key phrases: gain root privileges, gain root privileges via a long -d option, buffer overflow
CVE-2000-0317: Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
Key phrases: gain root privileges, gain root privileges via a long -r option, buffer overflow
CVE-2000-0318: Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
Key phrases: create arbitrary files, read other user's email and create arbitrary, dot dot (..)
CVE-2000-0319: mail.local in Sendmail 8.10.x does not properly identify the .\\\\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\\\\n.
Key phrases: cause a denial of service or corrupt mailboxes
CVE-2000-0320: Qpopper 2.53 and 3.0 does not properly identify the \\\\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \\\\n.
Key phrases: cause a denial of service or corrupt mailboxes
CVE-2000-0321: Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0322: The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2000-0323: The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
Key phrases: modify text files via a database query, text i-isam
CVE-2000-0324: pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
Key phrases: cause a denial of service via a TCP
CVE-2000-0325: The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
Key phrases: execute commands via a database query, vba shell
CVE-2000-0326: Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
Key phrases: sniff and decrypt passwords for Meeting Maker accounts, weak encryption
CVE-2000-0327: Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability.
Key phrases: escape the Java sandbox and execute commands via, illegal cast operation, virtual machine verifier
CVE-2000-0328: Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
Key phrases: perform spoofing and session hijacking
CVE-2000-0329: A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
Key phrases: execute a malicious cabinet file via an attachment, active setup control
CVE-2000-0330: The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
Key phrases: execute commands via a long file name string, file access url
CVE-2000-0331: Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
Key phrases: cause a denial of service via a long, buffer overflow, malformed environment variable
CVE-2000-0332: UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.
Key phrases: read arbitrary files, read arbitrary files via a pathname string that
CVE-2000-0333: tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Key phrases: cause a denial of service via malformed DNS, malformed dns packets, jump offset, infinite loop
CVE-2000-0334: The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
Key phrases: conduct unauthorized activities via an object-method
CVE-2000-0335: The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
Key phrases: spoof DNS query results, predictable ids, spoofing
CVE-2000-0336: Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
Key phrases: modify arbitrary files, modify arbitrary files via a symlink attack
CVE-2000-0337: Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
Key phrases: gain root privileges, gain root privileges via a long -dev parameter, buffer overflow
CVE-2000-0338: Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
Key phrases: cause a denial of service by creating the, predictable temporary file names
CVE-2000-0339: ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
Key phrases: bypass the firewall rules, udp packets
CVE-2000-0340: Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
Key phrases: execute arbitrary commands, execute arbitrary commands via the DISPLAY environmental variable, buffer overflow
CVE-2000-0341: ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
Key phrases: cause a denial of service via a long, long login name
CVE-2000-0342: Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
Key phrases: bypass the user warning for executable attachments such, stealth attachment
CVE-2000-0343: Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long MAIL FROM, buffer overflow
CVE-2000-0344: The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
Key phrases: cause a denial of service via a negative, negative size value
CVE-2000-0345: The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
Key phrases: obtain sensitive information, obtain sensitive information via the show command, non-privileged users
CVE-2000-0346: AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server.
Key phrases: read potentially sensitive information via an invalid range, invalid range request
CVE-2000-0347: Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
Key phrases: cause a denial of service via a NetBIOS, null source name
CVE-2000-0348: A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.
Key phrases: gain root privileges
CVE-2000-0349: Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.
Key phrases: cause a denial of service
CVE-2000-0350: A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events.
Key phrases: bypass the weak authentication, bypass the weak authentication and post unencrypted events
CVE-2000-0351: Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
Key phrases: add or remove software packages, insecure privileges
CVE-2000-0352: Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed URL, malformed url, shell metacharacters
CVE-2000-0353: Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
Key phrases: execute arbitrary commands, execute arbitrary commands via an index.html file which, uudecoded file
CVE-2000-0354: mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
Key phrases: create files one level above the local target
CVE-2000-0355: pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
Key phrases: read arbitrary files
CVE-2000-0356: Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
CVE-2000-0357: ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
Key phrases: guess the authentication keys
CVE-2000-0358: ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
Key phrases: crash a program, orbit
CVE-2000-0359: Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, buffer overflow
CVE-2000-0360: Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
Key phrases: cause a denial of service via a maliciously, buffer overflow
CVE-2000-0361: The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
Key phrases: access login and password information, world readable permissions
CVE-2000-0362: Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflows
CVE-2000-0363: Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
Key phrases: gain root privileges, gain root privileges via the /tmp directory
CVE-2000-0364: screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
Key phrases: write to other ttys
CVE-2000-0365: Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.
Key phrases: write to other tty devices, insecure modes
CVE-2000-0366: dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
Key phrases: modify the ownership of arbitrary files
CVE-2000-0367: Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
Key phrases: gain root privileges
CVE-2000-0368: Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
Key phrases: obtain portions of the command history of previous users, the login prompt to obtain portions of the, access sensitive data
CVE-2000-0369: The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, multiple threads
CVE-2000-0370: The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.
Key phrases: execute commands via shell metacharacters in the -D
CVE-2000-0371: The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
Key phrases: create arbitrary files, create arbitrary files via a symlink attack
CVE-2000-0372: Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
Key phrases: gain root privileges
CVE-2000-0373: Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
Key phrases: gain root privileges
CVE-2000-0374: The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.
Key phrases: bypass additional access restrictions, obtain sensitive information, obtain sensitive information or bypass additional access restrictions, xdmcp connections
CVE-2000-0375: The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.
Key phrases: modify arbitrary files, symbolic links
CVE-2000-0376: Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long HTTP GET, buffer overflow
CVE-2000-0377: The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability.
Key phrases: cause a denial of service via a malformed, remote registry access authentication
CVE-2000-0378: The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Key phrases: sniff activity on these devices when subsequent users, open file descriptor
CVE-2000-0379: The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.
Key phrases: snmp tables
CVE-2000-0380: The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
Key phrases: cause a denial of service by requesting a
CVE-2000-0381: The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
Key phrases: view environmental variables and setup information by referencing, non-existing database
CVE-2000-0382: ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site.
Key phrases: stale query string arguments, sensitive information
CVE-2000-0383: The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
CVE-2000-0384: NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.
Key phrases: gain root access
CVE-2000-0385: FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
Key phrases: bypass Field-Level database security restrictions, bypass Field-Level database security restrictions via, xml publishing, email capabilities
CVE-2000-0386: FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
Key phrases: send anonymous or forged email
CVE-2000-0387: The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.
Key phrases: overwrite arbitrary files
CVE-2000-0388: Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.
Key phrases: execute commands via a long TERMCAP environmental variable, buffer overflow
CVE-2000-0389: Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2000-0390: Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2000-0391: Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2000-0392: Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2000-0393: The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
Key phrases: gain privileges, gain privileges by specifying an alternate program to
CVE-2000-0394: NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature.
Key phrases: cause a denial of service by sending malformed, malformed ip packets, man-in-the-middle signature
CVE-2000-0395: Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0396: The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
Key phrases: duplicate files on the server, read source code for web scripts such as
CVE-2000-0397: The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account.
Key phrases: access a user's email account, predictable identifiers
CVE-2000-0398: Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long query_string parameter, buffer overflow
CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0400: The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.
Key phrases: download any type of file to a user, file types
CVE-2000-0401: Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long query string, buffer overflows
CVE-2000-0402: The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
Key phrases: sql server service pack password
CVE-2000-0403: The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability.
Key phrases: cause a denial of service by sending a, hostannouncement flooding, hostannouncement frame
CVE-2000-0404: The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability.
Key phrases: cause a denial of service by sending a, resetbrowser frame
CVE-2000-0405: Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malformed DNS response, buffer overflow
CVE-2000-0406: Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
Key phrases: steal information by redirecting traffic from a legitimate, acros-suencksen ssl
CVE-2000-0407: Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long -p option, buffer overflow
CVE-2000-0408: IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.
Key phrases: cause a denial of service via a long, malformed extension data in url
CVE-2000-0409: Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
Key phrases: overwrite files of the user importing the certificate, symlinks
CVE-2000-0410: ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.
Key phrases: cause a denial of service by making repeated, cfcache tagged cache file
CVE-2000-0411: Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.
Key phrases: obtain environmental variables via the env_report parameter.
CVE-2000-0412: The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.
Key phrases: read arbitrary files, read arbitrary files from the client by specifying
CVE-2000-0413: The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
Key phrases: determine the physical path of HTML
CVE-2000-0414: Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
Key phrases: gain privileges, gain privileges via malformed input variables, vulnerability in shutdown command
CVE-2000-0415: Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.
Key phrases: cause a denial of service via a mail, buffer overflow
CVE-2000-0416: NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.
Key phrases: bypass the NTMail proxy restrictions, bypass the NTMail proxy restrictions by redirecting their
CVE-2000-0417: The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.
Key phrases: cause a denial of service via a long, long username
CVE-2000-0418: The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.
Key phrases: cause a denial of service via oversized ICMP, oversized icmp echo (ping) requests
CVE-2000-0419: The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.
Key phrases: conduct unauthorized activities via the "Show Me, office ua control
CVE-2000-0420: The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data.
Key phrases: decrypt Encrypted File System (EFS) data
CVE-2000-0421: The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2000-0422: Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long utoken parameter, buffer overflow
CVE-2000-0423: Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.
Key phrases: execute arbitrary commands, execute arbitrary commands via long parameters such as, buffer overflow
CVE-2000-0424: The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2000-0425: Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-2000-0426: UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself.
Key phrases: cause a denial of service by referencing UltraBoard, session parameter, fork copies
CVE-2000-0427: The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.
Key phrases: obtain sensitive information, the device to obtain sensitive information without knowing, physical access
CVE-2000-0428: Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long filename for, buffer overflow
CVE-2000-0429: A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, backdoor password
CVE-2000-0430: Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
Key phrases: access sensitive debugging information by appending /expdate to
CVE-2000-0431: Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
Key phrases: bypass cgiwrap and modify files, file upload
CVE-2000-0432: The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2000-0433: The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles.
Key phrases: gain privileges, gain privileges to those accounts by creating standard
CVE-2000-0434: The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.
Key phrases: plaintext
CVE-2000-0435: The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.
Key phrases: modify user accounts or web pages, file upload
CVE-2000-0436: MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.
Key phrases: access arbitrary files, access arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-2000-0437: Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, buffer overflow
CVE-2000-0438: Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long mountpoint parameter, buffer overflow
CVE-2000-0439: Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
Key phrases: obtain client cookies from another domain by including, unauthorized cookie access
CVE-2000-0440: NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
Key phrases: cause a denial of service by sending a, unaligned ip timestamp option
CVE-2000-0441: Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.
Key phrases: gain write access, gain write access to files on locally or
CVE-2000-0442: Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
Key phrases: gain privileges, gain privileges via a formatting string in the
CVE-2000-0443: The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-2000-0444: HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
Key phrases: cause a denial of service via a malformed, malformed url
CVE-2000-0445: The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys.
Key phrases: predictable keys
CVE-2000-0446: Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long string, buffer overflow
CVE-2000-0447: Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long configuration parameter, buffer overflow
CVE-2000-0448: The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command.
Key phrases: access the configuration via the GET_CONFIG command
CVE-2000-0449: Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
Key phrases: weak encryption, trivial encoding
CVE-2000-0450: Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-2000-0451: The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets.
Key phrases: cause a denial of service via oversized or, fragmented icmp packets
CVE-2000-0452: Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0453: XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000.
Key phrases: cause a denial of service via a negative, negative counter value, malformed tcp packet
CVE-2000-0454: Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
Key phrases: gain privileges, gain privileges via the dev parameter, buffer overflow
CVE-2000-0455: Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option.
Key phrases: read sensitive data from memory via a long, buffer overflow
CVE-2000-0456: NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog".
Key phrases: cause a denial of service by repeatedly running, cpu-hog
CVE-2000-0457: ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability.
Key phrases: read file contents by requesting the file and, .htr file fragment reading
CVE-2000-0458: The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information.
Key phrases: read potentially sensitive information, world-readable files
CVE-2000-0459: IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request.
Key phrases: cause a denial of service by filling up
CVE-2000-0460: Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.
Key phrases: gain privileges, gain privileges via a long DISPLAY environmental variable, buffer overflow
CVE-2000-0461: The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call.
Key phrases: cause a denial of service of the semaphore
CVE-2000-0462: ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory.
Key phrases: access other files outside of their home directory
CVE-2000-0463: BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.
Key phrases: cause a denial of service via fragmented TCP, fragmented tcp packets
CVE-2000-0464: Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via a buffer overflow in, malformed component attribute
CVE-2000-0465: Internet Explorer 4.x and 5.x does not properly verify the domain of a  frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.
Key phrases: read client files via the frame, frame domain verification
CVE-2000-0466: AIX cdmount allows local users to gain root privileges via shell metacharacters.
Key phrases: gain root privileges, gain root privileges via shell metacharacters
CVE-2000-0467: Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
Key phrases: gain root privileges, gain root privileges via a long password in, buffer overflow
CVE-2000-0468: man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
Key phrases: overwrite files via a symlink attack
CVE-2000-0469: Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-2000-0470: Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
Key phrases: cause a denial of service via a malformed, malformed authentication request
CVE-2000-0471: Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
Key phrases: gain root privileges, gain root privileges via a long pathname, buffer overflow
CVE-2000-0472: Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
Key phrases: execute arbitrary commands, execute arbitrary commands via a cancel request containing, buffer overflow
CVE-2000-0473: Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0474: Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory.
Key phrases: cause a denial of service via a malformed, malformed request