yahoo-inc/cve-impacts huggingface dataset:
CVE-2000-0663: The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands by inserting a Trojan Horse, relative shell path
CVE-2000-0664: AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.
Key phrases: read arbitrary files, read arbitrary files via a modified .. (, modified .. (dot dot), dot dot attack
CVE-2000-0665: GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
Key phrases: cause a denial of service via a long, long username
CVE-2000-0666: rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
Key phrases: gain root privileges, untrusted format strings
CVE-2000-0667: Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service.
Key phrases: delete arbitrary files, delete arbitrary files or conduct a denial of, denial of service
CVE-2000-0668: pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.
Key phrases: access the system console and reboot the system
CVE-2000-0669: Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
Key phrases: cause a denial of service by flooding port
CVE-2000-0670: The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, a CVS repository to execute arbitrary commands via, shell metacharacters
CVE-2000-0671: Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL.
Key phrases: bypass access restrictions, null character
CVE-2000-0672: The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.
Key phrases: read arbitrary files, read arbitrary files by directly calling the administrative, admin context
CVE-2000-0673: The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability.
Key phrases: cause a denial of service by sending a, name release datagram, netbios name server protocol spoofing
CVE-2000-0674: ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack.
Key phrases: read directories outside of the document root via, .. (dot dot), dot dot attack
CVE-2000-0675: Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long string, buffer overflow
CVE-2000-0676: Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
Key phrases: read arbitrary files, read arbitrary files by using a Java applet
CVE-2000-0677: Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long PATH_INFO environmental, buffer overflow
CVE-2000-0678: PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate.
Key phrases: decrypt any data that has been encrypted with
CVE-2000-0679: The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
Key phrases: create arbitrary files, force the client to create arbitrary files, pathnames
CVE-2000-0680: The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action.
Key phrases: creating arbitrary Checkin.prog or Update.prog, modify or create Trojan horse programs with the
CVE-2000-0681: Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long URL with, buffer overflow
CVE-2000-0682: BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet.
Key phrases: read source code for parsed pages by inserting
CVE-2000-0683: BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.
Key phrases: read source code for parsed pages by inserting
CVE-2000-0684: BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
Key phrases: compile and execute Java JSP code by directly
CVE-2000-0685: BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
Key phrases: compile and execute Java JHTML code by directly
CVE-2000-0686: Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, fromfile parameter, dot dot attack
CVE-2000-0687: Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, catdir parameter, dot dot attack
CVE-2000-0688: Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.
Key phrases: gain privileges, gain privileges for the Account Manager by directly
CVE-2000-0689: Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.
Key phrases: gain privileges, gain privileges for the Account Manager by directly
CVE-2000-0690: Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2000-0691: The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.
Key phrases: modify arbitrary files, create or modify arbitrary files via a symlink
CVE-2000-0692: ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.
Key phrases: cause a denial of service via a flood, syn flag set
CVE-2000-0693: pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program.
Key phrases: execute arbitrary commands, execute arbitrary commands by modifying their path to
CVE-2000-0694: pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
Key phrases: gain privileges, gain privileges via a symlink attack
CVE-2000-0695: Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.
Key phrases: gain privileges, gain privileges via command line options, buffer overflows
CVE-2000-0696: The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
Key phrases: add user accounts to the interface by directly
CVE-2000-0697: The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
Key phrases: remotely execute commands via shell metacharacters
CVE-2000-0698: Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.
Key phrases: create arbitrary files, create arbitrary files owned by the uucp user, symlink
CVE-2000-0699: Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, format string
CVE-2000-0700: Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets.
Key phrases: bypass ACLs or force the interface to stop forwarding packets, line card failures
CVE-2000-0701: The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.
Key phrases: gain privileges, untrusted format strings
CVE-2000-0702: The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack that
CVE-2000-0703: suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence.
Key phrases: gain privileges, gain privileges by setting the "interactive"
CVE-2000-0704: Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands.
Key phrases: execute arbitrary commands, execute arbitrary commands via long JS_OPEN, buffer overflow
CVE-2000-0705: ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-2000-0706: Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflows
CVE-2000-0707: PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password.
Key phrases: obtain sensitive information, obtain sensitive information such as the administrative password
CVE-2000-0708: Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0709: The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
Key phrases: cause a denial of service in some components, dos device name
CVE-2000-0710: The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
Key phrases: determine the physical path of the server components, invalid url
CVE-2000-0711: Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
Key phrases: create a server on the victim's system, serversocket object
CVE-2000-0712: Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option.
Key phrases: gain root privileges, gain root privileges when LIDS is disabled via
CVE-2000-0713: Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long /Registry or, buffer overflow
CVE-2000-0714: umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.
Key phrases: world-writeable files
CVE-2000-0715: DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file.
Key phrases: overwrite arbitrary files, create or overwrite arbitrary files via a symlink
CVE-2000-0716: WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
Key phrases: hijack the session ID and read the user
CVE-2000-0717: GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.
Key phrases: cause a denial of service via a large, rnto commands
CVE-2000-0718: A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
Key phrases: modify RPM files while they are in the, race condition
CVE-2000-0719: VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.
Key phrases: replace the VariCAD programs with a Trojan horse, world-writeable files
CVE-2000-0720: news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
Key phrases: add new authors by directly posting an HTTP
CVE-2000-0721: The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses.
Key phrases: replace them with Trojan horses, world-writeable
CVE-2000-0722: Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.
Key phrases: install arbitrary RPM packages, install arbitrary RPM packages by creating the /tmp
CVE-2000-0723: Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config.
Key phrases: create empty system configuration files such as /etc
CVE-2000-0724: The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2000-0725: Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
Key phrases: add or modify roles by modifying the roles
CVE-2000-0726: CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable.
Key phrases: read arbitrary files, read arbitrary files by specifying the file in, $attach$ hidden form variable
CVE-2000-0727: xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via a URL that contains, shell metacharacters
CVE-2000-0728: xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2000-0729: FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.
Key phrases: cause a denial of service by executing a, malformed elf image header
CVE-2000-0730: Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
Key phrases: gain privileges
CVE-2000-0731: Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-2000-0732: Worm HTTP server allows remote attackers to cause a denial of service via a long URL.
Key phrases: cause a denial of service via a long, worm http server, long url
CVE-2000-0733: Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long RLD variable, user-injected format strings
CVE-2000-0734: eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.
Key phrases: cause a denial of service via a large, udp connections
CVE-2000-0735: Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0736: Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0737: The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability.
Key phrases: gain administrator privileges, service control manager named pipe impersonation
CVE-2000-0738: WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail.
Key phrases: cause a denial of service by sending e
CVE-2000-0739: Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2000-0740: Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long URL in, buffer overflow
CVE-2000-0741: Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.
Key phrases: execute arbitrary code, execute arbitrary code via format strings in a
CVE-2000-0742: The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability.
Key phrases: cause a denial of service by sending a, malformed ipx ping packet
CVE-2000-0743: Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value.
Key phrases: execute arbitrary commands, execute arbitrary commands via a DES key generation, buffer overflow
CVE-2000-0745: admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter.
Key phrases: gain privileges, gain privileges by requesting a URL that does
CVE-2000-0746: Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks.  They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.
Key phrases: embed scripts in a link to a trusted, iis cross-site scripting
CVE-2000-0747: The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it.
Key phrases: improper signal, kills
CVE-2000-0748: OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
Key phrases: replace the binary with a Trojan horse, group write permissions
CVE-2000-0749: Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system.
Key phrases: gain root privileges, gain root privileges via long filenames in the, buffer overflow
CVE-2000-0750: Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long file name, buffer overflow
CVE-2000-0751: mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, user-injected format strings
CVE-2000-0752: Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.
Key phrases: gain root privileges, gain root privileges via long command line arguments, buffer overflows
CVE-2000-0753: The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (RTF) files.
CVE-2000-0754: Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.
CVE-2000-0755: Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.
Key phrases: gain privileges
CVE-2000-0756: Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.
Key phrases: cause a denial of service, malformed fields
CVE-2000-0757: The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed.
Key phrases: gain root privileges, gain root privileges by connecting to the service, authentication
CVE-2000-0758: The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form field.
Key phrases: obtain administrative access, obtain administrative access by modifying the value of
CVE-2000-0759: Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
Key phrases: physical path information
CVE-2000-0760: The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
CVE-2000-0761: OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.
Key phrases: cause a denial of service via a long, long username
CVE-2000-0762: The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges.
Key phrases: gain privileges, spoof the eTrust administrator and gain privileges, default encryption key, spoofing
CVE-2000-0763: xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
Key phrases: gain root privileges, gain root privileges via the -d option, user-injected format strings
CVE-2000-0764: Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.
Key phrases: cause a denial of service via a malformed, malformed ip packet
CVE-2000-0765: Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long embedded object, buffer overflow
CVE-2000-0766: Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request.
Key phrases: gain privileges, cause a denial of service or possibly gain, buffer overflow
CVE-2000-0767: The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka the "Scriptlet Rendering" vulnerability.
Key phrases: renders arbitrary file types, read arbitrary files, scriptlet rendering
CVE-2000-0768: A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.
Key phrases: read client files, frame domain verification
CVE-2000-0769: O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe.
Key phrases: execute arbitrary files, create and execute arbitrary files by directly calling, execute permissions
CVE-2000-0770: IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.
Key phrases: bypass access restrictions, bypass access restrictions to some files, file permission canonicalization
CVE-2000-0771: Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability.
Key phrases: cause a denial of service by corrupting the, malformed rpc traffic, local security policy corruption
CVE-2000-0772: The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.
Key phrases: no password
CVE-2000-0773: Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.
Key phrases: read arbitrary files, read arbitrary files via a URL that contains, dot dot directory traversal
CVE-2000-0774: The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
CVE-2000-0775: Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, buffer overflow
CVE-2000-0776: Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long HTTP GET, long http get request
CVE-2000-0777: The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability.
Key phrases: obtain the password, the system to obtain the password, money password
CVE-2000-0778: IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.
Key phrases: obtain source code for .ASP files and other scripts, specialized header
CVE-2000-0779: Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests.
Key phrases: bypass access restrictions, bypass access restrictions and connect to a RSH, malformed connection requests
CVE-2000-0780: The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack.
Key phrases: delete arbitrary files, read and delete arbitrary files via a .., .. (dot dot), dot dot attack
CVE-2000-0781: uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved.
Key phrases: execute arbitrary commands, execute arbitrary commands by modifying the temporary file
CVE-2000-0782: netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-2000-0783: Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100.
Key phrases: cause a denial of service by sending a, malformed url
CVE-2000-0784: sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.
Key phrases: execute arbitrary commands, execute arbitrary commands via ssh, null password
CVE-2000-0785: WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) to the specified file.
Key phrases: read arbitrary files, read arbitrary files via the importmotd command
CVE-2000-0786: GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions.
Key phrases: bypass some access restrictions, file descriptor swapping
CVE-2000-0787: IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
Key phrases: execute arbitrary commands, execute arbitrary commands by encoding shell metacharacters into
CVE-2000-0788: The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-2000-0789: WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges.
Key phrases: gain privileges, decrypt the password and gain privileges, weak encryption, decrypt password
CVE-2000-0790: The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file that is listed in the folder.
Key phrases: insert Trojan horse programs by modifying the Folder.htt, default execute option
CVE-2000-0791: Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.
Key phrases: replace it with a Trojan horse, world-writeable permissions
CVE-2000-0792: Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available.
CVE-2000-0793: Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system.
CVE-2000-0794: Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview.
Key phrases: gain root privileges, gain root privileges via a long HOME variable, buffer overflow
CVE-2000-0795: Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.
Key phrases: gain root privileges, gain root privileges via a long -n option, buffer overflow
CVE-2000-0796: Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.
Key phrases: gain root privileges, gain root privileges via a long command line, buffer overflow
CVE-2000-0797: Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.
Key phrases: gain privileges, gain privileges via a long -D option, buffer overflow
CVE-2000-0798: The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files.
Key phrases: delete the contents of arbitrary files
CVE-2000-0799: inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.
Key phrases: gain privileges, gain privileges via a symlink attack on the
CVE-2000-0800: String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges.
Key phrases: gain root privileges, string parsing error
CVE-2000-0801: Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.
Key phrases: gain root privileges, gain root privileges via a long -t option, buffer overflow
CVE-2000-0802: The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR.
Key phrases: obtain access, obtain access to the menu by modifying the
CVE-2000-0803: GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.
Key phrases: gain additional privileges, gain additional privileges by including a malicious postpro, malicious postpro directive
CVE-2000-0804: Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."
Key phrases: bypass the directionality check, way Connection Enforcement Bypass, bypass the directionality check via fragmented TCP connection, reopening closed tcp connection requests, one-way connection enforcement bypass
CVE-2000-0805: Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."
Key phrases: retransmission of encapsulated packets
CVE-2000-0806: The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."
Key phrases: module Communications Bypass, conduct a denial of service, inter-module communications bypass
CVE-2000-0807: The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."
Key phrases: spoof connections, opsec authentication, spoofing
CVE-2000-0808: The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication."
Key phrases: bypass authentication, bypass authentication via a brute force attack
CVE-2000-0809: Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, buffer overflow
CVE-2000-0810: Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.
Key phrases: delete arbitrary files, delete arbitrary files and directories via a .., .. (dot dot), dot dot attack
CVE-2000-0811: Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-2000-0812: The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.
Key phrases: execute arbitrary commands, execute arbitrary commands by uploading Java code to
CVE-2000-0813: Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection Enforcement Bypass."
Key phrases: FTP Connection Enforcement Bypass, redirect FTP connections to other servers (", ftp bounce, ftp connection enforcement bypass
CVE-2000-0816: Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands by creating files whose names, shell metacharacters
CVE-2000-0817: Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.
Key phrases: execute arbitrary commands, execute arbitrary commands via malformed data, buffer overflow, netmon protocol parsing
CVE-2000-0818: The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands.
Key phrases: cause logging information to be appended to arbitrary, arbitrary files, execute commands
CVE-2000-0824: The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.
Key phrases: execute arbitrary commands, execute arbitrary commands in setuid programs by specifying
CVE-2000-0825: Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash.
Key phrases: cause a denial of service via a large, crash
CVE-2000-0826: Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long GET request, buffer overflow
CVE-2000-0827: Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username.
Key phrases: execute arbitrary commands, cause a denial of service or execute arbitrary, buffer overflow
CVE-2000-0828: Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long User-, buffer overflow
CVE-2000-0829: The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/.
Key phrases: cause a denial of service by creating deeply
CVE-2000-0830: annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 through 22705.
Key phrases: cause a denial of service by via a
CVE-2000-0831: Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-2000-0832: Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.
Key phrases: read arbitrary files, read arbitrary files by specifying the full pathname
CVE-2000-0833: Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0834: The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability.
Key phrases: capture and replay the NTLM challenge/response, windows telnet client ntlm authentication
CVE-2000-0835: search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.
Key phrases: read arbitrary directories, read arbitrary directories by specifying the directory in
CVE-2000-0836: Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long Authorization header, buffer overflow
CVE-2000-0837: FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.
Key phrases: cause a denial of service by sending a, null bytes
CVE-2000-0838: Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.
Key phrases: cause a denial of service via a long, long get request
CVE-2000-0839: WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515).
Key phrases: cause a denial of service via a large, lpd options
CVE-2000-0840: Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long USER command, buffer overflow
CVE-2000-0841: Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long APOP command, buffer overflow
CVE-2000-0842: The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, vtopic, .. (dot dot), dot dot attack
CVE-2000-0843: Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.
Key phrases: execute arbitrary commands, execute arbitrary commands via a login with a, buffer overflow
CVE-2000-0844: Some functions that implement the locale subsystem on Unix do not  properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Key phrases: execute arbitrary commands, execute arbitrary commands via functions such as gettext, user-injected format strings
CVE-2000-0845: kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.
Key phrases: read arbitrary files, read arbitrary files by specifying the full file
CVE-2000-0846: Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long username or, buffer overflow
CVE-2000-0847: Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long X-, buffer overflow