yahoo-inc/cve-impacts huggingface dataset:
CVE-2000-0070: NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."
Key phrases: gain privileges, spoofed lpc port request
CVE-2000-0071: IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
Key phrases: obtain the real pathname of the document root
CVE-2000-0072: Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges.
Key phrases: gain privileges, use a relative pathname to specify an alternate
CVE-2000-0073: Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
Key phrases: cause a denial of service via a malformed, buffer overflow
CVE-2000-0074: PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.
Key phrases: execute commands via a password file with improper, improper permissions
CVE-2000-0075: Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session.
Key phrases: cause a denial of service by repeating multiple, memory leak
CVE-2000-0076: nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.
Key phrases: delete files via malformed entries in vi.recover
CVE-2000-0077: The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
Key phrases: gain privileges, gain privileges by specifying an alternate PATH which, alternate path
CVE-2000-0078: The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.
Key phrases: gain privileges, gain privileges by specifying an alternate PATH which, alternate path
CVE-2000-0079: The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.
Key phrases: determine the real pathnames of some commands via, nonexistent url
CVE-2000-0080: AIX techlibss allows local users to overwrite files via a symlink attack.
Key phrases: overwrite files via a symlink attack
CVE-2000-0081: Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. j&#x41;vascript.
Key phrases: execute the code by using hexadecimal codes to, execute code
CVE-2000-0082: WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
Key phrases: force the client to send email without the
CVE-2000-0083: HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges.
Key phrases: gain additional privileges, cause a denial of service or gain additional, insecure permissions
CVE-2000-0084: CuteFTP uses weak encryption to store password information in its tree.dat file.
Key phrases: weak encryption
CVE-2000-0085: Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
Key phrases: execute code via the LOWSRC or DYNRC parameters
CVE-2000-0086: Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.
Key phrases: obtain them via sniffing., cleartext
CVE-2000-0087: Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
Key phrases: sniff usernames and passwords in plaintext
CVE-2000-0088: Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.
Key phrases: execute commands, buffer overflow, malformed conversion data
CVE-2000-0089: The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.
Key phrases: read it, rdisk registry enumeration file
CVE-2000-0090: VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
Key phrases: cause a denial of service via a symlink
CVE-2000-0091: Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.
Key phrases: gain root privileges, gain root privileges via a long username or, buffer overflow
CVE-2000-0092: The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
Key phrases: modify files via a symlink attack when the
CVE-2000-0093: An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
CVE-2000-0094: procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
Key phrases: gain root privileges, gain root privileges by modifying the /proc/
CVE-2000-0095: The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
Key phrases: cause the system to be used as a, packet amplifier
CVE-2000-0096: Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
Key phrases: gain privileges, gain privileges via a long LIST command, buffer overflow
CVE-2000-0097: The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
Key phrases: read arbitrary files, malformed hit-highlighting argument
CVE-2000-0098: Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
Key phrases: determine the real path for a web directory
CVE-2000-0099: Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
Key phrases: gain privileges, gain privileges via a long prompt argument, buffer overflow
CVE-2000-0100: The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
Key phrases: gain privileges, gain privileges by modifying or replacing the program, insecure permissions
CVE-2000-0101: The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0102: The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0103: The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0104: The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0105: Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
Key phrases: view a user's email messages via a
CVE-2000-0106: The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0107: Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
Key phrases: modify arbitrary files, modify arbitrary files via a symlink attack
CVE-2000-0108: The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0109: The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
Key phrases: default passwords
CVE-2000-0110: The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0111: The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
Key phrases: hijack user sessions, predictable session numbers
CVE-2000-0112: The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.
Key phrases: boot from a floppy disk during the installation, insecure master boot record (mbr)
CVE-2000-0113: The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics.
Key phrases: cause a denial of service, administration service
CVE-2000-0114: Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
Key phrases: determine the name of the anonymous account via, frontpage server extensions
CVE-2000-0115: IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
Key phrases: cause a denial of service via invalid regular, invalid regular expressions
CVE-2000-0116: Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
Key phrases: bypass the "Strip Script Tags" restriction
CVE-2000-0117: The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
Key phrases: modify passwords for other users
CVE-2000-0118: The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
Key phrases: conduct brute force password guessing, failed password guesses
CVE-2000-0119: The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.
Key phrases: store malicious code without detection
CVE-2000-0120: The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
Key phrases: bypass authentication, bypass authentication via the bAuthenticated parameter
CVE-2000-0121: The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
Key phrases: read or modify files by creating a subdirectory, recycle bin creation
CVE-2000-0122: Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
Key phrases: determine the physical path of a virtual directory, frontpage server extensions
CVE-2000-0123: The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0124: surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
Key phrases: bypass web access restrictions
CVE-2000-0125: wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
Key phrases: gain privileges, gain privileges for wwwthreads forums
CVE-2000-0126: Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
Key phrases: read files via a .. (dot dot, internet data query (idq) scripts, dot dot attack
CVE-2000-0127: The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
Key phrases: gain privileges, gain privileges via wsisa.dll
CVE-2000-0128: The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
Key phrases: execute commands via shell metacharacters
CVE-2000-0129: Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
Key phrases: cause a denial of service by performing a, buffer overflow
CVE-2000-0130: Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
Key phrases: execute commands, buffer overflow
CVE-2000-0131: Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
Key phrases: cause a denial of service via long MKD, buffer overflow
CVE-2000-0132: Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
Key phrases: read files via the getSystemResourceAsStream function
CVE-2000-0133: Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
Key phrases: execute commands via the STOR, buffer overflows
CVE-2000-0134: The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0135: The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0136: The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0137: The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0138: A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
Key phrases: denial of service (DDOS)
CVE-2000-0139: Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
Key phrases: cause a denial of service via a malformed, malformed retr command
CVE-2000-0140: Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
Key phrases: cause a denial of service via a large
CVE-2000-0141: Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
Key phrases: execute commands via shell metacharacters in the topic, topic hidden field
CVE-2000-0142: The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
Key phrases: cause a denial of service via connections to
CVE-2000-0143: The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Key phrases: redirect a TCP connection through a service that, shell access
CVE-2000-0144: Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
Key phrases: bypass the password protection, bypass the password protection via a .. (, administrator urls, dot dot attack
CVE-2000-0145: The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
Key phrases: world-writable permissions
CVE-2000-0146: The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
Key phrases: cause a denial of service via a long, long url
CVE-2000-0147: snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
Key phrases: modify the host's configuration, snmp community string
CVE-2000-0148: MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
Key phrases: bypass password authentication, bypass password authentication and access a database via, short check string
CVE-2000-0149: Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
Key phrases: view the source code for CGI programs via, null character
CVE-2000-0150: Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Key phrases: bypass port access restrictions, bypass port access restrictions on an FTP server, malicious packets
CVE-2000-0151: GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
Key phrases: execute commands
CVE-2000-0152: Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
Key phrases: denial of service
CVE-2000-0153: FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
Key phrases: read files via a .... (dot dot, dot dot attack
CVE-2000-0154: The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
Key phrases: modify arbitrary files, modify arbitrary files via a symlink attack, arcserve agent
CVE-2000-0155: Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
Key phrases: specify an alternate program to execute when other
CVE-2000-0156: Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
Key phrases: access files on the client that are outside, image source redirect
CVE-2000-0157: NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
Key phrases: gain privileges, gain privileges by modifying the PSL contents in
CVE-2000-0158: Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
Key phrases: gain privileges, gain privileges via a long MAIL FROM command, buffer overflow
CVE-2000-0159: HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
Key phrases: gain privileges
CVE-2000-0160: The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
Key phrases: install software components without prompting the user by
CVE-2000-0161: Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
Key phrases: execute SQL commands
CVE-2000-0162: The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
Key phrases: read files via a malicious Java applet that, vm file reading
CVE-2000-0163: asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
Key phrases: gain root privileges, gain root privileges via a configuration file, asmon, ascpu
CVE-2000-0164: The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
Key phrases: obtain passwords, world-readable file
CVE-2000-0165: The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
Key phrases: execute commands, buffer overflows
CVE-2000-0166: Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
Key phrases: execute commands via a long login name, buffer overflow
CVE-2000-0167: IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
Key phrases: cause a denial of service by creating a
CVE-2000-0168: Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
Key phrases: cause a denial of service via a pathname, dos device in path name
CVE-2000-0169: Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Key phrases: execute commands via a malformed URL that includes, batch files, malformed url
CVE-2000-0170: Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
Key phrases: gain privileges, gain privileges via the MANPAGER environmental variable, buffer overflow
CVE-2000-0171: atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
Key phrases: gain root privileges
CVE-2000-0172: The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
Key phrases: gain root privileges
CVE-2000-0173: Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service
CVE-2000-0174: StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-2000-0175: Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
Key phrases: gain root access, gain root access via a long GET command, buffer overflow
CVE-2000-0176: The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
Key phrases: determine the real pathname of the server by
CVE-2000-0177: DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-2000-0178: ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
Key phrases: spoof or hijack sessions, predictable tcp ip sequence numbers, spoofing
CVE-2000-0179: HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
Key phrases: cause a denial of service via a large
CVE-2000-0180: Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-2000-0181: Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
Key phrases: determine the real IP address of the host, leaks packets
CVE-2000-0182: iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
Key phrases: cause a denial of service via a large, get commands, kernel panic
CVE-2000-0183: Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
Key phrases: execute commands via the DCC chat capability, buffer overflow
CVE-2000-0184: Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
Key phrases: obtain printer share passwords, world-readable
CVE-2000-0185: RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
CVE-2000-0186: Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
Key phrases: gain privileges, gain privileges via a long command line argument, buffer overflow
CVE-2000-0187: EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, shell metacharacters, dot dot attack, execute commands
CVE-2000-0188: EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, shell metacharacters, dot dot attack, execute commands
CVE-2000-0189: ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
Key phrases: determine the real pathname of the server via
CVE-2000-0190: AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
Key phrases: cause a denial of service via a message, malformed ascii value
CVE-2000-0191: Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
Key phrases: access administrator URLs without authentication via a .., axis storpoint cd, administrator urls, dot dot attack
CVE-2000-0192: The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.
Key phrases: determine what packages are installed on the system, cgi program rpm_query
CVE-2000-0193: The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
Key phrases: gain privileges, execute the system.com program and gain privileges
CVE-2000-0194: buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
Key phrases: create arbitrary files, modify or create arbitrary files via the -x
CVE-2000-0195: setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
Key phrases: gain root access, gain root access via the -T parameter
CVE-2000-0196: Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
Key phrases: execute commands via malformed MIME headers in an, buffer overflow
CVE-2000-0197: The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
Key phrases: gain privileges, gain privileges by providing a Trojan horse batch, drive mapping
CVE-2000-0198: Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, buffer overflow
CVE-2000-0199: When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
Key phrases: weak encryption
CVE-2000-0200: Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.
Key phrases: cause a denial of service or execute commands, buffer overflow, clip art buffer overrun
CVE-2000-0201: The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
Key phrases: execute arbitrary commands, execute arbitrary commands via Microsoft Networking
CVE-2000-0202: Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.
Key phrases: gain privileges, gain privileges via a malformed Select statement in, malformed select statement
CVE-2000-0203: The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
Key phrases: cause a denial of service via malformed data
CVE-2000-0204: The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.
Key phrases: cause a denial of service by making 5, cpu utilization
CVE-2000-0205: Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
Key phrases: replay administrative commands and modify the configuration of
CVE-2000-0206: The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
Key phrases: gain privileges, world-writeable permissions
CVE-2000-0207: SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
Key phrases: execute commands via shell metacharacters
CVE-2000-0208: The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
Key phrases: read arbitrary files, read arbitrary files by enclosing the file name
CVE-2000-0209: Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
Key phrases: crash Lynx and possibly execute commands via a, buffer overflow, crash lynx
CVE-2000-0210: The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
Key phrases: modify arbitrary files, symlinks
CVE-2000-0211: The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
Key phrases: cause a denial of service via a series, misordered windows media services handshake
CVE-2000-0212: InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
Key phrases: conduct a denial of service via malformed terminal, malformed terminal client configuration information
CVE-2000-0213: The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
Key phrases: execute commands via shell metacharacters
CVE-2000-0214: FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
Key phrases: weak encryption
CVE-2000-0215: Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
Key phrases: gain privileges
CVE-2000-0216: Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
Key phrases: flood a mail system with responses by forging, distribution list
CVE-2000-0217: The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
Key phrases: control a client's X sessions via a, x forwarding
CVE-2000-0218: Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
Key phrases: gain root privileges, gain root privileges via a long relative pathname, buffer overflow
CVE-2000-0219: Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
Key phrases: gain root access, gain root access by booting single user and
CVE-2000-0220: ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
Key phrases: cleartext
CVE-2000-0221: The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
Key phrases: cause a denial of service via a zero, zero length udp packet
CVE-2000-0222: The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
Key phrases: connect to the ADMIN$ share without a password, reboot
CVE-2000-0223: Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.
Key phrases: gain root privileges, gain root privileges via a long parameter, buffer overflow
CVE-2000-0224: ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
Key phrases: gain root privileges, gain root privileges via a symlink attack
CVE-2000-0225: The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.
Key phrases: server port
CVE-2000-0226: IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
Key phrases: cause a denial of service by requesting a, chunked transfer encoding buffer overflow
CVE-2000-0227: The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets.
Key phrases: cause a denial of service by requesting a
CVE-2000-0228: Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability.
Key phrases: cause a denial of service by sending a, malformed request, malformed media license request
CVE-2000-0229: gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
Key phrases: gain privileges, gain privileges by starting a utility from gpm
CVE-2000-0230: Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
Key phrases: gain root privileges, gain root privileges via the imwheel-solo, buffer overflow
CVE-2000-0231: Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.
Key phrases: gain root privileges, user-supplied path
CVE-2000-0232: Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.
Key phrases: cause a denial of service via a malformed, malformed tcp ip print request
CVE-2000-0233: SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.
Key phrases: bypass IMAP authentication, gain privileges, bypass IMAP authentication and gain privileges
CVE-2000-0234: The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
Key phrases: view sensitive contents of a .htaccess file
CVE-2000-0235: Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2000-0236: Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
Key phrases: list server directories via web publishing tags such, directory indexing
CVE-2000-0237: Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.
Key phrases: list arbitrary directories, list arbitrary directories via a GET request for, browse the directories
CVE-2000-0238: Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0239: Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0240: vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a /........../, dot dot attack
CVE-2000-0241: vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges.
Key phrases: gain privileges, cleartext, sensitive information
CVE-2000-0242: WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.
Key phrases: read arbitrary files, read arbitrary files or execute commands via shell, windmail, shell metacharacters
CVE-2000-0243: AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
Key phrases: cause a denial of service via a short
CVE-2000-0244: The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.
Key phrases: weak encryption
CVE-2000-0245: Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
Key phrases: create user accounts
CVE-2000-0246: IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
Key phrases: read the source code of ASP and other, virtualized unc share
CVE-2000-0247: Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges.
Key phrases: gain root privileges, unknown
CVE-2000-0248: The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, backdoor password
CVE-2000-0249: The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program.
Key phrases: modify arbitrary files, modify arbitrary files via the configuration capability in
CVE-2000-0250: The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
Key phrases: decrypt passwords, weak encryption
CVE-2000-0251: HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
Key phrases: unprivileged processes, aliased ip addresses
CVE-2000-0252: The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
Key phrases: execute commands via a shell metacharacters in a, form variable
CVE-2000-0253: The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
Key phrases: modify sensitive purchase information via hidden form fields
CVE-2000-0254: The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables.
Key phrases: obtain the shopping cart database, obtain the shopping cart database and configuration information
CVE-2000-0255: The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.
Key phrases: cause a denial of service via a scan, formmail cgi program
CVE-2000-0256: Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability.
Key phrases: conduct activities that are not otherwise available through, buffer overflows, server-side image map components
CVE-2000-0257: Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
Key phrases: cause a denial of service or execute commands, buffer overflow
CVE-2000-0258: IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.
Key phrases: cause a denial of service by sending many, myriad escaped characters
CVE-2000-0259: The default permissions for the Cryptography\\\\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
Key phrases: obtain compromise the cryptographic keys of other users
CVE-2000-0260: Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability.
Key phrases: cause a denial of service or execute commands, buffer overflow, link view server-side component
CVE-2000-0261: The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-2000-0262: The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
Key phrases: cause a denial of service via a malformed, malformed request
CVE-2000-0263: The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
Key phrases: cause a denial of service via a malformed, malformed request
CVE-2000-0264: Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods.
Key phrases: gain privileges, edit the registry and gain privileges by directly, registry editing
CVE-2000-0265: Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
Key phrases: uninstall the Panda software via its Add/
CVE-2000-0266: Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
Key phrases: bypass the cross frame security policy, bypass the cross frame security policy via a, malicious applet
CVE-2000-0267: Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
Key phrases: gain access, gain access to the "enable" mode
CVE-2000-0268: Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot.
Key phrases: cause a denial of service by sending the, environ option, reboot
CVE-2000-0269: Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
Key phrases: read or modify communications between Emacs and the
CVE-2000-0270: The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.
Key phrases: conduct a symlink attack, predictable names
CVE-2000-0271: read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
Key phrases: read unencrypted passwords
CVE-2000-0272: RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
Key phrases: cause a denial of service by sending malformed, malformed input
CVE-2000-0273: PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
Key phrases: cause a denial of service by terminating the
CVE-2000-0274: The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
Key phrases: cause a denial of service by accessing a
CVE-2000-0275: CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
Key phrases: the .PDB file to generate valid PT-1 tokens, weak encryption
CVE-2000-0276: BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.
Key phrases: cause a denial of service via malformed direct, malformed direct system calls