CVE Database — Page 32

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-2000-0011 UNKNOWN — CVE-2000-0011: Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET reque
• CVE-2000-0012 UNKNOWN — CVE-2000-0012: Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
• CVE-2000-0013 UNKNOWN — CVE-2000-0013: IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which i
• CVE-2000-0014 UNKNOWN — CVE-2000-0014: Denial of service in Savant web server via a null character in the requested URL.
• CVE-2000-0015 UNKNOWN — CVE-2000-0015: CascadeView TFTP server allows local users to gain privileges via a symlink attack.
• CVE-2000-0016 UNKNOWN — CVE-2000-0016: Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute co
• CVE-2000-0017 UNKNOWN — CVE-2000-0017: Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
• CVE-2000-0018 UNKNOWN — CVE-2000-0018: wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
• CVE-2000-0019 UNKNOWN — CVE-2000-0019: IMail POP3 daemon uses weak encryption, which allows local users to read files.
• CVE-2000-0020 UNKNOWN — CVE-2000-0020: DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
• CVE-2000-0021 UNKNOWN — CVE-2000-0021: Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existen
• CVE-2000-0022 UNKNOWN — CVE-2000-0022: Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
• CVE-2000-0023 UNKNOWN — CVE-2000-0023: Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
• CVE-2000-0024 UNKNOWN — CVE-2000-0024: IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-pa
• CVE-2000-0025 UNKNOWN — CVE-2000-0025: IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directo
• CVE-2000-0026 UNKNOWN — CVE-2000-0026: Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password a
• CVE-2000-0027 UNKNOWN — CVE-2000-0027: IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
• CVE-2000-0028 UNKNOWN — CVE-2000-0028: Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the
• CVE-2000-0029 UNKNOWN — CVE-2000-0029: UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
• CVE-2000-0030 UNKNOWN — CVE-2000-0030: Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
• CVE-2000-0032 UNKNOWN — CVE-2000-0032: Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
• CVE-2000-0033 UNKNOWN — CVE-2000-0033: InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
• CVE-2000-0034 UNKNOWN — CVE-2000-0034: Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not e
• CVE-2000-0035 UNKNOWN — CVE-2000-0035: resend command in Majordomo allows local users to gain privileges via shell metacharacters.
• CVE-2000-0036 UNKNOWN — CVE-2000-0036: Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attach
• CVE-2000-0037 UNKNOWN — CVE-2000-0037: Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
• CVE-2000-0039 UNKNOWN — CVE-2000-0039: AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cg
• CVE-2000-0038 UNKNOWN — CVE-2000-0038: glFtpD includes a default glftpd user account with a default password and a UID of 0.
• CVE-2000-0040 UNKNOWN — CVE-2000-0040: glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
• CVE-2000-0041 UNKNOWN — CVE-2000-0041: Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifie
• CVE-2000-0042 UNKNOWN — CVE-2000-0042: Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long H
• CVE-2000-0043 UNKNOWN — CVE-2000-0043: Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
• CVE-2000-0044 UNKNOWN — CVE-2000-0044: Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
• CVE-2000-0046 UNKNOWN — CVE-2000-0046: Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ
• CVE-2000-0047 UNKNOWN — CVE-2000-0047: Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL with
• CVE-2000-0045 UNKNOWN — CVE-2000-0045: MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
• CVE-2000-0048 UNKNOWN — CVE-2000-0048: get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp p
• CVE-2000-0049 UNKNOWN — CVE-2000-0049: Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
• CVE-2000-0050 UNKNOWN — CVE-2000-0050: The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.
• CVE-2000-0051 UNKNOWN — CVE-2000-0051: The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting
• CVE-2000-0052 UNKNOWN — CVE-2000-0052: Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) att
• CVE-2000-0053 UNKNOWN — CVE-2000-0053: Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malfo
• CVE-2000-0054 UNKNOWN — CVE-2000-0054: search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attac
• CVE-2000-0055 UNKNOWN — CVE-2000-0055: Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.
• CVE-2000-0056 UNKNOWN — CVE-2000-0056: IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
• CVE-2000-0057 UNKNOWN — CVE-2000-0057: Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain s
• CVE-2000-0058 UNKNOWN — CVE-2000-0058: Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve emai
• CVE-2000-0059 UNKNOWN — CVE-2000-0059: PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, whic
• CVE-2000-0060 UNKNOWN — CVE-2000-0060: Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name
• CVE-2000-0061 UNKNOWN — CVE-2000-0061: Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the