CVE Database — Page 34

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-2000-0111 UNKNOWN — CVE-2000-0111: The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
• CVE-2000-0114 UNKNOWN — CVE-2000-0114: Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST reque
• CVE-2000-0115 UNKNOWN — CVE-2000-0115: IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP p
• CVE-2000-0116 UNKNOWN — CVE-2000-0116: Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restric
• CVE-2000-0113 UNKNOWN — CVE-2000-0113: The SyGate Remote Management program does not properly restrict access to its administration service, which allows remot
• CVE-2000-0117 UNKNOWN — CVE-2000-0117: The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, si
• CVE-2000-0118 UNKNOWN — CVE-2000-0118: The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which
• CVE-2000-0119 UNKNOWN — CVE-2000-0119: The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED
• CVE-2000-0120 UNKNOWN — CVE-2000-0120: The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuth
• CVE-2000-0121 UNKNOWN — CVE-2000-0121: The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirec
• CVE-2000-0122 UNKNOWN — CVE-2000-0122: Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET requ
• CVE-2000-0123 UNKNOWN — CVE-2000-0123: The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via h
• CVE-2000-0124 UNKNOWN — CVE-2000-0124: surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users
• CVE-2000-0125 UNKNOWN — CVE-2000-0125: wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote att
• CVE-2000-0126 UNKNOWN — CVE-2000-0126: Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
• CVE-2000-0127 UNKNOWN — CVE-2000-0127: The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attacke
• CVE-2000-0128 UNKNOWN — CVE-2000-0128: The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
• CVE-2000-0129 UNKNOWN — CVE-2000-0129: Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of servi
• CVE-2000-0130 UNKNOWN — CVE-2000-0130: Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
• CVE-2000-0131 UNKNOWN — CVE-2000-0131: Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
• CVE-2000-0132 UNKNOWN — CVE-2000-0132: Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
• CVE-2000-0133 UNKNOWN — CVE-2000-0133: Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD,
• CVE-2000-0134 UNKNOWN — CVE-2000-0134: The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form
• CVE-2000-0135 UNKNOWN — CVE-2000-0135: The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form field
• CVE-2000-0136 UNKNOWN — CVE-2000-0136: The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields
• CVE-2000-0139 UNKNOWN — CVE-2000-0139: Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
• CVE-2000-0137 UNKNOWN — CVE-2000-0137: The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields
• CVE-2000-0138 UNKNOWN — CVE-2000-0138: A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) T
• CVE-2000-0140 UNKNOWN — CVE-2000-0140: Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connection
• CVE-2000-0141 UNKNOWN — CVE-2000-0141: Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic
• CVE-2000-0142 UNKNOWN — CVE-2000-0142: The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections
• CVE-2000-0144 UNKNOWN — CVE-2000-0144: Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the passw
• CVE-2000-0145 UNKNOWN — CVE-2000-0145: The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
• CVE-2000-0146 UNKNOWN — CVE-2000-0146: The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service
• CVE-2000-0143 UNKNOWN — CVE-2000-0143: The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that
• CVE-2000-0147 UNKNOWN — CVE-2000-0147: snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify
• CVE-2000-0148 UNKNOWN — CVE-2000-0148: MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
• CVE-2000-0149 UNKNOWN — CVE-2000-0149: Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end o
• CVE-2000-0151 UNKNOWN — CVE-2000-0151: GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
• CVE-2000-0152 UNKNOWN — CVE-2000-0152: Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connect
• CVE-2000-0153 UNKNOWN — CVE-2000-0153: FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
• CVE-2000-0154 UNKNOWN — CVE-2000-0154: The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
• CVE-2000-0155 UNKNOWN — CVE-2000-0155: Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alte
• CVE-2000-0150 UNKNOWN — CVE-2000-0150: Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send
• CVE-2000-0157 UNKNOWN — CVE-2000-0157: NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
• CVE-2000-0158 UNKNOWN — CVE-2000-0158: Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemo
• CVE-2000-0156 UNKNOWN — CVE-2000-0156: Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security d
• CVE-2000-0159 UNKNOWN — CVE-2000-0159: HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to
• CVE-2000-0160 UNKNOWN — CVE-2000-0160: The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install softwa
• CVE-2000-0161 UNKNOWN — CVE-2000-0161: Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows re