CVE Database — Page 39

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-2000-0383 UNKNOWN — CVE-2000-0383: The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remo
• CVE-2000-0384 UNKNOWN — CVE-2000-0384: NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable f
• CVE-2000-0385 UNKNOWN — CVE-2000-0385: FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML p
• CVE-2000-0386 UNKNOWN — CVE-2000-0386: FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
• CVE-2000-0387 UNKNOWN — CVE-2000-0387: The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary file
• CVE-2000-0388 UNKNOWN — CVE-2000-0388: Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental va
• CVE-2000-0389 UNKNOWN — CVE-2000-0389: Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
• CVE-2000-0390 UNKNOWN — CVE-2000-0390: Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
• CVE-2000-0392 UNKNOWN — CVE-2000-0392: Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
• CVE-2000-0393 UNKNOWN — CVE-2000-0393: The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variabl
• CVE-2000-0394 UNKNOWN — CVE-2000-0394: NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProw
• CVE-2000-0391 UNKNOWN — CVE-2000-0391: Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
• CVE-2000-0395 UNKNOWN — CVE-2000-0395: Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
• CVE-2000-0396 UNKNOWN — CVE-2000-0396: The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, whic
• CVE-2000-0397 UNKNOWN — CVE-2000-0397: The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote a
• CVE-2000-0398 UNKNOWN — CVE-2000-0398: Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary comm
• CVE-2000-0400 UNKNOWN — CVE-2000-0400: The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded,
• CVE-2000-0399 UNKNOWN — CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
• CVE-2000-0403 UNKNOWN — CVE-2000-0403: The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a l
• CVE-2000-0401 UNKNOWN — CVE-2000-0401: Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary c
• CVE-2000-0404 UNKNOWN — CVE-2000-0404: The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame t
• CVE-2000-0405 UNKNOWN — CVE-2000-0405: Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response pa
• CVE-2000-0406 UNKNOWN — CVE-2000-0406: Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows rem
• CVE-2000-0407 UNKNOWN — CVE-2000-0407: Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
• CVE-2000-0408 UNKNOWN — CVE-2000-0408: IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a l
• CVE-2000-0409 UNKNOWN — CVE-2000-0409: Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite file
• CVE-2000-0410 UNKNOWN — CVE-2000-0410: ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE ta
• CVE-2000-0411 UNKNOWN — CVE-2000-0411: Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter
• CVE-2000-0412 UNKNOWN — CVE-2000-0412: The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote att
• CVE-2000-0413 UNKNOWN — CVE-2000-0413: The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the ph
• CVE-2000-0414 UNKNOWN — CVE-2000-0414: Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed inp
• CVE-2000-0415 UNKNOWN — CVE-2000-0415: Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has
• CVE-2000-0416 UNKNOWN — CVE-2000-0416: NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web co
• CVE-2000-0417 UNKNOWN — CVE-2000-0417: The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service v
• CVE-2000-0418 UNKNOWN — CVE-2000-0418: The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) request
• CVE-2000-0419 UNKNOWN — CVE-2000-0419: The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthori
• CVE-2000-0421 UNKNOWN — CVE-2000-0421: The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
• CVE-2000-0420 UNKNOWN — CVE-2000-0420: The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacke
• CVE-2000-0422 UNKNOWN — CVE-2000-0422: Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken p
• CVE-2000-0423 UNKNOWN — CVE-2000-0423: Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters
• CVE-2000-0424 UNKNOWN — CVE-2000-0424: The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.
• CVE-2000-0425 UNKNOWN — CVE-2000-0425: Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary comman
• CVE-2000-0426 UNKNOWN — CVE-2000-0426: UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the S
• CVE-2000-0427 UNKNOWN — CVE-2000-0427: The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive info
• CVE-2000-0428 UNKNOWN — CVE-2000-0428: Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitr
• CVE-2000-0429 UNKNOWN — CVE-2000-0429: A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
• CVE-2000-0430 UNKNOWN — CVE-2000-0430: Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
• CVE-2000-0431 UNKNOWN — CVE-2000-0431: Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPag
• CVE-2000-0432 UNKNOWN — CVE-2000-0432: The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary com
• CVE-2000-0433 UNKNOWN — CVE-2000-0433: The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to g