7988 matches found
CVE-2000-0009
The bnapass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands...
CVE-2000-0100
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program...
CVE-2000-0039
AltaVista search engine allows remote attackers to read files above the document root via a .. dot dot in the query.cgi CGI program...
CVE-2000-0014
Denial of service in Savant web server via a null character in the requested URL...
CVE-2000-0037
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file...
CVE-2000-0029
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack...
CVE-2000-0027
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...
CVE-2000-0033
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...
AZL-35286 CVE-2000-0006 affecting package strace 6.8-1
strace allows local users to read arbitrary files via memory mapped file names...
CVE-2000-0001
RealMedia server allows remote attackers to cause a denial of service via a long ramgen request...
CVE-2000-0030
Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...
CVE-2000-0025
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability...
norton.2000.txt
This was going to be w00giving 11 w00giving 10 will be posted within the next few days. Anyway, this allows EIP to be overwritten with 265+ bytes, which person who posted this vulnerability failed to mention or failed to notice. It's unclear if he labeled it as a DoS because he didn't realize it...
CVE-2000-0361
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...
CVE-2000-0139
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command...
CVE-2000-0358
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program...
CVE-2000-0004
ZBServer Pro allows remote attackers to read source code for executable files by inserting a . dot into the URL...
CVE-2000-0021
Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin...