Browse CVE records published in 2000 CVE Archive, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 1236 matching CVEs · Page 8 of 25.
The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.
Published Jan 22, 2001 · Updated Aug 8, 2024
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
Published Jan 22, 2001 · Updated Aug 8, 2024
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
Published Jan 22, 2001 · Updated Aug 8, 2024
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
Published Jan 22, 2001 · Updated Aug 8, 2024
Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.
Published Dec 19, 2000 · Updated Aug 8, 2024
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
Published Jan 22, 2001 · Updated Aug 8, 2024
Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.
Published Jan 22, 2001 · Updated Aug 8, 2024
mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
Published Jan 22, 2001 · Updated Aug 8, 2024
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
Published Jan 22, 2001 · Updated Aug 8, 2024
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
Published Jan 22, 2001 · Updated Aug 8, 2024
Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.
Published Jan 22, 2001 · Updated Aug 8, 2024
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.
Published Jan 22, 2001 · Updated Aug 8, 2024
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
Published Jan 22, 2001 · Updated Aug 8, 2024
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
Published Oct 18, 2000 · Updated Aug 8, 2024
Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.
Published Jan 22, 2001 · Updated Aug 8, 2024
Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.
Published Jan 22, 2001 · Updated Aug 8, 2024
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash.
Published Oct 18, 2000 · Updated Aug 8, 2024
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.
Published Jan 22, 2001 · Updated Aug 8, 2024
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
Published Jan 22, 2001 · Updated Aug 8, 2024
WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
Published May 7, 2001 · Updated Aug 8, 2024
Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
Published Jan 22, 2001 · Updated Aug 8, 2024
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
Published May 7, 2001 · Updated Aug 8, 2024
netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.
Published Jan 22, 2001 · Updated Aug 8, 2024
SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline.
Published Oct 18, 2000 · Updated Aug 8, 2024
Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Published Nov 29, 2000 · Updated Aug 8, 2024
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Published Nov 29, 2000 · Updated Aug 8, 2024
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
Published Sep 1, 2004 · Updated Aug 8, 2024
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
Published Jan 22, 2001 · Updated Aug 8, 2024
LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.
Published Oct 18, 2000 · Updated Aug 8, 2024
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
Published Jan 22, 2001 · Updated Aug 8, 2024
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
Published Jan 22, 2001 · Updated Aug 8, 2024
Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
Published Jan 22, 2001 · Updated Aug 8, 2024
Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header.
Published Jan 22, 2001 · Updated Aug 8, 2024
Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
Published Jan 22, 2001 · Updated Aug 8, 2024
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack.
Published Jan 22, 2001 · Updated Aug 8, 2024
explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Published Oct 18, 2000 · Updated Aug 8, 2024
Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
Published May 7, 2001 · Updated Aug 8, 2024
The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
Published Mar 9, 2002 · Updated Aug 8, 2024
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.
Published May 7, 2001 · Updated Aug 8, 2024
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.
Published Oct 18, 2000 · Updated Aug 8, 2024
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Published Jan 22, 2001 · Updated Aug 8, 2024
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.
Published May 7, 2001 · Updated Aug 8, 2024
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.
Published May 7, 2001 · Updated Aug 8, 2024
Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
Published Jan 22, 2001 · Updated Aug 8, 2024
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.
Published Jan 22, 2001 · Updated Aug 8, 2024
Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.
Published Jan 22, 2001 · Updated Aug 8, 2024
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Published Jan 22, 2001 · Updated Aug 8, 2024
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
Published Jan 22, 2001 · Updated Aug 8, 2024
Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.
Published Oct 18, 2000 · Updated Aug 8, 2024
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Published Jan 22, 2001 · Updated Aug 8, 2024
