|
259101
|
5.0 |
MEDIUM
|
microsys
|
cyberpatrol
|
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sn…
|
NVD-CWE-Other
|
CVE-2000-1173
|
2008-09-6 05:22 |
2001-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259102
|
7.2 |
HIGH
|
jan_hubicka
|
koules
|
Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
|
NVD-CWE-Other
|
CVE-2000-1175
|
2008-09-6 05:22 |
2001-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259103
|
7.5 |
HIGH
|
yabb
|
yabb
|
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
|
NVD-CWE-Other
|
CVE-2000-1176
|
2008-09-6 05:22 |
2001-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259104
|
5.0 |
MEDIUM
|
bb4
|
big_brother_network_monitor
|
bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifyi…
|
NVD-CWE-Other
|
CVE-2000-1177
|
2008-09-6 05:22 |
2001-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259105
|
5.0 |
MEDIUM
|
itserv_incorporated
|
ridewaypn
|
The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests.
|
NVD-CWE-Other
|
CVE-2000-1185
|
2008-09-6 05:22 |
2001-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259106
|
7.5 |
HIGH
|
argosoft
|
ftp_server
|
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands.
|
NVD-CWE-Other
|
CVE-2000-1194
|
2008-09-6 05:22 |
2001-08-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259107
|
5.0 |
MEDIUM
|
checkpoint
|
firewall-1
|
Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
|
NVD-CWE-Other
|
CVE-2000-1201
|
2008-09-6 05:22 |
2001-08-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259108
|
7.5 |
HIGH
|
zope
|
zope
|
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activ…
|
NVD-CWE-Other
|
CVE-2000-1211
|
2008-09-6 05:22 |
2000-12-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259109
|
7.5 |
HIGH
|
gnu
|
g\+\+
gcc
|
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows.
|
NVD-CWE-Other
|
CVE-2000-1219
|
2008-09-6 05:22 |
2000-11-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259110
|
7.5 |
HIGH
|
i-soft
|
quikstore
|
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
|
NVD-CWE-Other
|
CVE-2000-1223
|
2008-09-6 05:22 |
2000-11-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259111
|
5.0 |
MEDIUM
|
imatix
|
xitami
|
Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the progr…
|
NVD-CWE-Other
|
CVE-2000-1225
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259112
|
5.0 |
MEDIUM
|
snort
|
snort
|
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending …
|
NVD-CWE-Other
|
CVE-2000-1226
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259113
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
|
NVD-CWE-Other
|
CVE-2000-1228
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259114
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings a…
|
NVD-CWE-Other
|
CVE-2000-1229
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259115
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
|
NVD-CWE-Other
|
CVE-2000-1230
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259116
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.
|
NVD-CWE-Other
|
CVE-2000-1231
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259117
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
|
NVD-CWE-Other
|
CVE-2000-1232
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259118
|
7.5 |
HIGH
|
phorum
|
phorum
|
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.
|
NVD-CWE-Other
|
CVE-2000-1233
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259119
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.
|
NVD-CWE-Other
|
CVE-2000-1234
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259120
|
5.0 |
MEDIUM
|
oracle
|
application_server
|
The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via H…
|
NVD-CWE-Other
|
CVE-2000-1235
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259121
|
5.0 |
MEDIUM
|
floosietek
|
ftgate
|
The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessi…
|
NVD-CWE-Other
|
CVE-2000-1237
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259122
|
7.2 |
HIGH
|
ibm
|
aix
|
AIX cdmount allows local users to gain root privileges via shell metacharacters.
|
NVD-CWE-Other
|
CVE-2000-0466
|
2008-09-6 05:21 |
2000-06-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259123
|
5.0 |
MEDIUM
|
analogx
|
proxy
|
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol.
|
NVD-CWE-Other
|
CVE-2000-0657
|
2008-09-6 05:21 |
2000-07-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259124
|
2.1 |
LOW
|
cvs
|
cvs
|
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
|
NVD-CWE-Other
|
CVE-2000-0679
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259125
|
7.2 |
HIGH
|
cvs
|
cvs
|
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with …
|
NVD-CWE-Other
|
CVE-2000-0680
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259126
|
10.0 |
HIGH
|
bea
|
weblogic_server
|
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
|
NVD-CWE-Other
|
CVE-2000-0681
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259127
|
5.0 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet.
|
NVD-CWE-Other
|
CVE-2000-0682
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259128
|
5.0 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.
|
NVD-CWE-Other
|
CVE-2000-0683
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259129
|
5.0 |
MEDIUM
|
cgi_script_center
|
auction_weaver
|
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
|
NVD-CWE-Other
|
CVE-2000-0686
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259130
|
10.0 |
HIGH
|
cgi_script_center
|
auction_weaver
|
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
|
NVD-CWE-Other
|
CVE-2000-0687
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259131
|
2.1 |
LOW
|
gert_doering
|
mgetty
|
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the tar…
|
NVD-CWE-Other
|
CVE-2000-0691
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259132
|
5.0 |
MEDIUM
|
iss
|
realsecure
|
ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.
|
NVD-CWE-Other
|
CVE-2000-0692
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259133
|
7.2 |
HIGH
|
tech-source
|
raptor_gfx_pgx32
|
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point…
|
NVD-CWE-Other
|
CVE-2000-0693
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259134
|
7.2 |
HIGH
|
tech-source
|
raptor_gfx_pgx32
|
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
|
NVD-CWE-Other
|
CVE-2000-0694
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259135
|
7.2 |
HIGH
|
tech-source
|
raptor_gfx_pgx32
|
Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.
|
NVD-CWE-Other
|
CVE-2000-0695
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259136
|
10.0 |
HIGH
|
hp
|
hp-ux
|
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
|
NVD-CWE-Other
|
CVE-2000-0699
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259137
|
5.0 |
MEDIUM
|
cisco
|
ios
gigabit_switch_router_12008
gigabit_switch_router_12012
gigabit_switch_router_12016
|
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures…
|
NVD-CWE-Other
|
CVE-2000-0700
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259138
|
5.0 |
MEDIUM
|
pragma_systems
|
telnetserver
|
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port.
|
NVD-CWE-Other
|
CVE-2000-0708
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259139
|
5.0 |
MEDIUM
|
microsoft
|
frontpage
|
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DO…
|
NVD-CWE-Other
|
CVE-2000-0709
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259140
|
7.2 |
HIGH
|
lids
|
lids
|
Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option.
|
NVD-CWE-Other
|
CVE-2000-0712
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259141
|
7.6 |
HIGH
|
adobe
|
acrobat
acrobat_business_tools
acrobat_reader
|
Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.
|
NVD-CWE-Other
|
CVE-2000-0713
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259142
|
1.2 |
LOW
|
mandrakesoft
|
mandrake_linux
|
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
|
NVD-CWE-Other
|
CVE-2000-0718
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259143
|
6.2 |
MEDIUM
|
varicad
|
varicad
|
VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.
|
NVD-CWE-Other
|
CVE-2000-0719
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259144
|
6.2 |
MEDIUM
|
multisoft
|
flagship
|
The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses.
|
NVD-CWE-Other
|
CVE-2000-0721
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259145
|
6.2 |
MEDIUM
|
helix_code
|
go-gnome_pre-installer
|
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
|
NVD-CWE-Other
|
CVE-2000-0724
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259146
|
4.6 |
MEDIUM
|
hp
|
hp-ux
|
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
|
NVD-CWE-Other
|
CVE-2000-0730
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259147
|
10.0 |
HIGH
|
sgi
|
irix
|
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-…
|
NVD-CWE-Other
|
CVE-2000-0733
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259148
|
5.0 |
MEDIUM
|
rimarts_inc.
|
becky_internet_mail
|
Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message.
|
NVD-CWE-Other
|
CVE-2000-0735
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259149
|
5.0 |
MEDIUM
|
rimarts_inc.
|
becky_internet_mail
|
Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message.
|
NVD-CWE-Other
|
CVE-2000-0736
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259150
|
7.5 |
HIGH
|
network_associates
|
net_tools_pki_server
|
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.
|
NVD-CWE-Other
|
CVE-2000-0741
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
