|
316151
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
|
NVD-CWE-Other
|
CVE-2000-1228
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316152
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings a…
|
NVD-CWE-Other
|
CVE-2000-1229
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316153
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
|
NVD-CWE-Other
|
CVE-2000-1230
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316154
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.
|
NVD-CWE-Other
|
CVE-2000-1231
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316155
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
|
NVD-CWE-Other
|
CVE-2000-1232
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316156
|
7.5 |
HIGH
|
phorum
|
phorum
|
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.
|
NVD-CWE-Other
|
CVE-2000-1233
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316157
|
5.0 |
MEDIUM
|
phorum
|
phorum
|
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.
|
NVD-CWE-Other
|
CVE-2000-1234
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316158
|
5.0 |
MEDIUM
|
oracle
|
application_server
|
The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via H…
|
NVD-CWE-Other
|
CVE-2000-1235
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316159
|
5.0 |
MEDIUM
|
floosietek
|
ftgate
|
The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessi…
|
NVD-CWE-Other
|
CVE-2000-1237
|
2008-09-6 05:22 |
2000-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316160
|
7.2 |
HIGH
|
ibm
|
aix
|
AIX cdmount allows local users to gain root privileges via shell metacharacters.
|
NVD-CWE-Other
|
CVE-2000-0466
|
2008-09-6 05:21 |
2000-06-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316161
|
5.0 |
MEDIUM
|
analogx
|
proxy
|
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol.
|
NVD-CWE-Other
|
CVE-2000-0657
|
2008-09-6 05:21 |
2000-07-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316162
|
2.1 |
LOW
|
cvs
|
cvs
|
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
|
NVD-CWE-Other
|
CVE-2000-0679
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316163
|
7.2 |
HIGH
|
cvs
|
cvs
|
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with …
|
NVD-CWE-Other
|
CVE-2000-0680
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316164
|
10.0 |
HIGH
|
bea
|
weblogic_server
|
Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.
|
NVD-CWE-Other
|
CVE-2000-0681
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316165
|
5.0 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet.
|
NVD-CWE-Other
|
CVE-2000-0682
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316166
|
5.0 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.
|
NVD-CWE-Other
|
CVE-2000-0683
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316167
|
5.0 |
MEDIUM
|
cgi_script_center
|
auction_weaver
|
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
|
NVD-CWE-Other
|
CVE-2000-0686
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316168
|
10.0 |
HIGH
|
cgi_script_center
|
auction_weaver
|
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
|
NVD-CWE-Other
|
CVE-2000-0687
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316169
|
2.1 |
LOW
|
gert_doering
|
mgetty
|
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the tar…
|
NVD-CWE-Other
|
CVE-2000-0691
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316170
|
5.0 |
MEDIUM
|
iss
|
realsecure
|
ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.
|
NVD-CWE-Other
|
CVE-2000-0692
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316171
|
7.2 |
HIGH
|
tech-source
|
raptor_gfx_pgx32
|
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point…
|
NVD-CWE-Other
|
CVE-2000-0693
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316172
|
7.2 |
HIGH
|
tech-source
|
raptor_gfx_pgx32
|
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
|
NVD-CWE-Other
|
CVE-2000-0694
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316173
|
7.2 |
HIGH
|
tech-source
|
raptor_gfx_pgx32
|
Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.
|
NVD-CWE-Other
|
CVE-2000-0695
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316174
|
10.0 |
HIGH
|
hp
|
hp-ux
|
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
|
NVD-CWE-Other
|
CVE-2000-0699
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316175
|
5.0 |
MEDIUM
|
cisco
|
ios
gigabit_switch_router_12008
gigabit_switch_router_12012
gigabit_switch_router_12016
|
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures…
|
NVD-CWE-Other
|
CVE-2000-0700
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316176
|
5.0 |
MEDIUM
|
pragma_systems
|
telnetserver
|
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port.
|
NVD-CWE-Other
|
CVE-2000-0708
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316177
|
5.0 |
MEDIUM
|
microsoft
|
frontpage
|
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DO…
|
NVD-CWE-Other
|
CVE-2000-0709
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316178
|
7.2 |
HIGH
|
lids
|
lids
|
Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option.
|
NVD-CWE-Other
|
CVE-2000-0712
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316179
|
7.6 |
HIGH
|
adobe
|
acrobat
acrobat_business_tools
acrobat_reader
|
Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.
|
NVD-CWE-Other
|
CVE-2000-0713
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316180
|
1.2 |
LOW
|
mandrakesoft
|
mandrake_linux
|
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
|
NVD-CWE-Other
|
CVE-2000-0718
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316181
|
6.2 |
MEDIUM
|
varicad
|
varicad
|
VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.
|
NVD-CWE-Other
|
CVE-2000-0719
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316182
|
6.2 |
MEDIUM
|
multisoft
|
flagship
|
The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses.
|
NVD-CWE-Other
|
CVE-2000-0721
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316183
|
6.2 |
MEDIUM
|
helix_code
|
go-gnome_pre-installer
|
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
|
NVD-CWE-Other
|
CVE-2000-0724
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316184
|
4.6 |
MEDIUM
|
hp
|
hp-ux
|
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
|
NVD-CWE-Other
|
CVE-2000-0730
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316185
|
10.0 |
HIGH
|
sgi
|
irix
|
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-…
|
NVD-CWE-Other
|
CVE-2000-0733
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316186
|
5.0 |
MEDIUM
|
rimarts_inc.
|
becky_internet_mail
|
Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message.
|
NVD-CWE-Other
|
CVE-2000-0735
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316187
|
5.0 |
MEDIUM
|
rimarts_inc.
|
becky_internet_mail
|
Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message.
|
NVD-CWE-Other
|
CVE-2000-0736
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316188
|
7.5 |
HIGH
|
network_associates
|
net_tools_pki_server
|
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.
|
NVD-CWE-Other
|
CVE-2000-0741
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316189
|
10.0 |
HIGH
|
university_of_minnesota
|
gopherd
|
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value.
|
NVD-CWE-Other
|
CVE-2000-0743
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316190
|
7.5 |
HIGH
|
francisco_burzi
|
php-nuke
|
admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd paramete…
|
NVD-CWE-Other
|
CVE-2000-0745
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316191
|
4.6 |
MEDIUM
|
openldap
|
openldap
|
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
|
NVD-CWE-Other
|
CVE-2000-0748
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316192
|
7.5 |
HIGH
|
netbsd
openbsd
redhat
|
netbsd
openbsd
linux
|
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
|
NVD-CWE-Other
|
CVE-2000-0751
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316193
|
7.2 |
HIGH
|
freebsd
|
freebsd
|
Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.
|
NVD-CWE-Other
|
CVE-2000-0752
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316194
|
2.1 |
LOW
|
hp
|
openview_network_node_manager
|
Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.
|
NVD-CWE-Other
|
CVE-2000-0754
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316195
|
4.6 |
MEDIUM
|
hp
|
openview_network_node_manager
|
Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.
|
NVD-CWE-Other
|
CVE-2000-0755
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316196
|
10.0 |
HIGH
|
aptis_software
|
totalbill
|
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed.
|
NVD-CWE-Other
|
CVE-2000-0757
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316197
|
4.6 |
MEDIUM
|
lyris
|
list_manager
|
The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form field.
|
NVD-CWE-Other
|
CVE-2000-0758
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316198
|
5.0 |
MEDIUM
|
ibm
|
os2_ftp_server
|
OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.
|
NVD-CWE-Other
|
CVE-2000-0761
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316199
|
5.0 |
MEDIUM
|
bajie
|
java_http_server
|
The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
|
NVD-CWE-Other
|
CVE-2000-0774
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
316200
|
10.0 |
HIGH
|
rapidstream
|
rapidstream
|
sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.
|
NVD-CWE-Other
|
CVE-2000-0784
|
2008-09-6 05:21 |
2000-10-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
