CVE Database — Page 33

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-2000-0062 UNKNOWN — CVE-2000-0062: The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized ac
• CVE-2000-0063 UNKNOWN — CVE-2000-0063: cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the fil
• CVE-2000-0064 UNKNOWN — CVE-2000-0064: cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed
• CVE-2000-0065 UNKNOWN — CVE-2000-0065: Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
• CVE-2000-0066 UNKNOWN — CVE-2000-0066: WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.
• CVE-2000-0067 UNKNOWN — CVE-2000-0067: CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
• CVE-2000-0068 UNKNOWN — CVE-2000-0068: daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modi
• CVE-2000-0069 UNKNOWN — CVE-2000-0069: The recover program in Solstice Backup allows local users to restore sensitive files.
• CVE-2000-0070 UNKNOWN — CVE-2000-0070: NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC
• CVE-2000-0071 UNKNOWN — CVE-2000-0071: IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with
• CVE-2000-0073 UNKNOWN — CVE-2000-0073: Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed
• CVE-2000-0074 UNKNOWN — CVE-2000-0074: PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissi
• CVE-2000-0072 UNKNOWN — CVE-2000-0072: Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative p
• CVE-2000-0075 UNKNOWN — CVE-2000-0075: Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a den
• CVE-2000-0076 UNKNOWN — CVE-2000-0076: nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.
• CVE-2000-0077 UNKNOWN — CVE-2000-0077: The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate P
• CVE-2000-0079 UNKNOWN — CVE-2000-0079: The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request fo
• CVE-2000-0078 UNKNOWN — CVE-2000-0078: The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH
• CVE-2000-0080 UNKNOWN — CVE-2000-0080: AIX techlibss allows local users to overwrite files via a symlink attack.
• CVE-2000-0081 UNKNOWN — CVE-2000-0081: Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the co
• CVE-2000-0082 UNKNOWN — CVE-2000-0082: WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
• CVE-2000-0083 UNKNOWN — CVE-2000-0083: HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a deni
• CVE-2000-0084 UNKNOWN — CVE-2000-0084: CuteFTP uses weak encryption to store password information in its tree.dat file.
• CVE-2000-0085 UNKNOWN — CVE-2000-0085: Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code v
• CVE-2000-0086 UNKNOWN — CVE-2000-0086: Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffin
• CVE-2000-0087 UNKNOWN — CVE-2000-0087: Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a
• CVE-2000-0088 UNKNOWN — CVE-2000-0088: Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to exec
• CVE-2000-0089 UNKNOWN — CVE-2000-0089: The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporar
• CVE-2000-0090 UNKNOWN — CVE-2000-0090: VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
• CVE-2000-0091 UNKNOWN — CVE-2000-0091: Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long
• CVE-2000-0092 UNKNOWN — CVE-2000-0092: The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
• CVE-2000-0093 UNKNOWN — CVE-2000-0093: An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
• CVE-2000-0094 UNKNOWN — CVE-2000-0094: procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified
• CVE-2000-0095 UNKNOWN — CVE-2000-0095: The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of tr
• CVE-2000-0096 UNKNOWN — CVE-2000-0096: Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
• CVE-2000-0097 UNKNOWN — CVE-2000-0097: The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed H
• CVE-2000-0099 UNKNOWN — CVE-2000-0099: Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
• CVE-2000-0098 UNKNOWN — CVE-2000-0098: Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Intern
• CVE-2000-0100 UNKNOWN — CVE-2000-0100: The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by mo
• CVE-2000-0101 UNKNOWN — CVE-2000-0101: The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hi
• CVE-2000-0102 UNKNOWN — CVE-2000-0102: The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fie
• CVE-2000-0103 UNKNOWN — CVE-2000-0103: The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fie
• CVE-2000-0104 UNKNOWN — CVE-2000-0104: The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fiel
• CVE-2000-0105 UNKNOWN — CVE-2000-0105: Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that
• CVE-2000-0106 UNKNOWN — CVE-2000-0106: The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fiel
• CVE-2000-0107 UNKNOWN — CVE-2000-0107: Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
• CVE-2000-0108 UNKNOWN — CVE-2000-0108: The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form f
• CVE-2000-0109 UNKNOWN — CVE-2000-0109: The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that
• CVE-2000-0110 UNKNOWN — CVE-2000-0110: The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form f
• CVE-2000-0112 UNKNOWN — CVE-2000-0112: The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot