CVE Database — Page 35

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-2000-0162 UNKNOWN — CVE-2000-0162: The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicio
• CVE-2000-0163 UNKNOWN — CVE-2000-0163: asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
• CVE-2000-0164 UNKNOWN — CVE-2000-0164: The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain pass
• CVE-2000-0165 UNKNOWN — CVE-2000-0165: The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
• CVE-2000-0166 UNKNOWN — CVE-2000-0166: Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login na
• CVE-2000-0167 UNKNOWN — CVE-2000-0167: IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml
• CVE-2000-0168 UNKNOWN — CVE-2000-0168: Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file
• CVE-2000-0169 UNKNOWN — CVE-2000-0169: Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL
• CVE-2000-0170 UNKNOWN — CVE-2000-0170: Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variabl
• CVE-2000-0171 UNKNOWN — CVE-2000-0171: atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local user
• CVE-2000-0172 UNKNOWN — CVE-2000-0172: The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root
• CVE-2000-0173 UNKNOWN — CVE-2000-0173: Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
• CVE-2000-0174 UNKNOWN — CVE-2000-0174: StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
• CVE-2000-0175 UNKNOWN — CVE-2000-0175: Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET comman
• CVE-2000-0177 UNKNOWN — CVE-2000-0177: DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
• CVE-2000-0176 UNKNOWN — CVE-2000-0176: The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the serve
• CVE-2000-0179 UNKNOWN — CVE-2000-0179: HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port
• CVE-2000-0178 UNKNOWN — CVE-2000-0178: ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof
• CVE-2000-0180 UNKNOWN — CVE-2000-0180: Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
• CVE-2000-0181 UNKNOWN — CVE-2000-0181: Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determin
• CVE-2000-0182 UNKNOWN — CVE-2000-0182: iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which co
• CVE-2000-0183 UNKNOWN — CVE-2000-0183: Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
• CVE-2000-0184 UNKNOWN — CVE-2000-0184: Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers t
• CVE-2000-0185 UNKNOWN — CVE-2000-0185: RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
• CVE-2000-0186 UNKNOWN — CVE-2000-0186: Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long
• CVE-2000-0187 UNKNOWN — CVE-2000-0187: EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execu
• CVE-2000-0188 UNKNOWN — CVE-2000-0188: EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute
• CVE-2000-0189 UNKNOWN — CVE-2000-0189: ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the ap
• CVE-2000-0190 UNKNOWN — CVE-2000-0190: AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed A
• CVE-2000-0192 UNKNOWN — CVE-2000-0192: The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to d
• CVE-2000-0194 UNKNOWN — CVE-2000-0194: buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
• CVE-2000-0193 UNKNOWN — CVE-2000-0193: The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain pri
• CVE-2000-0191 UNKNOWN — CVE-2000-0191: Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.
• CVE-2000-0195 UNKNOWN — CVE-2000-0195: setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverr
• CVE-2000-0196 UNKNOWN — CVE-2000-0196: Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME header
• CVE-2000-0197 UNKNOWN — CVE-2000-0197: The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which a
• CVE-2000-0198 UNKNOWN — CVE-2000-0198: Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of se
• CVE-2000-0199 UNKNOWN — CVE-2000-0199: When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login
• CVE-2000-0200 UNKNOWN — CVE-2000-0200: Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands v
• CVE-2000-0202 UNKNOWN — CVE-2000-0202: Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed
• CVE-2000-0203 UNKNOWN — CVE-2000-0203: The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data t
• CVE-2000-0201 UNKNOWN — CVE-2000-0201: The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the l
• CVE-2000-0204 UNKNOWN — CVE-2000-0204: The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 1
• CVE-2000-0205 UNKNOWN — CVE-2000-0205: Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeS
• CVE-2000-0206 UNKNOWN — CVE-2000-0206: The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable pe
• CVE-2000-0207 UNKNOWN — CVE-2000-0207: SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
• CVE-2000-0208 UNKNOWN — CVE-2000-0208: The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name wit
• CVE-2000-0209 UNKNOWN — CVE-2000-0209: Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a mali
• CVE-2000-0210 UNKNOWN — CVE-2000-0210: The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary file
• CVE-2000-0211 UNKNOWN — CVE-2000-0211: The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets t