CVE Database — Page 40

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-2000-0434 UNKNOWN — CVE-2000-0434: The administrative password for the Allmanage web site administration software is stored in plaintext in a file which co
• CVE-2000-0435 UNKNOWN — CVE-2000-0435: The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by
• CVE-2000-0436 UNKNOWN — CVE-2000-0436: MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attac
• CVE-2000-0437 UNKNOWN — CVE-2000-0437: Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause
• CVE-2000-0438 UNKNOWN — CVE-2000-0438: Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a
• CVE-2000-0439 UNKNOWN — CVE-2000-0439: Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that
• CVE-2000-0440 UNKNOWN — CVE-2000-0440: NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP t
• CVE-2000-0441 UNKNOWN — CVE-2000-0441: Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX f
• CVE-2000-0442 UNKNOWN — CVE-2000-0442: Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is pro
• CVE-2000-0443 UNKNOWN — CVE-2000-0443: The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attac
• CVE-2000-0444 UNKNOWN — CVE-2000-0444: HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
• CVE-2000-0445 UNKNOWN — CVE-2000-0445: The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair gener
• CVE-2000-0446 UNKNOWN — CVE-2000-0446: Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
• CVE-2000-0447 UNKNOWN — CVE-2000-0447: Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration
• CVE-2000-0448 UNKNOWN — CVE-2000-0448: The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP ad
• CVE-2000-0449 UNKNOWN — CVE-2000-0449: Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
• CVE-2000-0450 UNKNOWN — CVE-2000-0450: Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands.
• CVE-2000-0451 UNKNOWN — CVE-2000-0451: The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP
• CVE-2000-0452 UNKNOWN — CVE-2000-0452: Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service v
• CVE-2000-0453 UNKNOWN — CVE-2000-0453: XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet
• CVE-2000-0455 UNKNOWN — CVE-2000-0455: Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memor
• CVE-2000-0454 UNKNOWN — CVE-2000-0454: Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
• CVE-2000-0456 UNKNOWN — CVE-2000-0456: NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in t
• CVE-2000-0457 UNKNOWN — CVE-2000-0457: ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large nu
• CVE-2000-0458 UNKNOWN — CVE-2000-0458: The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to
• CVE-2000-0459 UNKNOWN — CVE-2000-0459: IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of se
• CVE-2000-0460 UNKNOWN — CVE-2000-0460: Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.
• CVE-2000-0461 UNKNOWN — CVE-2000-0461: The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denia
• CVE-2000-0462 UNKNOWN — CVE-2000-0462: ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which al
• CVE-2000-0463 UNKNOWN — CVE-2000-0463: BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.
• CVE-2000-0464 UNKNOWN — CVE-2000-0464: Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX
• CVE-2000-0465 UNKNOWN — CVE-2000-0465: Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a re
• CVE-2000-0469 UNKNOWN — CVE-2000-0469: Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
• CVE-2000-0472 UNKNOWN — CVE-2000-0472: Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a lo
• CVE-2000-0481 UNKNOWN — CVE-2000-0481: Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file na
• CVE-2000-0489 UNKNOWN — CVE-2000-0489: FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs u
• CVE-2000-0491 UNKNOWN — CVE-2000-0491: Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary co
• CVE-2000-0508 UNKNOWN — CVE-2000-0508: rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
• CVE-2000-0517 UNKNOWN — CVE-2000-0517: Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previousl
• CVE-2000-0531 UNKNOWN — CVE-2000-0531: Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets
• CVE-2000-0551 UNKNOWN — CVE-2000-0551: The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to acces
• CVE-2000-0553 UNKNOWN — CVE-2000-0553: Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" ru
• CVE-2000-0564 UNKNOWN — CVE-2000-0564: The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a den
• CVE-2000-0634 UNKNOWN — CVE-2000-0634: The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files v
• CVE-2000-0613 UNKNOWN — CVE-2000-0613: Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to fo
• CVE-2000-1205 UNKNOWN — CVE-2000-1205: Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other we
• CVE-2000-1206 UNKNOWN — CVE-2000-1206: Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_al
• CVE-2000-1218 UNKNOWN — CVE-2000-1218: The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMa
• CVE-2000-1216 UNKNOWN — CVE-2000-1216: Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_
• CVE-2000-1220 UNKNOWN — CVE-2000-1220: The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root pri