CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In May 2000

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2000-0423 Exec Code Overflow 2000-05-05 2016-10-18
5.0
 None Remote Low Not required None Partial None
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.
52 CVE-2000-0422 Exec Code Overflow 2000-05-04 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.
53 CVE-2000-0421 Exec Code 2000-05-11 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
54 CVE-2000-0420 2000-05-11 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data.
55 CVE-2000-0419 2000-05-11 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.
56 CVE-2000-0418 DoS 2000-05-23 2008-09-10
5.0
 None Remote Low Not required None None Partial
The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.
57 CVE-2000-0417 DoS 2000-05-17 2008-09-10
5.0
 None Remote Low Not required None None Partial
The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.
58 CVE-2000-0416 Bypass 2000-05-11 2008-09-10
5.0
 None Remote Low Not required None Partial None
NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.
59 CVE-2000-0415 DoS Overflow 2000-05-12 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.
60 CVE-2000-0414 +Priv 2000-05-04 2008-09-10
4.6
 None Local Low Not required Partial Partial Partial
Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
61 CVE-2000-0413 2000-05-06 2018-10-30
5.0
 None Remote Low Not required Partial None None
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
62 CVE-2000-0411 2000-05-10 2008-09-10
5.0
 None Remote Low Not required Partial None None
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.
63 CVE-2000-0410 DoS 2000-05-10 2008-09-10
5.0
 None Remote Low Not required None None Partial
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.
64 CVE-2000-0409 2000-05-10 2008-09-10
3.7
 None Local High Not required Partial Partial Partial
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
65 CVE-2000-0408 DoS 2000-05-11 2018-10-30
5.0
 None Remote Low Not required None None Partial
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.
66 CVE-2000-0407 Exec Code Overflow 2000-05-12 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
67 CVE-2000-0406 2000-05-10 2008-09-10
2.6
 None Remote High Not required Partial None None
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
68 CVE-2000-0405 Exec Code Overflow 2000-05-16 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.
69 CVE-2000-0404 DoS 2000-05-25 2018-10-12
5.0
 None Remote Low Not required None None Partial
The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability.
70 CVE-2000-0403 DoS 2000-05-25 2018-10-12
5.0
 None Remote Low Not required None None Partial
The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability.
71 CVE-2000-0402 2000-05-30 2018-10-12
2.1
 None Local Low Not required Partial None None
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
72 CVE-2000-0401 Exec Code Overflow 2000-05-01 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.
73 CVE-2000-0400 20 2000-05-13 2016-11-07
7.5
 None Remote Low Not required Partial Partial Partial
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.
74 CVE-2000-0399 DoS Overflow 2000-05-24 2008-09-10
5.0
 None Remote Low Not required None None Partial
Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
75 CVE-2000-0398 Exec Code Overflow 2000-05-24 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request.
76 CVE-2000-0397 2000-05-15 2008-09-10
5.0
 None Remote Low Not required Partial None None
The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account.
77 CVE-2000-0396 2000-05-24 2008-09-10
5.0
 None Remote Low Not required Partial None None
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
78 CVE-2000-0395 DoS Overflow 2000-05-16 2008-09-10
5.0
 None Remote Low Not required None None Partial
Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
79 CVE-2000-0394 DoS 2000-05-18 2016-10-18
5.0
 None Remote Low Not required None None Partial
NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature.
80 CVE-2000-0393 +Priv 2000-05-16 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute.
81 CVE-2000-0392 Overflow +Priv 2000-05-16 2020-01-21
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
82 CVE-2000-0391 Overflow +Priv 2000-05-16 2020-01-21
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
83 CVE-2000-0390 Overflow +Priv 2000-05-16 2020-01-21
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
84 CVE-2000-0389 Overflow +Priv 2000-05-16 2020-01-21
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
85 CVE-2000-0387 2000-05-09 2008-09-10
2.1
 None Local Low Not required None Partial None
The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.
86 CVE-2000-0386 2000-05-02 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
87 CVE-2000-0385 Bypass 2000-05-02 2008-09-10
5.0
 None Remote Low Not required None Partial None
FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
88 CVE-2000-0384 2000-05-08 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.
89 CVE-2000-0383 2000-05-08 2008-09-10
5.0
 None Remote Low Not required None Partial None
The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
90 CVE-2000-0382 2000-05-08 2008-09-10
2.6
 None Remote High Not required Partial None None
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site.
91 CVE-2000-0381 2000-05-05 2008-09-10
6.4
 None Remote Low Not required Partial Partial None
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
92 CVE-2000-0379 2000-05-16 2008-09-10
3.6
 None Local Low Not required Partial Partial None
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.
93 CVE-2000-0378 2000-05-03 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
94 CVE-2000-0350 Bypass 2000-05-17 2008-09-10
5.0
 None Remote Low Not required None Partial None
A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events.
95 CVE-2000-0347 DoS 2000-05-02 2016-10-18
5.0
 None Remote Low Not required None None Partial
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
96 CVE-2000-0346 2000-05-02 2017-11-27
5.0
 None Remote Low Not required Partial None None
AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server.
97 CVE-2000-0345 +Info 2000-05-03 2008-09-10
2.1
 None Local Low Not required Partial None None
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
98 CVE-2000-0344 DoS 2000-05-01 2008-09-10
5.0
 None Remote Low Not required None None Partial
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
99 CVE-2000-0343 Exec Code Overflow 2000-05-02 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
100 CVE-2000-0341 DoS 2000-05-01 2016-10-18
5.0
 None Remote Low Not required None None Partial
ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
Total number of vulnerabilities : 110   Page : 1 2 (This Page)3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.