CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In October 2000 (CVSS score >= 3)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2000-0751 Exec Code 2000-10-20 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
52 CVE-2000-0750 Exec Code Overflow 2000-10-20 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.
53 CVE-2000-0749 Overflow +Priv 2000-10-20 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system.
54 CVE-2000-0748 2000-10-20 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse.
55 CVE-2000-0747 2000-10-20 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it.
56 CVE-2000-0746 XSS 2000-10-20 2018-10-30
7.5
 None Remote Low Not required Partial Partial Partial
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.
57 CVE-2000-0745 +Priv 2000-10-20 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter.
58 CVE-2000-0744 2000-10-20 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
DEPRECATED. This entry has been deprecated. It is a duplicate of CVE-2000-0743.
59 CVE-2000-0743 Exec Code Overflow 2000-10-20 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value.
60 CVE-2000-0742 DoS 2000-10-20 2018-10-12
5.0
 None Remote Low Not required None None Partial
The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability.
61 CVE-2000-0741 Exec Code 2000-10-20 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.
62 CVE-2000-0740 Exec Code Overflow 2000-10-20 2017-10-10
5.0
 None Remote Low Not required None None Partial
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.
63 CVE-2000-0739 Dir. Trav. 2000-10-20 2017-10-10
5.0
 None Remote Low Not required None Partial None
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
64 CVE-2000-0738 DoS 2000-10-20 2017-10-10
5.0
 None Remote Low Not required None None Partial
WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail.
65 CVE-2000-0737 +Priv 2000-10-20 2018-10-12
4.6
 None Local Low Not required Partial Partial Partial
The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability.
66 CVE-2000-0736 DoS Overflow 2000-10-20 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message.
67 CVE-2000-0735 DoS Overflow 2000-10-20 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message.
68 CVE-2000-0734 DoS 2000-10-20 2016-10-18
5.0
 None Remote Low Not required None None Partial
eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.
69 CVE-2000-0733 Exec Code 2000-10-20 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.
70 CVE-2000-0732 DoS 2000-10-20 2017-10-10
5.0
 None Remote Low Not required None None Partial
Worm HTTP server allows remote attackers to cause a denial of service via a long URL.
71 CVE-2000-0731 Dir. Trav. 2000-10-20 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
72 CVE-2000-0730 +Priv 2000-10-20 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
73 CVE-2000-0728 2000-10-20 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
74 CVE-2000-0727 Exec Code 2000-10-20 2016-10-18
7.6
 None Remote High Not required Complete Complete Complete
xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters.
75 CVE-2000-0725 2000-10-20 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.
76 CVE-2000-0724 2000-10-20 2008-09-05
6.2
 None Local High Not required Complete Complete Complete
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.
77 CVE-2000-0722 2000-10-20 2008-09-05
6.2
 None Local High Not required Complete Complete Complete
Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.
78 CVE-2000-0721 2000-10-20 2008-09-05
6.2
 None Local High Not required Complete Complete Complete
The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses.
79 CVE-2000-0720 2000-10-20 2017-10-10
5.0
 None Remote Low Not required None Partial None
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program.
80 CVE-2000-0719 2000-10-20 2008-09-05
6.2
 None Local High Not required Complete Complete Complete
VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.
81 CVE-2000-0717 DoS 2000-10-20 2017-10-10
5.0
 None Remote Low Not required None None Partial
GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.
82 CVE-2000-0714 2000-10-20 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.
83 CVE-2000-0713 Exec Code Overflow 2000-10-20 2008-09-05
7.6
 None Remote High Not required Complete Complete Complete
Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.
84 CVE-2000-0712 +Priv 2000-10-20 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option.
85 CVE-2000-0711 2000-10-20 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
86 CVE-2000-0710 2000-10-20 2017-07-12
5.0
 None Remote Low Not required Partial None None
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
87 CVE-2000-0709 DoS 2000-10-20 2008-09-05
5.0
 None Remote Low Not required None None Partial
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.
88 CVE-2000-0708 DoS Overflow 2000-10-20 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port.
89 CVE-2000-0707 +Info 2000-10-20 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password.
90 CVE-2000-0706 Exec Code Overflow 2000-10-20 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
91 CVE-2000-0705 2000-10-20 2008-09-10
5.0
 None Remote Low Not required Partial None None
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
92 CVE-2000-0704 Exec Code Overflow 2000-10-20 2017-07-11
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands.
93 CVE-2000-0703 +Priv 2000-10-20 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence.
94 CVE-2000-0702 2000-10-20 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.
95 CVE-2000-0701 +Priv 2000-10-20 2008-09-10
4.6
 None Local Low Not required Partial Partial Partial
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.
96 CVE-2000-0700 Bypass 2000-10-20 2008-09-05
5.0
 None Remote Low Not required None None Partial
Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets.
97 CVE-2000-0699 DoS Exec Code 2000-10-20 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
98 CVE-2000-0698 2000-10-20 2017-10-10
5.0
 None Remote Low Not required None Partial None
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.
99 CVE-2000-0697 Exec Code 2000-10-20 2008-09-24
10.0
 None Remote Low Not required Complete Complete Complete
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
100 CVE-2000-0696 2000-10-20 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
Total number of vulnerabilities : 123   Page : 1 2 (This Page)3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.