CVE Database — Page 38

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-2000-0322 UNKNOWN — CVE-2000-0322: The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary command
• CVE-2000-0323 UNKNOWN — CVE-2000-0323: The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vu
• CVE-2000-0324 UNKNOWN — CVE-2000-0324: pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
• CVE-2000-0325 UNKNOWN — CVE-2000-0325: The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulne
• CVE-2000-0326 UNKNOWN — CVE-2000-0326: Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers t
• CVE-2000-0327 UNKNOWN — CVE-2000-0327: Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet con
• CVE-2000-0328 UNKNOWN — CVE-2000-0328: Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform
• CVE-2000-0329 UNKNOWN — CVE-2000-0329: A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedd
• CVE-2000-0330 UNKNOWN — CVE-2000-0330: The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name st
• CVE-2000-0332 UNKNOWN — CVE-2000-0332: UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a path
• CVE-2000-0333 UNKNOWN — CVE-2000-0333: tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS pack
• CVE-2000-0331 UNKNOWN — CVE-2000-0331: Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a
• CVE-2000-0334 UNKNOWN — CVE-2000-0334: The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to
• CVE-2000-0335 UNKNOWN — CVE-2000-0335: The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
• CVE-2000-0336 UNKNOWN — CVE-2000-0336: Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
• CVE-2000-0337 UNKNOWN — CVE-2000-0337: Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
• CVE-2000-0338 UNKNOWN — CVE-2000-0338: Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause
• CVE-2000-0339 UNKNOWN — CVE-2000-0339: ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypa
• CVE-2000-0340 UNKNOWN — CVE-2000-0340: Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environme
• CVE-2000-0341 UNKNOWN — CVE-2000-0341: ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
• CVE-2000-0342 UNKNOWN — CVE-2000-0342: Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by
• CVE-2000-0343 UNKNOWN — CVE-2000-0343: Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary command
• CVE-2000-0344 UNKNOWN — CVE-2000-0344: The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size valu
• CVE-2000-0345 UNKNOWN — CVE-2000-0345: The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitiv
• CVE-2000-0346 UNKNOWN — CVE-2000-0346: AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range requ
• CVE-2000-0347 UNKNOWN — CVE-2000-0347: Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with
• CVE-2000-0350 UNKNOWN — CVE-2000-0350: A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the wea
• CVE-2000-0352 UNKNOWN — CVE-2000-0352: Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execu
• CVE-2000-0353 UNKNOWN — CVE-2000-0353: Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a
• CVE-2000-0355 UNKNOWN — CVE-2000-0355: pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
• CVE-2000-0356 UNKNOWN — CVE-2000-0356: Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
• CVE-2000-0357 UNKNOWN — CVE-2000-0357: ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the auth
• CVE-2000-0358 UNKNOWN — CVE-2000-0358: ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
• CVE-2000-0361 UNKNOWN — CVE-2000-0361: The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which a
• CVE-2000-0362 UNKNOWN — CVE-2000-0362: Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
• CVE-2000-0363 UNKNOWN — CVE-2000-0363: Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
• CVE-2000-0364 UNKNOWN — CVE-2000-0364: screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to
• CVE-2000-0365 UNKNOWN — CVE-2000-0365: Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty
• CVE-2000-0366 UNKNOWN — CVE-2000-0366: dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of ar
• CVE-2000-0367 UNKNOWN — CVE-2000-0367: Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
• CVE-2000-0369 UNKNOWN — CVE-2000-0369: The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to
• CVE-2000-0370 UNKNOWN — CVE-2000-0370: The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D o
• CVE-2000-0371 UNKNOWN — CVE-2000-0371: The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
• CVE-2000-0373 UNKNOWN — CVE-2000-0373: Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
• CVE-2000-0374 UNKNOWN — CVE-2000-0374: The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connectio
• CVE-2000-0378 UNKNOWN — CVE-2000-0378: The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file desc
• CVE-2000-0379 UNKNOWN — CVE-2000-0379: The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has
• CVE-2000-0380 UNKNOWN — CVE-2000-0380: The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a deni
• CVE-2000-0381 UNKNOWN — CVE-2000-0381: The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup informati
• CVE-2000-0382 UNKNOWN — CVE-2000-0382: ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitiv