CVE Notifier

CVE-2000-1169 CWE-? N/A

CVE-2000-1169

OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1167 CWE-? N/A

CVE-2000-1167

ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1163 CWE-? N/A

CVE-2000-1163

ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library i…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1162 CWE-? N/A

CVE-2000-1162

ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1149 CWE-? N/A

CVE-2000-1149

Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1148 CWE-? N/A

CVE-2000-1148

The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the serv…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1146 CWE-? N/A

CVE-2000-1146

Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1145 CWE-? N/A

CVE-2000-1145

Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devices to identify ManTrap processes or modify arbitrary data files.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1144 CWE-? N/A

CVE-2000-1144

Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a …

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1143 CWE-? N/A

CVE-2000-1143

Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1142 CWE-? N/A

CVE-2000-1142

Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1141 CWE-? N/A

CVE-2000-1141

Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system.

MITRE n/a:n/a 22 Jan 2001