CVE Notifier

CVE-2000-1106 CWE-? N/A

CVE-2000-1106

Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying t…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1099 CWE-? N/A

CVE-2000-1099

Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthor…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1097 CWE-? N/A

CVE-2000-1097

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1096 CWE-? N/A

CVE-2000-1096

crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the c…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1095 CWE-? N/A

CVE-2000-1095

modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1094 CWE-? N/A

CVE-2000-1094

Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1089 CWE-? N/A

CVE-2000-1089

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1080 CWE-? N/A

CVE-2000-1080

Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1077 CWE-? N/A

CVE-2000-1077

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1074 CWE-? N/A

CVE-2000-1074

csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current o…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1073 CWE-? N/A

CVE-2000-1073

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and callin…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1072 CWE-? N/A

CVE-2000-1072

iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse.

MITRE n/a:n/a 22 Jan 2001