CVE Notifier

CVE-2000-1071 CWE-? N/A

CVE-2000-1071

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1070 CWE-? N/A

CVE-2000-1070

pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1069 CWE-? N/A

CVE-2000-1069

pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1068 CWE-? N/A

CVE-2000-1068

pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1061 CWE-? N/A

CVE-2000-1061

Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arb…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1060 CWE-? N/A

CVE-2000-1060

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1059 CWE-? N/A

CVE-2000-1059

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and ga…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1058 CWE-? N/A

CVE-2000-1058

Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1057 CWE-? N/A

CVE-2000-1057

Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1056 CWE-? N/A

CVE-2000-1056

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1055 CWE-? N/A

CVE-2000-1055

Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1054 CWE-? N/A

CVE-2000-1054

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.

MITRE n/a:n/a 22 Jan 2001