CVE Notifier

CVE-2000-1051 CWE-? N/A

CVE-2000-1051

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1050 CWE-? N/A

CVE-2000-1050

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1049 CWE-? N/A

CVE-2000-1049

Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1045 CWE-? N/A

CVE-2000-1045

nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1044 CWE-? N/A

CVE-2000-1044

Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1043 CWE-? N/A

CVE-2000-1043

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1042 CWE-? N/A

CVE-2000-1042

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1041 CWE-? N/A

CVE-2000-1041

Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1040 CWE-? N/A

CVE-2000-1040

Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1038 CWE-? N/A

CVE-2000-1038

The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1036 CWE-? N/A

CVE-2000-1036

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1034 CWE-? N/A

CVE-2000-1034

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vul…

MITRE n/a:n/a 22 Jan 2001