CVE Notifier

CVE-2000-1032 CWE-? N/A

CVE-2000-1032

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames …

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1031 CWE-? N/A

CVE-2000-1031

Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1027 CWE-? N/A

CVE-2000-1027

Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive …

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1026 CWE-? N/A

CVE-2000-1026

Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1024 CWE-? N/A

CVE-2000-1024

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1022 CWE-? N/A

CVE-2000-1022

The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before send…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1019 CWE-? N/A

CVE-2000-1019

Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1018 CWE-? N/A

CVE-2000-1018

shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1016 CWE-? N/A

CVE-2000-1016

The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HT…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1014 CWE-? N/A

CVE-2000-1014

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1011 CWE-? N/A

CVE-2000-1011

Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-1010 CWE-? N/A

CVE-2000-1010

Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.

MITRE n/a:n/a 22 Jan 2001