CVE Notifier

CVE-2000-0944 CWE-? N/A

CVE-2000-0944

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0943 CWE-? N/A

CVE-2000-0943

Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0942 CWE-? N/A

CVE-2000-0942

The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Servic…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0941 CWE-? N/A

CVE-2000-0941

Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0938 CWE-? N/A

CVE-2000-0938

Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0937 CWE-? N/A

CVE-2000-0937

Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0936 CWE-? N/A

CVE-2000-0936

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0935 CWE-? N/A

CVE-2000-0935

Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0934 CWE-? N/A

CVE-2000-0934

Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0933 CWE-? N/A

CVE-2000-0933

The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0932 CWE-? N/A

CVE-2000-0932

MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0930 CWE-? N/A

CVE-2000-0930

Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.

MITRE n/a:n/a 22 Jan 2001