CVE Notifier

CVE-2000-0929 CWE-? N/A

CVE-2000-0929

Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0928 CWE-? N/A

CVE-2000-0928

WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0926 CWE-? N/A

CVE-2000-0926

SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0925 CWE-? N/A

CVE-2000-0925

The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0924 CWE-? N/A

CVE-2000-0924

Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0923 CWE-? N/A

CVE-2000-0923

authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0922 CWE-? N/A

CVE-2000-0922

Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0921 CWE-? N/A

CVE-2000-0921

Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0920 CWE-? N/A

CVE-2000-0920

Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0919 CWE-? N/A

CVE-2000-0919

Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0917 CWE-? N/A

CVE-2000-0917

Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0915 CWE-? N/A

CVE-2000-0915

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.

MITRE n/a:n/a 22 Jan 2001