CVE Notifier

CVE-2000-0914 CWE-? N/A

CVE-2000-0914

OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0913 CWE-? N/A

CVE-2000-0913

mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0912 CWE-? N/A

CVE-2000-0912

MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0911 CWE-? N/A

CVE-2000-0911

IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0910 CWE-? N/A

CVE-2000-0910

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0909 CWE-? N/A

CVE-2000-0909

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0908 CWE-? N/A

CVE-2000-0908

BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0901 CWE-? N/A

CVE-2000-0901

Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0900 CWE-? N/A

CVE-2000-0900

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0888 CWE-? N/A

CVE-2000-0888

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0887 CWE-? N/A

CVE-2000-0887

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cache…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0886 CWE-? N/A

CVE-2000-0886

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.

MITRE n/a:n/a 22 Jan 2001