CVE Notifier

CVE-2000-0884 CWE-? N/A

CVE-2000-0884

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0883 CWE-? N/A

CVE-2000-0883

The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0878 CWE-? N/A

CVE-2000-0878

The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0873 CWE-? N/A

CVE-2000-0873

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0871 CWE-? N/A

CVE-2000-0871

Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0870 CWE-? N/A

CVE-2000-0870

Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0869 CWE-? N/A

CVE-2000-0869

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0868 CWE-? N/A

CVE-2000-0868

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0867 CWE-? N/A

CVE-2000-0867

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0865 CWE-? N/A

CVE-2000-0865

Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0864 CWE-? N/A

CVE-2000-0864

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink a…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0863 CWE-? N/A

CVE-2000-0863

Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.

MITRE n/a:n/a 22 Jan 2001