CVE Notifier

CVE-2000-0862 CWE-? N/A

CVE-2000-0862

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0861 CWE-? N/A

CVE-2000-0861

Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0860 CWE-? N/A

CVE-2000-0860

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0858 CWE-? N/A

CVE-2000-0858

Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0853 CWE-? N/A

CVE-2000-0853

YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0852 CWE-? N/A

CVE-2000-0852

Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0851 CWE-? N/A

CVE-2000-0851

Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0850 CWE-? N/A

CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0849 CWE-? N/A

CVE-2000-0849

Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0848 CWE-? N/A

CVE-2000-0848

Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0847 CWE-? N/A

CVE-2000-0847

Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0846 CWE-? N/A

CVE-2000-0846

Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.

MITRE n/a:n/a 22 Jan 2001