CVE Notifier

CVE-2000-0844 CWE-? N/A

CVE-2000-0844

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0837 CWE-? N/A

CVE-2000-0837

FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0834 CWE-? N/A

CVE-2000-0834

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, …

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0824 CWE-? N/A

CVE-2000-0824

The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by spe…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0813 CWE-? N/A

CVE-2000-0813

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that are processed improperly by FireWall-1, aka "FTP Connection E…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0811 CWE-? N/A

CVE-2000-0811

Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0810 CWE-? N/A

CVE-2000-0810

Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0809 CWE-? N/A

CVE-2000-0809

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service.

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0808 CWE-? N/A

CVE-2000-0808

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s…

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0807 CWE-? N/A

CVE-2000-0807

The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0806 CWE-? N/A

CVE-2000-0806

The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."

MITRE n/a:n/a 22 Jan 2001

CVE-2000-0805 CWE-? N/A

CVE-2000-0805

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."

MITRE n/a:n/a 22 Jan 2001