CVE Notifier

CVE-2000-1103 CWE-? N/A

CVE-2000-1103

rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1102 CWE-? N/A

CVE-2000-1102

PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands.

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1100 CWE-? N/A

CVE-2000-1100

The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and pa…

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1098 CWE-? N/A

CVE-2000-1098

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1093 CWE-? N/A

CVE-2000-1093

Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1092 CWE-? N/A

CVE-2000-1092

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter.

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1088 CWE-? N/A

CVE-2000-1088

The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Exten…

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1087 CWE-? N/A

CVE-2000-1087

The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Exte…

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1086 CWE-? N/A

CVE-2000-1086

The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Exte…

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1085 CWE-? N/A

CVE-2000-1085

The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended S…

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1084 CWE-? N/A

CVE-2000-1084

The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Sto…

MITRE n/a:n/a 19 Dec 2000

CVE-2000-1083 CWE-? N/A

CVE-2000-1083

The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored …

MITRE n/a:n/a 19 Dec 2000