CVE Notifier

CVE-2000-1062 CWE-? N/A

CVE-2000-1062

Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1053 CWE-? N/A

CVE-2000-1053

Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1052 CWE-? N/A

CVE-2000-1052

Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1048 CWE-? N/A

CVE-2000-1048

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in…

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1046 CWE-? N/A

CVE-2000-1046

Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "S…

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1037 CWE-? N/A

CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via…

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1035 CWE-? N/A

CVE-2000-1035

Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1033 CWE-? N/A

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1030 CWE-? N/A

CVE-2000-1030

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1029 CWE-? N/A

CVE-2000-1029

Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1028 CWE-? N/A

CVE-2000-1028

Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-1025 CWE-? N/A

CVE-2000-1025

eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes …

MITRE n/a:n/a 29 Nov 2000