CVE Notifier

CVE-2000-0988 CWE-? N/A

CVE-2000-0988

WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0987 CWE-? N/A

CVE-2000-0987

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0986 CWE-? N/A

CVE-2000-0986

Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0985 CWE-? N/A

CVE-2000-0985

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0971 CWE-? N/A

CVE-2000-0971

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0963 CWE-? N/A

CVE-2000-0963

Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0955 CWE-? N/A

CVE-2000-0955

Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0954 CWE-? N/A

CVE-2000-0954

Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0950 CWE-? N/A

CVE-2000-0950

Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0940 CWE-? N/A

CVE-2000-0940

Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0939 CWE-? N/A

CVE-2000-0939

Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0931 CWE-? N/A

CVE-2000-0931

Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.

MITRE n/a:n/a 29 Nov 2000