CVE Notifier

CVE-2000-0918 CWE-? N/A

CVE-2000-0918

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0916 CWE-? N/A

CVE-2000-0916

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0907 CWE-? N/A

CVE-2000-0907

EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0906 CWE-? N/A

CVE-2000-0906

Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0905 CWE-? N/A

CVE-2000-0905

QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0904 CWE-? N/A

CVE-2000-0904

Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0903 CWE-? N/A

CVE-2000-0903

Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0902 CWE-? N/A

CVE-2000-0902

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0885 CWE-? N/A

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an…

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0817 CWE-? N/A

CVE-2000-0817

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability.

MITRE n/a:n/a 29 Nov 2000

CVE-2000-0882 CWE-? N/A

CVE-2000-0882

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash.

MITRE n/a:n/a 18 Oct 2000

CVE-2000-0881 CWE-? N/A

CVE-2000-0881

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.

MITRE n/a:n/a 18 Oct 2000