CVE Notifier

CVE-2000-0789 CWE-? N/A

CVE-2000-0789

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0785 CWE-? N/A

CVE-2000-0785

WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) to the specified file.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0784 CWE-? N/A

CVE-2000-0784

sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0775 CWE-? N/A

CVE-2000-0775

Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If…

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0774 CWE-? N/A

CVE-2000-0774

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0772 CWE-? N/A

CVE-2000-0772

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0769 CWE-? N/A

CVE-2000-0769

O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0760 CWE-? N/A

CVE-2000-0760

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0759 CWE-? N/A

CVE-2000-0759

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0757 CWE-? N/A

CVE-2000-0757

The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0756 CWE-? N/A

CVE-2000-0756

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service.

MITRE n/a:n/a 21 Sep 2000

CVE-2000-0755 CWE-? N/A

CVE-2000-0755

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.

MITRE n/a:n/a 21 Sep 2000