CVE Notifier

CVE-2000-0441 CWE-? N/A

CVE-2000-0441

Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0439 CWE-? N/A

CVE-2000-0439

Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0438 CWE-? N/A

CVE-2000-0438

Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0437 CWE-? N/A

CVE-2000-0437

Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0436 CWE-? N/A

CVE-2000-0436

MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0435 CWE-? N/A

CVE-2000-0435

The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0432 CWE-? N/A

CVE-2000-0432

The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0431 CWE-? N/A

CVE-2000-0431

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0428 CWE-? N/A

CVE-2000-0428

Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0427 CWE-? N/A

CVE-2000-0427

The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0425 CWE-? N/A

CVE-2000-0425

Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0424 CWE-? N/A

CVE-2000-0424

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.

MITRE n/a:n/a 12 Jul 2000