CVE Notifier

CVE-2000-0421 CWE-? N/A

CVE-2000-0421

The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0419 CWE-? N/A

CVE-2000-0419

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerabi…

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0418 CWE-? N/A

CVE-2000-0418

The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0417 CWE-? N/A

CVE-2000-0417

The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0416 CWE-? N/A

CVE-2000-0416

NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0414 CWE-? N/A

CVE-2000-0414

Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0411 CWE-? N/A

CVE-2000-0411

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0410 CWE-? N/A

CVE-2000-0410

ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0409 CWE-? N/A

CVE-2000-0409

Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0408 CWE-? N/A

CVE-2000-0408

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0407 CWE-? N/A

CVE-2000-0407

Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.

MITRE n/a:n/a 12 Jul 2000

CVE-2000-0406 CWE-? N/A

CVE-2000-0406

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own …

MITRE n/a:n/a 12 Jul 2000