CVE Notifier

CVE-2000-0429 CWE-? N/A

CVE-2000-0429

A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0423 CWE-? N/A

CVE-2000-0423

Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0422 CWE-? N/A

CVE-2000-0422

Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0420 CWE-? N/A

CVE-2000-0420

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0415 CWE-? N/A

CVE-2000-0415

Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0413 CWE-? N/A

CVE-2000-0413

The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which gener…

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0412 CWE-? N/A

CVE-2000-0412

The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0401 CWE-? N/A

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0400 CWE-? N/A

CVE-2000-0400

The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an em…

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0386 CWE-? N/A

CVE-2000-0386

FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0385 CWE-? N/A

CVE-2000-0385

FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.

MITRE n/a:n/a 15 Jun 2000

CVE-2000-0384 CWE-? N/A

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.

MITRE n/a:n/a 15 Jun 2000