CVE Notifier

CVE-2000-0208 CWE-? N/A

CVE-2000-0208

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0207 CWE-? N/A

CVE-2000-0207

SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0202 CWE-? N/A

CVE-2000-0202

Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0201 CWE-? N/A

CVE-2000-0201

The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0200 CWE-? N/A

CVE-2000-0200

Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0196 CWE-? N/A

CVE-2000-0196

Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0194 CWE-? N/A

CVE-2000-0194

buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0189 CWE-? N/A

CVE-2000-0189

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0186 CWE-? N/A

CVE-2000-0186

Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0182 CWE-? N/A

CVE-2000-0182

iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0178 CWE-? N/A

CVE-2000-0178

ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.

MITRE n/a:n/a 10 Apr 2000

CVE-2000-0172 CWE-? N/A

CVE-2000-0172

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.

MITRE n/a:n/a 10 Apr 2000