CVE Notifier

CVE-2000-0163 CWE-? N/A

CVE-2000-0163

asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.

MITRE n/a:n/a 23 Feb 2000

CVE-2000-0160 CWE-? N/A

CVE-2000-0160

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.

MITRE n/a:n/a 23 Feb 2000

CVE-2000-0158 CWE-? N/A

CVE-2000-0158

Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.

MITRE n/a:n/a 23 Feb 2000

CVE-2000-0155 CWE-? N/A

CVE-2000-0155

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.

MITRE n/a:n/a 23 Feb 2000

CVE-2000-0154 CWE-? N/A

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.

MITRE n/a:n/a 23 Feb 2000

CVE-2000-0153 CWE-? N/A

CVE-2000-0153

FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.

MITRE n/a:n/a 23 Feb 2000

CVE-2000-0151 CWE-? N/A

CVE-2000-0151

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.

MITRE n/a:n/a 16 Feb 2000

CVE-2000-0147 CWE-? N/A

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.

MITRE n/a:n/a 16 Feb 2000

CVE-2000-0143 CWE-? N/A

CVE-2000-0143

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.

MITRE n/a:n/a 16 Feb 2000

CVE-2000-0142 CWE-? N/A

CVE-2000-0142

The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.

MITRE n/a:n/a 16 Feb 2000

CVE-2000-0138 CWE-? N/A

CVE-2000-0138

A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6…

MITRE n/a:n/a 15 Feb 2000

CVE-2000-0137 CWE-? N/A

CVE-2000-0137

The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.

MITRE n/a:n/a 08 Feb 2000