CVE Notifier

CVE-2000-0096 CWE-? N/A

CVE-2000-0096

Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.

MITRE n/a:n/a 08 Feb 2000

CVE-2000-0093 CWE-? N/A

CVE-2000-0093

An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.

MITRE n/a:n/a 08 Feb 2000

CVE-2000-0086 CWE-? N/A

CVE-2000-0086

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0085 CWE-? N/A

CVE-2000-0085

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0084 CWE-? N/A

CVE-2000-0084

CuteFTP uses weak encryption to store password information in its tree.dat file.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0082 CWE-? N/A

CVE-2000-0082

WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0081 CWE-? N/A

CVE-2000-0081

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0079 CWE-? N/A

CVE-2000-0079

The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0078 CWE-? N/A

CVE-2000-0078

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0077 CWE-? N/A

CVE-2000-0077

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0074 CWE-? N/A

CVE-2000-0074

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.

MITRE n/a:n/a 04 Feb 2000

CVE-2000-0071 CWE-? N/A

CVE-2000-0071

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.

MITRE n/a:n/a 04 Feb 2000