Overview 706 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 25 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.3%
No exploit published
0
0.0%
Outside Waratek scope
1
0.1%
Not applicable
701
99.3%
Withdrawn CVE
2
0.3%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
706
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
706
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 282 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000268
Mitigation candidate2
Not applicable266
High119
Medium124
Low25
not blocked268
Working exploit published268
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0673 | Medium | 2000-07-27 | Not applicable | Working exploit published | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability. |
| CVE-2000-0668 | Medium | 2000-07-27 | Not applicable | Working exploit published | pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled. |
| CVE-2000-0664 | Medium | 2000-07-26 | Not applicable | Working exploit published | AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots. |
| CVE-2000-0656 | Medium | 2000-07-25 | Not applicable | Working exploit published | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol. |
| CVE-2000-0655 | Medium | 2000-07-25 | Not applicable | Working exploit published | Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1. |
| CVE-2000-0652 | Medium | 2000-07-24 | Mitigation candidate | Working exploit published | IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string. |
| CVE-2000-0671 | Medium | 2000-07-21 | Not applicable | Working exploit published | Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL. |
| CVE-2000-0647 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. |
| CVE-2000-0645 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). |
| CVE-2000-0644 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing. |
| CVE-2000-0653 | Medium | 2000-07-20 | Not applicable | Working exploit published | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. |
| CVE-2000-0624 | High | 2000-07-20 | Not applicable | Working exploit published | Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. |
| CVE-2000-0636 | Medium | 2000-07-19 | Not applicable | Working exploit published | HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command. |
| CVE-2000-0622 | High | 2000-07-19 | Not applicable | Working exploit published | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter. |
| CVE-2000-0626 | Medium | 2000-07-18 | Not applicable | Working exploit published | Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request. |
| CVE-2000-0625 | Medium | 2000-07-18 | Not applicable | Working exploit published | NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password. |
| CVE-2000-0567 | Medium | 2000-07-18 | Not applicable | Working exploit published | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability. |
| CVE-2000-0665 | Medium | 2000-07-17 | Not applicable | Working exploit published | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. |
| CVE-2000-0630 | Medium | 2000-07-17 | Not applicable | Working exploit published | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. |
| CVE-2000-0666 | High | 2000-07-16 | Not applicable | Working exploit published | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. |
| CVE-2000-0675 | High | 2000-07-13 | Not applicable | Working exploit published | Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0649 | Low | 2000-07-13 | Not applicable | Working exploit published | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. |
| CVE-2000-0670 | High | 2000-07-12 | Not applicable | Working exploit published | The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0660 | Medium | 2000-07-12 | Not applicable | Working exploit published | The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0669 | Medium | 2000-07-11 | Not applicable | Working exploit published | Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. |
| CVE-2000-0648 | Medium | 2000-07-11 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command. |
| CVE-2000-0638 | High | 2000-07-11 | Not applicable | Working exploit published | bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter. |
| CVE-2000-0641 | High | 2000-07-08 | Not applicable | Working exploit published | Savant web server allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-2000-0640 | High | 2000-07-08 | Not applicable | Working exploit published | Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not. |
| CVE-2000-0574 | Medium | 2000-07-07 | Not applicable | Working exploit published | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands. |
| CVE-2000-0573 | High | 2000-07-07 | Not applicable | Working exploit published | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command. |
| CVE-2000-0572 | Medium | 2000-07-05 | Not applicable | Working exploit published | The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges. |
| CVE-2000-0571 | Medium | 2000-07-05 | Not applicable | Working exploit published | LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request. |
| CVE-2000-0594 | Medium | 2000-07-04 | Not applicable | Working exploit published | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters. |
| CVE-2000-0590 | High | 2000-07-04 | Not applicable | Working exploit published | Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter. |
| CVE-2000-0584 | High | 2000-07-02 | Not applicable | Working exploit published | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. |
| CVE-2000-0582 | Medium | 2000-06-30 | Not applicable | Working exploit published | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy. |
| CVE-2000-0581 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash. |
| CVE-2000-0580 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization. |
| CVE-2000-0569 | Medium | 2000-06-30 | Not applicable | Working exploit published | Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. |
| CVE-2000-0586 | High | 2000-06-29 | Not applicable | Working exploit published | Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command. |
| CVE-2000-0592 | High | 2000-06-27 | Not applicable | Working exploit published | Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands. |
| CVE-2000-0570 | Medium | 2000-06-27 | Not applicable | Working exploit published | FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. |
| CVE-2000-0589 | High | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration. |
| CVE-2000-0588 | Medium | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands. |
| CVE-2000-0601 | Medium | 2000-06-25 | Not applicable | Working exploit published | LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. |
| CVE-2000-0617 | Medium | 2000-06-22 | Not applicable | Working exploit published | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable. |
| CVE-2000-0607 | High | 2000-06-21 | Not applicable | Working exploit published | Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings. |
| CVE-2000-0577 | High | 2000-06-21 | Not applicable | Working exploit published | Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0500 | Medium | 2000-06-21 | Mitigation candidate | Working exploit published | The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing. |
| CVE-2000-0504 | Medium | 2000-06-19 | Not applicable | Working exploit published | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. |
| CVE-2000-0501 | Low | 2000-06-16 | Not applicable | Working exploit published | Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. |
| CVE-2000-0494 | High | 2000-06-16 | Not applicable | Working exploit published | Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script. |
| CVE-2000-0480 | Medium | 2000-06-16 | Not applicable | Working exploit published | Dragon telnet server allows remote attackers to cause a denial of service via a long username. |
| CVE-2000-0484 | Medium | 2000-06-15 | Not applicable | Working exploit published | Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service. |
| CVE-2000-0473 | High | 2000-06-15 | Not applicable | Working exploit published | Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory. |
| CVE-2000-0471 | High | 2000-06-14 | Not applicable | Working exploit published | Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname. |
| CVE-2000-0639 | High | 2000-06-11 | Not applicable | Working exploit published | The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server. |
| CVE-2000-0527 | High | 2000-06-09 | Not applicable | Working exploit published | userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0526 | Medium | 2000-06-09 | Not applicable | Working exploit published | mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0506 | High | 2000-06-09 | Not applicable | Working exploit published | The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability." |
| CVE-2000-0377 | Medium | 2000-06-08 | Not applicable | Working exploit published | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability. |
| CVE-2000-0559 | Low | 2000-06-07 | Not applicable | Working exploit published | eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords. |
| CVE-2000-0538 | Medium | 2000-06-07 | Not applicable | Working exploit published | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. |
| CVE-2000-0520 | High | 2000-06-07 | Not applicable | Working exploit published | Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. |
| CVE-2000-0515 | High | 2000-06-07 | Not applicable | Working exploit published | The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges. |
| CVE-2000-0552 | Medium | 2000-06-06 | Not applicable | Working exploit published | ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. |
| CVE-2000-0523 | High | 2000-06-06 | Not applicable | Working exploit published | Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command. |
| CVE-2000-0516 | High | 2000-06-06 | Not applicable | Working exploit published | When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server. |
| CVE-2000-0482 | Medium | 2000-06-06 | Not applicable | Working exploit published | Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets. |
| CVE-2000-0537 | High | 2000-06-05 | Not applicable | Working exploit published | BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable. |
| CVE-2000-0521 | Medium | 2000-06-05 | Not applicable | Working exploit published | Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number. |
| CVE-2000-0492 | Medium | 2000-06-04 | Not applicable | Working exploit published | PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords. |
| CVE-2000-0468 | Medium | 2000-06-02 | Not applicable | Working exploit published | man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack. |
| CVE-2000-0507 | Medium | 2000-06-01 | Not applicable | Working exploit published | Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command. |
| CVE-2000-0493 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string. |
| CVE-2000-0490 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request. |
| CVE-2000-0476 | Medium | 2000-06-01 | Not applicable | Working exploit published | xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized. |
| CVE-2000-0474 | High | 2000-06-01 | Not applicable | Working exploit published | Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory. |
| CVE-2000-0470 | High | 2000-06-01 | Not applicable | Working exploit published | Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request. |
| CVE-2000-0467 | High | 2000-06-01 | Not applicable | Working exploit published | Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function. |
| CVE-2000-0530 | High | 2000-05-31 | Not applicable | Working exploit published | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. |
| CVE-2000-0505 | Medium | 2000-05-31 | Not applicable | Working exploit published | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters. |
| CVE-2000-0495 | Medium | 2000-05-30 | Not applicable | Working exploit published | Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. |
| CVE-2000-0402 | Low | 2000-05-30 | Not applicable | Working exploit published | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. |
| CVE-2000-0454 | High | 2000-05-29 | Not applicable | Working exploit published | Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. |
| CVE-2000-0460 | High | 2000-05-27 | Not applicable | Working exploit published | Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. |
| CVE-2000-0491 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. |
| CVE-2000-0446 | High | 2000-05-24 | Not applicable | Working exploit published | Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0444 | Medium | 2000-05-24 | Not applicable | Working exploit published | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. |
| CVE-2000-0443 | High | 2000-05-24 | Not applicable | Working exploit published | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0442 | High | 2000-05-24 | Not applicable | Working exploit published | Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. |
| CVE-2000-0396 | Medium | 2000-05-24 | Not applicable | Working exploit published | The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files. |
| CVE-2000-0418 | Medium | 2000-05-23 | Not applicable | Working exploit published | The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. |
| CVE-2000-0438 | High | 2000-05-22 | Not applicable | Working exploit published | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. |
| CVE-2000-0451 | Medium | 2000-05-19 | Not applicable | Working exploit published | The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. |
| CVE-2000-0436 | Medium | 2000-05-19 | Not applicable | Working exploit published | MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0305 | High | 2000-05-19 | Not applicable | Working exploit published | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. |
| CVE-2000-0463 | Medium | 2000-05-18 | Not applicable | Working exploit published | BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. |
| CVE-2000-0453 | Medium | 2000-05-18 | Not applicable | Working exploit published | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. |