Overview 765 matches · 6 in Waratek scope · 0 protected · 6 exploited · 0 CISA KEV · 29 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
6
0.8%
No exploit published
0
0.0%
Outside Waratek scope
1
0.1%
Not applicable
756
98.8%
Withdrawn CVE
2
0.3%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
765
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
6
0.8%
Working exploit published
759
99.2%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 323 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199775
Not applicable75
High53
Medium18
Low4
not blocked75
Exploited2
Working exploit published73
199851
Not applicable51
Critical1
High34
Medium11
Low5
not blocked51
Exploited1
Working exploit published50
1999283
Outside Waratek scope1
Not applicable281
Withdrawn CVE1
Critical2
High133
Medium119
Low28
Unknown1
not blocked283
Exploited1
Working exploit published282
2000323
Mitigation candidate6
Not applicable317
High153
Medium141
Low29
not blocked323
Exploited2
Working exploit published321
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0799 | Low | 2000-10-20 | Not applicable | Working exploit published | inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file. |
| CVE-2000-0798 | High | 2000-10-20 | Not applicable | Working exploit published | The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files. |
| CVE-2000-0797 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option. |
| CVE-2000-0796 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option. |
| CVE-2000-0795 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. |
| CVE-2000-0794 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview. |
| CVE-2000-0787 | High | 2000-10-20 | Not applicable | Working exploit published | IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser. |
| CVE-2000-0782 | Medium | 2000-10-20 | Not applicable | Working exploit published | netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0780 | Medium | 2000-10-20 | Not applicable | Working exploit published | The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0778 | Medium | 2000-10-20 | Not applicable | Working exploit published | IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability. |
| CVE-2000-0776 | High | 2000-10-20 | Not applicable | Working exploit published | Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request. |
| CVE-2000-0775 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers. |
| CVE-2000-0766 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request. |
| CVE-2000-0763 | High | 2000-10-20 | Not applicable | Working exploit published | xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option. |
| CVE-2000-0760 | Medium | 2000-10-20 | Mitigation candidate | Working exploit published | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. |
| CVE-2000-0759 | Medium | 2000-10-20 | Mitigation candidate | Working exploit published | Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path. |
| CVE-2000-0757 | High | 2000-10-20 | Not applicable | Working exploit published | The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed. |
| CVE-2000-0751 | High | 2000-10-20 | Not applicable | Working exploit published | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands. |
| CVE-2000-0745 | High | 2000-10-20 | Not applicable | Working exploit published | admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter. |
| CVE-2000-0743 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value. |
| CVE-2000-0741 | High | 2000-10-20 | Not applicable | Working exploit published | Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension. |
| CVE-2000-0740 | Medium | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port. |
| CVE-2000-0739 | Medium | 2000-10-20 | Not applicable | Working exploit published | Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server. |
| CVE-2000-0737 | Medium | 2000-10-20 | Not applicable | Working exploit published | The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability. |
| CVE-2000-0734 | Medium | 2000-10-20 | Not applicable | Working exploit published | eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections. |
| CVE-2000-0733 | High | 2000-10-20 | Not applicable | Working exploit published | Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request. |
| CVE-2000-0721 | Medium | 2000-10-20 | Not applicable | Working exploit published | The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses. |
| CVE-2000-0720 | Medium | 2000-10-20 | Not applicable | Working exploit published | news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program. |
| CVE-2000-0711 | High | 2000-10-20 | Not applicable | Working exploit published | Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice. |
| CVE-2000-0708 | Medium | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port. |
| CVE-2000-0706 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. |
| CVE-2000-0705 | Medium | 2000-10-20 | Not applicable | Working exploit published | ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0704 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands. |
| CVE-2000-0703 | High | 2000-10-20 | Not applicable | Working exploit published | suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence. |
| CVE-2000-0702 | High | 2000-10-20 | Not applicable | Working exploit published | The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file. |
| CVE-2000-0699 | High | 2000-10-20 | Not applicable | Working exploit published | Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command. |
| CVE-2000-0698 | Medium | 2000-10-20 | Not applicable | Working exploit published | Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack. |
| CVE-2000-0697 | High | 2000-10-20 | Not applicable | Working exploit published | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. |
| CVE-2000-0696 | High | 2000-10-20 | Not applicable | Working exploit published | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script. |
| CVE-2000-0695 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. |
| CVE-2000-0693 | High | 2000-10-20 | Not applicable | Working exploit published | pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program. |
| CVE-2000-0691 | Low | 2000-10-20 | Not applicable | Working exploit published | The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file. |
| CVE-2000-0690 | High | 2000-10-20 | Not applicable | Working exploit published | Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter. |
| CVE-2000-0689 | High | 2000-10-20 | Not applicable | Working exploit published | Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter. |
| CVE-2000-0688 | High | 2000-10-20 | Not applicable | Working exploit published | Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter. |
| CVE-2000-0685 | High | 2000-10-20 | Mitigation candidate | Working exploit published | BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file. |
| CVE-2000-0684 | High | 2000-10-20 | Mitigation candidate | Working exploit published | BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file. |
| CVE-2000-0680 | High | 2000-10-20 | Not applicable | Working exploit published | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action. |
| CVE-2000-0679 | Low | 2000-10-20 | Not applicable | Working exploit published | The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files. |
| CVE-2000-0676 | Medium | 2000-10-20 | Not applicable | Working exploit published | Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice. |
| CVE-2000-0816 | Low | 2000-10-06 | Not applicable | Working exploit published | Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters. |
| CVE-2000-0545 | Medium | 2000-08-08 | Not applicable | Working exploit published | Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter. |
| CVE-2000-0278 | Medium | 2000-08-03 | Not applicable | Working exploit published | The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user. |
| CVE-2000-0673 | Medium | 2000-07-27 | Not applicable | Working exploit published | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability. |
| CVE-2000-0668 | Medium | 2000-07-27 | Not applicable | Working exploit published | pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled. |
| CVE-2000-0664 | Medium | 2000-07-26 | Not applicable | Working exploit published | AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots. |
| CVE-2000-0656 | Medium | 2000-07-25 | Not applicable | Working exploit published | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol. |
| CVE-2000-0655 | Medium | 2000-07-25 | Not applicable | Working exploit published | Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1. |
| CVE-2000-0652 | Medium | 2000-07-24 | Mitigation candidate | Working exploit published | IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string. |
| CVE-2000-0671 | Medium | 2000-07-21 | Not applicable | Working exploit published | Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL. |
| CVE-2000-0647 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. |
| CVE-2000-0645 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). |
| CVE-2000-0644 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing. |
| CVE-2000-0653 | Medium | 2000-07-20 | Not applicable | Working exploit published | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. |
| CVE-2000-0624 | High | 2000-07-20 | Not applicable | Working exploit published | Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. |
| CVE-2000-0636 | Medium | 2000-07-19 | Not applicable | Working exploit published | HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command. |
| CVE-2000-0622 | High | 2000-07-19 | Not applicable | Working exploit published | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter. |
| CVE-2000-0626 | Medium | 2000-07-18 | Not applicable | Working exploit published | Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request. |
| CVE-2000-0625 | Medium | 2000-07-18 | Not applicable | Working exploit published | NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password. |
| CVE-2000-0567 | Medium | 2000-07-18 | Not applicable | Working exploit published | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability. |
| CVE-2000-0665 | Medium | 2000-07-17 | Not applicable | Working exploit published | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. |
| CVE-2000-0630 | Medium | 2000-07-17 | Not applicable | Working exploit published | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. |
| CVE-2000-0666 | High | 2000-07-16 | Not applicable | Working exploit published | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. |
| CVE-2000-0675 | High | 2000-07-13 | Not applicable | Working exploit published | Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0649 | Low | 2000-07-13 | Not applicable | Working exploit published | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. |
| CVE-2000-0670 | High | 2000-07-12 | Not applicable | Working exploit published | The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0660 | Medium | 2000-07-12 | Not applicable | Working exploit published | The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0669 | Medium | 2000-07-11 | Not applicable | Working exploit published | Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. |
| CVE-2000-0648 | Medium | 2000-07-11 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command. |
| CVE-2000-0638 | High | 2000-07-11 | Not applicable | Working exploit published | bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter. |
| CVE-2000-0641 | High | 2000-07-08 | Not applicable | Working exploit published | Savant web server allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-2000-0640 | High | 2000-07-08 | Not applicable | Working exploit published | Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not. |
| CVE-2000-0574 | Medium | 2000-07-07 | Not applicable | Working exploit published | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands. |
| CVE-2000-0573 | High | 2000-07-07 | Not applicable | Working exploit published | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command. |
| CVE-2000-0572 | Medium | 2000-07-05 | Not applicable | Working exploit published | The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges. |
| CVE-2000-0571 | Medium | 2000-07-05 | Not applicable | Working exploit published | LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request. |
| CVE-2000-0594 | Medium | 2000-07-04 | Not applicable | Working exploit published | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters. |
| CVE-2000-0590 | High | 2000-07-04 | Not applicable | Working exploit published | Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter. |
| CVE-2000-0584 | High | 2000-07-02 | Not applicable | Working exploit published | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. |
| CVE-2000-0582 | Medium | 2000-06-30 | Not applicable | Working exploit published | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy. |
| CVE-2000-0581 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash. |
| CVE-2000-0580 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization. |
| CVE-2000-0569 | Medium | 2000-06-30 | Not applicable | Working exploit published | Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. |
| CVE-2000-0586 | High | 2000-06-29 | Not applicable | Working exploit published | Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command. |
| CVE-2000-0592 | High | 2000-06-27 | Not applicable | Working exploit published | Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands. |
| CVE-2000-0570 | Medium | 2000-06-27 | Not applicable | Working exploit published | FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. |
| CVE-2000-0589 | High | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration. |
| CVE-2000-0588 | Medium | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands. |
| CVE-2000-0601 | Medium | 2000-06-25 | Not applicable | Working exploit published | LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. |
| CVE-2000-0617 | Medium | 2000-06-22 | Not applicable | Working exploit published | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable. |