Overview 631 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 180 public PoC · 6 EPSS ≥ 0.5
631matches
0in Waratek scope0.0%
0protected0.0%
1exploited0.2%
0CISA KEV0.0%
180public PoC28.5%
6EPSS ≥ 0.51.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.2%
Not applicable
630
99.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
631
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
0.2%
Working exploit published
180
28.5%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
450
71.3%
split by
peak 357 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
200053
Not applicable53
Medium53
not blocked53
Exploited1
Working exploit published22
No public exploit30
198919901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0216 | Medium | 2000-02-29 | Not applicable | No public exploit | Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list. |
| CVE-2000-0208 | Medium | 2000-02-29 | Not applicable | Working exploit published | The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch. |
| CVE-2000-0176 | Medium | 2000-02-29 | Not applicable | No public exploit | The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist. |
| CVE-2000-0204 | Medium | 2000-02-28 | Not applicable | Working exploit published | The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%. |
| CVE-2000-0203 | Medium | 2000-02-28 | Not applicable | No public exploit | The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345. |
| CVE-2000-0179 | Medium | 2000-02-28 | Not applicable | Working exploit published | HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555. |
| CVE-2000-0221 | Medium | 2000-02-25 | Not applicable | Working exploit published | The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port. |
| CVE-2000-0220 | Medium | 2000-02-24 | Not applicable | No public exploit | ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event. |
| CVE-2000-0217 | Medium | 2000-02-24 | Not applicable | No public exploit | The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. |
| CVE-2000-0214 | Medium | 2000-02-24 | Not applicable | Working exploit published | FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites. |
| CVE-2000-0212 | Medium | 2000-02-24 | Not applicable | Working exploit published | InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information. |
| CVE-2000-0213 | Medium | 2000-02-23 | Not applicable | Working exploit published | The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters. |
| CVE-2000-0211 | Medium | 2000-02-23 | Not applicable | Working exploit published | The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability. |
| CVE-2000-0182 | Medium | 2000-02-23 | Not applicable | No public exploit | iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic. |
| CVE-2000-0163 | Medium | 2000-02-21 | Not applicable | Working exploit published | asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. |
| CVE-2000-0162 | Medium | 2000-02-18 | Not applicable | No public exploit | The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability. |
| CVE-2000-0156 | Medium | 2000-02-16 | Not applicable | Working exploit published | Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability. |
| CVE-2000-0197 | Medium | 2000-02-14 | Not applicable | No public exploit | The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file. |
| CVE-2000-0143 | Medium | 2000-02-11 | Not applicable | No public exploit | The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP. |
| CVE-2000-0142 | Medium | 2000-02-11 | Not applicable | Working exploit published | The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417. |
| CVE-2000-0140 | Medium | 2000-02-10 | Not applicable | No public exploit | Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections. |
| CVE-2000-0149 | Medium | 2000-02-08 | Not applicable | Working exploit published | Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL. |
| CVE-2000-0146 | Medium | 2000-02-07 | Not applicable | Working exploit published | The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet. |
| CVE-2000-0122 | Medium | 2000-02-03 | Not applicable | No public exploit | Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program. |
| CVE-2000-0469 | Medium | 2000-02-02 | Not applicable | No public exploit | Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0114 | Medium | 2000-02-02 | Not applicable | Working exploit published | Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory. |
| CVE-2000-1205 | Medium | 2000-02-01 | Not applicable | No public exploit | Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code. NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache. The printenv.pl/acuparam vector, discloser on 20070724, is one such variant. |
| CVE-2000-0151 | Medium | 2000-02-01 | Not applicable | No public exploit | GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. |
| CVE-2000-0131 | Medium | 2000-02-01 | Not applicable | Working exploit published | Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. |
| CVE-2000-0105 | Medium | 2000-02-01 | Not applicable | Working exploit published | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client. |
| CVE-2000-0126 | Medium | 2000-01-26 | Not applicable | Working exploit published | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. |
| CVE-2000-0098 | Medium | 2000-01-26 | Not applicable | No public exploit | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. |
| CVE-2000-0097 | Medium | 2000-01-26 | Not applicable | Working exploit published | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. |
| CVE-2000-0095 | Medium | 2000-01-24 | Not applicable | No public exploit | The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier. |
| CVE-2000-0115 | Medium | 2000-01-21 | Not applicable | No public exploit | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page. |
| CVE-2000-0092 | Medium | 2000-01-19 | Not applicable | No public exploit | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. |
| CVE-2000-0086 | Medium | 2000-01-18 | Not applicable | No public exploit | Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing. |
| CVE-2000-0072 | Medium | 2000-01-17 | Not applicable | No public exploit | Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges. |
| CVE-2000-0064 | Medium | 2000-01-17 | Not applicable | No public exploit | cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters. |
| CVE-2000-0063 | Medium | 2000-01-17 | Not applicable | No public exploit | cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script. |
| CVE-2000-0075 | Medium | 2000-01-13 | Not applicable | Working exploit published | Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session. |
| CVE-2000-0066 | Medium | 2000-01-13 | Not applicable | No public exploit | WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request. |
| CVE-2000-0087 | Medium | 2000-01-12 | Not applicable | No public exploit | Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext. |
| CVE-1999-1002 | Medium | 2000-01-12 | Not applicable | No public exploit | Netscape Navigator uses weak encryption for storing a user's Netscape mail password. |
| CVE-2000-0071 | Medium | 2000-01-11 | Not applicable | Exploited | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. |
| CVE-2000-0045 | Medium | 2000-01-11 | Not applicable | Working exploit published | MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege. |
| CVE-2000-0084 | Medium | 2000-01-06 | Not applicable | No public exploit | CuteFTP uses weak encryption to store password information in its tree.dat file. |
| CVE-2000-0058 | Medium | 2000-01-05 | Not applicable | No public exploit | Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files. |
| CVE-2000-0056 | Medium | 2000-01-05 | Not applicable | Working exploit published | IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi. |
| CVE-2000-0051 | Medium | 2000-01-04 | Not applicable | No public exploit | The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. |
| CVE-2000-0050 | Medium | 2000-01-04 | Not applicable | No public exploit | The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs. |
| CVE-1999-0735 | Medium | 2000-01-04 | Not applicable | Working exploit published | KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. |
| CVE-2000-0082 | Medium | 2000-01-02 | Not applicable | No public exploit | WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML. |
| CVE-2000-0015 | Medium | 1999-12-31 | Not applicable | Working exploit published | CascadeView TFTP server allows local users to gain privileges via a symlink attack. |
| CVE-1999-1488 | Medium | 1999-12-31 | Not applicable | Working exploit published | sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. |
| CVE-1999-1481 | Medium | 1999-12-31 | Not applicable | Working exploit published | Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair. |
| CVE-1999-1473 | Medium | 1999-12-31 | Not applicable | No public exploit | When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue." |
| CVE-1999-1472 | Medium | 1999-12-31 | Not applicable | No public exploit | Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue. |
| CVE-1999-1462 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files. |
| CVE-1999-1456 | Medium | 1999-12-31 | Not applicable | No public exploit | thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename. |
| CVE-1999-1451 | Medium | 1999-12-31 | Not applicable | No public exploit | The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files. |
| CVE-1999-1444 | Medium | 1999-12-31 | Not applicable | No public exploit | genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext. |
| CVE-1999-1386 | Medium | 1999-12-31 | Not applicable | No public exploit | Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file. |
| CVE-1999-1379 | Medium | 1999-12-31 | Not applicable | No public exploit | DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker. |
| CVE-1999-1358 | Medium | 1999-12-31 | Not applicable | No public exploit | When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only. |
| CVE-1999-1339 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command. |
| CVE-1999-1335 | Medium | 1999-12-31 | Not applicable | No public exploit | snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information. |
| CVE-1999-1330 | Medium | 1999-12-31 | Not applicable | No public exploit | The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf. |
| CVE-1999-1320 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing. |
| CVE-1999-1317 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device. |
| CVE-1999-1315 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service. |
| CVE-1999-1290 | Medium | 1999-12-31 | Not applicable | No public exploit | Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string. |
| CVE-1999-1287 | Medium | 1999-12-31 | Not applicable | No public exploit | Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface. |
| CVE-1999-1279 | Medium | 1999-12-31 | Not applicable | No public exploit | An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU. |
| CVE-1999-1223 | Medium | 1999-12-31 | Not applicable | No public exploit | IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters. |
| CVE-1999-1222 | Medium | 1999-12-31 | Not applicable | No public exploit | Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup. |
| CVE-1999-1177 | Medium | 1999-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation. |
| CVE-1999-1167 | Medium | 1999-12-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation. |
| CVE-1999-1157 | Medium | 1999-12-31 | Not applicable | No public exploit | Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface. |
| CVE-1999-1148 | Medium | 1999-12-31 | Not applicable | No public exploit | FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time. |
| CVE-1999-1132 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs. |
| CVE-1999-1105 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive. |
| CVE-1999-1104 | Medium | 1999-12-31 | Not applicable | No public exploit | Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. |
| CVE-1999-1093 | Medium | 1999-12-31 | Not applicable | No public exploit | Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page. |
| CVE-1999-1084 | Medium | 1999-12-31 | Not applicable | Working exploit published | The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash. |
| CVE-1999-1043 | Medium | 1999-12-31 | Not applicable | No public exploit | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error). |
| CVE-1999-1035 | Medium | 1999-12-31 | Not applicable | No public exploit | IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability. |
| CVE-1999-0815 | Medium | 1999-12-31 | Not applicable | No public exploit | Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries. |
| CVE-1999-0154 | Medium | 1999-12-31 | Not applicable | Working exploit published | IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. |
| CVE-1999-0001 | Medium | 1999-12-30 | Not applicable | No public exploit | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. |
| CVE-2000-0039 | Medium | 1999-12-29 | Not applicable | Working exploit published | AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program. |
| CVE-2000-0007 | Medium | 1999-12-29 | Not applicable | No public exploit | Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service. |
| CVE-2000-0041 | Medium | 1999-12-28 | Not applicable | No public exploit | Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack. |
| CVE-2000-0037 | Medium | 1999-12-28 | Not applicable | Working exploit published | Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file. |
| CVE-2000-0035 | Medium | 1999-12-28 | Not applicable | Working exploit published | resend command in Majordomo allows local users to gain privileges via shell metacharacters. |
| CVE-2000-0014 | Medium | 1999-12-28 | Not applicable | Working exploit published | Denial of service in Savant web server via a null character in the requested URL. |
| CVE-2000-0060 | Medium | 1999-12-27 | Not applicable | No public exploit | Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name. |
| CVE-2000-0033 | Medium | 1999-12-27 | Not applicable | No public exploit | InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments. |
| CVE-2000-0029 | Medium | 1999-12-27 | Not applicable | No public exploit | UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. |
| CVE-2000-0027 | Medium | 1999-12-27 | Not applicable | Working exploit published | IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. |