Overview 744 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 236 public PoC · 9 EPSS ≥ 0.5
744matches
0in Waratek scope0.0%
0protected0.0%
1exploited0.1%
0CISA KEV0.0%
236public PoC31.7%
9EPSS ≥ 0.51.2%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.1%
Not applicable
743
99.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
744
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
0.1%
Working exploit published
236
31.7%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
507
68.1%
split by
peak 357 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000166
Not applicable166
Medium166
not blocked166
Exploited1
Working exploit published78
No public exploit87
198919901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0505 | Medium | 2000-05-31 | Not applicable | Working exploit published | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters. |
| CVE-2000-0495 | Medium | 2000-05-30 | Not applicable | Working exploit published | Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. |
| CVE-2000-0486 | Medium | 2000-05-30 | Not applicable | No public exploit | Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field. |
| CVE-2000-0564 | Medium | 2000-05-29 | Not applicable | No public exploit | The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter. |
| CVE-2000-0517 | Medium | 2000-05-26 | Not applicable | No public exploit | Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information. |
| CVE-2000-0404 | Medium | 2000-05-25 | Not applicable | No public exploit | The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability. |
| CVE-2000-0403 | Medium | 2000-05-25 | Not applicable | No public exploit | The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability. |
| CVE-2000-0444 | Medium | 2000-05-24 | Not applicable | Working exploit published | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. |
| CVE-2000-0441 | Medium | 2000-05-24 | Not applicable | No public exploit | Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. |
| CVE-2000-0399 | Medium | 2000-05-24 | Not applicable | No public exploit | Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name. |
| CVE-2000-0396 | Medium | 2000-05-24 | Not applicable | Working exploit published | The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files. |
| CVE-2000-0418 | Medium | 2000-05-23 | Not applicable | Working exploit published | The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. |
| CVE-2000-0451 | Medium | 2000-05-19 | Not applicable | Working exploit published | The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. |
| CVE-2000-0436 | Medium | 2000-05-19 | Not applicable | Working exploit published | MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0463 | Medium | 2000-05-18 | Not applicable | Working exploit published | BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. |
| CVE-2000-0453 | Medium | 2000-05-18 | Not applicable | Working exploit published | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. |
| CVE-2000-0452 | Medium | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command. |
| CVE-2000-0394 | Medium | 2000-05-18 | Not applicable | Working exploit published | NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature. |
| CVE-2000-0465 | Medium | 2000-05-17 | Not applicable | Working exploit published | Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability. |
| CVE-2000-0417 | Medium | 2000-05-17 | Not applicable | Working exploit published | The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password. |
| CVE-2000-0350 | Medium | 2000-05-17 | Not applicable | Working exploit published | A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events. |
| CVE-2000-0395 | Medium | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. |
| CVE-1999-0980 | Medium | 2000-05-16 | Not applicable | Working exploit published | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request. |
| CVE-2000-0397 | Medium | 2000-05-15 | Not applicable | Working exploit published | The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account. |
| CVE-2000-0415 | Medium | 2000-05-12 | Not applicable | No public exploit | Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name. |
| CVE-2000-0416 | Medium | 2000-05-11 | Not applicable | No public exploit | NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server. |
| CVE-2000-0408 | Medium | 2000-05-11 | Not applicable | Working exploit published | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. |
| CVE-2000-0411 | Medium | 2000-05-10 | Not applicable | Working exploit published | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. |
| CVE-2000-0410 | Medium | 2000-05-10 | Not applicable | No public exploit | ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory. |
| CVE-2000-0304 | Medium | 2000-05-10 | Not applicable | No public exploit | Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability. |
| CVE-2000-0383 | Medium | 2000-05-08 | Not applicable | No public exploit | The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient. |
| CVE-2000-0413 | Medium | 2000-05-06 | Not applicable | Working exploit published | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path. |
| CVE-2000-0426 | Medium | 2000-05-05 | Not applicable | Working exploit published | UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself. |
| CVE-2000-0423 | Medium | 2000-05-05 | Not applicable | Working exploit published | Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag. |
| CVE-2000-0381 | Medium | 2000-05-05 | Not applicable | Working exploit published | The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter. |
| CVE-2000-0427 | Medium | 2000-05-04 | Not applicable | Working exploit published | The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM. |
| CVE-2000-0414 | Medium | 2000-05-04 | Not applicable | No public exploit | Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables. |
| CVE-2000-0430 | Medium | 2000-05-03 | Not applicable | Working exploit published | Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request. |
| CVE-2000-0332 | Medium | 2000-05-03 | Not applicable | Working exploit published | UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte. |
| CVE-2000-0303 | Medium | 2000-05-03 | Not applicable | No public exploit | Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack. |
| CVE-2000-0433 | Medium | 2000-05-02 | Not applicable | No public exploit | The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles. |
| CVE-2000-0385 | Medium | 2000-05-02 | Not applicable | No public exploit | FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities. |
| CVE-2000-0347 | Medium | 2000-05-02 | Not applicable | Working exploit published | Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. |
| CVE-2000-0346 | Medium | 2000-05-02 | Not applicable | No public exploit | AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server. |
| CVE-2000-0138 | Medium | 2000-05-02 | Not applicable | No public exploit | A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft. |
| CVE-2000-0448 | Medium | 2000-05-01 | Not applicable | No public exploit | The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command. |
| CVE-2000-0440 | Medium | 2000-05-01 | Not applicable | Working exploit published | NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. |
| CVE-2000-0344 | Medium | 2000-05-01 | Not applicable | No public exploit | The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value. |
| CVE-2000-0341 | Medium | 2000-05-01 | Not applicable | Working exploit published | ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name. |
| CVE-2000-0326 | Medium | 2000-04-25 | Not applicable | No public exploit | Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts. |
| CVE-2000-0324 | Medium | 2000-04-25 | Not applicable | Working exploit published | pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap. |
| CVE-2000-0321 | Medium | 2000-04-24 | Not applicable | No public exploit | Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name. |
| CVE-2000-0338 | Medium | 2000-04-23 | Not applicable | Working exploit published | Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user. |
| CVE-2000-0319 | Medium | 2000-04-23 | Not applicable | No public exploit | mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n. |
| CVE-2000-0459 | Medium | 2000-04-22 | Not applicable | No public exploit | IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request. |
| CVE-2000-0320 | Medium | 2000-04-21 | Not applicable | No public exploit | Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n. |
| CVE-2000-0331 | Medium | 2000-04-20 | Not applicable | No public exploit | Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability. |
| CVE-2000-0268 | Medium | 2000-04-20 | Not applicable | No public exploit | Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot. |
| CVE-2000-0267 | Medium | 2000-04-20 | Not applicable | No public exploit | Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. |
| CVE-2000-0292 | Medium | 2000-04-19 | Not applicable | No public exploit | The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash. |
| CVE-2000-0271 | Medium | 2000-04-18 | Not applicable | No public exploit | read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords. |
| CVE-2000-0083 | Medium | 2000-04-18 | Not applicable | No public exploit | HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges. |
| CVE-2000-0265 | Medium | 2000-04-17 | Not applicable | No public exploit | Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet. |
| CVE-2000-0291 | Medium | 2000-04-16 | Not applicable | No public exploit | Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. |
| CVE-2000-0254 | Medium | 2000-04-14 | Not applicable | Working exploit published | The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables. |
| CVE-2000-0288 | Medium | 2000-04-12 | Not applicable | No public exploit | Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable. |
| CVE-2000-0283 | Medium | 2000-04-12 | Not applicable | No public exploit | The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon. |
| CVE-2000-0282 | Medium | 2000-04-12 | Not applicable | Working exploit published | TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program. |
| CVE-2000-0262 | Medium | 2000-04-12 | Not applicable | Working exploit published | The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. |
| CVE-2000-0261 | Medium | 2000-04-12 | Not applicable | No public exploit | The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0252 | Medium | 2000-04-11 | Not applicable | No public exploit | The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable. |
| CVE-1999-0695 | Medium | 2000-04-11 | Not applicable | No public exploit | The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack. |
| CVE-2000-0273 | Medium | 2000-04-09 | Not applicable | No public exploit | PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt. |
| CVE-2000-0279 | Medium | 2000-04-07 | Not applicable | Working exploit published | BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers. |
| CVE-2000-0301 | Medium | 2000-04-06 | Not applicable | No public exploit | Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command. |
| CVE-2000-0251 | Medium | 2000-04-06 | Not applicable | No public exploit | HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. |
| CVE-2000-0255 | Medium | 2000-04-05 | Not applicable | No public exploit | The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program. |
| CVE-2000-0299 | Medium | 2000-04-04 | Not applicable | Working exploit published | Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept. |
| CVE-2000-0634 | Medium | 2000-04-03 | Not applicable | Working exploit published | The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0297 | Medium | 2000-04-03 | Not applicable | No public exploit | Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables. |
| CVE-2000-0302 | Medium | 2000-03-31 | Not applicable | Working exploit published | Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. |
| CVE-2000-0290 | Medium | 2000-03-31 | Not applicable | No public exploit | Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request. |
| CVE-2000-0234 | Medium | 2000-03-31 | Not applicable | Working exploit published | The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file. |
| CVE-2000-0246 | Medium | 2000-03-30 | Not applicable | Working exploit published | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. |
| CVE-2000-0152 | Medium | 2000-03-30 | Not applicable | Working exploit published | Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. |
| CVE-2000-0289 | Medium | 2000-03-27 | Not applicable | No public exploit | IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection. |
| CVE-2000-0243 | Medium | 2000-03-25 | Not applicable | Working exploit published | AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin. |
| CVE-2000-0242 | Medium | 2000-03-25 | Not applicable | Working exploit published | WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters. |
| CVE-2000-0241 | Medium | 2000-03-21 | Not applicable | No public exploit | vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges. |
| CVE-2000-0240 | Medium | 2000-03-21 | Not applicable | Working exploit published | vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack. |
| CVE-2000-0613 | Medium | 2000-03-20 | Not applicable | Working exploit published | Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections. |
| CVE-2000-0226 | Medium | 2000-03-20 | Not applicable | No public exploit | IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability." |
| CVE-2000-0238 | Medium | 2000-03-17 | Not applicable | No public exploit | Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL. |
| CVE-2000-0236 | Medium | 2000-03-17 | Not applicable | Working exploit published | Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump. |
| CVE-2000-0228 | Medium | 2000-03-17 | Not applicable | No public exploit | Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability. |
| CVE-2000-0239 | Medium | 2000-03-15 | Not applicable | Working exploit published | Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request. |
| CVE-2000-0198 | Medium | 2000-03-15 | Not applicable | Working exploit published | Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service. |
| CVE-2000-0180 | Medium | 2000-03-14 | Not applicable | Working exploit published | Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0237 | Medium | 2000-03-11 | Not applicable | No public exploit | Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories. |
| CVE-2000-0181 | Medium | 2000-03-11 | Not applicable | No public exploit | Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection. |