Overview 853 matches · 3 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 284 public PoC · 12 EPSS ≥ 0.5
853matches
3in Waratek scope0.4%
0protected0.0%
1exploited0.1%
0CISA KEV0.0%
284public PoC33.3%
12EPSS ≥ 0.51.4%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.2%
No exploit published
1
0.1%
Outside Waratek scope
1
0.1%
Not applicable
849
99.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
853
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
0.1%
Working exploit published
284
33.3%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
568
66.6%
split by
peak 357 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000275
Mitigation candidate2
No exploit published1
Not applicable272
Medium275
not blocked275
Exploited1
Working exploit published126
No public exploit148
198919901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0354 | Medium | 2000-09-28 | Not applicable | No public exploit | mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory. |
| CVE-2000-0545 | Medium | 2000-08-08 | Not applicable | Working exploit published | Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter. |
| CVE-2000-0278 | Medium | 2000-08-03 | Not applicable | Working exploit published | The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user. |
| CVE-2000-0673 | Medium | 2000-07-27 | Not applicable | Working exploit published | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability. |
| CVE-2000-0668 | Medium | 2000-07-27 | Not applicable | Working exploit published | pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled. |
| CVE-2000-0664 | Medium | 2000-07-26 | Not applicable | Working exploit published | AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots. |
| CVE-2000-0637 | Medium | 2000-07-26 | Not applicable | No public exploit | Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability. |
| CVE-2000-0663 | Medium | 2000-07-25 | Not applicable | No public exploit | The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability. |
| CVE-2000-0659 | Medium | 2000-07-25 | Not applicable | No public exploit | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. |
| CVE-2000-0658 | Medium | 2000-07-25 | Not applicable | No public exploit | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol. |
| CVE-2000-0657 | Medium | 2000-07-25 | Not applicable | No public exploit | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol. |
| CVE-2000-0656 | Medium | 2000-07-25 | Not applicable | Working exploit published | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol. |
| CVE-2000-0655 | Medium | 2000-07-25 | Not applicable | Working exploit published | Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1. |
| CVE-2000-0652 | Medium | 2000-07-24 | Mitigation candidate | Working exploit published | IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string. |
| CVE-2000-0671 | Medium | 2000-07-21 | Not applicable | Working exploit published | Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL. |
| CVE-2000-0647 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. |
| CVE-2000-0646 | Medium | 2000-07-21 | Not applicable | No public exploit | WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred. |
| CVE-2000-0645 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). |
| CVE-2000-0644 | Medium | 2000-07-21 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing. |
| CVE-2000-0672 | Medium | 2000-07-20 | No exploit published | No public exploit | The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory. |
| CVE-2000-0653 | Medium | 2000-07-20 | Not applicable | Working exploit published | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. |
| CVE-2000-0636 | Medium | 2000-07-19 | Not applicable | Working exploit published | HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command. |
| CVE-2000-0619 | Medium | 2000-07-19 | Not applicable | No public exploit | Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets. |
| CVE-2000-0626 | Medium | 2000-07-18 | Not applicable | Working exploit published | Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request. |
| CVE-2000-0625 | Medium | 2000-07-18 | Not applicable | Working exploit published | NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password. |
| CVE-2000-0567 | Medium | 2000-07-18 | Not applicable | Working exploit published | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability. |
| CVE-2000-0665 | Medium | 2000-07-17 | Not applicable | Working exploit published | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. |
| CVE-2000-0630 | Medium | 2000-07-17 | Not applicable | Working exploit published | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. |
| CVE-2000-0662 | Medium | 2000-07-14 | Not applicable | No public exploit | Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED). |
| CVE-2000-0631 | Medium | 2000-07-14 | Not applicable | No public exploit | An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability. |
| CVE-2000-0674 | Medium | 2000-07-12 | Not applicable | No public exploit | ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack. |
| CVE-2000-0660 | Medium | 2000-07-12 | Not applicable | Working exploit published | The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0643 | Medium | 2000-07-12 | Not applicable | No public exploit | Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL. |
| CVE-2000-0642 | Medium | 2000-07-12 | Not applicable | No public exploit | The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page. |
| CVE-2000-0669 | Medium | 2000-07-11 | Not applicable | Working exploit published | Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. |
| CVE-2000-0654 | Medium | 2000-07-11 | Not applicable | No public exploit | Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability. |
| CVE-2000-0648 | Medium | 2000-07-11 | Not applicable | Working exploit published | WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command. |
| CVE-2000-0661 | Medium | 2000-07-10 | Not applicable | No public exploit | WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port. |
| CVE-2000-0603 | Medium | 2000-07-07 | Not applicable | No public exploit | Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability. |
| CVE-2000-0574 | Medium | 2000-07-07 | Not applicable | Working exploit published | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands. |
| CVE-2000-0595 | Medium | 2000-07-05 | Not applicable | No public exploit | libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory. |
| CVE-2000-0591 | Medium | 2000-07-05 | Not applicable | No public exploit | Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL. |
| CVE-2000-0576 | Medium | 2000-07-05 | Not applicable | No public exploit | Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL. |
| CVE-2000-0572 | Medium | 2000-07-05 | Not applicable | Working exploit published | The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges. |
| CVE-2000-0571 | Medium | 2000-07-05 | Not applicable | Working exploit published | LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request. |
| CVE-2000-0594 | Medium | 2000-07-04 | Not applicable | Working exploit published | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters. |
| CVE-2000-0583 | Medium | 2000-06-30 | Not applicable | No public exploit | vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives. |
| CVE-2000-0582 | Medium | 2000-06-30 | Not applicable | Working exploit published | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy. |
| CVE-2000-0581 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash. |
| CVE-2000-0580 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization. |
| CVE-2000-0569 | Medium | 2000-06-30 | Not applicable | Working exploit published | Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. |
| CVE-2000-0568 | Medium | 2000-06-30 | Not applicable | No public exploit | Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes. |
| CVE-2000-0612 | Medium | 2000-06-29 | Not applicable | No public exploit | Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table. |
| CVE-2000-0593 | Medium | 2000-06-27 | Not applicable | No public exploit | WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number. |
| CVE-2000-0570 | Medium | 2000-06-27 | Not applicable | Working exploit published | FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. |
| CVE-2000-0616 | Medium | 2000-06-26 | Not applicable | No public exploit | Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS. |
| CVE-2000-0598 | Medium | 2000-06-26 | Not applicable | No public exploit | Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy. |
| CVE-2000-0588 | Medium | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands. |
| CVE-2000-0601 | Medium | 2000-06-25 | Not applicable | Working exploit published | LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. |
| CVE-2000-0611 | Medium | 2000-06-23 | Not applicable | No public exploit | The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service. |
| CVE-2000-0610 | Medium | 2000-06-23 | Not applicable | No public exploit | NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return. |
| CVE-2000-0618 | Medium | 2000-06-22 | Not applicable | No public exploit | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable. |
| CVE-2000-0617 | Medium | 2000-06-22 | Not applicable | Working exploit published | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable. |
| CVE-2000-0540 | Medium | 2000-06-22 | Not applicable | No public exploit | JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information. |
| CVE-2000-0539 | Medium | 2000-06-22 | Not applicable | No public exploit | Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet. |
| CVE-2000-0609 | Medium | 2000-06-21 | Not applicable | No public exploit | NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter. |
| CVE-2000-0608 | Medium | 2000-06-21 | Not applicable | No public exploit | NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost). |
| CVE-2000-0604 | Medium | 2000-06-21 | Not applicable | No public exploit | gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp. |
| CVE-2000-0602 | Medium | 2000-06-21 | Not applicable | No public exploit | Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environmental variable. |
| CVE-2000-0513 | Medium | 2000-06-21 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password. |
| CVE-2000-0511 | Medium | 2000-06-21 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request. |
| CVE-2000-0510 | Medium | 2000-06-21 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request. |
| CVE-2000-0500 | Medium | 2000-06-21 | Mitigation candidate | Working exploit published | The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing. |
| CVE-2000-0620 | Medium | 2000-06-19 | Not applicable | No public exploit | libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop. |
| CVE-2000-0529 | Medium | 2000-06-19 | Not applicable | No public exploit | Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request. |
| CVE-2000-0528 | Medium | 2000-06-19 | Not applicable | No public exploit | Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files. |
| CVE-2000-0504 | Medium | 2000-06-19 | Not applicable | Working exploit published | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. |
| CVE-2000-0512 | Medium | 2000-06-16 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service. |
| CVE-2000-0480 | Medium | 2000-06-16 | Not applicable | Working exploit published | Dragon telnet server allows remote attackers to cause a denial of service via a long username. |
| CVE-2000-0479 | Medium | 2000-06-16 | Not applicable | No public exploit | Dragon FTP server allows remote attackers to cause a denial of service via a long USER command. |
| CVE-2000-0484 | Medium | 2000-06-15 | Not applicable | Working exploit published | Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service. |
| CVE-2000-0475 | Medium | 2000-06-15 | Not applicable | No public exploit | Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability. |
| CVE-2000-0543 | Medium | 2000-06-14 | Not applicable | No public exploit | The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000. |
| CVE-2000-0478 | Medium | 2000-06-14 | Not applicable | No public exploit | In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server. |
| CVE-2000-0477 | Medium | 2000-06-14 | Not applicable | No public exploit | Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names. |
| CVE-2000-0542 | Medium | 2000-06-13 | Not applicable | No public exploit | Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds. |
| CVE-2000-0535 | Medium | 2000-06-12 | Not applicable | No public exploit | OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken. |
| CVE-2000-0555 | Medium | 2000-06-09 | Not applicable | No public exploit | Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests. |
| CVE-2000-0550 | Medium | 2000-06-09 | Not applicable | No public exploit | Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service. |
| CVE-2000-0549 | Medium | 2000-06-09 | Not applicable | No public exploit | Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request. |
| CVE-2000-0548 | Medium | 2000-06-09 | Not applicable | No public exploit | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function. |
| CVE-2000-0547 | Medium | 2000-06-09 | Not applicable | No public exploit | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function. |
| CVE-2000-0546 | Medium | 2000-06-09 | Not applicable | No public exploit | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function. |
| CVE-2000-0526 | Medium | 2000-06-09 | Not applicable | Working exploit published | mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0554 | Medium | 2000-06-08 | Not applicable | No public exploit | Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field. |
| CVE-2000-0522 | Medium | 2000-06-08 | Not applicable | No public exploit | RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash. |
| CVE-2000-0377 | Medium | 2000-06-08 | Not applicable | Working exploit published | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability. |
| CVE-2000-0538 | Medium | 2000-06-07 | Not applicable | Working exploit published | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. |
| CVE-2000-0534 | Medium | 2000-06-07 | Not applicable | No public exploit | The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user. |
| CVE-2000-0552 | Medium | 2000-06-06 | Not applicable | Working exploit published | ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. |