Overview 1,138 matches · 7 in Waratek scope · 0 protected · 7 exploited · 0 CISA KEV · 393 public PoC · 15 EPSS ≥ 0.5
1,138matches
7in Waratek scope0.6%
0protected0.0%
7exploited0.6%
0CISA KEV0.0%
393public PoC34.5%
15EPSS ≥ 0.51.3%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.2%
No exploit published
5
0.4%
Outside Waratek scope
1
0.1%
Not applicable
1,130
99.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,138
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
7
0.6%
Working exploit published
387
34.0%
Proof of concept only
0
0.0%
Forecast only
2
0.2%
No public exploit
742
65.2%
split by
peak 423 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000318
Mitigation candidate2
No exploit published2
Outside Waratek scope1
Not applicable313
High318
not blocked318
Exploited2
Working exploit published151
Forecast only1
No public exploit164
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0801 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option. |
| CVE-2000-0800 | High | 2000-10-20 | Not applicable | No public exploit | String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges. |
| CVE-2000-0798 | High | 2000-10-20 | Not applicable | Working exploit published | The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files. |
| CVE-2000-0797 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option. |
| CVE-2000-0796 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option. |
| CVE-2000-0795 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. |
| CVE-2000-0794 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview. |
| CVE-2000-0793 | High | 2000-10-20 | Not applicable | No public exploit | Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system. |
| CVE-2000-0792 | High | 2000-10-20 | Not applicable | No public exploit | Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available. |
| CVE-2000-0788 | High | 2000-10-20 | Not applicable | No public exploit | The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands. |
| CVE-2000-0787 | High | 2000-10-20 | Not applicable | Working exploit published | IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser. |
| CVE-2000-0784 | High | 2000-10-20 | Not applicable | No public exploit | sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh. |
| CVE-2000-0781 | High | 2000-10-20 | Not applicable | No public exploit | uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved. |
| CVE-2000-0779 | High | 2000-10-20 | Not applicable | No public exploit | Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests. |
| CVE-2000-0777 | High | 2000-10-20 | Not applicable | No public exploit | The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability. |
| CVE-2000-0776 | High | 2000-10-20 | Not applicable | Working exploit published | Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request. |
| CVE-2000-0775 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers. |
| CVE-2000-0772 | High | 2000-10-20 | Not applicable | No public exploit | The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password. |
| CVE-2000-0769 | High | 2000-10-20 | Not applicable | No public exploit | O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe. |
| CVE-2000-0766 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request. |
| CVE-2000-0763 | High | 2000-10-20 | Not applicable | Working exploit published | xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option. |
| CVE-2000-0762 | High | 2000-10-20 | Not applicable | No public exploit | The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges. |
| CVE-2000-0757 | High | 2000-10-20 | Not applicable | Working exploit published | The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed. |
| CVE-2000-0752 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. |
| CVE-2000-0751 | High | 2000-10-20 | Not applicable | Working exploit published | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands. |
| CVE-2000-0750 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. |
| CVE-2000-0749 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system. |
| CVE-2000-0747 | High | 2000-10-20 | Not applicable | No public exploit | The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. |
| CVE-2000-0746 | High | 2000-10-20 | Not applicable | No public exploit | Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities. |
| CVE-2000-0745 | High | 2000-10-20 | Not applicable | Working exploit published | admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter. |
| CVE-2000-0743 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value. |
| CVE-2000-0741 | High | 2000-10-20 | Not applicable | Working exploit published | Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension. |
| CVE-2000-0733 | High | 2000-10-20 | Not applicable | Working exploit published | Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request. |
| CVE-2000-0728 | High | 2000-10-20 | Not applicable | No public exploit | xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2000-0727 | High | 2000-10-20 | Not applicable | No public exploit | xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters. |
| CVE-2000-0725 | High | 2000-10-20 | Not applicable | No public exploit | Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request. |
| CVE-2000-0714 | High | 2000-10-20 | Not applicable | No public exploit | umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. |
| CVE-2000-0713 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier. |
| CVE-2000-0712 | High | 2000-10-20 | Not applicable | No public exploit | Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. |
| CVE-2000-0711 | High | 2000-10-20 | Not applicable | Working exploit published | Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice. |
| CVE-2000-0707 | High | 2000-10-20 | Not applicable | No public exploit | PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password. |
| CVE-2000-0706 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. |
| CVE-2000-0704 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands. |
| CVE-2000-0703 | High | 2000-10-20 | Not applicable | Working exploit published | suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence. |
| CVE-2000-0702 | High | 2000-10-20 | Not applicable | Working exploit published | The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file. |
| CVE-2000-0699 | High | 2000-10-20 | Not applicable | Working exploit published | Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command. |
| CVE-2000-0697 | High | 2000-10-20 | Not applicable | Working exploit published | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. |
| CVE-2000-0696 | High | 2000-10-20 | Not applicable | Working exploit published | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script. |
| CVE-2000-0695 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. |
| CVE-2000-0694 | High | 2000-10-20 | Not applicable | No public exploit | pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack. |
| CVE-2000-0693 | High | 2000-10-20 | Not applicable | Working exploit published | pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program. |
| CVE-2000-0690 | High | 2000-10-20 | Not applicable | Working exploit published | Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter. |
| CVE-2000-0689 | High | 2000-10-20 | Not applicable | Working exploit published | Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter. |
| CVE-2000-0688 | High | 2000-10-20 | Not applicable | Working exploit published | Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter. |
| CVE-2000-0687 | High | 2000-10-20 | Not applicable | No public exploit | Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter. |
| CVE-2000-0685 | High | 2000-10-20 | Mitigation candidate | Working exploit published | BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file. |
| CVE-2000-0684 | High | 2000-10-20 | Mitigation candidate | Working exploit published | BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file. |
| CVE-2000-0681 | High | 2000-10-20 | Outside Waratek scope | Forecast only | Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. |
| CVE-2000-0680 | High | 2000-10-20 | Not applicable | Working exploit published | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action. |
| CVE-2000-0677 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. |
| CVE-2000-0563 | High | 2000-10-20 | Not applicable | No public exploit | The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model. |
| CVE-2000-0359 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header. |
| CVE-2000-1213 | High | 2000-10-18 | Not applicable | No public exploit | ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges. |
| CVE-2000-1207 | High | 2000-09-30 | Not applicable | No public exploit | userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844). |
| CVE-1999-0761 | High | 2000-09-16 | Not applicable | No public exploit | Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. |
| CVE-2000-1079 | High | 2000-08-29 | Not applicable | No public exploit | Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram. |
| CVE-2000-0624 | High | 2000-07-20 | Not applicable | Working exploit published | Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. |
| CVE-2000-0621 | High | 2000-07-20 | Not applicable | No public exploit | Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability. |
| CVE-2000-0622 | High | 2000-07-19 | Not applicable | Working exploit published | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter. |
| CVE-2000-0627 | High | 2000-07-18 | Not applicable | No public exploit | BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl. |
| CVE-2000-0632 | High | 2000-07-17 | Not applicable | No public exploit | Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string. |
| CVE-2000-0623 | High | 2000-07-17 | Not applicable | No public exploit | Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header. |
| CVE-2000-0666 | High | 2000-07-16 | Not applicable | Working exploit published | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. |
| CVE-2000-0675 | High | 2000-07-13 | Not applicable | Working exploit published | Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. |
| CVE-2000-0670 | High | 2000-07-12 | Not applicable | Working exploit published | The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0629 | High | 2000-07-12 | Not applicable | No public exploit | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet. |
| CVE-2000-0372 | High | 2000-07-12 | Not applicable | No public exploit | Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges. |
| CVE-1999-0812 | High | 2000-07-12 | Not applicable | No public exploit | Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations. |
| CVE-2000-0638 | High | 2000-07-11 | Not applicable | Working exploit published | bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter. |
| CVE-2000-0628 | High | 2000-07-11 | Not applicable | No public exploit | The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files. |
| CVE-2000-0635 | High | 2000-07-10 | Not applicable | No public exploit | The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0614 | High | 2000-07-10 | Not applicable | No public exploit | Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output. |
| CVE-2000-0641 | High | 2000-07-08 | Not applicable | Working exploit published | Savant web server allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-2000-0640 | High | 2000-07-08 | Not applicable | Working exploit published | Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not. |
| CVE-2000-0651 | High | 2000-07-07 | Not applicable | No public exploit | The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine. |
| CVE-2000-0573 | High | 2000-07-07 | Not applicable | Working exploit published | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command. |
| CVE-2000-0575 | High | 2000-07-05 | Not applicable | No public exploit | SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS. |
| CVE-2000-0590 | High | 2000-07-04 | Not applicable | Working exploit published | Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter. |
| CVE-2000-0566 | High | 2000-07-03 | Not applicable | No public exploit | makewhatis in Linux man package allows local users to overwrite files via a symlink attack. |
| CVE-2000-0584 | High | 2000-07-02 | Not applicable | Working exploit published | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. |
| CVE-2000-0599 | High | 2000-06-29 | Not applicable | No public exploit | Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port. |
| CVE-2000-0586 | High | 2000-06-29 | Not applicable | Working exploit published | Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command. |
| CVE-2000-0597 | High | 2000-06-27 | Not applicable | No public exploit | Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability. |
| CVE-2000-0596 | High | 2000-06-27 | Not applicable | No public exploit | Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability. |
| CVE-2000-0592 | High | 2000-06-27 | Not applicable | Working exploit published | Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands. |
| CVE-2000-0600 | High | 2000-06-26 | Not applicable | No public exploit | Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL. |
| CVE-2000-0589 | High | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration. |
| CVE-2000-0587 | High | 2000-06-26 | Not applicable | No public exploit | The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability. |
| CVE-2000-0585 | High | 2000-06-24 | Not applicable | No public exploit | ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0562 | High | 2000-06-22 | Not applicable | No public exploit | BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower. |