Overview 1,171 matches · 7 in Waratek scope · 0 protected · 7 exploited · 0 CISA KEV · 403 public PoC · 15 EPSS ≥ 0.5
1,171matches
7in Waratek scope0.6%
0protected0.0%
7exploited0.6%
0CISA KEV0.0%
403public PoC34.4%
15EPSS ≥ 0.51.3%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.2%
No exploit published
5
0.4%
Outside Waratek scope
2
0.2%
Not applicable
1,162
99.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,171
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
7
0.6%
Working exploit published
397
33.9%
Proof of concept only
0
0.0%
Forecast only
2
0.2%
No public exploit
765
65.3%
split by
peak 423 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000351
Mitigation candidate2
No exploit published2
Outside Waratek scope2
Not applicable345
High351
not blocked351
Exploited2
Working exploit published161
Forecast only1
No public exploit187
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-1223 | High | 2000-11-20 | Not applicable | No public exploit | quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request. |
| CVE-2000-0878 | High | 2000-11-14 | Not applicable | No public exploit | The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field. |
| CVE-2000-0870 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string. |
| CVE-2000-0867 | High | 2000-11-14 | Not applicable | No public exploit | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. |
| CVE-2000-0865 | High | 2000-11-14 | Not applicable | Working exploit published | Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument. |
| CVE-2000-0863 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges. |
| CVE-2000-0861 | High | 2000-11-14 | Not applicable | No public exploit | Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion. |
| CVE-2000-0857 | High | 2000-11-14 | Not applicable | No public exploit | The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname. |
| CVE-2000-0856 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request. |
| CVE-2000-0854 | High | 2000-11-14 | Not applicable | Working exploit published | When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document. |
| CVE-2000-0852 | High | 2000-11-14 | Not applicable | No public exploit | Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges. |
| CVE-2000-0850 | High | 2000-11-14 | Not applicable | No public exploit | Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL. |
| CVE-2000-0848 | High | 2000-11-14 | Outside Waratek scope | Working exploit published | Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header. |
| CVE-2000-0847 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header. |
| CVE-2000-0846 | High | 2000-11-14 | Not applicable | Working exploit published | Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password. |
| CVE-2000-0844 | High | 2000-11-14 | Not applicable | Working exploit published | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. |
| CVE-2000-0843 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name. |
| CVE-2000-0841 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command. |
| CVE-2000-0840 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command. |
| CVE-2000-0836 | High | 2000-11-14 | Not applicable | Working exploit published | Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header. |
| CVE-2000-0834 | High | 2000-11-14 | Not applicable | Working exploit published | The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability. |
| CVE-2000-0833 | High | 2000-11-14 | Not applicable | Working exploit published | Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command. |
| CVE-2000-0831 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username. |
| CVE-2000-0828 | High | 2000-11-14 | Not applicable | Working exploit published | Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter. |
| CVE-2000-0827 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username. |
| CVE-2000-0826 | High | 2000-11-14 | Not applicable | No public exploit | Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-2000-0824 | High | 2000-11-14 | Not applicable | Working exploit published | The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH. |
| CVE-2000-0812 | High | 2000-11-14 | Not applicable | No public exploit | The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag. |
| CVE-2000-0808 | High | 2000-11-14 | Not applicable | No public exploit | The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time (s/key) Password Authentication." |
| CVE-2000-0807 | High | 2000-11-14 | Not applicable | No public exploit | The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability." |
| CVE-2000-0805 | High | 2000-11-14 | Not applicable | No public exploit | Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets." |
| CVE-2000-0804 | High | 2000-11-14 | Not applicable | No public exploit | Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass." |
| CVE-2000-1219 | High | 2000-11-01 | Not applicable | No public exploit | The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows. |
| CVE-2000-0801 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option. |
| CVE-2000-0800 | High | 2000-10-20 | Not applicable | No public exploit | String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges. |
| CVE-2000-0798 | High | 2000-10-20 | Not applicable | Working exploit published | The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files. |
| CVE-2000-0797 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option. |
| CVE-2000-0796 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option. |
| CVE-2000-0795 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. |
| CVE-2000-0794 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview. |
| CVE-2000-0793 | High | 2000-10-20 | Not applicable | No public exploit | Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system. |
| CVE-2000-0792 | High | 2000-10-20 | Not applicable | No public exploit | Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available. |
| CVE-2000-0788 | High | 2000-10-20 | Not applicable | No public exploit | The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands. |
| CVE-2000-0787 | High | 2000-10-20 | Not applicable | Working exploit published | IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser. |
| CVE-2000-0784 | High | 2000-10-20 | Not applicable | No public exploit | sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh. |
| CVE-2000-0781 | High | 2000-10-20 | Not applicable | No public exploit | uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved. |
| CVE-2000-0779 | High | 2000-10-20 | Not applicable | No public exploit | Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests. |
| CVE-2000-0777 | High | 2000-10-20 | Not applicable | No public exploit | The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability. |
| CVE-2000-0776 | High | 2000-10-20 | Not applicable | Working exploit published | Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request. |
| CVE-2000-0775 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers. |
| CVE-2000-0772 | High | 2000-10-20 | Not applicable | No public exploit | The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password. |
| CVE-2000-0769 | High | 2000-10-20 | Not applicable | No public exploit | O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe. |
| CVE-2000-0766 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request. |
| CVE-2000-0763 | High | 2000-10-20 | Not applicable | Working exploit published | xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option. |
| CVE-2000-0762 | High | 2000-10-20 | Not applicable | No public exploit | The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges. |
| CVE-2000-0757 | High | 2000-10-20 | Not applicable | Working exploit published | The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed. |
| CVE-2000-0752 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. |
| CVE-2000-0751 | High | 2000-10-20 | Not applicable | Working exploit published | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands. |
| CVE-2000-0750 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. |
| CVE-2000-0749 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system. |
| CVE-2000-0747 | High | 2000-10-20 | Not applicable | No public exploit | The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. |
| CVE-2000-0746 | High | 2000-10-20 | Not applicable | No public exploit | Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities. |
| CVE-2000-0745 | High | 2000-10-20 | Not applicable | Working exploit published | admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter. |
| CVE-2000-0743 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value. |
| CVE-2000-0741 | High | 2000-10-20 | Not applicable | Working exploit published | Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension. |
| CVE-2000-0733 | High | 2000-10-20 | Not applicable | Working exploit published | Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request. |
| CVE-2000-0728 | High | 2000-10-20 | Not applicable | No public exploit | xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2000-0727 | High | 2000-10-20 | Not applicable | No public exploit | xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters. |
| CVE-2000-0725 | High | 2000-10-20 | Not applicable | No public exploit | Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request. |
| CVE-2000-0714 | High | 2000-10-20 | Not applicable | No public exploit | umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. |
| CVE-2000-0713 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier. |
| CVE-2000-0712 | High | 2000-10-20 | Not applicable | No public exploit | Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. |
| CVE-2000-0711 | High | 2000-10-20 | Not applicable | Working exploit published | Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice. |
| CVE-2000-0707 | High | 2000-10-20 | Not applicable | No public exploit | PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password. |
| CVE-2000-0706 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. |
| CVE-2000-0704 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands. |
| CVE-2000-0703 | High | 2000-10-20 | Not applicable | Working exploit published | suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence. |
| CVE-2000-0702 | High | 2000-10-20 | Not applicable | Working exploit published | The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file. |
| CVE-2000-0699 | High | 2000-10-20 | Not applicable | Working exploit published | Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command. |
| CVE-2000-0697 | High | 2000-10-20 | Not applicable | Working exploit published | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. |
| CVE-2000-0696 | High | 2000-10-20 | Not applicable | Working exploit published | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script. |
| CVE-2000-0695 | High | 2000-10-20 | Not applicable | Working exploit published | Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. |
| CVE-2000-0694 | High | 2000-10-20 | Not applicable | No public exploit | pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack. |
| CVE-2000-0693 | High | 2000-10-20 | Not applicable | Working exploit published | pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program. |
| CVE-2000-0690 | High | 2000-10-20 | Not applicable | Working exploit published | Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter. |
| CVE-2000-0689 | High | 2000-10-20 | Not applicable | Working exploit published | Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter. |
| CVE-2000-0688 | High | 2000-10-20 | Not applicable | Working exploit published | Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter. |
| CVE-2000-0687 | High | 2000-10-20 | Not applicable | No public exploit | Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter. |
| CVE-2000-0685 | High | 2000-10-20 | Mitigation candidate | Working exploit published | BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file. |
| CVE-2000-0684 | High | 2000-10-20 | Mitigation candidate | Working exploit published | BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file. |
| CVE-2000-0681 | High | 2000-10-20 | Outside Waratek scope | Forecast only | Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. |
| CVE-2000-0680 | High | 2000-10-20 | Not applicable | Working exploit published | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action. |
| CVE-2000-0677 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. |
| CVE-2000-0563 | High | 2000-10-20 | Not applicable | No public exploit | The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model. |
| CVE-2000-0359 | High | 2000-10-20 | Not applicable | No public exploit | Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header. |
| CVE-2000-1213 | High | 2000-10-18 | Not applicable | No public exploit | ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges. |
| CVE-2000-1207 | High | 2000-09-30 | Not applicable | No public exploit | userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844). |
| CVE-1999-0761 | High | 2000-09-16 | Not applicable | No public exploit | Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. |
| CVE-2000-1079 | High | 2000-08-29 | Not applicable | No public exploit | Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram. |
| CVE-2000-0624 | High | 2000-07-20 | Not applicable | Working exploit published | Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. |