Overview 1,274 matches · 8 in Waratek scope · 0 protected · 8 exploited · 0 CISA KEV · 440 public PoC · 19 EPSS ≥ 0.5
1,274matches
8in Waratek scope0.6%
0protected0.0%
8exploited0.6%
0CISA KEV0.0%
440public PoC34.5%
19EPSS ≥ 0.51.5%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
2
0.2%
No exploit published
6
0.5%
Outside Waratek scope
2
0.2%
Not applicable
1,264
99.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,274
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
8
0.6%
Working exploit published
433
34.0%
Proof of concept only
0
0.0%
Forecast only
2
0.2%
No public exploit
831
65.2%
split by
peak 454 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19892
Not applicable2
High2
not blocked2
No public exploit2
19908
Not applicable8
High8
not blocked8
No public exploit8
199111
Not applicable11
High11
not blocked11
Working exploit published2
No public exploit9
199212
Not applicable12
High12
not blocked12
No public exploit12
19938
Not applicable8
High8
not blocked8
No public exploit8
199414
Not applicable14
High14
not blocked14
Working exploit published3
No public exploit11
199517
Not applicable17
High17
not blocked17
Working exploit published2
No public exploit15
199643
No exploit published1
Not applicable42
High43
not blocked43
Working exploit published12
Forecast only1
No public exploit30
1997143
Not applicable143
High143
not blocked143
Exploited2
Working exploit published51
No public exploit90
1998137
Not applicable137
High137
not blocked137
Exploited1
Working exploit published33
No public exploit103
1999423
No exploit published2
Not applicable421
High423
not blocked423
Exploited2
Working exploit published132
No public exploit289
2000454
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable447
High454
not blocked454
Exploited3
Working exploit published197
Forecast only1
No public exploit253
1988199019921994199619982000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-1244 | High | 2000-12-31 | Not applicable | Working exploit published | Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection. |
| CVE-2000-1242 | High | 2000-12-31 | Not applicable | No public exploit | The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access. |
| CVE-2000-1241 | High | 2000-12-31 | Not applicable | No public exploit | Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault." |
| CVE-2000-1239 | High | 2000-12-31 | Not applicable | No public exploit | The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files. |
| CVE-2000-1238 | High | 2000-12-31 | No exploit published | No public exploit | BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages. |
| CVE-2000-1236 | High | 2000-12-31 | Not applicable | No public exploit | SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL. |
| CVE-2000-1233 | High | 2000-12-31 | Not applicable | No public exploit | SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter. |
| CVE-1999-0307 | High | 2000-12-20 | Not applicable | No public exploit | Buffer overflow in HP-UX cstm program allows local users to gain root privileges. |
| CVE-2000-0997 | High | 2000-12-19 | Not applicable | No public exploit | Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges. |
| CVE-2000-0996 | High | 2000-12-19 | Not applicable | No public exploit | Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell. |
| CVE-2000-0995 | High | 2000-12-19 | Not applicable | No public exploit | Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name. |
| CVE-2000-0994 | High | 2000-12-19 | Not applicable | Working exploit published | Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable. |
| CVE-2000-0993 | High | 2000-12-19 | Not applicable | Working exploit published | Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd. |
| CVE-2000-0991 | High | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability. |
| CVE-2000-0990 | High | 2000-12-19 | Not applicable | No public exploit | cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username. |
| CVE-2000-0988 | High | 2000-12-19 | Not applicable | No public exploit | WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration. |
| CVE-2000-0985 | High | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command. |
| CVE-2000-0982 | High | 2000-12-19 | Not applicable | No public exploit | Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability. |
| CVE-2000-0981 | High | 2000-12-19 | Not applicable | No public exploit | MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password. |
| CVE-2000-0978 | High | 2000-12-19 | Not applicable | No public exploit | bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter. |
| CVE-2000-0974 | High | 2000-12-19 | Not applicable | No public exploit | GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection. |
| CVE-2000-0973 | High | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated. |
| CVE-2000-0971 | High | 2000-12-19 | Not applicable | Working exploit published | Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command. |
| CVE-2000-0970 | High | 2000-12-19 | Not applicable | No public exploit | IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability. |
| CVE-2000-0969 | High | 2000-12-19 | Not applicable | No public exploit | Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon. |
| CVE-2000-0968 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command. |
| CVE-2000-0967 | High | 2000-12-19 | Not applicable | Working exploit published | PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs. |
| CVE-2000-0964 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request. |
| CVE-2000-0963 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. |
| CVE-2000-0961 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command. |
| CVE-2000-0957 | High | 2000-12-19 | Not applicable | No public exploit | The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes. |
| CVE-2000-0955 | High | 2000-12-19 | Not applicable | Working exploit published | Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges. |
| CVE-2000-0954 | High | 2000-12-19 | Not applicable | No public exploit | Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server. |
| CVE-2000-0952 | High | 2000-12-19 | Not applicable | No public exploit | global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0950 | High | 2000-12-19 | Not applicable | No public exploit | Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name. |
| CVE-2000-0949 | High | 2000-12-19 | Not applicable | Working exploit published | Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. |
| CVE-2000-0948 | High | 2000-12-19 | Not applicable | No public exploit | GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. |
| CVE-2000-0947 | High | 2000-12-19 | Not applicable | No public exploit | Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command. |
| CVE-2000-0945 | High | 2000-12-19 | Not applicable | Working exploit published | The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory. |
| CVE-2000-0943 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command. |
| CVE-2000-0941 | High | 2000-12-19 | Not applicable | Working exploit published | Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter. |
| CVE-2000-0937 | High | 2000-12-19 | Not applicable | Working exploit published | Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks. |
| CVE-2000-0935 | High | 2000-12-19 | Not applicable | Working exploit published | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file. |
| CVE-2000-0934 | High | 2000-12-19 | Not applicable | No public exploit | Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. |
| CVE-2000-0931 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data. |
| CVE-2000-0926 | High | 2000-12-19 | Not applicable | Working exploit published | SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable. |
| CVE-2000-0923 | High | 2000-12-19 | Not applicable | No public exploit | authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. |
| CVE-2000-0918 | High | 2000-12-19 | Not applicable | No public exploit | Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters. |
| CVE-2000-0917 | High | 2000-12-19 | Not applicable | Working exploit published | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. |
| CVE-2000-0916 | High | 2000-12-19 | Not applicable | Working exploit published | FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections. |
| CVE-2000-0909 | High | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header. |
| CVE-2000-0907 | High | 2000-12-19 | Not applicable | No public exploit | EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands. |
| CVE-2000-0900 | High | 2000-12-19 | Not applicable | No public exploit | Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack. |
| CVE-2000-0886 | High | 2000-12-19 | Not applicable | Working exploit published | IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability. |
| CVE-2000-0885 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is highly likely that this candidate will be split into multiple candidates. |
| CVE-2000-0884 | High | 2000-12-19 | Not applicable | Exploited | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability. |
| CVE-2000-0818 | High | 2000-12-19 | Not applicable | No public exploit | The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands. |
| CVE-2000-0817 | High | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability. |
| CVE-2000-0810 | High | 2000-12-19 | Not applicable | No public exploit | Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack. |
| CVE-2000-0803 | High | 2000-12-19 | Not applicable | No public exploit | GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff. |
| CVE-2000-1211 | High | 2000-12-16 | Not applicable | No public exploit | Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities. |
| CVE-2000-1077 | High | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension. |
| CVE-2000-1076 | High | 2000-12-11 | Not applicable | No public exploit | Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server. |
| CVE-2000-1074 | High | 2000-12-11 | Not applicable | Working exploit published | csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory. |
| CVE-2000-1073 | High | 2000-12-11 | Not applicable | No public exploit | csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory. |
| CVE-2000-1072 | High | 2000-12-11 | Not applicable | Working exploit published | iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse. |
| CVE-2000-1071 | High | 2000-12-11 | Not applicable | No public exploit | The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges. |
| CVE-2000-1068 | High | 2000-12-11 | Not applicable | No public exploit | pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter. |
| CVE-2000-1059 | High | 2000-12-11 | Not applicable | No public exploit | The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges. |
| CVE-2000-1056 | High | 2000-12-11 | Not applicable | No public exploit | CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords. |
| CVE-2000-1055 | High | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet. |
| CVE-2000-1054 | High | 2000-12-11 | Not applicable | Working exploit published | Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet. |
| CVE-2000-1053 | High | 2000-12-11 | Not applicable | Working exploit published | Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet. |
| CVE-2000-1047 | High | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the "MAIL FROM" command. |
| CVE-2000-1046 | High | 2000-12-11 | Not applicable | Working exploit published | Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands. |
| CVE-2000-1044 | High | 2000-12-11 | Not applicable | No public exploit | Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges. |
| CVE-2000-1043 | High | 2000-12-11 | Not applicable | No public exploit | Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function. |
| CVE-2000-1042 | High | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function. |
| CVE-2000-1041 | High | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges. |
| CVE-2000-1040 | High | 2000-12-11 | Not applicable | No public exploit | Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service. |
| CVE-2000-1037 | High | 2000-12-11 | Not applicable | Working exploit published | Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack. |
| CVE-2000-1035 | High | 2000-12-11 | Not applicable | Working exploit published | Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command. |
| CVE-2000-1034 | High | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability. |
| CVE-2000-1033 | High | 2000-12-11 | Not applicable | Working exploit published | Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users. |
| CVE-2000-1029 | High | 2000-12-11 | Not applicable | Working exploit published | Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query. |
| CVE-2000-1028 | High | 2000-12-11 | Not applicable | Working exploit published | Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. |
| CVE-2000-1026 | High | 2000-12-11 | Not applicable | Working exploit published | Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands. |
| CVE-2000-1024 | High | 2000-12-11 | Not applicable | No public exploit | eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands. |
| CVE-2000-1023 | High | 2000-12-11 | Not applicable | Working exploit published | The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program. |
| CVE-2000-1022 | High | 2000-12-11 | Not applicable | Working exploit published | The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands. |
| CVE-2000-1021 | High | 2000-12-11 | Not applicable | Working exploit published | Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL. |
| CVE-2000-1020 | High | 2000-12-11 | Not applicable | No public exploit | Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL. |
| CVE-2000-1015 | High | 2000-12-11 | Not applicable | No public exploit | The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands. |
| CVE-2000-1014 | High | 2000-12-11 | Not applicable | Working exploit published | Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter. |
| CVE-2000-1013 | High | 2000-12-11 | Not applicable | No public exploit | The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. |
| CVE-2000-1012 | High | 2000-12-11 | Not applicable | No public exploit | The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. |
| CVE-2000-1011 | High | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable. |
| CVE-2000-1010 | High | 2000-12-11 | Not applicable | No public exploit | Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters. |
| CVE-2000-1009 | High | 2000-12-11 | Not applicable | Working exploit published | dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program. |
| CVE-2000-1001 | High | 2000-12-11 | Not applicable | No public exploit | add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable. |