Overview 1,045 matches · 7 in Waratek scope · 0 protected · 2 exploited · 0 CISA KEV · 354 public PoC · 16 EPSS ≥ 0.5
1,045matches
7in Waratek scope0.7%
0protected0.0%
2exploited0.2%
0CISA KEV0.0%
354public PoC33.9%
16EPSS ≥ 0.51.5%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
4
0.4%
No exploit published
3
0.3%
Outside Waratek scope
1
0.1%
Not applicable
1,037
99.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,045
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
2
0.2%
Working exploit published
353
33.8%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
690
66.0%
split by
peak 467 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000467
Mitigation candidate4
No exploit published3
Not applicable460
Medium467
not blocked467
Exploited2
Working exploit published195
No public exploit270
198919901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-1243 | Medium | 2000-12-31 | Not applicable | No public exploit | Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers. |
| CVE-2000-1240 | Medium | 2000-12-31 | Not applicable | No public exploit | Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path. NOTE: the provenance of this information is unknown; the details are obtained from third party information. |
| CVE-2000-1237 | Medium | 2000-12-31 | Not applicable | No public exploit | The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing. |
| CVE-2000-1235 | Medium | 2000-12-31 | Not applicable | No public exploit | The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files. |
| CVE-2000-1234 | Medium | 2000-12-31 | Not applicable | Working exploit published | violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters. |
| CVE-2000-1232 | Medium | 2000-12-31 | Not applicable | No public exploit | upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method. |
| CVE-2000-1231 | Medium | 2000-12-31 | Not applicable | No public exploit | code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string. |
| CVE-2000-1230 | Medium | 2000-12-31 | Not applicable | Working exploit published | Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman". |
| CVE-2000-1229 | Medium | 2000-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings administrative function, which causes the file to be displayed in admin.php3. |
| CVE-2000-1228 | Medium | 2000-12-31 | Not applicable | Working exploit published | Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables. |
| CVE-2000-1227 | Medium | 2000-12-31 | Not applicable | No public exploit | Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back. |
| CVE-2000-1226 | Medium | 2000-12-31 | Not applicable | No public exploit | Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan. |
| CVE-2000-1225 | Medium | 2000-12-31 | Not applicable | No public exploit | Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program. |
| CVE-2000-0992 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0989 | Medium | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username. |
| CVE-2000-0987 | Medium | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter. |
| CVE-2000-0986 | Medium | 2000-12-19 | Not applicable | No public exploit | Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable. |
| CVE-2000-0984 | Medium | 2000-12-19 | Not applicable | Exploited | The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. |
| CVE-2000-0983 | Medium | 2000-12-19 | Not applicable | Working exploit published | Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the "NetMeeting Desktop Sharing" vulnerability. |
| CVE-2000-0980 | Medium | 2000-12-19 | Not applicable | No public exploit | NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network. |
| CVE-2000-0979 | Medium | 2000-12-19 | Not applicable | Working exploit published | File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability. |
| CVE-2000-0977 | Medium | 2000-12-19 | Not applicable | Working exploit published | mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter. |
| CVE-2000-0976 | Medium | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter. |
| CVE-2000-0975 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0972 | Medium | 2000-12-19 | Not applicable | Working exploit published | HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates. |
| CVE-2000-0966 | Medium | 2000-12-19 | Not applicable | No public exploit | Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges. |
| CVE-2000-0965 | Medium | 2000-12-19 | Not applicable | No public exploit | The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization). |
| CVE-2000-0962 | Medium | 2000-12-19 | Not applicable | No public exploit | The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service. |
| CVE-2000-0960 | Medium | 2000-12-19 | Not applicable | No public exploit | The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse. |
| CVE-2000-0958 | Medium | 2000-12-19 | Not applicable | Working exploit published | HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. |
| CVE-2000-0956 | Medium | 2000-12-19 | Not applicable | No public exploit | cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions. |
| CVE-2000-0953 | Medium | 2000-12-19 | Not applicable | Working exploit published | Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. |
| CVE-2000-0951 | Medium | 2000-12-19 | Not applicable | Working exploit published | A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search. |
| CVE-2000-0946 | Medium | 2000-12-19 | Not applicable | No public exploit | Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization. |
| CVE-2000-0942 | Medium | 2000-12-19 | Not applicable | Working exploit published | The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability. |
| CVE-2000-0940 | Medium | 2000-12-19 | Not applicable | No public exploit | Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter. |
| CVE-2000-0939 | Medium | 2000-12-19 | Not applicable | No public exploit | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart. |
| CVE-2000-0938 | Medium | 2000-12-19 | Not applicable | No public exploit | Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server. |
| CVE-2000-0933 | Medium | 2000-12-19 | Not applicable | No public exploit | The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability. |
| CVE-2000-0932 | Medium | 2000-12-19 | Not applicable | No public exploit | MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service. |
| CVE-2000-0930 | Medium | 2000-12-19 | Not applicable | Working exploit published | Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. |
| CVE-2000-0929 | Medium | 2000-12-19 | Not applicable | Working exploit published | Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability. |
| CVE-2000-0927 | Medium | 2000-12-19 | Not applicable | No public exploit | WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions. |
| CVE-2000-0925 | Medium | 2000-12-19 | Not applicable | Working exploit published | The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information. |
| CVE-2000-0924 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter. |
| CVE-2000-0922 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter. |
| CVE-2000-0921 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter. |
| CVE-2000-0920 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "." |
| CVE-2000-0919 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0915 | Medium | 2000-12-19 | Not applicable | No public exploit | fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name. |
| CVE-2000-0914 | Medium | 2000-12-19 | Not applicable | Working exploit published | OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. |
| CVE-2000-0913 | Medium | 2000-12-19 | Not applicable | No public exploit | mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression. |
| CVE-2000-0912 | Medium | 2000-12-19 | Not applicable | Working exploit published | MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter. |
| CVE-2000-0911 | Medium | 2000-12-19 | Not applicable | No public exploit | IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment. |
| CVE-2000-0910 | Medium | 2000-12-19 | Not applicable | No public exploit | Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. |
| CVE-2000-0908 | Medium | 2000-12-19 | Not applicable | Working exploit published | BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request. |
| CVE-2000-0906 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters. |
| CVE-2000-0905 | Medium | 2000-12-19 | Not applicable | No public exploit | QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page. |
| CVE-2000-0904 | Medium | 2000-12-19 | Not applicable | Working exploit published | Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information. |
| CVE-2000-0903 | Medium | 2000-12-19 | Not applicable | Working exploit published | Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0902 | Medium | 2000-12-19 | Not applicable | No public exploit | getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0901 | Medium | 2000-12-19 | Not applicable | Working exploit published | Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable. |
| CVE-2000-0888 | Medium | 2000-12-19 | Not applicable | No public exploit | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug." |
| CVE-2000-0887 | Medium | 2000-12-19 | Not applicable | Working exploit published | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug." |
| CVE-2000-0811 | Medium | 2000-12-19 | Not applicable | No public exploit | Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields. |
| CVE-2000-1212 | Medium | 2000-12-18 | Not applicable | No public exploit | Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects. |
| CVE-1999-1579 | Medium | 2000-12-14 | Not applicable | No public exploit | The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine. |
| CVE-2000-1078 | Medium | 2000-12-11 | Not applicable | Working exploit published | ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character. |
| CVE-2000-1075 | Medium | 2000-12-11 | Not applicable | Working exploit published | Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services. |
| CVE-2000-1070 | Medium | 2000-12-11 | Not applicable | No public exploit | pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information. |
| CVE-2000-1069 | Medium | 2000-12-11 | Not applicable | Working exploit published | pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters. |
| CVE-2000-1066 | Medium | 2000-12-11 | Not applicable | No public exploit | The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname. |
| CVE-2000-1065 | Medium | 2000-12-11 | Not applicable | No public exploit | Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet. |
| CVE-2000-1064 | Medium | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. |
| CVE-2000-1063 | Medium | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. |
| CVE-2000-1062 | Medium | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. |
| CVE-2000-1061 | Medium | 2000-12-11 | Not applicable | Working exploit published | Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM ActiveX Component" vulnerability. |
| CVE-2000-1060 | Medium | 2000-12-11 | Not applicable | No public exploit | The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges. |
| CVE-2000-1058 | Medium | 2000-12-11 | Not applicable | Working exploit published | Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem." |
| CVE-2000-1057 | Medium | 2000-12-11 | Not applicable | No public exploit | Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions. |
| CVE-2000-1052 | Medium | 2000-12-11 | Not applicable | No public exploit | Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. |
| CVE-2000-1051 | Medium | 2000-12-11 | Not applicable | No public exploit | Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. |
| CVE-2000-1050 | Medium | 2000-12-11 | Not applicable | Working exploit published | Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash"). |
| CVE-2000-1049 | Medium | 2000-12-11 | Not applicable | No public exploit | Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters. |
| CVE-2000-1048 | Medium | 2000-12-11 | Not applicable | No public exploit | Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL. |
| CVE-2000-1038 | Medium | 2000-12-11 | Not applicable | No public exploit | The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request. |
| CVE-2000-1036 | Medium | 2000-12-11 | Not applicable | Working exploit published | Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter. |
| CVE-2000-1032 | Medium | 2000-12-11 | Not applicable | No public exploit | The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall. |
| CVE-2000-1031 | Medium | 2000-12-11 | Not applicable | No public exploit | Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option. |
| CVE-2000-1030 | Medium | 2000-12-11 | Not applicable | No public exploit | CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server. |
| CVE-2000-1027 | Medium | 2000-12-11 | Not applicable | Working exploit published | Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established. |
| CVE-2000-1025 | Medium | 2000-12-11 | Not applicable | Working exploit published | eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running. |
| CVE-2000-1019 | Medium | 2000-12-11 | Not applicable | No public exploit | Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL. |
| CVE-2000-1017 | Medium | 2000-12-11 | Not applicable | No public exploit | Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database. |
| CVE-2000-1016 | Medium | 2000-12-11 | Not applicable | Working exploit published | The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL. |
| CVE-2000-1008 | Medium | 2000-12-11 | Not applicable | Working exploit published | PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device. |
| CVE-2000-1007 | Medium | 2000-12-11 | Not applicable | No public exploit | I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors. |
| CVE-2000-1006 | Medium | 2000-12-11 | Not applicable | No public exploit | Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability. |
| CVE-2000-1005 | Medium | 2000-12-11 | Not applicable | Working exploit published | Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter. |
| CVE-2000-1004 | Medium | 2000-12-11 | Not applicable | No public exploit | Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters. |