Overview 275 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 77 public PoC · 4 EPSS ≥ 0.5
275matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
77public PoC28.0%
4EPSS ≥ 0.51.5%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
275
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
275
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
77
28.0%
Proof of concept only
0
0.0%
Forecast only
2
0.7%
No public exploit
196
71.3%
split by
peak 111 / year
19901
Not applicable1
Low1
not blocked1
No public exploit1
19910
19921
Not applicable1
Low1
not blocked1
No public exploit1
19932
Not applicable2
Low2
not blocked2
No public exploit2
19941
Not applicable1
Low1
not blocked1
Working exploit published1
19951
Not applicable1
Low1
not blocked1
No public exploit1
19969
Not applicable9
Low9
not blocked9
No public exploit9
199719
Not applicable19
Low19
not blocked19
Working exploit published4
Forecast only2
No public exploit13
199823
Not applicable23
Low23
not blocked23
Working exploit published5
No public exploit18
1999111
Not applicable111
Low111
not blocked111
Working exploit published28
No public exploit83
200096
Not applicable96
Low96
not blocked96
Working exploit published34
No public exploit62
200111
Not applicable11
Low11
not blocked11
Working exploit published5
No public exploit6
199019911992199319941995199619971998199920002001
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-1162 | Low | 2001-01-09 | Not applicable | No public exploit | ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack. |
| CVE-2000-1156 | Low | 2001-01-09 | Not applicable | No public exploit | StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice. |
| CVE-2000-1146 | Low | 2001-01-09 | Not applicable | No public exploit | Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd. |
| CVE-2000-1144 | Low | 2001-01-09 | Not applicable | Working exploit published | Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than normal, which allows attackers to determine that they are in a chroot environment. |
| CVE-2000-1143 | Low | 2001-01-09 | Not applicable | No public exploit | Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system. |
| CVE-2000-1142 | Low | 2001-01-09 | Not applicable | No public exploit | Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system. |
| CVE-2000-1141 | Low | 2001-01-09 | Not applicable | No public exploit | Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system. |
| CVE-2000-1140 | Low | 2001-01-09 | Not applicable | Working exploit published | Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem. |
| CVE-2000-1127 | Low | 2001-01-09 | Not applicable | Working exploit published | registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable. |
| CVE-2000-1096 | Low | 2001-01-09 | Not applicable | Working exploit published | crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file. |
| CVE-2000-1083 | Low | 2001-01-09 | Not applicable | Working exploit published | The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability. |
| CVE-2000-0959 | Low | 2000-12-19 | Not applicable | No public exploit | glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack. |
| CVE-2000-0936 | Low | 2000-12-19 | Not applicable | Working exploit published | Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords. |
| CVE-2000-0928 | Low | 2000-12-19 | Not applicable | No public exploit | WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. |
| CVE-2000-1045 | Low | 2000-12-11 | Not applicable | No public exploit | nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests. |
| CVE-2000-1018 | Low | 2000-12-11 | Not applicable | No public exploit | shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file. |
| CVE-2000-1003 | Low | 2000-12-11 | Not applicable | No public exploit | NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash. |
| CVE-2000-0881 | Low | 2000-11-14 | Not applicable | Working exploit published | The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files. |
| CVE-2000-0880 | Low | 2000-11-14 | Not applicable | Working exploit published | LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file. |
| CVE-2000-0879 | Low | 2000-11-14 | Not applicable | No public exploit | LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services. |
| CVE-2000-0873 | Low | 2000-11-14 | Not applicable | Working exploit published | netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities. |
| CVE-2000-0866 | Low | 2000-11-14 | Not applicable | No public exploit | Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes. |
| CVE-2000-0849 | Low | 2000-11-14 | Not applicable | No public exploit | Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability. |
| CVE-2000-0829 | Low | 2000-11-14 | Not applicable | Working exploit published | The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/. |
| CVE-2000-0802 | Low | 2000-10-20 | Not applicable | No public exploit | The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR. |
| CVE-2000-0799 | Low | 2000-10-20 | Not applicable | Working exploit published | inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file. |
| CVE-2000-0771 | Low | 2000-10-20 | Not applicable | No public exploit | Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability. |
| CVE-2000-0768 | Low | 2000-10-20 | Not applicable | No public exploit | A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability. |
| CVE-2000-0767 | Low | 2000-10-20 | Not applicable | No public exploit | The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka the "Scriptlet Rendering" vulnerability. |
| CVE-2000-0754 | Low | 2000-10-20 | Not applicable | No public exploit | Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords. |
| CVE-2000-0729 | Low | 2000-10-20 | Not applicable | No public exploit | FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header. |
| CVE-2000-0726 | Low | 2000-10-20 | Not applicable | No public exploit | CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable. |
| CVE-2000-0723 | Low | 2000-10-20 | Not applicable | No public exploit | Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config. |
| CVE-2000-0718 | Low | 2000-10-20 | Not applicable | No public exploit | A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed. |
| CVE-2000-0716 | Low | 2000-10-20 | Not applicable | No public exploit | WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email. |
| CVE-2000-0715 | Low | 2000-10-20 | Not applicable | No public exploit | DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. |
| CVE-2000-0691 | Low | 2000-10-20 | Not applicable | Working exploit published | The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file. |
| CVE-2000-0679 | Low | 2000-10-20 | Not applicable | Working exploit published | The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files. |
| CVE-2000-0816 | Low | 2000-10-06 | Not applicable | Working exploit published | Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters. |
| CVE-2000-0667 | Low | 2000-07-27 | Not applicable | No public exploit | Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. |
| CVE-2000-0615 | Low | 2000-07-19 | Not applicable | No public exploit | LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files. |
| CVE-2000-0633 | Low | 2000-07-18 | Not applicable | No public exploit | Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. |
| CVE-2000-0649 | Low | 2000-07-13 | Not applicable | Working exploit published | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. |
| CVE-2000-0650 | Low | 2000-07-11 | Not applicable | No public exploit | The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse. |
| CVE-2000-0605 | Low | 2000-07-10 | Not applicable | No public exploit | Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords. |
| CVE-1999-0585 | Low | 2000-07-01 | Not applicable | No public exploit | A Windows NT administrator account has the default name of Administrator. |
| CVE-2000-0579 | Low | 2000-06-21 | Not applicable | No public exploit | IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited. |
| CVE-2000-0578 | Low | 2000-06-21 | Not applicable | No public exploit | SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user. |
| CVE-2000-0501 | Low | 2000-06-16 | Not applicable | Working exploit published | Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. |
| CVE-2000-0565 | Low | 2000-06-13 | Not applicable | No public exploit | SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack. |
| CVE-2000-0502 | Low | 2000-06-08 | Not applicable | No public exploit | Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion. |
| CVE-2000-0559 | Low | 2000-06-07 | Not applicable | Working exploit published | eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords. |
| CVE-2000-0503 | Low | 2000-06-06 | Not applicable | No public exploit | The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event. |
| CVE-2000-0519 | Low | 2000-06-05 | Not applicable | No public exploit | Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities. |
| CVE-2000-0518 | Low | 2000-06-05 | Not applicable | No public exploit | Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities. |
| CVE-2000-0487 | Low | 2000-06-01 | Not applicable | No public exploit | The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability. |
| CVE-2000-0485 | Low | 2000-05-30 | Not applicable | No public exploit | Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability. |
| CVE-2000-0402 | Low | 2000-05-30 | Not applicable | Working exploit published | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. |
| CVE-2000-0461 | Low | 2000-05-29 | Not applicable | No public exploit | The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call. |
| CVE-2000-0455 | Low | 2000-05-29 | Not applicable | No public exploit | Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option. |
| CVE-2000-0462 | Low | 2000-05-28 | Not applicable | No public exploit | ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory. |
| CVE-2000-0456 | Low | 2000-05-28 | Not applicable | No public exploit | NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog". |
| CVE-2000-0553 | Low | 2000-05-26 | Not applicable | No public exploit | Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions. |
| CVE-2000-0445 | Low | 2000-05-24 | Not applicable | No public exploit | The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys. |
| CVE-2000-0379 | Low | 2000-05-16 | Not applicable | Working exploit published | The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so. |
| CVE-2000-0439 | Low | 2000-05-11 | Not applicable | No public exploit | Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability. |
| CVE-2000-0409 | Low | 2000-05-10 | Not applicable | Working exploit published | Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. |
| CVE-2000-0406 | Low | 2000-05-10 | Not applicable | No public exploit | Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability. |
| CVE-2000-0387 | Low | 2000-05-09 | Not applicable | No public exploit | The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files. |
| CVE-2000-0382 | Low | 2000-05-08 | Not applicable | No public exploit | ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site. |
| CVE-2000-0345 | Low | 2000-05-03 | Not applicable | No public exploit | The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command. |
| CVE-2000-0293 | Low | 2000-05-02 | Not applicable | Working exploit published | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory. |
| CVE-2000-0334 | Low | 2000-04-24 | Not applicable | No public exploit | The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule. |
| CVE-2000-0458 | Low | 2000-04-22 | Not applicable | No public exploit | The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information. |
| CVE-2000-0336 | Low | 2000-04-21 | Not applicable | Working exploit published | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. |
| CVE-2000-0311 | Low | 2000-04-20 | Not applicable | No public exploit | The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability. |
| CVE-2000-0270 | Low | 2000-04-18 | Not applicable | No public exploit | The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. |
| CVE-2000-0269 | Low | 2000-04-18 | Not applicable | No public exploit | Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess. |
| CVE-2000-0266 | Low | 2000-04-18 | Not applicable | No public exploit | Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL. |
| CVE-2000-0264 | Low | 2000-04-17 | Not applicable | Working exploit published | Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods. |
| CVE-2000-0286 | Low | 2000-04-16 | Not applicable | Working exploit published | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. |
| CVE-2000-0263 | Low | 2000-04-16 | Not applicable | Working exploit published | The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. |
| CVE-2000-0276 | Low | 2000-04-10 | Not applicable | Working exploit published | BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37. |
| CVE-2000-0275 | Low | 2000-04-10 | Not applicable | Working exploit published | CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. |
| CVE-2000-0274 | Low | 2000-04-10 | Not applicable | Working exploit published | The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. |
| CVE-2000-0280 | Low | 2000-04-03 | Not applicable | Working exploit published | Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL. |
| CVE-1999-0790 | Low | 2000-04-01 | Not applicable | No public exploit | A remote attacker can read information from a Netscape user's cache via JavaScript. |
| CVE-2000-0232 | Low | 2000-03-30 | Not applicable | Working exploit published | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. |
| CVE-2000-0281 | Low | 2000-03-26 | Not applicable | No public exploit | Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message. |
| CVE-2000-0227 | Low | 2000-03-23 | Not applicable | Working exploit published | The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets. |
| CVE-2000-0184 | Low | 2000-03-09 | Not applicable | No public exploit | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. |
| CVE-2000-0210 | Low | 2000-02-21 | Not applicable | Working exploit published | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. |
| CVE-2000-0154 | Low | 2000-02-16 | Not applicable | Working exploit published | The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. |
| CVE-2000-0224 | Low | 2000-02-15 | Not applicable | Working exploit published | ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. |
| CVE-2000-0167 | Low | 2000-02-15 | Not applicable | Working exploit published | IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. |
| CVE-2000-0147 | Low | 2000-02-08 | Not applicable | No public exploit | snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. |
| CVE-2000-0472 | Low | 2000-02-06 | Not applicable | Working exploit published | Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. |
| CVE-2000-0129 | Low | 2000-02-04 | Not applicable | Working exploit published | Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file. |
| CVE-2000-0089 | Low | 2000-02-04 | Not applicable | No public exploit | The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability. |
| CVE-2000-0124 | Low | 2000-02-03 | Not applicable | No public exploit | surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions. |