CVE-2000-0673The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Relea…
5.0 MOYENNE
CVE-2000-0668pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.
5.0 MOYENNE
CVE-2000-0664AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.
5.0 MOYENNE
CVE-2000-0637Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vul…
4.6 MOYENNE
CVE-2000-0663The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands …
4.6 MOYENNE
CVE-2000-0659Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request.
5.0 MOYENNE
CVE-2000-0658Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol.
5.0 MOYENNE
CVE-2000-0657Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol.
5.0 MOYENNE
CVE-2000-0656Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol.
5.0 MOYENNE
CVE-2000-0655Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal fiel…
5.0 MOYENNE
CVE-2000-0652IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" str…
5.0 MOYENNE
CVE-2000-0671Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00)…
5.0 MOYENNE
CVE-2000-0647WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server.
5.0 MOYENNE
CVE-2000-0646WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.
5.0 MOYENNE
CVE-2000-0645WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that do…
6.4 MOYENNE
CVE-2000-0644WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.
5.0 MOYENNE
CVE-2000-0672The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administra…
5.0 MOYENNE
CVE-2000-0653Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser L…
5.0 MOYENNE
CVE-2000-0636HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command.
5.0 MOYENNE
CVE-2000-0619Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets.
5.0 MOYENNE
CVE-2000-0626Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.
5.0 MOYENNE
CVE-2000-0625NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password.
4.6 MOYENNE
CVE-2000-0567Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail H…
5.0 MOYENNE
CVE-2000-0665GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
5.0 MOYENNE
CVE-2000-0630IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.
5.0 MOYENNE
CVE-2000-0662Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED).
5.0 MOYENNE
CVE-2000-0631An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument…
5.0 MOYENNE
CVE-2000-0674ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack.
5.0 MOYENNE
CVE-2000-0660The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
5.0 MOYENNE
CVE-2000-0643Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
5.0 MOYENNE
CVE-2000-0642The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly reques…
5.0 MOYENNE
CVE-2000-0669Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
5.0 MOYENNE
CVE-2000-0654Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of th…
4.6 MOYENNE
CVE-2000-0648WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.
5.0 MOYENNE
CVE-2000-0661WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port.
5.0 MOYENNE
CVE-2000-0603Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions…
4.6 MOYENNE
CVE-2000-0574FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by…
5.0 MOYENNE
CVE-2000-0595libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modif…
4.6 MOYENNE
CVE-2000-0591Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL.
5.0 MOYENNE
CVE-2000-0576Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.
5.0 MOYENNE
CVE-2000-0572The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.
4.6 MOYENNE
CVE-2000-0571LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.
6.4 MOYENNE
CVE-2000-0594BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes sp…
5.0 MOYENNE