CVEs published in January 2000
77 vulnerabilities, 14 critical, 0 exploited.
- microsoft virtual machine Microsoft Java Virtual Machine allows remote attackers to read files via the... 2.6 Low
- comstock multicsp The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed... 10.0 High
- sun cobalt raq, cobalt raq 2, cobalt raq 3i +2 more The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify... 7.2 High
- checkpoint firewall-1 Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the ... 7.5 High
- avt rightfax The RightFax web client uses predictable session numbers, which allows remote attackers to hijack... 7.5 High
- ibm aix Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root... 7.2 High
- sco unixware Buffer overflow in SCO scohelp program allows remote attackers to execute commands. 7.2 High
- sybergen sygate The SyGate Remote Management program does not properly restrict access to its administration... 7.5 High
- microsoft internet information server Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via... 5.0 Medium
- microsoft index server Microsoft Index Server allows remote attackers to determine the real path for a web directory via... 5.0 Medium
- microsoft index server The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary... 5.0 Medium
- qualcomm qpopper Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long... 7.2 High
- hp hp-ux The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU... 5.0 Medium
- microsoft internet information server IIS allows local users to cause a denial of service via invalid regular expressions in a Visual... 5.0 Medium
- redhat linux An installation of Red Hat uses DES password encryption with crypt() for the initial password,... 10.0 High
- inter7 vpopmail Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain... 10.0 High
- microsoft word, office, office converter pack +1 more +3 more Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents... 7.2 High
- microsoft windows nt, windows 2000 +1 more A Windows NT system does not clear the system page file during shutdown, which might allow... 2.1 Low
- freebsd, netbsd, openbsd +2 more The BSD make program allows local users to modify files via a symlink attack when the -j option... 6.2 Medium
- sco unixware Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long... 7.2 High
- netopia timbuktu pro Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to... 5.0 Medium
- w3c cern httpd The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some... 7.5 High
- hp vvos HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access... 10.0 High
- vmware workstation VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. 3.6 Low
- computer power solutions visual casel Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local... 4.6 Medium
- avtronics inetserv Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request. 10.0 High
- nortel contivity cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of... 5.0 Medium
- nortel contivity cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary... 5.0 Medium
- nosque msgcore Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote... 5.0 Medium
- oreilly website professional WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a... 5.0 Medium
- netscape communicator, navigator +1 more Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL,... 5.0 Medium
- microsoft windows nt NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain... 7.2 High
- corel linux get_it program in Corel Linux Update allows local users to gain root access by specifying an... 7.2 High
- netscape communicator Netscape Navigator uses weak encryption for storing a user's Netscape mail password. 5.0 Medium
- powerscripts plusmail PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file... 7.5 High
- microsoft internet information server, internet information services +1 more IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting... 5.0 Medium
- cybercash merchant connection kit CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack. 2.1 Low
- oracle mysql MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege. 6.4 Medium
- microsoft hotmail Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote... 10.0 High
- ibm aix AIX techlibss allows local users to overwrite files via a symlink attack. 2.1 Low
- mirabilis icq Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a... 7.5 High
- debian linux, sgi irix +1 more The line printer daemon (lpd) in the lpr package in multiple Linux operating systems... 10.0 High
- redhat linux, sgi irix +1 more The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local... 10.0 High
- microsoft internet explorer Internet Explorer 5 does not modify the security zone for a document that is being loaded into a... 10.0 High
- globalscape cuteftp CuteFTP uses weak encryption to store password information in its tree.dat file. 5.0 Medium
- sun solaris, sunos +1 more Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n... 7.2 High
- jgaa warftpd Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or... 10.0 High
- handspring visor network hotsync Network HotSync program in Handspring Visor does not have authentication, which allows remote... 5.0 Medium
- ipswitch imail IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with... 5.0 Medium
- microsoft hotmail Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote... 7.5 High
- Show olderLoading…