CVEs published in May 2000
105 vulnerabilities, 14 critical, 0 exploited.
- mit kerberos, kerberos 5, cygnus network security +2 more +4 moreBuffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.10.0 High
- mit kerberos, kerberos 5, cygnus network security +2 more +4 moreBuffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain...10.0 High
- mit kerberos, cygnus network security, kerbnet +2 more +4 moreBuffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root...10.0 High
- netopia r-series routersThe Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if...3.6 Low
- george burgyan cgi counterThe CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via...7.5 High
- seattle lab software emurlThe EMURL web-based email account software encodes predictable identifiers in user session URLs,...5.0 Medium
- matthew redman allmanageThe allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6...7.5 High
- matthew redman allmanageThe administrative password for the Allmanage web site administration software is stored in...7.5 High
- microsoft internet explorerThe Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file...7.5 High
- microsoft outlook, outlook express +1 moreBuffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail...5.0 Medium
- sun solaris, sunos +1 moreBuffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a...7.2 High
- microsoft internet information server, internet information services +1 moreISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file...7.5 High
- microsoft internet explorerInternet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another...2.6 Low
- mozilla bugzillaThe process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via...7.5 High
- microsoft windows 2000The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which...7.2 High
- microsoft office, access, excel +7 more +9 moreThe Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote...7.5 High
- microsoft windows 2000NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their...5.0 Medium
- microsoft internet information server, internet information services +1 moreIIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that...5.0 Medium
- matt wright formmailMatt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via...5.0 Medium
- allaire coldfusion serverColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated...5.0 Medium
- netscape communicatorNetscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local...3.7 Low
- netscape communicatorNetscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL...2.6 Low
- microsoft internet information server, internet information services +1 moreMicrosoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker...5.0 Medium
- alexander siegel golddigThe makelev program in the golddig game from the FreeBSD ports collection allows local users to...2.1 Low
- intel netstructure 7110, netstructure 7180 +1 moreNetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords...10.0 High
- aol instant messengerThe file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the...5.0 Medium
- allaire clustercatsColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection,...2.6 Low
- microsoft frontpage, internet information server, internet information services +2 moreThe shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote...5.0 Medium
- ultrascripts ultraboardUltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by...5.0 Medium
- netwin dnewsBuffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary...5.0 Medium
- gossamer threads dbmanThe Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental...6.4 Medium
- trend micro interscan viruswallBuffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote...10.0 High
- aladdin knowledge systems etokenThe Aladdin Knowledge Systems eToken device allows attackers with physical access to the device...4.6 Medium
- netwin dmailBuffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary...7.5 High
- hp hp-ux, vvos +1 moreVulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain...4.6 Medium
- mcmurtrey whitaker and associates cart32Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to...5.0 Medium
- lsoft listservBuffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to...10.0 High
- redhat linuxThe pam_console PAM module in Linux systems performs a chown on various devices upon a user login...7.2 High
- cisco ios, router 2500, router 2600 +4 more +6 moreThe on-line help system options in Cisco routers allows non-privileged users without "enabled"...2.1 Low
- gnu glibc, isc bind +1 moreThe resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS...7.5 High
- ultrascripts ultraboardUltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read...5.0 Medium
- id software quake 3 arenaQuake3 Arena allows malicious server operators to read or modify files on a client via a dot dot ...6.4 Medium
- suse linuxThe SuSE aaa_base package installs some system accounts with home directories set to /tmp, which...4.6 Medium
- filemakerFileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.7.5 High
- filemakerFileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security...5.0 Medium
- microsoft windows 95, windows 98 +1 moreWindows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS...5.0 Medium
- apple appleshareAppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information...5.0 Medium
- brecht claerhout sniffitBuffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to...10.0 High
- omnis studioOmnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.10.0 High
- network associates webshieldThe WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the...5.0 Medium
- Show moreLoading…