CVEs published in September 2000
49 vulnerabilities, 9 critical, 0 exploited.
- redhat linux userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which... 7.2 High
- pgp personal privacy The BAIR program does not properly restrict access to the Internet Explorer Internet options menu... 3.6 Low
- hp hp-ux Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a... 7.2 High
- suse linux String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other... 10.0 High
- sgi irix The truncate function in IRIX 6.x does not properly check for privileges when the file is in the... 10.0 High
- sgi irix Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long... 7.2 High
- novell client, symantec norton antivirus +1 more Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto... 10.0 High
- trustix secure linux Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows... 4.6 Medium
- bardon data systems winu WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local... 4.6 Medium
- wircsrv irc server WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command,... 5.0 Medium
- rapidstream sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a... 10.0 High
- robtex viking server Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a... 7.5 High
- bajie java http server The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the... 5.0 Medium
- tumbleweed messaging management system The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly... 7.5 High
- oreilly website pro O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all... 7.5 High
- apache tomcat The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information... 6.4 Medium
- apache tomcat Jakarta Apache Tomcat Reveals Physical Paths 6.4 Medium
- aptis software totalbill The sysgen service in Aptis Totalbill does not perform authentication, which allows remote... 10.0 High
- microsoft outlook Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files,... 5.0 Medium
- hp openview network node manager Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges. 4.6 Medium
- freebsd Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root... 7.2 High
- openldap OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which... 4.6 Medium
- microsoft frontpage, internet information server, internet information services +2 more Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS)... 7.5 High
- rimarts inc. becky internet mail Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to... 5.0 Medium
- rimarts inc. becky internet mail Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to... 5.0 Medium
- eeye digital security iris, spynet capturenet +1 more eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of... 5.0 Medium
- helix code go-gnome pre-installer The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a... 6.2 Medium
- helix code gnome installer Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which... 1.2 Low
- helix code gnome updater Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM... 6.2 Medium
- multisoft flagship The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world... 6.2 Medium
- varicad VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the... 6.2 Medium
- conectiva linux, kirk bauer diskcheck +1 more DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite... 2.1 Low
- university of massachusetts scheme umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. 7.2 High
- adobe acrobat, acrobat business tools, acrobat reader +2 more Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle... 7.6 High
- microsoft frontpage The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers... 5.0 Medium
- microsoft frontpage The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers... 5.0 Medium
- omron worldview, freewnn, wnn wnn4 +2 more Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands... 10.0 High
- gnu mailman, conectiva linux +1 more The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format... 4.6 Medium
- sun solaris answerbook2 The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface... 10.0 High
- sun solaris answerbook2 The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly... 7.5 High
- tech-source raptor gfx pgx32 Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain... 7.2 High
- iss realsecure ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood... 5.0 Medium
- gert doering mgetty The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary... 2.1 Low
- cgi script center auction weaver Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands... 10.0 High
- cgi script center account manager Account Manager LITE does not properly authenticate attempts to change the administrator password... 7.5 High
- cgi script center subscribe me lite Subscribe Me LITE does not properly authenticate attempts to change the administrator password,... 7.5 High
- cgi script center auction weaver Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a ... 10.0 High
- cgi script center auction weaver Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a ... 5.0 Medium
- cvs The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or... 7.2 High