CVEs published in December 2000
214 vulnerabilities, 35 critical, 0 exploited.
- max feoktistov small http serverSmall HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the...5.0 Medium
- max feoktistov small http serverSmall HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain...5.0 Medium
- isc bind, debian linux +1 morenamed in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by...5.0 Medium
- isc bindnamed in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making...5.0 Medium
- microsoft internet information server, internet information services +1 moreIIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an...7.5 High
- microsoft internet information server, internet information services +1 moreIIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly...7.5 High
- oracle listenerThe default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an...10.0 High
- cgi script center auction weaverAuction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot...5.0 Medium
- cgi script center auction weaverAuction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows...7.5 High
- gnu groffGNU Groff uses the current working directory to find a device description file, which allows a...10.0 High
- zopeZope allows attackers to modify raw image and file data5.0 Medium
- zopeZope does not properly perform security registration for legacy names7.5 High
- microsoft windows ntThe Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and...5.0 Medium
- iplanet web serverBuffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote...10.0 High
- netscape directory server, sun iplanet certificate management system +1 moreDirectory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory...5.0 Medium
- netscape iplanet icalcsstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl...10.0 High
- netscape iplanet icalcsstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working...7.2 High
- netscape iplanet icaliCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users...7.2 High
- netscape iplanet icalThe GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an ...10.0 High
- cgi-world poll it, poll it pro +1 morepollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document...5.0 Medium
- cgi-world poll it, poll it pro +1 morepollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions...6.4 Medium
- cgi-world poll it, poll it pro +1 morepollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell...10.0 High
- microsoft ieMicrosoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to...5.1 Medium
- xfree86 project xfceThe default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an ...4.6 Medium
- mandrakesoft mandrake linuxThe default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the...7.2 High
- hp openview network node managerBuffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and...5.0 Medium
- hp openview network node managerVulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1...4.6 Medium
- cisco secure access control serverCiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication...7.5 High
- cisco secure access control serverBuffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a...10.0 High
- cisco secure access control serverBuffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote...10.0 High
- macromedia jrunDirectory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read...5.0 Medium
- macromedia jrunAllaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF...5.0 Medium
- macromedia jrunAllaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a...5.0 Medium
- lotus domino enterprise server, domino mail server +1 moreBuffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to...10.0 High
- padl software nss ldapnss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote...1.2 Low
- suse linuxFormat string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating...10.0 High
- mandrakesoft mandrake linuxFormat string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux...10.0 High
- mandrakesoft mandrake linuxBuffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating...10.0 High
- swen thuemmler ypbindBuffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.10.0 High
- suse linuxFormat string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks...10.0 High
- ibm as400 firewallThe web administration interface for IBM AS/400 Firewall allows remote attackers to cause a...5.0 Medium
- extent technologies rbs ispDirectory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read...5.0 Medium
- microsoft windows 2000Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to...10.0 High
- checkpoint firewall-1The client authentication interface for Check Point Firewall-1 4.0 and earlier generates...5.0 Medium
- hp hp-ux, tru64 +1 moreBuffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to...4.6 Medium
- cisco pix firewall softwareCisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a...5.0 Medium
- lbl tcpdumpMultiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.10.0 High
- unify ewave servletexeceWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet...10.0 High
- cisco pix firewall softwareThe mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict...7.5 High
- inktomi search softwareSearch engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a...5.0 Medium
- Show moreLoading…