CVEs published in December 2000
214 vulnerabilities, 35 critical, 0 exploited.
- siemens hinet lpBuffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote...10.0 High
- openbsdThe IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which...5.0 Medium
- netscape messaging server, messaging server multiplexor +1 moreBuffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to...10.0 High
- netscape messaging serverThe POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for...5.0 Medium
- gnu glibcglibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a...1.2 Low
- sun hotjava browserHotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a...5.0 Medium
- pam mysql mysqlThe pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse...7.5 High
- carnegie mellon university cyrus-saslcyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a...4.6 Medium
- evolvable corporation shambala serverShambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing...5.0 Medium
- shigio yamaguchi globalglobal.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute...10.0 High
- microsoft internet information servicesA misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote...5.0 Medium
- lbl traceroute, sun sunos +1 moreHeap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to...7.2 High
- gnome gnorpmGnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.7.2 High
- gnu cfengineFormat string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to...10.0 High
- compaq easy access keyboard softwareCompaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when...4.6 Medium
- cisco catalyst 3500 xlThe web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute...10.0 High
- cgi script center news updateCGI Script Center News Update 1.1 does not properly validate the original news administration...9.8 Critical
- max-wilhelm bruker bftpdBuffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of...7.5 High
- microsoft indexing serviceThe CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote...5.1 Medium
- kootenay web inc whoisKootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via...10.0 High
- sambaSamba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a...5.0 Medium
- sambaSamba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the...7.5 High
- sambaSamba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world...2.1 Low
- sambaSamba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary...7.2 High
- redhat linuxGlint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of...7.2 High
- microsoft windows 2000The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable...4.6 Medium
- clearswift mailsweeper for smtpMAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs,...5.0 Medium
- david harris pegasus mailPegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls...5.0 Medium
- microsoft windows media playerMicrosoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled...5.0 Medium
- wquinn diskadvisorWQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the...2.1 Low
- wquinn quotaadvisorWQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative...4.6 Medium
- smartwin technology cyberoffice shopping cartSmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price...7.5 High
- smartwin technology cyberoffice shopping cartThe default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the...5.0 Medium
- armada design master indexDirectory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote...5.0 Medium
- aplio phoneauthenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands...7.5 High
- bytes interactive web shopperDirectory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper...5.0 Medium
- hassan consulting shopping cartDirectory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows...5.0 Medium
- boa webserverDirectory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers...5.0 Medium
- phpixDirectory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers...5.0 Medium
- caldera openlinux, openlinux ebuilder, openlinux edesktop +3 more +5 moreFormat string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to...10.0 High
- freebsdfingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target...5.0 Medium
- openbsdOpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the...5.0 Medium
- apache http servermod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a...5.0 Medium
- jcs web works multihtmlMultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute...5.0 Medium
- horde impIMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the...5.0 Medium
- hordeHorde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the...4.6 Medium
- university of washington pineBuffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote...7.5 High
- netcplus browsegateBrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute...5.0 Medium
- juergen weigert screenFormat string vulnerability in screen 3.9.5 and earlier allows local users to gain root...4.6 Medium
- acme labs thttpdDirectory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote...7.5 High
- Show moreLoading…