CVEs published in December 2000
214 vulnerabilities, 35 critical, 0 exploited.
- hp hp-uxVulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to...10.0 High
- redhat linuxrestore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH...7.2 High
- 24link24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending...7.5 High
- ibm lotus notesThe Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client...5.0 Medium
- transsoft broker ftp serverBuffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a...7.5 High
- unify ewave servletexecUnify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP...5.0 Medium
- ibm net.datadocument.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine...5.0 Medium
- microsoft indexing serviceThe ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site...4.3 Medium
- microsoft internet information server, internet information services +1 moreVariant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 ...7.5 High
- bsdi bsd osrcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which...7.2 High
- ptlink ircd, irc services +1 morePTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service ...5.0 Medium
- trlinux postaci webmailThe default configuration for PostACI webmail system installs the /includes/global.inc...7.5 High
- sonicwall soho firewallThe web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of...5.0 Medium
- aol instant messengerBuffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute...7.5 High
- alex heiphetz group ezshopperloadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files...5.0 Medium
- microsoft sql server, data engine +1 moreThe xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE)...4.6 Medium
- microsoft sql server, data engine +1 moreThe xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE)...4.6 Medium
- microsoft sql server, data engine +1 moreThe xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE)...4.6 Medium
- microsoft sql server, data engine +1 moreThe xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does...4.6 Medium
- microsoft sql server, data engine +1 moreThe xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does...4.6 Medium
- microsoft sql server, data engine +1 moreThe xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not...2.1 Low
- microsoft sql server, data engine +1 moreThe xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does...4.6 Medium
- microsoft sql server, data engine +1 moreThe xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE)...4.6 Medium
- microsoft windows 95, windows 98, windows 98se +2 more +4 moreVarious TCP/IP stacks and network applications allow remote attackers to cause a denial of...5.0 Medium
- openbsdFormat string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems...7.2 High
- openbsdFormat string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating...7.2 High
- openbsdFormat string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating...7.2 High
- freebsd, netbsd, openbsd +2 moreFormat string vulnerability in pw_error function in BSD libutil library allows local users to...7.2 High
- ssh, openbsd openssh +1 moreDirectory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to...5.0 Medium
- hilgraeve hyperterminalBuffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote...7.5 High
- krzysztof dabrowski cmd5checkpwcmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP...7.5 High
- intel inbusiness email stationBuffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to...5.0 Medium
- cisco iosThe HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service ...5.0 Medium
- microsoft netmeetingMicrosoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a...5.0 Medium
- microsoft internet explorerInternet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure...7.5 High
- oracle mysqlMySQL Database Engine uses a weak authentication method which leaks information that could be...7.2 High
- microsoft windows 95, windows 98, windows 98se +1 more +3 moreNMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter...5.0 Medium
- microsoft windows 95, windows 98, windows me +1 more +3 moreFile and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check...6.4 Medium
- bb4 big brother network monitorbbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to...7.5 High
- oatmeal studios mail filemailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by...5.0 Medium
- xfree86 project xlibBuffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands...4.6 Medium
- anaconda partners foundation directoryDirectory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote...5.0 Medium
- gnu privacy guardGnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents,...7.5 High
- hp hp-uxHP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a...5.5 Medium
- microsoft internet information server, internet information services +1 moreIIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions,...7.5 High
- valve software half-life dedicated serverFormat string vulnerability in Half Life dedicated server build 3104 and earlier allows remote...10.0 High
- valve software half-life dedicated serverBuffer overflow in Half Life dedicated server before build 3104 allows remote attackers to...10.0 High
- phpPHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers...10.0 High
- hp hp-uxBuffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier...4.6 Medium
- hp vvosThe NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an...5.0 Medium
- Show moreLoading…