| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2000-1118 | 7.5 | 24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request. | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1114 | 5.0 | Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20". | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1110 | 5.0 | document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program. | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1105 | 4.3 | The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled. | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1103 | 7.2 | rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line. | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1102 | 5.0 | PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands. | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1101 | 5.0 | Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack. | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1100 | 7.5 | The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1098 | 5.0 | The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. | 2008-09-05 20:22:00 | 2001-01-09 05:00:00 |
| CVE-2000-1037 | 7.5 | Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack. | 2008-09-05 20:22:00 | 2000-12-11 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: