Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2000-04-11 CVE-2000-0252 Unspecified vulnerability in Craig Dansie Shopping Cart 3.0.4
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
network
low complexity
craig-dansie
5.0
2000-04-11 CVE-1999-0979 Unspecified vulnerability in SCO Unixware
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
local
low complexity
sco
7.2
2000-04-11 CVE-1999-0699 Unspecified vulnerability in Bluestone Sapphire web 5.0
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
network
low complexity
bluestone
7.5
2000-04-11 CVE-1999-0695 Unspecified vulnerability in Sybase Powerdynamo 3.0.652
The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a ..
network
low complexity
sybase
5.0
2000-04-10 CVE-2000-0294 Unspecified vulnerability in JIM Housley Healthd 0.1/0.2/0.3
Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
local
low complexity
jim-housley
7.2
2000-04-10 CVE-2000-0275 Unspecified vulnerability in Cryptocard Cryptoadmin 4.1
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN.
local
low complexity
cryptocard
2.1
2000-04-09 CVE-2000-0273 Unspecified vulnerability in Symantec Pcanywhere 8.0/9.0
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
network
low complexity
symantec
5.0
2000-04-07 CVE-2000-0298 Unspecified vulnerability in Microsoft Windows 2000
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
local
low complexity
microsoft
7.2
2000-04-07 CVE-2000-0279 Unspecified vulnerability in BE Beos 4.0/4.5/5.0
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
network
low complexity
be
5.0
2000-04-06 CVE-2000-0301 Unspecified vulnerability in Ipswitch Imail
Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
network
low complexity
ipswitch
5.0