Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2000-03-20 CVE-2000-0226 Unspecified vulnerability in Microsoft Internet Information Server 4.0
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."
network
low complexity
microsoft
5.0
2000-03-17 CVE-2000-0228 Unspecified vulnerability in Microsoft Windows Media Rights Manager 4.0/4.1
Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability.
network
low complexity
microsoft
5.0
2000-03-16 CVE-2000-0231 Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.
local
low complexity
halloween suse
7.2
2000-03-15 CVE-2000-0239 Buffer Overflow vulnerability in Atrium Software products
Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.
network
low complexity
atrium-software
5.0
2000-03-15 CVE-2000-0233 Unspecified vulnerability in Suse Linux Imap Server 1.0
SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.
network
low complexity
suse
critical
10.0
2000-03-15 CVE-2000-0198 Buffer Overflows vulnerability in Atrium Software products
Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
network
low complexity
atrium-software
5.0
2000-03-15 CVE-2000-0169 Unspecified vulnerability in Oracle Application Server 4.0
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
network
low complexity
oracle
7.5
2000-03-14 CVE-2000-0199 Weak Password Encryption vulnerability in Microsoft SQL Server 7.0
When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.
local
low complexity
microsoft
7.2
2000-03-14 CVE-2000-0180 Unspecified vulnerability in Generation Terrorists Designs and Concepts Sojourn 2.0
Sojourn search engine allows remote attackers to read arbitrary files via a ..
5.0
2000-03-13 CVE-2000-0230 Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
local
low complexity
halloween redhat
7.2