Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2001-01-09 CVE-2000-1089 Unspecified vulnerability in Microsoft Windows 2000 and Windows NT
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
network
low complexity
microsoft
critical
 10.0
10
2000-12-31 CVE-2000-1242 Unspecified vulnerability in APC Powerchute
The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.
network
low complexity
apc
critical
 9.0
9.0
2000-12-31 CVE-2000-1241 Unspecified vulnerability in Sips
Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault."
network
low complexity
sips
critical
 10.0
10
2000-12-31 CVE-2000-1239 Information Disclosure vulnerability in IBM Tivoli Management Framework 3.7.1
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
network
low complexity
ibm
critical
 9.0
9.0
2000-12-19 CVE-2000-0985 Buffer Overflow vulnerability in Nevis Systems All-Mail 1.1
Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
network
low complexity
nevis-systems
critical
 10.0
10
2000-12-19 CVE-2000-0973 Unspecified vulnerability in Daniel Stenberg Curl
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.
network
low complexity
daniel-stenberg
critical
 10.0
10
2000-12-19 CVE-2000-0971 Unspecified vulnerability in Avirt Mail Server 4.0/4.2
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.
network
low complexity
avirt
critical
 10.0
10
2000-12-19 CVE-2000-0969 Unspecified vulnerability in Valve Software Half-Life Dedicated Server 3.1.3
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
network
low complexity
valve-software
critical
 10.0
10
2000-12-19 CVE-2000-0968 Unspecified vulnerability in Valve Software Half-Life Dedicated Server
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.
network
low complexity
valve-software
critical
 10.0
10
2000-12-19 CVE-2000-0967 Unspecified vulnerability in PHP 3.0/4.0
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
network
low complexity
php
critical
 10.0
10