Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2000-02-29 CVE-2000-0208 Unspecified vulnerability in Htdig
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
network
low complexity
htdig
5.0
2000-02-29 CVE-2000-0176 Path Disclosure vulnerability in Serv-U FTP Server
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
network
low complexity
cat-soft
5.0
2000-02-28 CVE-2000-0179 Unspecified vulnerability in HP Openview Omniback II 2.55/3.0/3.1
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
network
low complexity
hp
5.0
2000-02-25 CVE-2000-0221 Unspecified vulnerability in Nortel Nautica Marlin
The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
network
low complexity
nortel
5.0
2000-02-24 CVE-2000-0220 Unspecified vulnerability in Zonelabs Zonealarm 2.0.26
ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
network
low complexity
zonelabs
5.0
2000-02-24 CVE-2000-0217 The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
network
high complexity
openbsd ssh
5.1
2000-02-24 CVE-2000-0212 Unspecified vulnerability in Pragma Systems Interaccess Telnetd Server 4.0
InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information.
network
low complexity
pragma-systems
5.0
2000-02-23 CVE-2000-0211 Unspecified vulnerability in Microsoft Windows Media Services 4.0/4.1
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
network
low complexity
microsoft
5.0
2000-02-23 CVE-2000-0182 Unspecified vulnerability in Iplanet web Server 4.1Enterprise
iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
network
low complexity
iplanet
5.0
2000-02-21 CVE-2000-0163 Unspecified vulnerability in Freebsd
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
local
low complexity
freebsd
4.6