Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2000-11-14 CVE-2000-0875 Unspecified vulnerability in Texas Imperial Software Wftpd and Wftpd PRO
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.
network
low complexity
texas-imperial-software
5.0
2000-11-14 CVE-2000-0874 Unspecified vulnerability in Qualcomm Eudora 4.2/4.3
Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
network
low complexity
qualcomm
5.0
2000-11-14 CVE-2000-0872 Directory Traversal vulnerability in Nathan Purciful PHPphotoalbum 0.9.9
explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a ..
network
low complexity
nathan-purciful
5.0
2000-11-14 CVE-2000-0871 Unspecified vulnerability in Khamil Landross and Zack Jones Eftp 2.0.4.281
Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.
network
low complexity
khamil-landross-and-zack-jones
5.0
2000-11-14 CVE-2000-0869 The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
network
low complexity
apache suse
5.0
2000-11-14 CVE-2000-0868 The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
network
low complexity
apache suse
5.0
2000-11-14 CVE-2000-0864 Race Condition vulnerability in Gnome Esound 0.2.19
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack.
local
high complexity
gnome CWE-362
6.2
2000-11-14 CVE-2000-0862 Unspecified vulnerability in Allaire Spectra 1.0.1
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
network
low complexity
allaire
6.4
2000-11-14 CVE-2000-0860 Unspecified vulnerability in PHP
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
network
low complexity
php
5.0
2000-11-14 CVE-2000-0859 Unspecified vulnerability in Gordano Ntmail 5.0/6.0
The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.
network
low complexity
gordano
5.0