CVE List

Id CVE No. Status Description Phase Votes Comments Actions
2426  CVE-2000-0857  Candidate  The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.  Proposed (20001018)  ACCEPT(4) Baker, Cole, Collins, Frech | NOOP(4) Armstrong, Christey, Magdych, Wall  Cole> HAS-INDEPENDENT-CONFIRMATION | Christey> ADDREF FREEBSD:FreeBSD-SA-00:57 | CHANGE> [Magdych changed vote from REVIEWING to NOOP]  View
2427  CVE-2000-0858  Entry  Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.        View
2428  CVE-2000-0859  Entry  The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.        View
2429  CVE-2000-0860  Entry  The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.        View
2430  CVE-2000-0861  Entry  Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.        View

Page 486 of 20943, showing 5 records out of 104715 total, starting on record 2426, ending on 2430

Actions