By publication date
Exploited and new serious CVEs: July 2000
15 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
69This week | CVE-2000-0573Weaponized | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exechp · hp-ux | Critical10.0 | — | 96.2% | Jul 7, 2000 |
38Monitor | CVE-2000-0574Proof of concept | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the seopenbsd · ftpd | Medium5.0 | — | 58.8% | Jul 7, 2000 |
40Plan | CVE-2000-0649Weaponized | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected bymicrosoft · internet information server · CWE-200 | Low2.6 | — | 76.5% | Jul 13, 2000 |
27Monitor | CVE-2000-0631No exploit | An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing microsoft · internet information server | Medium5.0 | — | 24.7% | Jul 14, 2000 |
26Monitor | CVE-2000-0662No exploit | Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using tmicrosoft · internet explorer | Medium5.0 | — | 21.3% | Jul 14, 2000 |
48Plan | CVE-2000-0666Proof of concept | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote atconectiva · linux | Critical10.0 | — | 26.3% | Jul 16, 2000 |
40Plan | CVE-2000-0630Proof of concept | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment microsoft · internet information server | Medium5.0 | — | 68.2% | Jul 17, 2000 |
40Plan | CVE-2000-0665Weaponized | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.gamsoft · telsrv | Medium5.0 | — | 50.9% | Jul 17, 2000 |
30Monitor | CVE-2000-0567Proof of concept | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an emicrosoft · outlook | Medium5.0 | — | 32.3% | Jul 18, 2000 |
44Plan | CVE-2000-0622Proof of concept | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commandsoreilly · website professional | Critical10.0 | — | 12.9% | Jul 19, 2000 |
37Monitor | CVE-2000-0621No exploit | Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformemicrosoft · outlook | High7.5 | — | 22.1% | Jul 20, 2000 |
28Monitor | CVE-2000-0653Proof of concept | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express winmicrosoft · outlook express | Medium5.0 | — | 26.8% | Jul 20, 2000 |
23Monitor | CVE-2000-0672No exploit | The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary apache · tomcat | Medium5.0 | — | 10.0% | Jul 20, 2000 |
24Monitor | CVE-2000-0655Proof of concept | Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image cnetscape · communicator | Medium5.0 | — | 12.7% | Jul 25, 2000 |
30Monitor | CVE-2000-0673Proof of concept | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendimicrosoft · windows 2000 | Medium5.0 | — | 33.4% | Jul 27, 2000 |
- CVE-2000-057369This week
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exec
CriticalCVSS 10.0WeaponizedEPSS 96%hp · hp-uxJul 7, 2000
- CVE-2000-057438Monitor
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the se
MediumCVSS 5.0Proof of conceptEPSS 58%openbsd · ftpdJul 7, 2000
- CVE-2000-064940Plan
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by
LowCVSS 2.6WeaponizedEPSS 76%microsoft · internet information serverJul 13, 2000
- CVE-2000-063127Monitor
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing
MediumCVSS 5.0No exploitEPSS 24%microsoft · internet information serverJul 14, 2000
- CVE-2000-066226Monitor
Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using t
MediumCVSS 5.0No exploitEPSS 21%microsoft · internet explorerJul 14, 2000
- CVE-2000-066648Plan
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote at
CriticalCVSS 10.0Proof of conceptEPSS 26%conectiva · linuxJul 16, 2000
- CVE-2000-063040Plan
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment
MediumCVSS 5.0Proof of conceptEPSS 68%microsoft · internet information serverJul 17, 2000
- CVE-2000-066540Plan
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
MediumCVSS 5.0WeaponizedEPSS 50%gamsoft · telsrvJul 17, 2000
- CVE-2000-056730Monitor
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an e
MediumCVSS 5.0Proof of conceptEPSS 32%microsoft · outlookJul 18, 2000
- CVE-2000-062244Plan
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands
CriticalCVSS 10.0Proof of conceptEPSS 12%oreilly · website professionalJul 19, 2000
- CVE-2000-062137Monitor
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malforme
HighCVSS 7.5No exploitEPSS 22%microsoft · outlookJul 20, 2000
- CVE-2000-065328Monitor
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express win
MediumCVSS 5.0Proof of conceptEPSS 26%microsoft · outlook expressJul 20, 2000
- CVE-2000-067223Monitor
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary
MediumCVSS 5.0No exploitEPSS 10%apache · tomcatJul 20, 2000
- CVE-2000-065524Monitor
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image c
MediumCVSS 5.0Proof of conceptEPSS 12%netscape · communicatorJul 25, 2000
- CVE-2000-067330Monitor
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendi
MediumCVSS 5.0Proof of conceptEPSS 33%microsoft · windows 2000Jul 27, 2000