По дате публикации
Эксплуатируемые и новые серьёзные CVE: июль 2000 г.
15 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
69На этой неделе | CVE-2000-0573Готовый эксплойт | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exechp · hp-ux | Критическая10,0 | — | 96,2 % | 7 июл. 2000 г. |
38Наблюдать | CVE-2000-0574Proof of concept | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the seopenbsd · ftpd | Средняя5,0 | — | 58,8 % | 7 июл. 2000 г. |
33Наблюдать | CVE-2000-0649Готовый эксплойт | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected bymicrosoft · internet information server · CWE-200 | Низкая2,6 | — | 76,5 % | 13 июл. 2000 г. |
27Наблюдать | CVE-2000-0631Эксплойта нет | An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing microsoft · internet information server | Средняя5,0 | — | 24,7 % | 14 июл. 2000 г. |
26Наблюдать | CVE-2000-0662Эксплойта нет | Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using tmicrosoft · internet explorer | Средняя5,0 | — | 21,3 % | 14 июл. 2000 г. |
48В плане | CVE-2000-0666Proof of concept | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote atconectiva · linux | Критическая10,0 | — | 26,3 % | 16 июл. 2000 г. |
40В плане | CVE-2000-0630Proof of concept | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment microsoft · internet information server | Средняя5,0 | — | 68,2 % | 17 июл. 2000 г. |
35Наблюдать | CVE-2000-0665Готовый эксплойт | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.gamsoft · telsrv | Средняя5,0 | — | 50,9 % | 17 июл. 2000 г. |
30Наблюдать | CVE-2000-0567Proof of concept | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an emicrosoft · outlook | Средняя5,0 | — | 32,3 % | 18 июл. 2000 г. |
44В плане | CVE-2000-0622Proof of concept | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commandsoreilly · website professional | Критическая10,0 | — | 12,9 % | 19 июл. 2000 г. |
37Наблюдать | CVE-2000-0621Эксплойта нет | Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformemicrosoft · outlook | Высокая7,5 | — | 22,1 % | 20 июл. 2000 г. |
28Наблюдать | CVE-2000-0653Proof of concept | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express winmicrosoft · outlook express | Средняя5,0 | — | 26,8 % | 20 июл. 2000 г. |
23Наблюдать | CVE-2000-0672Эксплойта нет | The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary apache · tomcat | Средняя5,0 | — | 10,0 % | 20 июл. 2000 г. |
24Наблюдать | CVE-2000-0655Proof of concept | Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image cnetscape · communicator | Средняя5,0 | — | 12,7 % | 25 июл. 2000 г. |
30Наблюдать | CVE-2000-0673Proof of concept | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendimicrosoft · windows 2000 | Средняя5,0 | — | 33,4 % | 27 июл. 2000 г. |
- CVE-2000-057369На этой неделе
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exec
КритическаяCVSS 10,0Готовый эксплойтEPSS 96 %hp · hp-ux7 июл. 2000 г.
- CVE-2000-057438Наблюдать
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the se
СредняяCVSS 5,0Proof of conceptEPSS 58 %openbsd · ftpd7 июл. 2000 г.
- CVE-2000-064933Наблюдать
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by
НизкаяCVSS 2,6Готовый эксплойтEPSS 76 %microsoft · internet information server13 июл. 2000 г.
- CVE-2000-063127Наблюдать
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing
СредняяCVSS 5,0Эксплойта нетEPSS 24 %microsoft · internet information server14 июл. 2000 г.
- CVE-2000-066226Наблюдать
Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using t
СредняяCVSS 5,0Эксплойта нетEPSS 21 %microsoft · internet explorer14 июл. 2000 г.
- CVE-2000-066648В плане
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote at
КритическаяCVSS 10,0Proof of conceptEPSS 26 %conectiva · linux16 июл. 2000 г.
- CVE-2000-063040В плане
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment
СредняяCVSS 5,0Proof of conceptEPSS 68 %microsoft · internet information server17 июл. 2000 г.
- CVE-2000-066535Наблюдать
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
СредняяCVSS 5,0Готовый эксплойтEPSS 50 %gamsoft · telsrv17 июл. 2000 г.
- CVE-2000-056730Наблюдать
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an e
СредняяCVSS 5,0Proof of conceptEPSS 32 %microsoft · outlook18 июл. 2000 г.
- CVE-2000-062244В плане
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands
КритическаяCVSS 10,0Proof of conceptEPSS 12 %oreilly · website professional19 июл. 2000 г.
- CVE-2000-062137Наблюдать
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malforme
ВысокаяCVSS 7,5Эксплойта нетEPSS 22 %microsoft · outlook20 июл. 2000 г.
- CVE-2000-065328Наблюдать
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express win
СредняяCVSS 5,0Proof of conceptEPSS 26 %microsoft · outlook express20 июл. 2000 г.
- CVE-2000-067223Наблюдать
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary
СредняяCVSS 5,0Эксплойта нетEPSS 10 %apache · tomcat20 июл. 2000 г.
- CVE-2000-065524Наблюдать
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image c
СредняяCVSS 5,0Proof of conceptEPSS 12 %netscape · communicator25 июл. 2000 г.
- CVE-2000-067330Наблюдать
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendi
СредняяCVSS 5,0Proof of conceptEPSS 33 %microsoft · windows 200027 июл. 2000 г.