Monthly Archive: January 2000

Denial of service in Linux syslogd via a large number of connections. Date published : 2000-01-18 http://www.securityfocus.com/bid/809

Buffer overflow in Samba smbd program via a malformed message command. Date published : 2000-01-18 http://www.securityfocus.com/bid/536

Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list. Date published : 2000-01-18

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive...

Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. Date published : 2000-01-18 http://www.securityfocus.com/bid/602

The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories. Date published : 2000-01-18 http://www.securityfocus.com/bid/591

Trn allows local users to overwrite other users’ files via symlinks. Date published : 2000-01-18

The Debian mailman package uses weak authentication, which allows attackers to gain privileges. Date published : 2000-01-18 http://www.securityfocus.com/bid/480

A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. Date published : 2000-01-18 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990819-dbaccess https://exchange.xforce.ibmcloud.com/vulnerabilities/3133

Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field. Date published : 2000-01-18 http://www.securityfocus.com/bid/651

Denial of service in AIX ptrace system call allows local users to crash the system. Date published : 2000-01-18 http://www.ciac.org/ciac/bulletins/j-055.shtml

Denial of service in Gauntlet Firewall via a malformed ICMP packet. Date published : 2000-01-18 http://www.securityfocus.com/bid/556

Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI’s Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files. Date published : 2000-01-18 http://www.securityfocus.com/bid/64

cfingerd lists all users on a system via search.**@target. Date published : 2000-01-18