Monthly Archive: January 2000

Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode. Date published : 2000-01-04 http://www.securityfocus.com/bid/858

Buffer overflow in Xshipwars xsw program. Date published : 2000-01-04 http://www.securityfocus.com/bid/863

The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up...

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. Date published : 2000-01-04

Race condition in xterm allows local users to modify arbitrary files via the logging option. Date published : 2000-01-04

FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. Date published : 2000-01-04

Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option. Date published : 2000-01-04 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9701-045

IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option. Date published : 2000-01-04 ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX

The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service. Date published : 2000-01-04

WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers. Date published : 2000-01-04

Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands. Date published : 2000-01-04 http://www.securityfocus.com/bid/739

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters. Date published : 2000-01-04 http://www.securityfocus.com/bid/762 http://marc.info/?l=bugtraq&m=94157187815629&w=2

Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator. Date published : 2000-01-04 http://www.securityfocus.com/bid/720

Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages. Date published : 2000-01-04