Monthly Archive: January 2000

Denial of service in Debian IRC Epic/epic4 client via a long string. Date published : 2000-01-04 http://www.securityfocus.com/bid/605

MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages. Date published : 2000-01-04

BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable. Date published : 2000-01-04

BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters. Date published : 2000-01-04

classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form. Date published : 2000-01-04

classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters. Date published : 2000-01-04 http://www.securityfocus.com/bid/2020

TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. Date published : 2000-01-04 http://www.securityfocus.com/bid/689

Denial of service in various Windows systems via malformed, fragmented IGMP packets. Date published : 2000-01-04 http://www.securityfocus.com/bid/514

The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files. Date published : 2000-01-04 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018 http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q231452

URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. Date published : 2000-01-04 http://www.securityfocus.com/bid/746

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package. Date published : 2000-01-04 http://www.securityfocus.com/bid/324

Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability. Date published : 2000-01-04 http://www.securityfocus.com/bid/646 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-038

sccw allows local users to read arbitrary files. Date published : 2000-01-04

ypserv allows local administrators to modify password tables. Date published : 2000-01-04