Monthly Archive: January 2000

ypserv allows a local user to modify the GECOS and login shells of other users. Date published : 2000-01-04

Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation. Date published : 2000-01-04

Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals. Date published : 2000-01-04

Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font. Date published : 2000-01-04

The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. Date published : 2000-01-04 http://www.securityfocus.com/bid/674 http://www.kb.cert.org/vuls/id/37828

FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack. Date published : 2000-01-04 http://www.eeye.com/html/Research/Advisories/AD05261999.html

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. Date published : 2000-01-04 http://www.securityfocus.com/bid/645 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-041

The Zeus web server administrative interface uses weak encryption for its passwords. Date published : 2000-01-04 http://www.securityfocus.com/bid/742

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine. Date published : 2000-01-04 http://www.securityfocus.com/bid/742

Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly. Date published : 2000-01-04

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file. Date published : 2000-01-04

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR. Date published : 2000-01-04 http://www.securityfocus.com/bid/599

Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME. Date published : 2000-01-04 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-042 http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q243638

Buffer overflow in Internet Explorer 4.0 via EMBED tag. Date published : 2000-01-04 http://support.microsoft.com/support/kb/articles/q176/6/97.asp http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q185959