Monthly Archive: February 2000

Netscape Navigator uses weak encryption for storing a user’s Netscape mail password. Date published : 2000-02-04 http://marc.info/?l=bugtraq&m=94536309217214&w=2 http://marc.info/?l=bugtraq&m=94570673523998&w=2

Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed. Date published : 2000-02-04

Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. Date published : 2000-02-04

UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. Date published : 2000-02-04

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. Date published : 2000-02-04

Matt’s Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. Date published : 2000-02-04

Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. Date published : 2000-02-04

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created. Date published : 2000-02-04 http://www.securityfocus.com/bid/1808...

Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. Date published : 2000-02-04 http://marc.info/?l=bugtraq&m=91759216618637&w=2

Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. Date published : 2000-02-04 http://www.securityfocus.com/bid/757

Buffer overflow in uum program for Canna input system allows local users to gain root privileges. Date published : 2000-02-04 http://www.securityfocus.com/bid/757

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections. Date published : 2000-02-04

Mutt mail client allows a remote attacker to execute commands via shell metacharacters. Date published : 2000-02-04 http://marc.info/?l=bugtraq&m=90221104526154&w=2

Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests. Date published : 2000-02-04