Monthly Archive: February 2000

A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable. Date published : 2000-02-04

Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux. Date published : 2000-02-04

Denial of service in Sendmail 8.8.6 in HPUX. Date published : 2000-02-04

The WebRamp web administration utility has a default password. Date published : 2000-02-04 http://www.securityfocus.com/bid/577

Buffer overflow in ALMail32 POP3 client via From: or To: headers. Date published : 2000-02-04 http://www.securityfocus.com/bid/574

Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands. Date published : 2000-02-04 http://ciac.llnl.gov/ciac/bulletins/j-064.shtml https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032

The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy. Date published : 2000-02-04 http://ciac.llnl.gov/ciac/bulletins/j-064.shtml

The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service. Date published : 2000-02-04

An application-critical Windows NT registry key has an inappropriate value. Date published : 2000-02-04

An application-critical Windows NT registry key has inappropriate permissions. Date published : 2000-02-04

A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified. Date published : 2000-02-04

A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete. Date published : 2000-02-04

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd)...

WinGate is being used. Date published : 2000-02-04