Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter. Date published : 2000-07-12 http://www.securityfocus.com/bid/1305 http://archives.neohapsis.com/archives/bugtraq/2000-05/0435.html
Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length. Date published : 2000-07-12 http://www.securityfocus.com/bid/1304 http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0231.html
The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port...
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which...
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. Date published : 2000-07-12 http://www.securityfocus.com/bid/1377 http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006201453090.1812-200000@apollo.aci.com.pl
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. Date published : 2000-07-12 http://www.securityfocus.com/bid/1335 http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html
mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. Date published : 2000-07-12 http://www.securityfocus.com/bid/1335 http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html
Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From. Date published : 2000-07-12 http://www.securityfocus.com/bid/1333 http://archives.neohapsis.com/archives/bugtraq/2000-06/0045.html
Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. Date published : 2000-07-12 http://www.securityfocus.com/bid/1330 http://marc.info/?l=bugtraq&m=96240393814071&w=2
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname. Date published : 2000-07-12 http://www.securityfocus.com/bid/1287 http://marc.info/?l=bugtraq&m=95990103207665&w=2
The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event. Date published : 2000-07-12 http://www.securityfocus.com/bid/1311 http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords. Date published : 2000-07-12 http://www.securityfocus.com/bid/1300 http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.html
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. Date published...
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store...