CVE-2000-0579

IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited...

fbi-aim-dos.txt

FROM THE OFFICES OF: | | | \ | | | | | | | | | |/ / | | | | | | | | / \ / | / | '| | || ' | / \ | | |/ |/ \ ' \ / / \ | || | | |/ / | | | | || | | | || / | | | | | / | | | | / | / // ,|| /| ||\||||, ||| ||\| / | |/ AOL Instant Messenger DoS Denial of Service exploit. Website:...

CVE-2000-0533

Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files...

CVE-2000-0466

AIX cdmount allows local users to gain root privileges via shell metacharacters...

CVE-2000-0561

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request...

CVE-2000-0529

Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request...

CVE-2000-0620

libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop...

CVE-2000-0504

libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIPSTRING macro...

CVE-2000-0528

Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...

CVE-2000-0541

The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command...

Security Bulletin (MS00-020)

Microsoft Security Bulletin MS00-020 - -------------------------------------- Patch Available for "Desktop Separation" Vulnerability Originally Posted: June 15, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000. The...

Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98

Здравствуйте , Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98 Network World http://www.nwfusion.com Если Вы работаете на сервере Windows 2000 с установленным терминальным сервисом Terminal Services, то должны знать о его потенциальной...

Проблема с Desktop'ами в Windows 2000

При определенных условиях локальный пользователь может обратиться к виртуальным desktop'ам открытых с других машин, и просмотреть/изменить какую-либо информацию...

CVE-2000-0479

Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...

CVE-2000-0480

Dragon telnet server allows remote attackers to cause a denial of service via a long username...

CVE-2000-0383

CVE-2000-0383 concerns AOL Instant Messenger’s file transfer component disclosing the sender’s local file path to the recipient. The CERT/CC entry notes this as an exposure that could enable privacy/security inferences about the sender’s machine. The description in CVE records this behavior; vend...

CVE-2000-0385

FileMaker Pro Web Companion (5.0v3 and earlier) exposes data by bypassing Field-Level Security via XML publishing or email, allowing unauthorized access. The CERT entry confirms attackers can read data thought protected. Remediation: upgrade to FileMaker Pro 5.0v4 or later as described by FileMak...

CVE-2000-0401

PDGSoft Shopping Cart vulnerability (CVE-2000-0401) affects redirect.exe and changepw.exe. The issue is remote buffer overflows that allow an attacker to execute arbitrary commands via a long query string, potentially leading to data disclosure or privilege escalation on the web server. Exploitat...

CVE-2000-0412

CVE-2000-0412 affects the Napster-era clients (gnapster/knapster). The vulnerability allows a remote attacker to read arbitrary files on the client by specifying full pathnames, due to improper restriction to MP3 files. The NVD entry assigns a CVSSv2 base score of 7.5 (HIGH) with network attack v...

CVE-2000-0422

CVE-2000-0422 : Buffer overflow in the Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. Affected component: Netwin DMailWeb CGI. Impact: arbitrary command execution; no patch/mitigation details are provided in the supplied documents. E...