Microsoft Security Bulletin (MS00-026)

Microsoft Security Bulletin MS00-026 ====================================== Patch Available for "Mixed Object Access" Vulnerability Originally Posted: April 20, 2000 Summary - ------- Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000 that could,...

Microsoft Security Bulletin (MS00-027)

Microsoft Security Bulletin MS00-027 - -------------------------------------- Patch Available for "Malformed Environment Variable" Vulnerability Originally Posted: April 20, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0...

Microsoft Windows Server 2000/95/98/NT 4.0 - Long Filename Extension

// source: https://www.securityfocus.com/bid/1259/info Windows 95, 98, NT and 2000 suffer from a number of related buffer overflows that can result in a crash if a filename with an extension longer than 128 characters is accessed. Although arbitrary code could be executed via this manner, it woul...

CVE-2000-0272

RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070...

CVE-2000-0311

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...

CVE-2000-0257

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...

CVE-2000-0256

Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability...

CVE-2000-0044

The CVE-2000-0044 entry concerns War FTP Daemon versions 1.70 and 1.67b2, where macros allow local or remote attackers to read arbitrary files or execute commands. The connected records confirm the affected product/version and the underlying impact, but they do not provide a concrete remediation ...

CVE-2000-0057

Allaire ColdFusion 4.x CFCACHE exposes HTML output by creating temporary .tmp files and a cfcache.map pointing to them, stored in the web root and accessible remotely. Affected products include ColdFusion Server 4.0.x with multiple OSs listed; remediation exists via Allaire Security Bulletin ASB0...

CVE-2000-0062

CVE-2000-0062 pertains to the DTML implementation in Zope, where remote attackers could perform unauthorized activities. Connected advisories (GHSA-WCWP-R3FJ-MM3P; OSV) describe this as an Improper Authentication issue in Zope DTML, aligning with the historical vulnerability where DTML access cou...

CVE-2000-0073

CVE-2000-0073 involves a buffer overflow in the Microsoft Rich Text Format (RTF) reader triggered by a malformed control word, leading to a denial of service. The affected software is the RTF reader component in Microsoft environments. The root cause is a buffer overflow condition, as described i...

CVE-2000-0095

CVE-2000-0095 concerns the PMTU discovery procedure in HP-UX 10.30 and 11.00, which, according to the documentation, generates large amounts of traffic in response to small packets. This behavior can be leveraged by a remote attacker to use the affected system as a packet amplifier. The connected...

CVE-2000-0099

CVE-2000-0099 describes a local privilege escalation in UnixWare via a buffer overflow in the ppptalk command caused by a long prompt argument. The vulnerability arises from an unchecked input length, enabling local users to gain privileges with complete impact on confidentiality, integrity, and ...

CVE-2000-0100

The CVE-2000-0100 entry concerns the SMS Remote Control program, which is installed with insecure permissions that let local users gain privileges by modifying or replacing the program. The NVD entry assigns a CVSS v2.0 base score of 7.2 (HIGH) with LOCAL attack vector, low attack complexity, and...

CVE-2000-0140

The CVE-2000-0140 entry concerns Internet Anywhere POP3 Mail Server. The vulnerability is a denial-of-service condition triggered by a large number of concurrent connections. Documents indicate the affected product and the impact (partial availability) but do not provide exploit details, affected...

CVE-2000-0183

Technical details about CVE-2000-0183 are not provided in the connected documents available here. Public information in the Initial Description notes a buffer overflow in ircII 4.4 via DCC chat. Monitor for updates.

CVE-2000-0053

Microsoft Commercial Internet System MCIS IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request...

CVE-2000-0057

Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information...

CVE-2000-0062

The DTML implementation in the Z Object Publishing Environment Zope allows remote attackers to conduct unauthorized activities...

CVE-2000-0095

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier...