CVE-2000-0583

CVE-2000-0583 affects the vpopmail package: the vchkpw program (versions prior to 4.8) fails to properly cleanse an untrusted format string in a syslog call, enabling remote users to trigger a denial of service by sending a USER or PASS command containing formatting directives. The remediation is...

PT-1990-1005 · Next · Next

Name of the Vulnerable Software and Affected Versions: NeXT systems versions prior to 2.0 Description: The issue concerns the BuildDisk program, which does not prompt users for the root password on affected systems. This allows local users to gain root privileges. Recommendations: For versions...