Notes by CVSS Environmental Score

• CVSSDate PublicIDTitle
• N/A2000-09-26VU#22404telnet and rlogin URLs disclose sensitive information, including Environment variables
• N/A2000-09-26VU#664141Debian glibc 2 symlink issue could allow arbitrary file overwriting
• N/A2000-09-26VU#800893Microsoft Internet Explorer vulnerable to file disclosure via code containing GetObject() function
• N/A2000-09-25VU#382365LPRng can pass user-supplied input as a format string parameter to syslog() calls
• N/A2000-08-31VU#686403ld.so fails to unset LD_PRELOAD before executing suid root programs
• N/A2000-08-24VU#747124ADK flaw in recent versions of PGP
• N/A2000-08-10VU#635463Microsoft SQL Server and Microsoft Data Engine (MSDE) ship with a null default password
• N/A2000-08-03VU#31554Adobe Acrobat products have buffer overflow in the CIDFont /Registry and /Ordering entries
• N/A2000-08-03VU#32231Netscape Java Security Manager fails to prevent URLConnections through netscape.net.URLConnection Class
• N/A2000-08-02VU#31607Microsoft Windows 2000 Service Control Manager creates predictably named pipes
• N/A2000-07-27VU#25701Linux gpm daemon allows arbitrary file removal
• N/A2000-07-27VU#32650Denial of Service Attack in NetBIOS Services
• N/A2000-07-20VU#38950MS Outlook "Cache Bypass" allows attackers to circumvent Internet Zone security policy
• N/A2000-07-16VU#34043rpc.statd vulnerable to remote root compromise via format string stack overwrite
• N/A2000-07-14VU#28565Microsoft Internet Information Server (IIS) discloses contents of files via crafted request containing "+.htr"