Notes by Date Public

• Date PublicIDTitle
• 08 Nov 2000VU#570330MS Windows NT Terminal Server 4.0 buffer overflow in regapi.dll allows remote code execution or DoS
• 07 Nov 2000VU#198355ISC BIND 8.2.2-P6 vulnerable to DoS when processing SRV records, aka the "srv bug"
• 07 Nov 2000VU#715973ISC BIND 8.2.2-P6 vulnerable to DoS via compressed zone transfer, aka the "zxfr bug"
• 04 Nov 2000VU#960877Red Hat linux restore uses insecure environment variables allowing root compromise
• 02 Nov 2000VU#183397Microsoft Windows 2000 System Monitor ActiveX Control contains buffer overflow
• 01 Nov 2000VU#540517libgcc contains multiple flaws that allow integer type range vulnerabilities to occur at runtime
• 31 Oct 2000VU#153653Linux dump uses environment variables insecurely, allowing for root compromise
• 27 Oct 2000VU#28027Distributed GL Daemon (DGLD) allows attackers to identify IRIX systems
• 25 Oct 2000VU#683677Cisco IOS software vulnerable to DoS via HTTP request containing "?/"
• 24 Oct 2000VU#470543Sun Microsystems Keys exposed and revoked
• 18 Oct 2000VU#118277The Oracle Internet Directory LDAP (oidldapd) contains buffer overflow
• 10 Oct 2000VU#111677Microsoft IIS 4.0 / 5.0 vulnerable to directory traversal via extended unicode in url (MS00-078)
• 03 Oct 2000VU#369427Format string vulnerability in libutil pw_error(3) function
• 03 Oct 2000VU#683765AOL Instant Messenger vulnerable to denial of service via crafted file name
• 26 Sep 2000VU#22404telnet and rlogin URLs disclose sensitive information, including Environment variables