Notes by Date Public

• Date PublicIDTitle
• 25 Oct 2000VU#683677Cisco IOS software vulnerable to DoS via HTTP request containing "?/"
• 24 Oct 2000VU#470543Sun Microsystems Keys exposed and revoked
• 18 Oct 2000VU#118277The Oracle Internet Directory LDAP (oidldapd) contains buffer overflow
• 10 Oct 2000VU#111677Microsoft IIS 4.0 / 5.0 vulnerable to directory traversal via extended unicode in url (MS00-078)
• 03 Oct 2000VU#369427Format string vulnerability in libutil pw_error(3) function
• 03 Oct 2000VU#683765AOL Instant Messenger vulnerable to denial of service via crafted file name
• 26 Sep 2000VU#22404telnet and rlogin URLs disclose sensitive information, including Environment variables
• 26 Sep 2000VU#664141Debian glibc 2 symlink issue could allow arbitrary file overwriting
• 26 Sep 2000VU#800893Microsoft Internet Explorer vulnerable to file disclosure via code containing GetObject() function
• 25 Sep 2000VU#382365LPRng can pass user-supplied input as a format string parameter to syslog() calls
• 31 Aug 2000VU#686403ld.so fails to unset LD_PRELOAD before executing suid root programs
• 24 Aug 2000VU#747124ADK flaw in recent versions of PGP
• 10 Aug 2000VU#635463Microsoft SQL Server and Microsoft Data Engine (MSDE) ship with a null default password
• 03 Aug 2000VU#31554Adobe Acrobat products have buffer overflow in the CIDFont /Registry and /Ordering entries
• 03 Aug 2000VU#32231Netscape Java Security Manager fails to prevent URLConnections through netscape.net.URLConnection Class