CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 1869 | CVE-2000-0291 | Candidate | Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. | Proposed (20000426) | ACCEPT(2) Dik, Levy | MODIFY(1) Frech | NOOP(3) Baker, Cole, Wall | Frech> XF:staroffice-long-url-bo | View |
| 1871 | CVE-2000-0293 | Candidate | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory. | Proposed (20000426) | ACCEPT(3) Baker, Cole, Levy | MODIFY(1) Frech | NOOP(2) Christey, Wall | Christey> ADDREF SUSE:20000502 aaabase < 2000.5.2 | URL: http://www.suse.de/de/support/security/suse_security_announce_47.txt | | This advisory references another problem that is listed in | CVE-2000-0433. | Frech> XF:aaabase-file-deletion | View |
| 1877 | CVE-2000-0299 | Candidate | Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept. | Proposed (20000426) | ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(4) Christey, Cole, Wall, Williams | REVIEWING(1) Levy | Christey> ADDREF XF:webobjects-post-dos | Frech> XF:webobjects-post-dos | Christey> See http://til.info.apple.com/techinfo.nsf/artnum/n75087 | Document says: | "A request with a large, malformed http header can crash a WOApp" | (Apple reference #2470254) appears to be the acknowledgement needed. | | Is this sufficient acknowledgement? This is dated AUgust 24, | but the initial disclosure occurred on April 4. | Christey> BID:1896 | View |
| 1878 | CVE-2000-0300 | Candidate | The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. | Proposed (20000426) | ACCEPT(4) Baker, Cole, Levy, Prosser | MODIFY(1) Frech | REVIEWING(1) Wall | Frech> XF:pcanywhere-weak-encryption | Prosser> http://service2.symantec.com/SUPPORT/pca.nsf/pfdocs/1999022312571812 | Upgraded in pcA 10 | View |
| 1817 | CVE-2000-0239 | Candidate | Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request. | Proposed (20000412) | ACCEPT(3) Baker, Frech, Levy | NOOP(2) Cole, Magdych | CHANGE> [Magdych changed vote from REVIEWING to NOOP] | View |
Page 370 of 20943, showing 5 records out of 104715 total, starting on record 1846, ending on 1850
