PUBLIÉES EN

juin 2000

10 CVE, des plus récentes aux plus anciennes.

CVE-2000-0579IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being … 3.7 FAIBLE
CVE-2000-0578SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files … 3.7 FAIBLE
CVE-2000-0501Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. 2.6 FAIBLE
CVE-2000-0565SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack. 2.1 FAIBLE
CVE-2000-0502Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitr… 2.1 FAIBLE
CVE-2000-0559eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt … 2.1 FAIBLE
CVE-2000-0503The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event. 2.6 FAIBLE
CVE-2000-0519Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer sess… 2.6 FAIBLE
CVE-2000-0518Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "S… 2.6 FAIBLE
CVE-2000-0487The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES en… 3.6 FAIBLE