CVEs published January 4, 2000
152 CVEs were published on January 4, 2000: 0 critical, 0 high.
- Published
- 152
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 152
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 152
- CVE-1999-0151The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
- CVE-1999-0212Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
- CVE-1999-0275Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
- CVE-1999-0280Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
- CVE-1999-0290The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
- CVE-1999-0291The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
- CVE-1999-0297Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
- CVE-1999-0304mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
- CVE-1999-0318Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
- CVE-1999-0322The open() function in FreeBSD allows local attackers to write to arbitrary files.
- CVE-1999-0343A malicious Palace server can force a client to execute arbitrary programs.
- CVE-1999-0408Files created from interactive shell sessions in Cobalt RaQ microservers (e.g.
- CVE-1999-0409Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
- CVE-1999-0421During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account wit
- CVE-1999-0428OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
- CVE-1999-0439Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc config
- CVE-1999-0470A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
- CVE-1999-0674The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
- CVE-1999-0680Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of
- CVE-1999-0682Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e.
- CVE-1999-0685Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
- CVE-1999-0686Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
- CVE-1999-0687The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
- CVE-1999-0688Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
- CVE-1999-0689The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
- CVE-1999-0690HP CDE program includes the current directory in root's PATH variable.
- CVE-1999-0691Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
- CVE-1999-0692The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
- CVE-1999-0693Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
- CVE-1999-0695The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a ..
- CVE-1999-0699The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
- CVE-1999-0700Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
- CVE-1999-0701After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator
- CVE-1999-0702Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportEx
- CVE-1999-0703OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
- CVE-1999-0704Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
- CVE-1999-0705Buffer overflow in INN inews program.
- CVE-1999-0706Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
- CVE-1999-0707The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
- CVE-1999-0710The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remot
- CVE-1999-0713The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
- CVE-1999-0714Vulnerability in Compaq Tru64 UNIX edauth command.
- CVE-1999-0715Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed ph
- CVE-1999-0716Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.
- CVE-1999-0717A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
- CVE-1999-0721Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.
- CVE-1999-0722The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
- CVE-1999-0723The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user
- CVE-1999-0724Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
- CVE-1999-0725When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain file
- CVE-1999-0726An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
- CVE-1999-0728A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.
- CVE-1999-0730The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
- CVE-1999-0731The KDE klock program allows local users to unlock a session using malformed input.
- CVE-1999-0732The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links.
- CVE-1999-0735KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
- CVE-1999-0744Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
- CVE-1999-0745Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
- CVE-1999-0749Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
- CVE-1999-0751Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
- CVE-1999-0752Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
- CVE-1999-0755Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
- CVE-1999-0761Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
- CVE-1999-0762When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access
- CVE-1999-0763NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
- CVE-1999-0764NetBSD allows ARP packets to overwrite static ARP entries.
- CVE-1999-0765SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
- CVE-1999-0766The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
- CVE-1999-0769Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
- CVE-1999-0771The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a ..
- CVE-1999-0772Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.
- CVE-1999-0774Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.
- CVE-1999-0777IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- CVE-1999-0779Denial of service in HP-UX SharedX recserv program.
- CVE-1999-0793Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.
- CVE-1999-0794Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
- CVE-1999-0802Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
- CVE-1999-0804Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
- CVE-1999-0807The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.
- CVE-1999-0809Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only ac
- CVE-1999-0810Denial of service in Samba NETBIOS name service daemon (nmbd).
- CVE-1999-0812Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
- CVE-1999-0814Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
- CVE-1999-0817Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain
- CVE-1999-0833Buffer overflow in BIND 8.2 via NXT records.
- CVE-1999-0835Denial of service in BIND named via malformed SIG records.
- CVE-1999-0837Denial of service in BIND by improperly closing TCP sessions via so_linger.
- CVE-1999-0839Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been schedul
- CVE-1999-0848Denial of service in BIND named via consuming more than "fdmax" file descriptors.
- CVE-1999-0849Denial of service in BIND named via maxdname.
- CVE-1999-0851Denial of service in BIND named via naptr.
- CVE-1999-0858Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) s
- CVE-1999-0861Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
- CVE-1999-0867Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
- CVE-1999-0868ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
- CVE-1999-0869Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
- CVE-1999-0870Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted sc
- CVE-1999-0871Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerabi
- CVE-1999-0876Buffer overflow in Internet Explorer 4.0 via EMBED tag.
- CVE-1999-0877Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
- CVE-1999-0878Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
- CVE-1999-0879Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
- CVE-1999-0880Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
- CVE-1999-0883Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
- CVE-1999-0884The Zeus web server administrative interface uses weak encryption for its passwords.
- CVE-1999-0886The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
- CVE-1999-0887FTGate web interface server allows remote attackers to read files via a ..
- CVE-1999-0891The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
- CVE-1999-0892Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.
- CVE-1999-0894Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
- CVE-1999-0900Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.
- CVE-1999-0901ypserv allows a local user to modify the GECOS and login shells of other users.
- CVE-1999-0902ypserv allows local administrators to modify password tables.
- CVE-1999-0907sccw allows local users to read arbitrary files.
- CVE-1999-0909Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the
- CVE-1999-0914Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.
- CVE-1999-0915URL Live! web server allows remote attackers to read arbitrary files via a ..
- CVE-1999-0917The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
- CVE-1999-0918Denial of service in various Windows systems via malformed, fragmented IGMP packets.
- CVE-1999-0933TeamTrack web server allows remote attackers to read arbitrary files via a ..
- CVE-1999-0934classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
- CVE-1999-0935classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
- CVE-1999-0936BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
- CVE-1999-0937BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
- CVE-1999-0938MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.
- CVE-1999-0939Denial of service in Debian IRC Epic/epic4 client via a long string.
- CVE-1999-0940Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
- CVE-1999-0943Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.
- CVE-1999-0947AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via
- CVE-1999-0951Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
- CVE-1999-0953WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
- CVE-1999-0956The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
- CVE-1999-0960IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
- CVE-1999-0962Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
- CVE-1999-0963FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
- CVE-1999-0965Race condition in xterm allows local users to modify arbitrary files via the logging option.
- CVE-1999-0967Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
- CVE-1999-0969The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an erro
- CVE-1999-0972Buffer overflow in Xshipwars xsw program.
- CVE-1999-0973Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in ver
- CVE-1999-0974Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
- CVE-1999-0975The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT exten
- CVE-1999-0977Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
- CVE-1999-0978htdig allows remote attackers to execute commands via filenames with shell metacharacters.
- CVE-1999-0979The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _
- CVE-1999-0980Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumera
- CVE-1999-0981Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to acces
- CVE-1999-0982The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.
- CVE-1999-0986The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
- CVE-1999-0987Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.
- CVE-1999-0989Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protoc
- CVE-1999-0991Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.