CVEs published January 18, 2000
30 CVEs were published on January 18, 2000: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 30
- CVE-1999-0101Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
- CVE-1999-0233IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
- CVE-1999-0259cfingerd lists all users on a system via search.**@target.
- CVE-1999-0270Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (perfo
- CVE-1999-0683Denial of service in Gauntlet Firewall via a malformed ICMP packet.
- CVE-1999-0694Denial of service in AIX ptrace system call allows local users to crash the system.
- CVE-1999-0708Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
- CVE-1999-0734A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.
- CVE-1999-0742The Debian mailman package uses weak authentication, which allows attackers to gain privileges.
- CVE-1999-0743Trn allows local users to overwrite other users' files via symlinks.
- CVE-1999-0753The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.
- CVE-1999-0768Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.
- CVE-1999-0770Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of
- CVE-1999-0775Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established
- CVE-1999-0811Buffer overflow in Samba smbd program via a malformed message command.
- CVE-1999-0831Denial of service in Linux syslogd via a large number of connections.
- CVE-1999-0834Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.
- CVE-1999-0847Buffer overflow in free internet chess server (FICS) program, xboard.
- CVE-1999-0853Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Au
- CVE-1999-0875DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
- CVE-1999-0881Falcon web server allows remote attackers to read arbitrary files via a ..
- CVE-1999-0898Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spoo
- CVE-1999-0899The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to s
- CVE-1999-0905Denial of service in Axent Raptor firewall via malformed zero-length IP options.
- CVE-1999-0955Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
- CVE-1999-0992HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
- CVE-1999-0994Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
- CVE-1999-0995Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids
- CVE-1999-0999Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
- CVE-1999-1001Cisco Cache Engine allows a remote attacker to gain access via a null username and password.