# CVEs published 2000-01-18 30 CVEs were published on January 18, 2000: 0 critical, 0 high. Days are UTC. - [CVE-1999-0101](https://cve.now/CVE-1999-0101.md): Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names. (no CVSS) - [CVE-1999-0233](https://cve.now/CVE-1999-0233.md): IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. (no CVSS) - [CVE-1999-0259](https://cve.now/CVE-1999-0259.md): cfingerd lists all users on a system via search.\*\*@target. (no CVSS) - [CVE-1999-0270](https://cve.now/CVE-1999-0270.md): Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (perfo (no CVSS) - [CVE-1999-0683](https://cve.now/CVE-1999-0683.md): Denial of service in Gauntlet Firewall via a malformed ICMP packet. (no CVSS) - [CVE-1999-0694](https://cve.now/CVE-1999-0694.md): Denial of service in AIX ptrace system call allows local users to crash the system. (no CVSS) - [CVE-1999-0708](https://cve.now/CVE-1999-0708.md): Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field. (no CVSS) - [CVE-1999-0734](https://cve.now/CVE-1999-0734.md): A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. (no CVSS) - [CVE-1999-0742](https://cve.now/CVE-1999-0742.md): The Debian mailman package uses weak authentication, which allows attackers to gain privileges. (no CVSS) - [CVE-1999-0743](https://cve.now/CVE-1999-0743.md): Trn allows local users to overwrite other users' files via symlinks. (no CVSS) - [CVE-1999-0753](https://cve.now/CVE-1999-0753.md): The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories. (no CVSS) - [CVE-1999-0768](https://cve.now/CVE-1999-0768.md): Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. (no CVSS) - [CVE-1999-0770](https://cve.now/CVE-1999-0770.md): Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of (no CVSS) - [CVE-1999-0775](https://cve.now/CVE-1999-0775.md): Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established (no CVSS) - [CVE-1999-0811](https://cve.now/CVE-1999-0811.md): Buffer overflow in Samba smbd program via a malformed message command. (no CVSS) - [CVE-1999-0831](https://cve.now/CVE-1999-0831.md): Denial of service in Linux syslogd via a large number of connections. (no CVSS) - [CVE-1999-0834](https://cve.now/CVE-1999-0834.md): Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library. (no CVSS) - [CVE-1999-0847](https://cve.now/CVE-1999-0847.md): Buffer overflow in free internet chess server (FICS) program, xboard. (no CVSS) - [CVE-1999-0853](https://cve.now/CVE-1999-0853.md): Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Au (no CVSS) - [CVE-1999-0875](https://cve.now/CVE-1999-0875.md): DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. (no CVSS) - [CVE-1999-0881](https://cve.now/CVE-1999-0881.md): Falcon web server allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-1999-0898](https://cve.now/CVE-1999-0898.md): Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spoo (no CVSS) - [CVE-1999-0899](https://cve.now/CVE-1999-0899.md): The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to s (no CVSS) - [CVE-1999-0905](https://cve.now/CVE-1999-0905.md): Denial of service in Axent Raptor firewall via malformed zero-length IP options. (no CVSS) - [CVE-1999-0955](https://cve.now/CVE-1999-0955.md): Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command. (no CVSS) - [CVE-1999-0992](https://cve.now/CVE-1999-0992.md): HP VirtualVault with the PHSS\_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP). (no CVSS) - [CVE-1999-0994](https://cve.now/CVE-1999-0994.md): Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords. (no CVSS) - [CVE-1999-0995](https://cve.now/CVE-1999-0995.md): Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids (no CVSS) - [CVE-1999-0999](https://cve.now/CVE-1999-0999.md): Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet. (no CVSS) - [CVE-1999-1001](https://cve.now/CVE-1999-1001.md): Cisco Cache Engine allows a remote attacker to gain access via a null username and password. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2000-01-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.