CVEs published February 4, 2000
338 CVEs were published on February 4, 2000: 1 critical, 0 high.
- Published
- 338
- Critical
- 1
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 334
- Now in CISA KEV
- 0
- Fix available
- 0
Critical 1
Medium, low and unrated 337
- CVE-1999-0001ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
- CVE-1999-0004MIME buffer overflow in email clients, e.g.
- CVE-1999-0015Teardrop IP denial of service.
- CVE-1999-0030root privileges via buffer overflow in xlock command on SGI IRIX systems.
- CVE-1999-0033Command execution in Sun systems via buffer overflow in the at program.
- CVE-1999-0061File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
- CVE-1999-0076Buffer overflow in wu-ftp from PASV command causes a core dump.
- CVE-1999-0078pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
- CVE-1999-0086AIX routed allows remote users to modify sensitive files.
- CVE-1999-0088IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.
- CVE-1999-0089Buffer overflow in AIX libDtSvc library can allow local users to gain root access.
- CVE-1999-0092Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
- CVE-1999-0098Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.
- CVE-1999-0104A later variation on the Teardrop IP denial of service attack, a.k.a.
- CVE-1999-0105finger allows recursive searches by using a long string of @ symbols.
- CVE-1999-0106Finger redirection allows finger bombs.
- CVE-1999-0107Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests contai
- CVE-1999-0114Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package usi
- CVE-1999-0119Windows NT 4.0 beta allows users to read and delete shares.
- CVE-1999-0121Buffer overflow in dtaction command gives root access.
- CVE-1999-0123Race condition in Linux mailx command allows local users to read user files.
- CVE-1999-0127swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root acce
- CVE-1999-0140Denial of service in RAS/PPTP on NT systems.
- CVE-1999-0144Denial of service in Qmail by specifying a large number of recipients with the RCPT command.
- CVE-1999-0156wu-ftpd FTP daemon allows any user and password combination.
- CVE-1999-0163In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- CVE-1999-0165NFS cache poisoning.
- CVE-1999-0169NFS allows attackers to read and write any file on the system by specifying a false UID.
- CVE-1999-0171Denial of service in syslog by sending it a large number of superfluous messages.
- CVE-1999-0186In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify sy
- CVE-1999-0193Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
- CVE-1999-0195Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP
- CVE-1999-0197finger 0@host on some systems may print information on some user accounts.
- CVE-1999-0198finger .@host on some systems may print information on some user accounts.
- CVE-1999-0200Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any usern
- CVE-1999-0205Denial of service in Sendmail 8.6.11 and 8.6.12.
- CVE-1999-0213libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
- CVE-1999-0216Denial of service of inetd on Linux through SYN and RST packets.
- CVE-1999-0220Attackers can do a denial of service of IRC by crashing the server.
- CVE-1999-0222Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
- CVE-1999-0226Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
- CVE-1999-0229Denial of service in Windows NT IIS server using ..\..
- CVE-1999-0231Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly
- CVE-1999-0232Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
- CVE-1999-0235Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
- CVE-1999-0238php.cgi allows attackers to read any file on the system.
- CVE-1999-0240Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
- CVE-1999-0241Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g.
- CVE-1999-0242Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.
- CVE-1999-0243Linux cfingerd could be exploited to gain root access.
- CVE-1999-0246HP Remote Watch allows a remote user to gain root access.
- CVE-1999-0249Windows NT RSHSVC program allows remote users to execute arbitrary commands.
- CVE-1999-0250Denial of service in Qmail through long SMTP commands.
- CVE-1999-0253IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a .
- CVE-1999-0254A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
- CVE-1999-0255Buffer overflow in ircd allows arbitrary command execution.
- CVE-1999-0257Nestea variation of teardrop IP fragmentation denial of service.
- CVE-1999-0258Bonk variation of teardrop IP fragmentation denial of service.
- CVE-1999-0261Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.
- CVE-1999-0271Progressive Networks Real Video server (pnserver) can be crashed remotely.
- CVE-1999-0283The Java Web Server would allow remote users to obtain the source code for CGI programs.
- CVE-1999-0284Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
- CVE-1999-0285Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
- CVE-1999-0286In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
- CVE-1999-0287Vulnerability in the Wguest CGI program.
- CVE-1999-0298ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a ..
- CVE-1999-0306buffer overflow in HP xlock program.
- CVE-1999-0307Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
- CVE-1999-0317Buffer overflow in Linux su command gives root access to local users.
- CVE-1999-0319Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
- CVE-1999-0330Linux bdash game has a buffer overflow that allows local users to gain root access.
- CVE-1999-0331Buffer overflow in Internet Explorer 4.0(1).
- CVE-1999-0333HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
- CVE-1999-0336Buffer overflow in mstm in HP-UX allows local users to gain root access.
- CVE-1999-0345Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
- CVE-1999-0347Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL,
- CVE-1999-0352ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.
- CVE-1999-0354Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template,
- CVE-1999-0356ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
- CVE-1999-0360MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute comman
- CVE-1999-0361NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
- CVE-1999-0364Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
- CVE-1999-0370In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
- CVE-1999-0381super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
- CVE-1999-0389Buffer overflow in the bootp server in the Debian Linux netstd package.
- CVE-1999-0394DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
- CVE-1999-0397The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
- CVE-1999-0398In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
- CVE-1999-0399The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malic
- CVE-1999-0400Denial of service in Linux 2.2.0 running the ldd command on a core file.
- CVE-1999-0401A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
- CVE-1999-0406Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
- CVE-1999-0411Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a
- CVE-1999-0419When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to
- CVE-1999-0426The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
- CVE-1999-0427Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
- CVE-1999-0431Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
- CVE-1999-0434XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing the
- CVE-1999-0435MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
- CVE-1999-0443Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
- CVE-1999-0444Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each pac
- CVE-1999-0450In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
- CVE-1999-0451Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
- CVE-1999-0452A service or application has a backdoor password that was placed there by the developer.
- CVE-1999-0453An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
- CVE-1999-0454A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such
- CVE-1999-0455The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, wh
- CVE-1999-0459Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
- CVE-1999-0460Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
- CVE-1999-0461Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a so
- CVE-1999-0462suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid
- CVE-1999-0465Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
- CVE-1999-0467The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
- CVE-1999-0469Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the cli
- CVE-1999-0476A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
- CVE-1999-0477The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which
- CVE-1999-0480Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
- CVE-1999-0486Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a
- CVE-1999-0488Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a v
- CVE-1999-0489MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untr
- CVE-1999-0490MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
- CVE-1999-0492The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
- CVE-1999-0495A remote attacker can gain access to a file system using ..
- CVE-1999-0497Anonymous FTP is enabled.
- CVE-1999-0498TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.
- CVE-1999-0499NETBIOS share information may be published through SNMP registry keys in NT.
- CVE-1999-0501A Unix account has a guessable password.
- CVE-1999-0502A Unix account has a default, null, blank, or missing password.
- CVE-1999-0503A Windows NT local user or administrator account has a guessable password.
- CVE-1999-0504A Windows NT local user or administrator account has a default, null, blank, or missing password.
- CVE-1999-0505A Windows NT domain user or administrator account has a guessable password.
- CVE-1999-0506A Windows NT domain user or administrator account has a default, null, blank, or missing password.
- CVE-1999-0507An account on a router, firewall, or other network device has a guessable password.
- CVE-1999-0508An account on a router, firewall, or other network device has a default, null, blank, or missing password.
- CVE-1999-0509Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute ar
- CVE-1999-0510A router or firewall allows source routed packets from arbitrary hosts.
- CVE-1999-0512A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
- CVE-1999-0515An unrestricted remote trust relationship for Unix systems has been set up, e.g.
- CVE-1999-0516An SNMP community name is guessable.
- CVE-1999-0517An SNMP community name is the default (e.g.
- CVE-1999-0518A NETBIOS/SMB share password is guessable.
- CVE-1999-0519A NETBIOS/SMB share password is the default, null, or missing.
- CVE-1999-0520A system-critical NETBIOS/SMB share has inappropriate access control.
- CVE-1999-0521An NIS domain name is easily guessable.
- CVE-1999-0522The permissions for a system-critical NIS+ table (e.g.
- CVE-1999-0523ICMP echo (ping) is allowed from arbitrary hosts.
- CVE-1999-0524ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
- CVE-1999-0525IP traceroute is allowed from arbitrary hosts.
- CVE-1999-0527The permissions for system-critical data in an anonymous FTP account are inappropriate.
- CVE-1999-0528A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
- CVE-1999-0529A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g.
- CVE-1999-0530A system is operating in "promiscuous" mode which allows it to perform packet sniffing.
- CVE-1999-0532A DNS server allows zone transfers.
- CVE-1999-0533A DNS server allows inverse queries.
- CVE-1999-0534A Windows NT user has inappropriate rights or privileges, e.g.
- CVE-1999-0535A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g.
- CVE-1999-0537A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, J
- CVE-1999-0539A trust relationship exists between two Unix hosts.
- CVE-1999-0541A password for accessing a WWW URL is guessable.
- CVE-1999-0546The Windows NT guest account is enabled.
- CVE-1999-0547An SSH server allows authentication through the .rhosts file.
- CVE-1999-0548A superfluous NFS server is running, but it is not importing or exporting any file systems.
- CVE-1999-0549Windows NT automatically logs in an administrator upon rebooting.
- CVE-1999-0550A router's routing tables can be obtained from arbitrary hosts.
- CVE-1999-0554NFS exports system-critical data to the world, e.g.
- CVE-1999-0555A Unix account with a name other than "root" has UID 0, i.e.
- CVE-1999-0556Two or more Unix accounts have the same UID.
- CVE-1999-0559A system-critical Unix file or directory has inappropriate permissions.
- CVE-1999-0560A system-critical Windows NT file or directory has inappropriate permissions.
- CVE-1999-0561IIS has the #exec function enabled for Server Side Include (SSI) files.
- CVE-1999-0562The registry in Windows NT can be accessed remotely by users who are not administrators.
- CVE-1999-0564An attacker can force a printer to print arbitrary documents (e.g.
- CVE-1999-0565A Sendmail alias allows input to be piped to a program.
- CVE-1999-0568rpc.admind in Solaris is not running in a secure mode.
- CVE-1999-0569A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html fi
- CVE-1999-0570Windows NT is not using a password filter utility, e.g.
- CVE-1999-0571A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary
- CVE-1999-0572.reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks.
- CVE-1999-0575A Windows NT system's user audit policy does not log an event success or failure, e.g.
- CVE-1999-0576A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories.
- CVE-1999-0577A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
- CVE-1999-0578A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
- CVE-1999-0579A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.
- CVE-1999-0580The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
- CVE-1999-0581The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
- CVE-1999-0582A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g.
- CVE-1999-0583There is a one-way or two-way trust relationship between Windows NT domains.
- CVE-1999-0584A Windows NT file system is not NTFS.
- CVE-1999-0585A Windows NT administrator account has the default name of Administrator.
- CVE-1999-0586A network service is running on a nonstandard port.
- CVE-1999-0587A WWW server is not running in a restricted file system, e.g.
- CVE-1999-0588A filter in a router or firewall allows unusual fragmented packets.
- CVE-1999-0589A system-critical Windows NT registry key has inappropriate permissions.
- CVE-1999-0590A system does not present an appropriate legal message or warning to a user who is accessing it.
- CVE-1999-0591An event log in Windows NT has inappropriate access permissions.
- CVE-1999-0592The Logon box of a Windows NT system displays the name of the last user who logged in.
- CVE-1999-0593The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows N
- CVE-1999-0594A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
- CVE-1999-0595A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
- CVE-1999-0596A Windows NT log file has an inappropriate maximum size or retention period.
- CVE-1999-0597A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
- CVE-1999-0598A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detec
- CVE-1999-0599A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
- CVE-1999-0600A network intrusion detection system (IDS) does not verify the checksum on a packet.
- CVE-1999-0601A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.
- CVE-1999-0602A network intrusion detection system (IDS) does not properly reassemble fragmented packets.
- CVE-1999-0603In Windows NT, an inappropriate user is a member of a group, e.g.
- CVE-1999-0604An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
- CVE-1999-0605An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
- CVE-1999-0606An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.
- CVE-1999-0607quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows rem
- CVE-1999-0609An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
- CVE-1999-0610An incorrect configuration of the Webcart CGI program could disclose private information.
- CVE-1999-0611A system-critical Windows NT registry key has an inappropriate value.
- CVE-1999-0613The rpc.sprayd service is running.
- CVE-1999-0618The rexec service is running.
- CVE-1999-0624The rstat/rstatd service is running.
- CVE-1999-0625The rpc.rquotad service is running.
- CVE-1999-0629The ident/identd service is running.
- CVE-1999-0630The NT Alerter and Messenger services are running.
- CVE-1999-0632The RPC portmapper service is running.
- CVE-1999-0635The echo service is running.
- CVE-1999-0636The discard service is running.
- CVE-1999-0637The systat service is running.
- CVE-1999-0638The daytime service is running.
- CVE-1999-0639The chargen service is running.
- CVE-1999-0640The Gopher service is running.
- CVE-1999-0641The UUCP service is running.
- CVE-1999-0650The netstat service is running, which provides sensitive information to remote attackers.
- CVE-1999-0651The rsh/rlogin service is running.
- CVE-1999-0653A component service related to NIS+ is running.
- CVE-1999-0654The OS/2 or POSIX subsystem in NT is enabled.
- CVE-1999-0656The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to loc
- CVE-1999-0657WinGate is being used.
- CVE-1999-0661A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers
- CVE-1999-0662A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
- CVE-1999-0663A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
- CVE-1999-0664An application-critical Windows NT registry key has inappropriate permissions.
- CVE-1999-0665An application-critical Windows NT registry key has an inappropriate value.
- CVE-1999-0667The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
- CVE-1999-0669The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary comm
- CVE-1999-0670Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
- CVE-1999-0673Buffer overflow in ALMail32 POP3 client via From: or To: headers.
- CVE-1999-0677The WebRamp web administration utility has a default password.
- CVE-1999-0684Denial of service in Sendmail 8.8.6 in HPUX.
- CVE-1999-0698Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
- CVE-1999-0712A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
- CVE-1999-0736The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
- CVE-1999-0737The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
- CVE-1999-0738The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
- CVE-1999-0739The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
- CVE-1999-0741QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.
- CVE-1999-0748Buffer overflows in Red Hat net-tools package.
- CVE-1999-0750Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account
- CVE-1999-0767Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
- CVE-1999-0776Alibaba HTTP server allows remote attackers to read files via a ..
- CVE-1999-0792ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.
- CVE-1999-0795The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable l
- CVE-1999-0798Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
- CVE-1999-0816The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
- CVE-1999-0818Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
- CVE-1999-0821FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
- CVE-1999-0822Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
- CVE-1999-0825The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
- CVE-1999-0827By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame s
- CVE-1999-0828UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
- CVE-1999-0829HP Secure Web Console uses weak encryption.
- CVE-1999-0830Buffer overflow in SCO UnixWare Xsco command via a long argument.
- CVE-1999-0840Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
- CVE-1999-0841Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
- CVE-1999-0843Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
- CVE-1999-0844Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
- CVE-1999-0845Buffer overflow in SCO su program allows local users to gain root access via a long username.
- CVE-1999-0846Denial of service in MDaemon 2.7 via a large number of connection attempts.
- CVE-1999-0850The default permissions for Endymion MailMan allow local users to read email or modify files.
- CVE-1999-0852IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
- CVE-1999-0855Buffer overflow in FreeBSD gdc program.
- CVE-1999-0857FreeBSD gdc program allows local users to modify files via a symlink attack.
- CVE-1999-0860Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
- CVE-1999-0862Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file
- CVE-1999-0863Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.
- CVE-1999-0872Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
- CVE-1999-0882Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.
- CVE-1999-0885Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.
- CVE-1999-0910Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and
- CVE-1999-0911Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that crea
- CVE-1999-0913dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
- CVE-1999-0919A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
- CVE-1999-0925UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
- CVE-1999-0929Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP
- CVE-1999-0941Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
- CVE-1999-0944IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.
- CVE-1999-0948Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
- CVE-1999-0949Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
- CVE-1999-0952Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
- CVE-1999-0970The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number o
- CVE-1999-0983Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
- CVE-1999-0984Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
- CVE-1999-0985CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
- CVE-1999-0988UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
- CVE-1999-0990Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
- CVE-1999-0993Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
- CVE-1999-1002Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
- CVE-1999-1003War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
- CVE-1999-1006Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
- CVE-1999-1009The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on th
- CVE-2000-0005HP-UX aserver program allows local users to gain privileges via a symlink attack.
- CVE-2000-0008FTPPro allows local users to read sensitive information, which is stored in plain text.
- CVE-2000-0016Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long us
- CVE-2000-0017Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
- CVE-2000-0019IMail POP3 daemon uses weak encryption, which allows local users to read files.
- CVE-2000-0021Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin
- CVE-2000-0028Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAnd
- CVE-2000-0035resend command in Majordomo allows local users to gain privileges via shell metacharacters.
- CVE-2000-0038glFtpD includes a default glftpd user account with a default password and a UID of 0.
- CVE-2000-0046Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.
- CVE-2000-0047Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
- CVE-2000-0049Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
- CVE-2000-0054search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a ..
- CVE-2000-0055Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.
- CVE-2000-0058Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.
- CVE-2000-0059PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote
- CVE-2000-0061Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lo
- CVE-2000-0066WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.
- CVE-2000-0067CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
- CVE-2000-0068daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration
- CVE-2000-0069The recover program in Solstice Backup allows local users to restore sensitive files.
- CVE-2000-0071IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensi
- CVE-2000-0074PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.
- CVE-2000-0077The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver us
- CVE-2000-0078The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses
- CVE-2000-0079The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.
- CVE-2000-0081Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeci
- CVE-2000-0082WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
- CVE-2000-0084CuteFTP uses weak encryption to store password information in its tree.dat file.
- CVE-2000-0085Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN
- CVE-2000-0086Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.