# CVEs published 2000-02-04

338 CVEs were published on February 4, 2000: 1 critical, 0 high. Days are UTC.

- [CVE-1999-0001](https://cve.now/CVE-1999-0001.md): ip\_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. (no CVSS)
- [CVE-1999-0004](https://cve.now/CVE-1999-0004.md): MIME buffer overflow in email clients, e.g. (no CVSS)
- [CVE-1999-0015](https://cve.now/CVE-1999-0015.md): Teardrop IP denial of service. (no CVSS)
- [CVE-1999-0030](https://cve.now/CVE-1999-0030.md): root privileges via buffer overflow in xlock command on SGI IRIX systems. (no CVSS)
- [CVE-1999-0033](https://cve.now/CVE-1999-0033.md): Command execution in Sun systems via buffer overflow in the at program. (no CVSS)
- [CVE-1999-0061](https://cve.now/CVE-1999-0061.md): File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). (no CVSS)
- [CVE-1999-0076](https://cve.now/CVE-1999-0076.md): Buffer overflow in wu-ftp from PASV command causes a core dump. (no CVSS)
- [CVE-1999-0078](https://cve.now/CVE-1999-0078.md): pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. (no CVSS)
- [CVE-1999-0086](https://cve.now/CVE-1999-0086.md): AIX routed allows remote users to modify sensitive files. (no CVSS)
- [CVE-1999-0088](https://cve.now/CVE-1999-0088.md): IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. (no CVSS)
- [CVE-1999-0089](https://cve.now/CVE-1999-0089.md): Buffer overflow in AIX libDtSvc library can allow local users to gain root access. (no CVSS)
- [CVE-1999-0092](https://cve.now/CVE-1999-0092.md): Various vulnerabilities in the AIX portmir command allows local users to obtain root access. (no CVSS)
- [CVE-1999-0098](https://cve.now/CVE-1999-0098.md): Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities. (no CVSS)
- [CVE-1999-0104](https://cve.now/CVE-1999-0104.md): A later variation on the Teardrop IP denial of service attack, a.k.a. (no CVSS)
- [CVE-1999-0105](https://cve.now/CVE-1999-0105.md): finger allows recursive searches by using a long string of @ symbols. (no CVSS)
- [CVE-1999-0106](https://cve.now/CVE-1999-0106.md): Finger redirection allows finger bombs. (no CVSS)
- [CVE-1999-0107](https://cve.now/CVE-1999-0107.md): Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests contai (no CVSS)
- [CVE-1999-0114](https://cve.now/CVE-1999-0114.md): Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package usi (no CVSS)
- [CVE-1999-0119](https://cve.now/CVE-1999-0119.md): Windows NT 4.0 beta allows users to read and delete shares. (no CVSS)
- [CVE-1999-0121](https://cve.now/CVE-1999-0121.md): Buffer overflow in dtaction command gives root access. (no CVSS)
- [CVE-1999-0123](https://cve.now/CVE-1999-0123.md): Race condition in Linux mailx command allows local users to read user files. (no CVSS)
- [CVE-1999-0127](https://cve.now/CVE-1999-0127.md): swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root acce (no CVSS)
- [CVE-1999-0140](https://cve.now/CVE-1999-0140.md): Denial of service in RAS/PPTP on NT systems. (no CVSS)
- [CVE-1999-0144](https://cve.now/CVE-1999-0144.md): Denial of service in Qmail by specifying a large number of recipients with the RCPT command. (no CVSS)
- [CVE-1999-0156](https://cve.now/CVE-1999-0156.md): wu-ftpd FTP daemon allows any user and password combination. (no CVSS)
- [CVE-1999-0163](https://cve.now/CVE-1999-0163.md): In older versions of Sendmail, an attacker could use a pipe character to execute root commands. (no CVSS)
- [CVE-1999-0165](https://cve.now/CVE-1999-0165.md): NFS cache poisoning. (no CVSS)
- [CVE-1999-0169](https://cve.now/CVE-1999-0169.md): NFS allows attackers to read and write any file on the system by specifying a false UID. (no CVSS)
- [CVE-1999-0171](https://cve.now/CVE-1999-0171.md): Denial of service in syslog by sending it a large number of superfluous messages. (no CVSS)
- [CVE-1999-0186](https://cve.now/CVE-1999-0186.md): In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify sy (no CVSS)
- [CVE-1999-0193](https://cve.now/CVE-1999-0193.md): Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option. (no CVSS)
- [CVE-1999-0195](https://cve.now/CVE-1999-0195.md): Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP (no CVSS)
- [CVE-1999-0197](https://cve.now/CVE-1999-0197.md): finger 0@host on some systems may print information on some user accounts. (no CVSS)
- [CVE-1999-0198](https://cve.now/CVE-1999-0198.md): finger .@host on some systems may print information on some user accounts. (no CVSS)
- [CVE-1999-0200](https://cve.now/CVE-1999-0200.md): Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any usern (no CVSS)
- [CVE-1999-0205](https://cve.now/CVE-1999-0205.md): Denial of service in Sendmail 8.6.11 and 8.6.12. (no CVSS)
- [CVE-1999-0213](https://cve.now/CVE-1999-0213.md): libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. (no CVSS)
- [CVE-1999-0216](https://cve.now/CVE-1999-0216.md): Denial of service of inetd on Linux through SYN and RST packets. (no CVSS)
- [CVE-1999-0220](https://cve.now/CVE-1999-0220.md): Attackers can do a denial of service of IRC by crashing the server. (no CVSS)
- [CVE-1999-0222](https://cve.now/CVE-1999-0222.md): Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. (no CVSS)
- [CVE-1999-0226](https://cve.now/CVE-1999-0226.md): Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service. (no CVSS)
- [CVE-1999-0229](https://cve.now/CVE-1999-0229.md): Denial of service in Windows NT IIS server using ..\\.. (no CVSS)
- [CVE-1999-0231](https://cve.now/CVE-1999-0231.md): Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly (no CVSS)
- [CVE-1999-0232](https://cve.now/CVE-1999-0232.md): Buffer overflow in NCSA WebServer (version 1.5c) gives remote access. (no CVSS)
- [CVE-1999-0235](https://cve.now/CVE-1999-0235.md): Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access. (no CVSS)
- [CVE-1999-0238](https://cve.now/CVE-1999-0238.md): php.cgi allows attackers to read any file on the system. (no CVSS)
- [CVE-1999-0240](https://cve.now/CVE-1999-0240.md): Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy. (no CVSS)
- [CVE-1999-0241](https://cve.now/CVE-1999-0241.md): Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. (no CVSS)
- [CVE-1999-0242](https://cve.now/CVE-1999-0242.md): Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords. (no CVSS)
- [CVE-1999-0243](https://cve.now/CVE-1999-0243.md): Linux cfingerd could be exploited to gain root access. (no CVSS)
- [CVE-1999-0246](https://cve.now/CVE-1999-0246.md): HP Remote Watch allows a remote user to gain root access. (no CVSS)
- [CVE-1999-0249](https://cve.now/CVE-1999-0249.md): Windows NT RSHSVC program allows remote users to execute arbitrary commands. (no CVSS)
- [CVE-1999-0250](https://cve.now/CVE-1999-0250.md): Denial of service in Qmail through long SMTP commands. (no CVSS)
- [CVE-1999-0253](https://cve.now/CVE-1999-0253.md): IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (no CVSS)
- [CVE-1999-0254](https://cve.now/CVE-1999-0254.md): A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. (no CVSS)
- [CVE-1999-0255](https://cve.now/CVE-1999-0255.md): Buffer overflow in ircd allows arbitrary command execution. (no CVSS)
- [CVE-1999-0257](https://cve.now/CVE-1999-0257.md): Nestea variation of teardrop IP fragmentation denial of service. (no CVSS)
- [CVE-1999-0258](https://cve.now/CVE-1999-0258.md): Bonk variation of teardrop IP fragmentation denial of service. (no CVSS)
- [CVE-1999-0261](https://cve.now/CVE-1999-0261.md): Netmanager Chameleon SMTPd has several buffer overflows that cause a crash. (no CVSS)
- [CVE-1999-0271](https://cve.now/CVE-1999-0271.md): Progressive Networks Real Video server (pnserver) can be crashed remotely. (no CVSS)
- [CVE-1999-0283](https://cve.now/CVE-1999-0283.md): The Java Web Server would allow remote users to obtain the source code for CGI programs. (no CVSS)
- [CVE-1999-0284](https://cve.now/CVE-1999-0284.md): Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. (no CVSS)
- [CVE-1999-0285](https://cve.now/CVE-1999-0285.md): Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. (no CVSS)
- [CVE-1999-0286](https://cve.now/CVE-1999-0286.md): In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages. (no CVSS)
- [CVE-1999-0287](https://cve.now/CVE-1999-0287.md): Vulnerability in the Wguest CGI program. (no CVSS)
- [CVE-1999-0298](https://cve.now/CVE-1999-0298.md): ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (no CVSS)
- [CVE-1999-0306](https://cve.now/CVE-1999-0306.md): buffer overflow in HP xlock program. (no CVSS)
- [CVE-1999-0307](https://cve.now/CVE-1999-0307.md): Buffer overflow in HP-UX cstm program allows local users to gain root privileges. (no CVSS)
- [CVE-1999-0317](https://cve.now/CVE-1999-0317.md): Buffer overflow in Linux su command gives root access to local users. (no CVSS)
- [CVE-1999-0319](https://cve.now/CVE-1999-0319.md): Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting. (no CVSS)
- [CVE-1999-0330](https://cve.now/CVE-1999-0330.md): Linux bdash game has a buffer overflow that allows local users to gain root access. (no CVSS)
- [CVE-1999-0331](https://cve.now/CVE-1999-0331.md): Buffer overflow in Internet Explorer 4.0(1). (no CVSS)
- [CVE-1999-0333](https://cve.now/CVE-1999-0333.md): HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack. (no CVSS)
- [CVE-1999-0336](https://cve.now/CVE-1999-0336.md): Buffer overflow in mstm in HP-UX allows local users to gain root access. (no CVSS)
- [CVE-1999-0345](https://cve.now/CVE-1999-0345.md): Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. (no CVSS)
- [CVE-1999-0347](https://cve.now/CVE-1999-0347.md): Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, (no CVSS)
- [CVE-1999-0352](https://cve.now/CVE-1999-0352.md): ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. (no CVSS)
- [CVE-1999-0354](https://cve.now/CVE-1999-0354.md): Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, (no CVSS)
- [CVE-1999-0356](https://cve.now/CVE-1999-0356.md): ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book. (no CVSS)
- [CVE-1999-0360](https://cve.now/CVE-1999-0360.md): MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute comman (no CVSS)
- [CVE-1999-0361](https://cve.now/CVE-1999-0361.md): NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging. (no CVSS)
- [CVE-1999-0364](https://cve.now/CVE-1999-0364.md): Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data. (no CVSS)
- [CVE-1999-0370](https://cve.now/CVE-1999-0370.md): In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files. (no CVSS)
- [CVE-1999-0381](https://cve.now/CVE-1999-0381.md): super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access. (no CVSS)
- [CVE-1999-0389](https://cve.now/CVE-1999-0389.md): Buffer overflow in the bootp server in the Debian Linux netstd package. (no CVSS)
- [CVE-1999-0394](https://cve.now/CVE-1999-0394.md): DPEC Online Courseware allows an attacker to change another user's password without knowing the original password. (no CVSS)
- [CVE-1999-0397](https://cve.now/CVE-1999-0397.md): The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext. (no CVSS)
- [CVE-1999-0398](https://cve.now/CVE-1999-0398.md): In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login. (no CVSS)
- [CVE-1999-0399](https://cve.now/CVE-1999-0399.md): The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malic (no CVSS)
- [CVE-1999-0400](https://cve.now/CVE-1999-0400.md): Denial of service in Linux 2.2.0 running the ldd command on a core file. (no CVSS)
- [CVE-1999-0401](https://cve.now/CVE-1999-0401.md): A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files. (no CVSS)
- [CVE-1999-0406](https://cve.now/CVE-1999-0406.md): Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege. (no CVSS)
- [CVE-1999-0411](https://cve.now/CVE-1999-0411.md): Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a (no CVSS)
- [CVE-1999-0419](https://cve.now/CVE-1999-0419.md): When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to (no CVSS)
- [CVE-1999-0426](https://cve.now/CVE-1999-0426.md): The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. (no CVSS)
- [CVE-1999-0427](https://cve.now/CVE-1999-0427.md): Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names. (no CVSS)
- [CVE-1999-0431](https://cve.now/CVE-1999-0431.md): Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service. (no CVSS)
- [CVE-1999-0434](https://cve.now/CVE-1999-0434.md): XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing the (no CVSS)
- [CVE-1999-0435](https://cve.now/CVE-1999-0435.md): MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM. (no CVSS)
- [CVE-1999-0443](https://cve.now/CVE-1999-0443.md): Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. (no CVSS)
- [CVE-1999-0444](https://cve.now/CVE-1999-0444.md): Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each pac (no CVSS)
- [CVE-1999-0450](https://cve.now/CVE-1999-0450.md): In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). (no CVSS)
- [CVE-1999-0451](https://cve.now/CVE-1999-0451.md): Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port. (no CVSS)
- [CVE-1999-0452](https://cve.now/CVE-1999-0452.md): A service or application has a backdoor password that was placed there by the developer. (no CVSS)
- [CVE-1999-0453](https://cve.now/CVE-1999-0453.md): An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). (no CVSS)
- [CVE-1999-0454](https://cve.now/CVE-1999-0454.md): A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such (no CVSS)
- [CVE-1999-0455](https://cve.now/CVE-1999-0455.md): The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, wh (no CVSS)
- [CVE-1999-0459](https://cve.now/CVE-1999-0459.md): Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot. (no CVSS)
- [CVE-1999-0460](https://cve.now/CVE-1999-0460.md): Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service. (no CVSS)
- [CVE-1999-0461](https://cve.now/CVE-1999-0461.md): Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a so (no CVSS)
- [CVE-1999-0462](https://cve.now/CVE-1999-0462.md): suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid (no CVSS)
- [CVE-1999-0465](https://cve.now/CVE-1999-0465.md): Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter. (no CVSS)
- [CVE-1999-0467](https://cve.now/CVE-1999-0467.md): The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter. (no CVSS)
- [CVE-1999-0469](https://cve.now/CVE-1999-0469.md): Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the cli (no CVSS)
- [CVE-1999-0476](https://cve.now/CVE-1999-0476.md): A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user. (no CVSS)
- [CVE-1999-0477](https://cve.now/CVE-1999-0477.md): The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which (no CVSS)
- [CVE-1999-0480](https://cve.now/CVE-1999-0480.md): Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. (no CVSS)
- [CVE-1999-0486](https://cve.now/CVE-1999-0486.md): Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a (no CVSS)
- [CVE-1999-0488](https://cve.now/CVE-1999-0488.md): Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a v (no CVSS)
- [CVE-1999-0489](https://cve.now/CVE-1999-0489.md): MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untr (no CVSS)
- [CVE-1999-0490](https://cve.now/CVE-1999-0490.md): MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag. (no CVSS)
- [CVE-1999-0492](https://cve.now/CVE-1999-0492.md): The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses. (no CVSS)
- [CVE-1999-0495](https://cve.now/CVE-1999-0495.md): A remote attacker can gain access to a file system using .. (no CVSS)
- [CVE-1999-0497](https://cve.now/CVE-1999-0497.md): Anonymous FTP is enabled. (no CVSS)
- [CVE-1999-0498](https://cve.now/CVE-1999-0498.md): TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files. (no CVSS)
- [CVE-1999-0499](https://cve.now/CVE-1999-0499.md): NETBIOS share information may be published through SNMP registry keys in NT. (no CVSS)
- [CVE-1999-0501](https://cve.now/CVE-1999-0501.md): A Unix account has a guessable password. (no CVSS)
- [CVE-1999-0502](https://cve.now/CVE-1999-0502.md): A Unix account has a default, null, blank, or missing password. (no CVSS)
- [CVE-1999-0503](https://cve.now/CVE-1999-0503.md): A Windows NT local user or administrator account has a guessable password. (no CVSS)
- [CVE-1999-0504](https://cve.now/CVE-1999-0504.md): A Windows NT local user or administrator account has a default, null, blank, or missing password. (no CVSS)
- [CVE-1999-0505](https://cve.now/CVE-1999-0505.md): A Windows NT domain user or administrator account has a guessable password. (no CVSS)
- [CVE-1999-0506](https://cve.now/CVE-1999-0506.md): A Windows NT domain user or administrator account has a default, null, blank, or missing password. (no CVSS)
- [CVE-1999-0507](https://cve.now/CVE-1999-0507.md): An account on a router, firewall, or other network device has a guessable password. (no CVSS)
- [CVE-1999-0508](https://cve.now/CVE-1999-0508.md): An account on a router, firewall, or other network device has a default, null, blank, or missing password. (no CVSS)
- [CVE-1999-0509](https://cve.now/CVE-1999-0509.md): Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute ar (no CVSS)
- [CVE-1999-0510](https://cve.now/CVE-1999-0510.md): A router or firewall allows source routed packets from arbitrary hosts. (no CVSS)
- [CVE-1999-0511](https://cve.now/CVE-1999-0511.md): IP forwarding is enabled on a machine which is not a router or firewall. (CVSS 9.1)
- [CVE-1999-0512](https://cve.now/CVE-1999-0512.md): A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. (no CVSS)
- [CVE-1999-0515](https://cve.now/CVE-1999-0515.md): An unrestricted remote trust relationship for Unix systems has been set up, e.g. (no CVSS)
- [CVE-1999-0516](https://cve.now/CVE-1999-0516.md): An SNMP community name is guessable. (no CVSS)
- [CVE-1999-0517](https://cve.now/CVE-1999-0517.md): An SNMP community name is the default (e.g. (CVSS 5.9)
- [CVE-1999-0518](https://cve.now/CVE-1999-0518.md): A NETBIOS/SMB share password is guessable. (no CVSS)
- [CVE-1999-0519](https://cve.now/CVE-1999-0519.md): A NETBIOS/SMB share password is the default, null, or missing. (no CVSS)
- [CVE-1999-0520](https://cve.now/CVE-1999-0520.md): A system-critical NETBIOS/SMB share has inappropriate access control. (no CVSS)
- [CVE-1999-0521](https://cve.now/CVE-1999-0521.md): An NIS domain name is easily guessable. (no CVSS)
- [CVE-1999-0522](https://cve.now/CVE-1999-0522.md): The permissions for a system-critical NIS+ table (e.g. (no CVSS)
- [CVE-1999-0523](https://cve.now/CVE-1999-0523.md): ICMP echo (ping) is allowed from arbitrary hosts. (no CVSS)
- [CVE-1999-0524](https://cve.now/CVE-1999-0524.md): ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. (CVSS 4.0)
- [CVE-1999-0525](https://cve.now/CVE-1999-0525.md): IP traceroute is allowed from arbitrary hosts. (no CVSS)
- [CVE-1999-0527](https://cve.now/CVE-1999-0527.md): The permissions for system-critical data in an anonymous FTP account are inappropriate. (no CVSS)
- [CVE-1999-0528](https://cve.now/CVE-1999-0528.md): A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of. (no CVSS)
- [CVE-1999-0529](https://cve.now/CVE-1999-0529.md): A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. (no CVSS)
- [CVE-1999-0530](https://cve.now/CVE-1999-0530.md): A system is operating in "promiscuous" mode which allows it to perform packet sniffing. (no CVSS)
- [CVE-1999-0532](https://cve.now/CVE-1999-0532.md): A DNS server allows zone transfers. (no CVSS)
- [CVE-1999-0533](https://cve.now/CVE-1999-0533.md): A DNS server allows inverse queries. (no CVSS)
- [CVE-1999-0534](https://cve.now/CVE-1999-0534.md): A Windows NT user has inappropriate rights or privileges, e.g. (no CVSS)
- [CVE-1999-0535](https://cve.now/CVE-1999-0535.md): A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. (no CVSS)
- [CVE-1999-0537](https://cve.now/CVE-1999-0537.md): A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, J (no CVSS)
- [CVE-1999-0539](https://cve.now/CVE-1999-0539.md): A trust relationship exists between two Unix hosts. (no CVSS)
- [CVE-1999-0541](https://cve.now/CVE-1999-0541.md): A password for accessing a WWW URL is guessable. (no CVSS)
- [CVE-1999-0546](https://cve.now/CVE-1999-0546.md): The Windows NT guest account is enabled. (no CVSS)
- [CVE-1999-0547](https://cve.now/CVE-1999-0547.md): An SSH server allows authentication through the .rhosts file. (no CVSS)
- [CVE-1999-0548](https://cve.now/CVE-1999-0548.md): A superfluous NFS server is running, but it is not importing or exporting any file systems. (no CVSS)
- [CVE-1999-0549](https://cve.now/CVE-1999-0549.md): Windows NT automatically logs in an administrator upon rebooting. (no CVSS)
- [CVE-1999-0550](https://cve.now/CVE-1999-0550.md): A router's routing tables can be obtained from arbitrary hosts. (no CVSS)
- [CVE-1999-0554](https://cve.now/CVE-1999-0554.md): NFS exports system-critical data to the world, e.g. (no CVSS)
- [CVE-1999-0555](https://cve.now/CVE-1999-0555.md): A Unix account with a name other than "root" has UID 0, i.e. (no CVSS)
- [CVE-1999-0556](https://cve.now/CVE-1999-0556.md): Two or more Unix accounts have the same UID. (no CVSS)
- [CVE-1999-0559](https://cve.now/CVE-1999-0559.md): A system-critical Unix file or directory has inappropriate permissions. (no CVSS)
- [CVE-1999-0560](https://cve.now/CVE-1999-0560.md): A system-critical Windows NT file or directory has inappropriate permissions. (no CVSS)
- [CVE-1999-0561](https://cve.now/CVE-1999-0561.md): IIS has the #exec function enabled for Server Side Include (SSI) files. (no CVSS)
- [CVE-1999-0562](https://cve.now/CVE-1999-0562.md): The registry in Windows NT can be accessed remotely by users who are not administrators. (no CVSS)
- [CVE-1999-0564](https://cve.now/CVE-1999-0564.md): An attacker can force a printer to print arbitrary documents (e.g. (no CVSS)
- [CVE-1999-0565](https://cve.now/CVE-1999-0565.md): A Sendmail alias allows input to be piped to a program. (no CVSS)
- [CVE-1999-0568](https://cve.now/CVE-1999-0568.md): rpc.admind in Solaris is not running in a secure mode. (no CVSS)
- [CVE-1999-0569](https://cve.now/CVE-1999-0569.md): A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html fi (no CVSS)
- [CVE-1999-0570](https://cve.now/CVE-1999-0570.md): Windows NT is not using a password filter utility, e.g. (no CVSS)
- [CVE-1999-0571](https://cve.now/CVE-1999-0571.md): A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary (no CVSS)
- [CVE-1999-0572](https://cve.now/CVE-1999-0572.md): .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks. (no CVSS)
- [CVE-1999-0575](https://cve.now/CVE-1999-0575.md): A Windows NT system's user audit policy does not log an event success or failure, e.g. (no CVSS)
- [CVE-1999-0576](https://cve.now/CVE-1999-0576.md): A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories. (no CVSS)
- [CVE-1999-0577](https://cve.now/CVE-1999-0577.md): A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories. (no CVSS)
- [CVE-1999-0578](https://cve.now/CVE-1999-0578.md): A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. (no CVSS)
- [CVE-1999-0579](https://cve.now/CVE-1999-0579.md): A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. (no CVSS)
- [CVE-1999-0580](https://cve.now/CVE-1999-0580.md): The HKEY\_LOCAL\_MACHINE key in a Windows NT system has inappropriate, system-critical permissions. (no CVSS)
- [CVE-1999-0581](https://cve.now/CVE-1999-0581.md): The HKEY\_CLASSES\_ROOT key in a Windows NT system has inappropriate, system-critical permissions. (no CVSS)
- [CVE-1999-0582](https://cve.now/CVE-1999-0582.md): A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. (no CVSS)
- [CVE-1999-0583](https://cve.now/CVE-1999-0583.md): There is a one-way or two-way trust relationship between Windows NT domains. (no CVSS)
- [CVE-1999-0584](https://cve.now/CVE-1999-0584.md): A Windows NT file system is not NTFS. (no CVSS)
- [CVE-1999-0585](https://cve.now/CVE-1999-0585.md): A Windows NT administrator account has the default name of Administrator. (no CVSS)
- [CVE-1999-0586](https://cve.now/CVE-1999-0586.md): A network service is running on a nonstandard port. (no CVSS)
- [CVE-1999-0587](https://cve.now/CVE-1999-0587.md): A WWW server is not running in a restricted file system, e.g. (no CVSS)
- [CVE-1999-0588](https://cve.now/CVE-1999-0588.md): A filter in a router or firewall allows unusual fragmented packets. (no CVSS)
- [CVE-1999-0589](https://cve.now/CVE-1999-0589.md): A system-critical Windows NT registry key has inappropriate permissions. (no CVSS)
- [CVE-1999-0590](https://cve.now/CVE-1999-0590.md): A system does not present an appropriate legal message or warning to a user who is accessing it. (no CVSS)
- [CVE-1999-0591](https://cve.now/CVE-1999-0591.md): An event log in Windows NT has inappropriate access permissions. (no CVSS)
- [CVE-1999-0592](https://cve.now/CVE-1999-0592.md): The Logon box of a Windows NT system displays the name of the last user who logged in. (no CVSS)
- [CVE-1999-0593](https://cve.now/CVE-1999-0593.md): The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows N (no CVSS)
- [CVE-1999-0594](https://cve.now/CVE-1999-0594.md): A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive. (no CVSS)
- [CVE-1999-0595](https://cve.now/CVE-1999-0595.md): A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. (no CVSS)
- [CVE-1999-0596](https://cve.now/CVE-1999-0596.md): A Windows NT log file has an inappropriate maximum size or retention period. (no CVSS)
- [CVE-1999-0597](https://cve.now/CVE-1999-0597.md): A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire. (no CVSS)
- [CVE-1999-0598](https://cve.now/CVE-1999-0598.md): A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detec (no CVSS)
- [CVE-1999-0599](https://cve.now/CVE-1999-0599.md): A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers. (no CVSS)
- [CVE-1999-0600](https://cve.now/CVE-1999-0600.md): A network intrusion detection system (IDS) does not verify the checksum on a packet. (no CVSS)
- [CVE-1999-0601](https://cve.now/CVE-1999-0601.md): A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. (no CVSS)
- [CVE-1999-0602](https://cve.now/CVE-1999-0602.md): A network intrusion detection system (IDS) does not properly reassemble fragmented packets. (no CVSS)
- [CVE-1999-0603](https://cve.now/CVE-1999-0603.md): In Windows NT, an inappropriate user is a member of a group, e.g. (no CVSS)
- [CVE-1999-0604](https://cve.now/CVE-1999-0604.md): An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web\_store.cgi" could disclose private information. (no CVSS)
- [CVE-1999-0605](https://cve.now/CVE-1999-0605.md): An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. (no CVSS)
- [CVE-1999-0606](https://cve.now/CVE-1999-0606.md): An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information. (no CVSS)
- [CVE-1999-0607](https://cve.now/CVE-1999-0607.md): quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows rem (no CVSS)
- [CVE-1999-0609](https://cve.now/CVE-1999-0609.md): An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. (no CVSS)
- [CVE-1999-0610](https://cve.now/CVE-1999-0610.md): An incorrect configuration of the Webcart CGI program could disclose private information. (no CVSS)
- [CVE-1999-0611](https://cve.now/CVE-1999-0611.md): A system-critical Windows NT registry key has an inappropriate value. (no CVSS)
- [CVE-1999-0613](https://cve.now/CVE-1999-0613.md): The rpc.sprayd service is running. (no CVSS)
- [CVE-1999-0618](https://cve.now/CVE-1999-0618.md): The rexec service is running. (no CVSS)
- [CVE-1999-0624](https://cve.now/CVE-1999-0624.md): The rstat/rstatd service is running. (no CVSS)
- [CVE-1999-0625](https://cve.now/CVE-1999-0625.md): The rpc.rquotad service is running. (no CVSS)
- [CVE-1999-0629](https://cve.now/CVE-1999-0629.md): The ident/identd service is running. (no CVSS)
- [CVE-1999-0630](https://cve.now/CVE-1999-0630.md): The NT Alerter and Messenger services are running. (no CVSS)
- [CVE-1999-0632](https://cve.now/CVE-1999-0632.md): The RPC portmapper service is running. (CVSS 5.3)
- [CVE-1999-0635](https://cve.now/CVE-1999-0635.md): The echo service is running. (no CVSS)
- [CVE-1999-0636](https://cve.now/CVE-1999-0636.md): The discard service is running. (no CVSS)
- [CVE-1999-0637](https://cve.now/CVE-1999-0637.md): The systat service is running. (no CVSS)
- [CVE-1999-0638](https://cve.now/CVE-1999-0638.md): The daytime service is running. (no CVSS)
- [CVE-1999-0639](https://cve.now/CVE-1999-0639.md): The chargen service is running. (no CVSS)
- [CVE-1999-0640](https://cve.now/CVE-1999-0640.md): The Gopher service is running. (no CVSS)
- [CVE-1999-0641](https://cve.now/CVE-1999-0641.md): The UUCP service is running. (no CVSS)
- [CVE-1999-0650](https://cve.now/CVE-1999-0650.md): The netstat service is running, which provides sensitive information to remote attackers. (no CVSS)
- [CVE-1999-0651](https://cve.now/CVE-1999-0651.md): The rsh/rlogin service is running. (no CVSS)
- [CVE-1999-0653](https://cve.now/CVE-1999-0653.md): A component service related to NIS+ is running. (no CVSS)
- [CVE-1999-0654](https://cve.now/CVE-1999-0654.md): The OS/2 or POSIX subsystem in NT is enabled. (no CVSS)
- [CVE-1999-0656](https://cve.now/CVE-1999-0656.md): The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to loc (no CVSS)
- [CVE-1999-0657](https://cve.now/CVE-1999-0657.md): WinGate is being used. (no CVSS)
- [CVE-1999-0661](https://cve.now/CVE-1999-0661.md): A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers (no CVSS)
- [CVE-1999-0662](https://cve.now/CVE-1999-0662.md): A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete. (no CVSS)
- [CVE-1999-0663](https://cve.now/CVE-1999-0663.md): A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified. (no CVSS)
- [CVE-1999-0664](https://cve.now/CVE-1999-0664.md): An application-critical Windows NT registry key has inappropriate permissions. (no CVSS)
- [CVE-1999-0665](https://cve.now/CVE-1999-0665.md): An application-critical Windows NT registry key has an inappropriate value. (no CVSS)
- [CVE-1999-0667](https://cve.now/CVE-1999-0667.md): The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service. (no CVSS)
- [CVE-1999-0669](https://cve.now/CVE-1999-0669.md): The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary comm (no CVSS)
- [CVE-1999-0670](https://cve.now/CVE-1999-0670.md): Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands. (no CVSS)
- [CVE-1999-0673](https://cve.now/CVE-1999-0673.md): Buffer overflow in ALMail32 POP3 client via From: or To: headers. (no CVSS)
- [CVE-1999-0677](https://cve.now/CVE-1999-0677.md): The WebRamp web administration utility has a default password. (no CVSS)
- [CVE-1999-0684](https://cve.now/CVE-1999-0684.md): Denial of service in Sendmail 8.8.6 in HPUX. (no CVSS)
- [CVE-1999-0698](https://cve.now/CVE-1999-0698.md): Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux. (no CVSS)
- [CVE-1999-0712](https://cve.now/CVE-1999-0712.md): A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable. (no CVSS)
- [CVE-1999-0736](https://cve.now/CVE-1999-0736.md): The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-0737](https://cve.now/CVE-1999-0737.md): The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-0738](https://cve.now/CVE-1999-0738.md): The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-0739](https://cve.now/CVE-1999-0739.md): The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-0741](https://cve.now/CVE-1999-0741.md): QMS CrownNet Unix Utilities for 2060 allows root to log on without a password. (no CVSS)
- [CVE-1999-0748](https://cve.now/CVE-1999-0748.md): Buffer overflows in Red Hat net-tools package. (no CVSS)
- [CVE-1999-0750](https://cve.now/CVE-1999-0750.md): Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account (no CVSS)
- [CVE-1999-0767](https://cve.now/CVE-1999-0767.md): Buffer overflow in Solaris libc, ufsrestore, and rcp via LC\_MESSAGES environmental variable. (no CVSS)
- [CVE-1999-0776](https://cve.now/CVE-1999-0776.md): Alibaba HTTP server allows remote attackers to read files via a .. (no CVSS)
- [CVE-1999-0792](https://cve.now/CVE-1999-0792.md): ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration. (no CVSS)
- [CVE-1999-0795](https://cve.now/CVE-1999-0795.md): The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable l (no CVSS)
- [CVE-1999-0798](https://cve.now/CVE-1999-0798.md): Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. (no CVSS)
- [CVE-1999-0816](https://cve.now/CVE-1999-0816.md): The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024. (no CVSS)
- [CVE-1999-0818](https://cve.now/CVE-1999-0818.md): Buffer overflow in Solaris kcms\_configure via a long NETPATH environmental variable. (no CVSS)
- [CVE-1999-0821](https://cve.now/CVE-1999-0821.md): FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. (no CVSS)
- [CVE-1999-0822](https://cve.now/CVE-1999-0822.md): Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. (no CVSS)
- [CVE-1999-0825](https://cve.now/CVE-1999-0825.md): The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. (no CVSS)
- [CVE-1999-0827](https://cve.now/CVE-1999-0827.md): By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame s (no CVSS)
- [CVE-1999-0828](https://cve.now/CVE-1999-0828.md): UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission. (no CVSS)
- [CVE-1999-0829](https://cve.now/CVE-1999-0829.md): HP Secure Web Console uses weak encryption. (no CVSS)
- [CVE-1999-0830](https://cve.now/CVE-1999-0830.md): Buffer overflow in SCO UnixWare Xsco command via a long argument. (no CVSS)
- [CVE-1999-0840](https://cve.now/CVE-1999-0840.md): Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option. (no CVSS)
- [CVE-1999-0841](https://cve.now/CVE-1999-0841.md): Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type. (no CVSS)
- [CVE-1999-0843](https://cve.now/CVE-1999-0843.md): Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port. (no CVSS)
- [CVE-1999-0844](https://cve.now/CVE-1999-0844.md): Denial of service in MDaemon WorldClient and WebConfig services via a long URL. (no CVSS)
- [CVE-1999-0845](https://cve.now/CVE-1999-0845.md): Buffer overflow in SCO su program allows local users to gain root access via a long username. (no CVSS)
- [CVE-1999-0846](https://cve.now/CVE-1999-0846.md): Denial of service in MDaemon 2.7 via a large number of connection attempts. (no CVSS)
- [CVE-1999-0850](https://cve.now/CVE-1999-0850.md): The default permissions for Endymion MailMan allow local users to read email or modify files. (no CVSS)
- [CVE-1999-0852](https://cve.now/CVE-1999-0852.md): IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. (no CVSS)
- [CVE-1999-0855](https://cve.now/CVE-1999-0855.md): Buffer overflow in FreeBSD gdc program. (no CVSS)
- [CVE-1999-0857](https://cve.now/CVE-1999-0857.md): FreeBSD gdc program allows local users to modify files via a symlink attack. (no CVSS)
- [CVE-1999-0860](https://cve.now/CVE-1999-0860.md): Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack. (no CVSS)
- [CVE-1999-0862](https://cve.now/CVE-1999-0862.md): Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file (no CVSS)
- [CVE-1999-0863](https://cve.now/CVE-1999-0863.md): Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI. (no CVSS)
- [CVE-1999-0872](https://cve.now/CVE-1999-0872.md): Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. (no CVSS)
- [CVE-1999-0882](https://cve.now/CVE-1999-0882.md): Falcon web server allows remote attackers to determine the absolute path of the web root via long file names. (no CVSS)
- [CVE-1999-0885](https://cve.now/CVE-1999-0885.md): Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL. (no CVSS)
- [CVE-1999-0910](https://cve.now/CVE-1999-0910.md): Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and (no CVSS)
- [CVE-1999-0911](https://cve.now/CVE-1999-0911.md): Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that crea (no CVSS)
- [CVE-1999-0913](https://cve.now/CVE-1999-0913.md): dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters. (no CVSS)
- [CVE-1999-0919](https://cve.now/CVE-1999-0919.md): A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections. (no CVSS)
- [CVE-1999-0925](https://cve.now/CVE-1999-0925.md): UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers. (no CVSS)
- [CVE-1999-0929](https://cve.now/CVE-1999-0929.md): Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP (no CVSS)
- [CVE-1999-0941](https://cve.now/CVE-1999-0941.md): Mutt mail client allows a remote attacker to execute commands via shell metacharacters. (no CVSS)
- [CVE-1999-0944](https://cve.now/CVE-1999-0944.md): IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections. (no CVSS)
- [CVE-1999-0948](https://cve.now/CVE-1999-0948.md): Buffer overflow in uum program for Canna input system allows local users to gain root privileges. (no CVSS)
- [CVE-1999-0949](https://cve.now/CVE-1999-0949.md): Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. (no CVSS)
- [CVE-1999-0952](https://cve.now/CVE-1999-0952.md): Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. (no CVSS)
- [CVE-1999-0970](https://cve.now/CVE-1999-0970.md): The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number o (no CVSS)
- [CVE-1999-0983](https://cve.now/CVE-1999-0983.md): Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. (no CVSS)
- [CVE-1999-0984](https://cve.now/CVE-1999-0984.md): Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. (no CVSS)
- [CVE-1999-0985](https://cve.now/CVE-1999-0985.md): CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. (no CVSS)
- [CVE-1999-0988](https://cve.now/CVE-1999-0988.md): UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. (no CVSS)
- [CVE-1999-0990](https://cve.now/CVE-1999-0990.md): Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. (no CVSS)
- [CVE-1999-0993](https://cve.now/CVE-1999-0993.md): Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed. (no CVSS)
- [CVE-1999-1002](https://cve.now/CVE-1999-1002.md): Netscape Navigator uses weak encryption for storing a user's Netscape mail password. (no CVSS)
- [CVE-1999-1003](https://cve.now/CVE-1999-1003.md): War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections. (no CVSS)
- [CVE-1999-1006](https://cve.now/CVE-1999-1006.md): Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter. (no CVSS)
- [CVE-1999-1009](https://cve.now/CVE-1999-1009.md): The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on th (no CVSS)
- [CVE-2000-0005](https://cve.now/CVE-2000-0005.md): HP-UX aserver program allows local users to gain privileges via a symlink attack. (no CVSS)
- [CVE-2000-0008](https://cve.now/CVE-2000-0008.md): FTPPro allows local users to read sensitive information, which is stored in plain text. (no CVSS)
- [CVE-2000-0016](https://cve.now/CVE-2000-0016.md): Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long us (no CVSS)
- [CVE-2000-0017](https://cve.now/CVE-2000-0017.md): Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter. (no CVSS)
- [CVE-2000-0019](https://cve.now/CVE-2000-0019.md): IMail POP3 daemon uses weak encryption, which allows local users to read files. (no CVSS)
- [CVE-2000-0021](https://cve.now/CVE-2000-0021.md): Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin (no CVSS)
- [CVE-2000-0028](https://cve.now/CVE-2000-0028.md): Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAnd (no CVSS)
- [CVE-2000-0035](https://cve.now/CVE-2000-0035.md): resend command in Majordomo allows local users to gain privileges via shell metacharacters. (no CVSS)
- [CVE-2000-0038](https://cve.now/CVE-2000-0038.md): glFtpD includes a default glftpd user account with a default password and a UID of 0. (no CVSS)
- [CVE-2000-0046](https://cve.now/CVE-2000-0046.md): Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message. (no CVSS)
- [CVE-2000-0047](https://cve.now/CVE-2000-0047.md): Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message. (no CVSS)
- [CVE-2000-0049](https://cve.now/CVE-2000-0049.md): Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. (no CVSS)
- [CVE-2000-0054](https://cve.now/CVE-2000-0054.md): search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (no CVSS)
- [CVE-2000-0055](https://cve.now/CVE-2000-0055.md): Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option. (no CVSS)
- [CVE-2000-0058](https://cve.now/CVE-2000-0058.md): Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files. (no CVSS)
- [CVE-2000-0059](https://cve.now/CVE-2000-0059.md): PHP3 with safe\_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote (no CVSS)
- [CVE-2000-0061](https://cve.now/CVE-2000-0061.md): Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been lo (no CVSS)
- [CVE-2000-0066](https://cve.now/CVE-2000-0066.md): WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request. (no CVSS)
- [CVE-2000-0067](https://cve.now/CVE-2000-0067.md): CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack. (no CVSS)
- [CVE-2000-0068](https://cve.now/CVE-2000-0068.md): daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration (no CVSS)
- [CVE-2000-0069](https://cve.now/CVE-2000-0069.md): The recover program in Solstice Backup allows local users to restore sensitive files. (no CVSS)
- [CVE-2000-0071](https://cve.now/CVE-2000-0071.md): IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensi (no CVSS)
- [CVE-2000-0074](https://cve.now/CVE-2000-0074.md): PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions. (no CVSS)
- [CVE-2000-0077](https://cve.now/CVE-2000-0077.md): The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver us (no CVSS)
- [CVE-2000-0078](https://cve.now/CVE-2000-0078.md): The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses (no CVSS)
- [CVE-2000-0079](https://cve.now/CVE-2000-0079.md): The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL. (no CVSS)
- [CVE-2000-0081](https://cve.now/CVE-2000-0081.md): Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeci (no CVSS)
- [CVE-2000-0082](https://cve.now/CVE-2000-0082.md): WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML. (no CVSS)
- [CVE-2000-0084](https://cve.now/CVE-2000-0084.md): CuteFTP uses weak encryption to store password information in its tree.dat file. (no CVSS)
- [CVE-2000-0085](https://cve.now/CVE-2000-0085.md): Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN (no CVSS)
- [CVE-2000-0086](https://cve.now/CVE-2000-0086.md): Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.