CVEs published September 12, 2001
393 CVEs were published on September 12, 2001: 0 critical, 0 high.
- Published
- 393
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 393
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 393
- CVE-1999-0154IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a .
- CVE-1999-0418Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g.
- CVE-1999-0808Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) a
- CVE-1999-0926Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
- CVE-1999-1012SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via
- CVE-1999-1013named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and
- CVE-1999-1015Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash)
- CVE-1999-1016Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly othe
- CVE-1999-1017Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allow
- CVE-1999-1018IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote
- CVE-1999-1020The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers
- CVE-1999-1022serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, wh
- CVE-1999-1023useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could all
- CVE-1999-1024ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes
- CVE-1999-1025CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ c
- CVE-1999-1026aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo
- CVE-1999-1029SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, all
- CVE-1999-1030counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a
- CVE-1999-1031counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.
- CVE-1999-1033Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause
- CVE-1999-1036COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and
- CVE-1999-1038Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working direc
- CVE-1999-1039Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a
- CVE-1999-1040Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modifie
- CVE-1999-1041Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmenta
- CVE-1999-1042Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to lo
- CVE-1999-1043Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote atta
- CVE-1999-1046Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via
- CVE-1999-1049ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 a
- CVE-1999-1050Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a ..
- CVE-1999-1051Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts acce
- CVE-1999-1052Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the d
- CVE-1999-1053guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to exec
- CVE-1999-1054The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via t
- CVE-1999-1058Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary com
- CVE-1999-1060Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary comman
- CVE-1999-1061HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers
- CVE-1999-1062HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending P
- CVE-1999-1063CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.
- CVE-1999-1064Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary com
- CVE-1999-1065Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands
- CVE-1999-1066Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the s
- CVE-1999-1067SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could b
- CVE-1999-1068Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET reques
- CVE-1999-1069Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a ..
- CVE-1999-1070Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query
- CVE-1999-1071Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users
- CVE-1999-1072Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext
- CVE-1999-1073Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which
- CVE-1999-1075inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 witho
- CVE-1999-1076Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option an
- CVE-1999-1077Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or C
- CVE-1999-1078WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords
- CVE-1999-1079Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
- CVE-1999-1081Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
- CVE-1999-1082Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified do
- CVE-1999-1083Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a ..
- CVE-1999-1084The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debu
- CVE-1999-1086Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privile
- CVE-1999-1088Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
- CVE-1999-1089Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
- CVE-1999-1091UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify
- CVE-1999-1092tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
- CVE-1999-1095sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user ru
- CVE-1999-1096Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable.
- CVE-1999-1097Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is e
- CVE-1999-1101Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the
- CVE-1999-1106Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument.
- CVE-1999-1107Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
- CVE-1999-1110Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows
- CVE-1999-1112Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type
- CVE-1999-1113Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service
- CVE-1999-1123The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) win
- CVE-1999-1124HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the ta
- CVE-1999-1125Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remo
- CVE-1999-1126Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive conf
- CVE-1999-1128Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically
- CVE-1999-1129Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identif
- CVE-1999-1130Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read
- CVE-1999-1133HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, whi
- CVE-1999-1134Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066.
- CVE-1999-1135Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
- CVE-1999-1141Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode thro
- CVE-1999-1149Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port.
- CVE-1999-1150Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to
- CVE-1999-1151Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote atta
- CVE-1999-1152Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote att
- CVE-1999-1153HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email addre
- CVE-1999-1154LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
- CVE-1999-1155LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
- CVE-1999-1158Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows loca
- CVE-1999-1164Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL header
- CVE-1999-1165GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privile
- CVE-1999-1166Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying
- CVE-1999-1168install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of
- CVE-1999-1169nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
- CVE-1999-1170IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
- CVE-1999-1171IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920
- CVE-1999-1172By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the ca
- CVE-1999-1173Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify
- CVE-1999-1174ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known dis
- CVE-1999-1176Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.
- CVE-1999-1178Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl scrip
- CVE-1999-1179Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands.
- CVE-1999-1180O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (
- CVE-1999-1182Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid
- CVE-1999-1183System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2)
- CVE-1999-1184Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.
- CVE-1999-1185Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
- CVE-1999-1186rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local
- CVE-1999-1187Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new m
- CVE-1999-1190Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" hea
- CVE-1999-1195NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update
- CVE-1999-1196Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
- CVE-1999-1200Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.
- CVE-1999-1202StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command.
- CVE-1999-1206SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX
- CVE-1999-1207Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary comman
- CVE-1999-1210xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, whic
- CVE-1999-1211Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.
- CVE-1999-1212Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.
- CVE-1999-1213Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
- CVE-1999-1216Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should norma
- CVE-1999-1218Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files.
- CVE-1999-1219Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possib
- CVE-1999-1220Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a
- CVE-1999-1221dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
- CVE-1999-1224IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the serve
- CVE-1999-1225rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the serve
- CVE-1999-1227Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
- CVE-1999-1228Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary
- CVE-1999-1229Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to rea
- CVE-1999-1230Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which cause
- CVE-1999-1231ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts a
- CVE-1999-1232Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH e
- CVE-1999-1234LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDom
- CVE-1999-1235Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the in
- CVE-1999-1236Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges
- CVE-1999-1237Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows rem
- CVE-1999-1238Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
- CVE-1999-1239HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display eve
- CVE-1999-1240Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
- CVE-1999-1241Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that
- CVE-1999-1242Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.
- CVE-1999-1244IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.
- CVE-1999-1245vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers
- CVE-1999-1247Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
- CVE-1999-1248Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges.
- CVE-1999-1250Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read a
- CVE-1999-1251Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
- CVE-1999-1252Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges
- CVE-1999-1253Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to
- CVE-1999-1254Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which cause
- CVE-1999-1255Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action p
- CVE-1999-1256Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file
- CVE-1999-1257Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z
- CVE-1999-1260mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server versio
- CVE-1999-1261Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, vi
- CVE-1999-1264WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled.
- CVE-1999-1265SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with
- CVE-1999-1266rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers
- CVE-1999-1267KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a c
- CVE-1999-1268Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.
- CVE-1999-1269Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file.
- CVE-1999-1270KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphr
- CVE-1999-1271Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other u
- CVE-1999-1272Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
- CVE-1999-1273Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
- CVE-1999-1274iPass RoamServer 3.1 creates temporary files with world-writable permissions.
- CVE-1999-1275Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local user
- CVE-1999-1277BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow o
- CVE-1999-1278nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute cer
- CVE-1999-1280Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in c
- CVE-1999-1281Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program
- CVE-1999-1282RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain
- CVE-1999-1283Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag.
- CVE-1999-1285Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random devi
- CVE-1999-1286addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a te
- CVE-1999-1287Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.
- CVE-1999-1289ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (
- CVE-1999-1291TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing
- CVE-1999-1292Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via
- CVE-1999-1293mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache t
- CVE-1999-1295Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a
- CVE-1999-1296Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a
- CVE-1999-1299rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, sinc
- CVE-1999-1300Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.
- CVE-1999-1302Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.
- CVE-1999-1303Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
- CVE-1999-1304Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
- CVE-1999-1305Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
- CVE-1999-1306Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword
- CVE-1999-1307Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.
- CVE-1999-1308Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to
- CVE-1999-1311Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
- CVE-1999-1312Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges.
- CVE-1999-1313Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands.
- CVE-1999-1314Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of
- CVE-1999-1315Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a de
- CVE-1999-1319Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations
- CVE-1999-1322The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames
- CVE-1999-1323Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, st
- CVE-1999-1334Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long R
- CVE-1999-1338Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
- CVE-1999-1340Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.
- CVE-1999-1342ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.
- CVE-1999-1343HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number
- CVE-1999-1344Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
- CVE-1999-1345Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) se
- CVE-1999-1346PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which all
- CVE-1999-1347Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starti
- CVE-1999-1348Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users
- CVE-1999-1349NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, pos
- CVE-1999-1350ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privil
- CVE-1999-1352mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
- CVE-1999-1353Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in t
- CVE-1999-1354E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc f
- CVE-1999-1355BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlie
- CVE-1999-1357Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<"
- CVE-1999-1361Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhausti
- CVE-1999-1364Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadCont
- CVE-1999-1366Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily
- CVE-1999-1367Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could
- CVE-1999-1368AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft E
- CVE-1999-1369Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users
- CVE-1999-1370The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with phy
- CVE-1999-1371Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument
- CVE-1999-1372Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow
- CVE-1999-1373FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g
- CVE-1999-1374perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows
- CVE-1999-1375FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name i
- CVE-1999-1376Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
- CVE-1999-1377Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a ..
- CVE-1999-1378dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.
- CVE-1999-1381Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
- CVE-1999-1383(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back
- CVE-1999-1387Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those gen
- CVE-1999-1388passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
- CVE-1999-1389US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set hos
- CVE-1999-1390suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.
- CVE-1999-1391Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd prog
- CVE-1999-1392Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.
- CVE-1999-1393Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by
- CVE-1999-1394BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for file
- CVE-1999-1395Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges.
- CVE-1999-1396Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root ac
- CVE-1999-1398Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack
- CVE-1999-1399spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variabl
- CVE-1999-1400The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the
- CVE-1999-1401Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchb
- CVE-1999-1403IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readabl
- CVE-1999-1404IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed da
- CVE-1999-1405snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directo
- CVE-1999-1406dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting
- CVE-1999-1408Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to
- CVE-1999-1410addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the p
- CVE-1999-1412A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash)
- CVE-1999-1413Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which a
- CVE-1999-1415Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.
- CVE-1999-1416AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST reque
- CVE-1999-1417Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly
- CVE-1999-1418ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the
- CVE-1999-1420NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modif
- CVE-1999-1421NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a deni
- CVE-1999-1422The default configuration of Slackware 3.4, and possibly other versions, includes .
- CVE-1999-1424Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local us
- CVE-1999-1425Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users
- CVE-1999-1426Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arb
- CVE-1999-1427Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.
- CVE-1999-1428Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, whic
- CVE-1999-1429DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through t
- CVE-1999-1430PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows lo
- CVE-1999-1431ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as W
- CVE-1999-1434login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dr
- CVE-1999-1435Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
- CVE-1999-1436Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "us
- CVE-1999-1438Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments.
- CVE-1999-1439gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
- CVE-1999-1440Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send
- CVE-1999-1441Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial o
- CVE-1999-1442Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence o
- CVE-1999-1443Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protecti
- CVE-1999-1444genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
- CVE-1999-1445Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attac
- CVE-1999-1446Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and Histo
- CVE-1999-1447Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in a
- CVE-1999-1448Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certa
- CVE-1999-1449SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
- CVE-1999-1450Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows
- CVE-1999-1451The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
- CVE-1999-1453Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser
- CVE-1999-1454Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the
- CVE-1999-1457Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is
- CVE-1999-1458Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.
- CVE-1999-1459BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
- CVE-1999-1460BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as th
- CVE-1999-1461inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which
- CVE-1999-1462Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
- CVE-1999-1463Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly
- CVE-1999-1464Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access
- CVE-1999-1465Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access
- CVE-1999-1466Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists
- CVE-1999-1467Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to th
- CVE-1999-1469Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1)
- CVE-1999-1470Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain pr
- CVE-1999-1471Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long she
- CVE-1999-1474PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through th
- CVE-1999-1475ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords
- CVE-1999-1477Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
- CVE-1999-1479The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
- CVE-1999-1480(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
- CVE-1999-1482SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
- CVE-1999-1483Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
- CVE-1999-1484Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the met
- CVE-1999-1485nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible d
- CVE-1999-1487Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.
- CVE-1999-1489Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nop
- CVE-1999-1491abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary co
- CVE-1999-1492Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root priv
- CVE-1999-1493Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure sy
- CVE-1999-1495xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
- CVE-1999-1496Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the t
- CVE-1999-1497Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-ma
- CVE-1999-1498Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.
- CVE-1999-1499named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with
- CVE-1999-1500Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL com
- CVE-1999-1501(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which a
- CVE-1999-1502Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server n
- CVE-1999-1503Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null
- CVE-1999-1504Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
- CVE-1999-1505Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via
- CVE-1999-1506Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
- CVE-1999-1508Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undoc
- CVE-1999-1509Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a ..
- CVE-1999-1510Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary co
- CVE-1999-1511Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a lon
- CVE-1999-1513Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.
- CVE-1999-1514Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary com
- CVE-1999-1515A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender an
- CVE-1999-1516A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary cod
- CVE-1999-1517runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrit
- CVE-1999-1518Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory lim
- CVE-1999-1519Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password
- CVE-1999-1521Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a re
- CVE-1999-1522Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.
- CVE-1999-1523Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, vi
- CVE-1999-1524FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and c
- CVE-1999-1525Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetN
- CVE-1999-1526Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
- CVE-1999-1527Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict
- CVE-1999-1528ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, wh
- CVE-1999-1529A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to
- CVE-1999-1532Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long
- CVE-1999-1533Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.
- CVE-1999-1534Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME
- CVE-1999-1536.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the
- CVE-1999-1538When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machin
- CVE-1999-1539Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denia
- CVE-1999-1540shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the sou
- CVE-1999-1541shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink at
- CVE-1999-1543MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
- CVE-1999-1544Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a lo
- CVE-1999-1545Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files t
- CVE-1999-1546netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
- CVE-1999-1547Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex
- CVE-1999-1548Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succ
- CVE-1999-1549Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form v
- CVE-1999-1551Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary command
- CVE-1999-1552dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to ove
- CVE-1999-1553Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
- CVE-1999-1554/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local
- CVE-1999-1555Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissio
- CVE-1999-1557Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of
- CVE-1999-1558Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled.
- CVE-1999-1559Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users
- CVE-1999-1560Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually r
- CVE-1999-1561Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local
- CVE-1999-1562gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.
- CVE-1999-1563Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.
- CVE-1999-1564FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 m
- CVE-1999-1566Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port
- CVE-1999-1567Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.ex
- CVE-2000-1191htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by reques
- CVE-2000-1192Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary
- CVE-2000-1194Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to
- CVE-2000-1197POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which
- CVE-2000-1198qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of
- CVE-2000-1199PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to
- CVE-2000-1201Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
- CVE-2000-1202ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's di
- CVE-2001-0647Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not inclu
- CVE-2001-0679A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to t
- CVE-2001-0711Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interfa