Archive
September 1999
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29320
- 30
320 results · Feed
-
Unscored —
Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypas…
-
Unscored —CVE-1999-0040 Public exploit
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
-
Unscored —
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
-
Unscored —CVE-1999-0349 EPSS 18%
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in so…
-
Unscored —
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
-
Unscored —CVE-1999-0068 Public exploit
CGI PHP mylog script allows an attacker to read any file on the target server.
-
Unscored —
ICMP redirect messages may crash or lock up a host.
-
Unscored —CVE-1999-0215 Public exploit
Routed allows attackers to append data to files.
-
Unscored —
Buffer overflow of rlogin program using TERM environmental variable.
-
Unscored —
Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
-
Unscored —
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to r…
-
Unscored —CVE-1999-0204 Public exploit
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
-
Unscored —
The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
-
Unscored —
Information from SSL-encrypted sessions via PKCS #1.
-
Unscored —
The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
-
Unscored —
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
-
Unscored —
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
-
Unscored —
Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
-
Unscored —
fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
-
Unscored —
Remote execution of arbitrary commands through Guestbook CGI program.
-
Unscored —CVE-1999-0262 Public exploit
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in…
-
Unscored —
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe …
-
Unscored —CVE-1999-0137 Public exploit
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
-
Unscored —
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
-
Unscored —CVE-1999-0385 EPSS 18%
The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of servi…
-
Critical 9.8
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long…
-
Unscored —
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
-
Unscored —CVE-1999-0027 Public exploit
root privileges via buffer overflow in eject command on SGI IRIX systems.
-
Unscored —CVE-1999-0314 Public exploit
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
-
High 8.4
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID …
-
Unscored —
Livingston portmaster machines could be rebooted via a series of commands.
-
Unscored —
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious mo…
-
Unscored —
Denial of service in "poll" in OpenBSD.
-
Unscored —
Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
-
Unscored —CVE-1999-0363 Public exploit
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
-
Unscored —
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
-
Unscored —
The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tr…
-
High 7.3
webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metachara…
-
Unscored —
Remote access in AIX innd 1.5.1, using control messages.
-
Unscored —CVE-1999-0126 Public exploit
SGI IRIX buffer overflow in xterm and Xaw allows root access.