Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 

109 results · Clear filters · Feed

  • Unscored —
    CVE-1999-0040 Public exploit

    Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

  • Unscored —
    CVE-1999-0068 Public exploit

    CGI PHP mylog script allows an attacker to read any file on the target server.

  • Unscored —
    CVE-1999-0215 Public exploit

    Routed allows attackers to append data to files.

  • Unscored —
    CVE-1999-0046 Public exploit EPSS 52%

    Buffer overflow of rlogin program using TERM environmental variable.

  • Unscored —
    CVE-1999-0204 Public exploit

    Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.

  • Unscored —
    CVE-1999-0278 Public exploit EPSS 65%

    In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.

  • Unscored —
    CVE-1999-0262 Public exploit

    Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in…

  • Unscored —
    CVE-1999-0137 Public exploit

    The dip program on many Linux systems allows local users to gain root access via a buffer overflow.

  • Unscored —
    CVE-1999-0153 Public exploit EPSS 21%

    Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.

  • Critical 9.8
    CVE-1999-0006 Public exploit EPSS 12%

    Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long…

  • Unscored —
    CVE-1999-0042 Public exploit EPSS 13%

    Buffer overflow in University of Washington's implementation of IMAP and POP servers.

  • Unscored —
    CVE-1999-0027 Public exploit

    root privileges via buffer overflow in eject command on SGI IRIX systems.

  • Unscored —
    CVE-1999-0314 Public exploit

    ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.

  • Unscored —
    CVE-1999-0363 Public exploit

    SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.

  • High 7.3
    CVE-1999-0039 Public exploit EPSS 16%

    webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metachara…

  • Unscored —
    CVE-1999-0126 Public exploit

    SGI IRIX buffer overflow in xterm and Xaw allows root access.

  • High 8.4
    CVE-1999-0038 Public exploit

    Buffer overflow in xlock program allows local users to execute commands as root.

  • Unscored —
    CVE-1999-0386 Public exploit EPSS 19%

    Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to rea…

  • Unscored —
    CVE-1999-0051 Public exploit

    Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.

  • Unscored —
    CVE-1999-0315 Public exploit

    Buffer overflow in Solaris fdformat command gives root access to local users.

  • Unscored —
    CVE-1999-0209 Public exploit EPSS 49%

    The SunView (SunTools) selection_svc facility allows remote users to read files.

  • Unscored —
    CVE-1999-0147 Public exploit

    The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.

  • Unscored —
    CVE-1999-0178 Public exploit EPSS 12%

    Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers t…

  • Unscored —
    CVE-1999-0149 Public exploit

    The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0002 Public exploit EPSS 28%

    Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.

  • Unscored —
    CVE-1999-0192 Public exploit EPSS 10%

    Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmen…

  • Unscored —
    CVE-1999-0350 Public exploit

    Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.

  • Unscored —
    CVE-1999-0513 Public exploit EPSS 71%

    ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

  • Unscored —
    CVE-1999-0196 Public exploit EPSS 13%

    websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver p…

  • Unscored —
    CVE-1999-0294 Public exploit EPSS 15%

    All records in a WINS database can be deleted through SNMP for a denial of service.

  • Unscored —
    CVE-1999-0130 Public exploit

    Local users can start Sendmail in daemon mode and gain root privileges.

  • Unscored —
    CVE-1999-0045 Public exploit EPSS 26%

    List of arbitrary files on Web host via nph-test-cgi script.

  • Unscored —
    CVE-1999-0224 Public exploit EPSS 17%

    Denial of service in Windows NT messenger service through a long username.

  • Unscored —
    CVE-1999-0417 Public exploit

    64 bit Solaris 7 procfs allows local users to perform a denial of service.

  • Unscored —
    CVE-1999-0256 Public exploit EPSS 73%

    Buffer overflow in War FTP allows remote execution of commands.

  • Unscored —
    CVE-1999-0095 Public exploit EPSS 16%

    The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

  • Unscored —
    CVE-1999-0405 Public exploit

    A buffer overflow in lsof allows local users to obtain root privilege.

  • Unscored —
    CVE-1999-0328 Public exploit

    SGI permissions program allows local users to gain root privileges.

  • Unscored —
    CVE-1999-0441 Public exploit

    Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector …

  • Unscored —
    CVE-1999-0176 Public exploit

    The Webgais program allows a remote user to execute arbitrary commands.