Archive
September 1999
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29320
- 30
109 results · Clear filters · Feed
-
Unscored —CVE-1999-0116 Public exploit
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to…
-
Unscored —CVE-1999-0388 Public exploit
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute comman…
-
Unscored —
root privileges via buffer overflow in df command on SGI IRIX systems.
-
Unscored —CVE-1999-0433 Public exploit
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directorie…
-
Unscored —CVE-1999-0269 Public exploit
Netscape Enterprise servers may list files through the PageServices query.
-
Unscored —CVE-1999-0125 Public exploit
Buffer overflow in SGI IRIX mailx program.
-
High 8.4CVE-1999-0029 Public exploit
root privileges via buffer overflow in ordist command on SGI IRIX systems.
-
Unscored —CVE-1999-0112 Public exploit
Buffer overflow in AIX dtterm program for the CDE.
-
Unscored —
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
-
Unscored —CVE-1999-0266 Public exploit
The info2www CGI script allows remote file access or remote command execution.
-
Unscored —CVE-1999-0369 Public exploit
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
-
Unscored —
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
-
Unscored —CVE-1999-0014 Public exploit
Unauthorized privileged access or denial of service via dtappgather program in CDE.
-
Unscored —CVE-1999-0064 Public exploit
Buffer overflow in AIX lquerylv program gives root access to local users.
-
Unscored —CVE-1999-0109 Public exploit
Buffer overflow in ffbconfig in Solaris 2.5.1.
-
Unscored —CVE-1999-0034 Public exploit
Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
-
Unscored —
Land IP denial of service.
-
Unscored —
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
-
Critical 9.8
AnyForm CGI remote execution.
-
High 8.4CVE-1999-0036 Public exploit
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
-
Unscored —CVE-1999-0301 Public exploit
Buffer overflow in SunOS/Solaris ps command.
-
Unscored —CVE-1999-0264 Public exploit
htmlscript CGI program allows remote read access to files.
-
Unscored —
Some implementations of rlogin allow root access if given a -froot parameter.
-
Unscored —CVE-1999-0026 Public exploit
root privileges via buffer overflow in pset command on SGI IRIX systems.
-
Unscored —CVE-1999-0404 Public exploit
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
-
High 8.4CVE-1999-0069 Public exploit
Solaris ufsrestore buffer overflow.
-
Unscored —
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or …
-
Unscored —CVE-1999-0239 Public exploit
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
-
Unscored —
Buffer overflow in statd allows root privileges.
-
Unscored —
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process te…
-
Unscored —CVE-1999-0023 Public exploit
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
-
Unscored —CVE-1999-0382 Public exploit
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers …
-
Unscored —CVE-1999-0050 Public exploit
Buffer overflow in HP-UX newgrp program.
-
Unscored —CVE-1999-0041 Public exploit
Buffer overflow in NLS (Natural Language Service).
-
Unscored —
Arbitrary command execution via IMAP buffer overflow in authenticate command.
-
Unscored —CVE-1999-0044 Public exploit
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
-
Unscored —
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
-
Unscored —CVE-1999-0173 Public exploit
FormMail CGI program can be used by web servers other than the host server that the program resides on.
-
Unscored —CVE-1999-0182 Public exploit
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
-
Unscored —
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.