Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

← August 1999 1999 / September October 1999 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 
All Critical High Medium Low Exploited only Public exploit

109 results · Clear filters · Feed

  • Unscored —
    CVE-1999-0170 Public exploit EPSS 19%

    Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.

  • Unscored —
    CVE-1999-0448 Public exploit EPSS 25%

    IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the UR…

  • Unscored —
    CVE-1999-0122 Public exploit

    Buffer overflow in AIX lchangelv gives root access.

  • Unscored —
    CVE-1999-0321 Public exploit

    Buffer overflow in Solaris kcms_configure command allows local users to gain root access.

  • Unscored —
    CVE-1999-0414 Public exploit

    In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer befo…

  • Unscored —
    CVE-1999-0410 Public exploit

    The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.

  • Unscored —
    CVE-1999-0021 Public exploit EPSS 27%

    Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.

  • Unscored —
    CVE-1999-0148 Public exploit EPSS 10%

    The handler CGI program in IRIX allows arbitrary command execution.

  • Unscored —
    CVE-1999-0376 Public exploit

    Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious pro…

  • Unscored —
    CVE-1999-0003 Public exploit EPSS 24%

    Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

  • Unscored —
    CVE-1999-0108 Public exploit

    The printers program in IRIX has a buffer overflow that gives root access to local users.

  • Unscored —
    CVE-1999-0060 Public exploit

    Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port,…

  • Unscored —
    CVE-1999-0191 Public exploit EPSS 53%

    IIS newdsn.exe CGI script allows remote users to overwrite files.

  • Unscored —
    CVE-1999-0009 Public exploit EPSS 29%

    Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

  • Unscored —
    CVE-1999-0146 Public exploit EPSS 15%

    The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded…

  • Unscored —
    CVE-1999-0412 Public exploit EPSS 10%

    In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading …

  • Unscored —
    CVE-1999-0070 Public exploit EPSS 30%

    test-cgi program allows an attacker to list files on the server.

  • Unscored —
    CVE-1999-0281 Public exploit EPSS 13%

    Denial of service in IIS using long URLs.

  • Unscored —
    CVE-1999-0032 Public exploit

    Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as r…

  • Unscored —
    CVE-1999-0236 Public exploit EPSS 26%

    ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

    apache2 Wolfi
  • Unscored —
    CVE-1999-0267 Public exploit EPSS 10%

    Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.

  • Unscored —
    CVE-1999-0077 Public exploit EPSS 31%

    Predictable TCP sequence numbers allow spoofing.

  • Unscored —
    CVE-1999-0063 Public exploit

    Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.

  • Unscored —
    CVE-1999-0174 Public exploit

    The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0219 Public exploit

    Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1)…

  • Unscored —
    CVE-1999-0442 Public exploit

    Solaris ff.core allows local users to modify files.

  • Unscored —
    CVE-1999-0175 Public exploit

    The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is inter…

  • Unscored —
    CVE-1999-0372 Public exploit

    The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not dele…

  • Unscored —
    CVE-1999-0207 Public exploit

    Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.