Archive
September 1999
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
- 25
- 26
- 27
- 28
- 29320
- 30
320 results · Feed
-
Unscored —
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trus…
-
Unscored —
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, cha…
-
Unscored —
Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
-
Unscored —
UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by fl…
-
Unscored —
Denial of service in Slmail v2.5 through the POP3 port.
-
High 8.4CVE-1999-0038 Public exploit
Buffer overflow in xlock program allows local users to execute commands as root.
-
Unscored —
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to rea…
-
Unscored —
Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
-
Unscored —CVE-1999-0051 Public exploit
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
-
Unscored —CVE-1999-0348 EPSS 11%
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
-
Unscored —CVE-1999-0315 Public exploit
Buffer overflow in Solaris fdformat command gives root access to local users.
-
Unscored —
Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root.
-
Unscored —
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
-
Unscored —
Buffer overflow in NIS+, in Sun's rpc.nisd program.
-
Unscored —
The SunView (SunTools) selection_svc facility allows remote users to read files.
-
Unscored —CVE-1999-0147 Public exploit
The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
-
Unscored —
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP…
-
Unscored —
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers t…
-
Unscored —CVE-1999-0149 Public exploit
The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
-
Unscored —
Denial of service through Winpopup using large user names.
-
Unscored —
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
-
Unscored —
CWD ~root command in ftpd allows root access.
-
Unscored —CVE-1999-0067 EPSS 87%
phf CGI program allows remote command execution through shell metacharacters.
-
Unscored —
Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
-
Unscored —
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
-
Unscored —
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's pro…
-
Unscored —
Buffer overflow in AIX xdat gives root access to local users.
-
Unscored —
AIX piodmgrsu command allows local users to gain additional group privileges.
-
Unscored —
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local user…
-
Unscored —
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
-
Unscored —
The WorkMan program can be used to overwrite any file to get root access.
-
Unscored —
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
-
Unscored —
AAA authentication on Cisco systems allows attackers to execute commands without authorization.
-
Unscored —
AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.
-
Unscored —
Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmen…
-
Unscored —CVE-1999-0350 Public exploit
Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
-
Unscored —
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
-
Unscored —
A version of rusers is running that exposes valid user information to any entity on the network.
-
Unscored —
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
-
Unscored —
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.