Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

← August 1999 1999 / September October 1999 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 
All Critical High Medium Low Exploited only Public exploit

320 results · Feed

  • Unscored —
    CVE-1999-0478

    Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.

  • Unscored —
    CVE-1999-0513 Public exploit EPSS 71%

    ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

  • Unscored —
    CVE-1999-0228

    Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.

  • Unscored —
    CVE-1999-0309

    HP-UX vgdisplay program gives root access to local users.

  • Unscored —
    CVE-1999-0196 Public exploit EPSS 13%

    websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver p…

  • Unscored —
    CVE-1999-0294 Public exploit EPSS 15%

    All records in a WINS database can be deleted through SNMP for a denial of service.

  • High 8.2
    CVE-1999-0468

    Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Sc…

  • Unscored —
    CVE-1999-0130 Public exploit

    Local users can start Sendmail in daemon mode and gain root privileges.

  • Medium 5.4
    CVE-1999-0011

    Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.

  • Unscored —
    CVE-1999-0344

    NT users can gain debug-level access on a system process using the Sechole exploit.

  • Unscored —
    CVE-1999-0102

    Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.

  • Unscored —
    CVE-1999-0045 Public exploit EPSS 26%

    List of arbitrary files on Web host via nph-test-cgi script.

  • Unscored —
    CVE-1999-0224 Public exploit EPSS 17%

    Denial of service in Windows NT messenger service through a long username.

  • Unscored —
    CVE-1999-0251

    Denial of service in talk program allows remote attackers to disrupt a user's display.

  • Unscored —
    CVE-1999-0473

    The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the …

  • Unscored —
    CVE-1999-0188

    The passwd command in Solaris can be subjected to a denial of service.

  • Unscored —
    CVE-1999-0417 Public exploit

    64 bit Solaris 7 procfs allows local users to perform a denial of service.

  • Unscored —
    CVE-1999-0351

    FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port…

  • Unscored —
    CVE-1999-0256 Public exploit EPSS 73%

    Buffer overflow in War FTP allows remote execution of commands.

  • Unscored —
    CVE-1999-0355

    Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.

  • Unscored —
    CVE-1999-0095 Public exploit EPSS 16%

    The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

  • Unscored —
    CVE-1999-0081

    wu-ftp allows files to be overwritten via the rnfr command.

  • Unscored —
    CVE-1999-0466

    The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files…

  • Unscored —
    CVE-1999-0405 Public exploit

    A buffer overflow in lsof allows local users to obtain root privilege.

  • Unscored —
    CVE-1999-0328 Public exploit

    SGI permissions program allows local users to gain root privileges.

  • Unscored —
    CVE-1999-0167

    In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.

  • Unscored —
    CVE-1999-0310

    SSH 1.2.25 on HP-UX allows access to new user accounts.

  • Unscored —
    CVE-1999-0194

    Denial of service in in.comsat allows attackers to generate messages.

  • Unscored —
    CVE-1999-0483

    OpenBSD crash using nlink value in FFS and EXT2FS filesystems.

  • Unscored —
    CVE-1999-0054

    Sun's ftpd daemon can be subjected to a denial of service.

  • Unscored —
    CVE-1999-0091

    Buffer overflow in AIX writesrv command allows local users to obtain root access.

  • Unscored —
    CVE-1999-0117

    AIX passwd allows local users to gain root access.

  • Unscored —
    CVE-1999-0422

    In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" fl…

  • High 8.4
    CVE-1999-0013

    Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belongi…

  • Unscored —
    CVE-1999-0441 Public exploit

    Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector …

  • Unscored —
    CVE-1999-0179

    Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.

  • Unscored —
    CVE-1999-0176 Public exploit

    The Webgais program allows a remote user to execute arbitrary commands.

  • Unscored —
    CVE-1999-0252

    Buffer overflow in listserv allows arbitrary command execution.

  • Unscored —
    CVE-1999-0116 Public exploit

    Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to…

  • Unscored —
    CVE-1999-0388 Public exploit

    DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute comman…