Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 

320 results · Feed

  • Unscored —
    CVE-1999-0025 Public exploit EPSS 12%

    root privileges via buffer overflow in df command on SGI IRIX systems.

  • Unscored —

    SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.

  • Unscored —
    CVE-1999-0433 Public exploit

    XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directorie…

  • Unscored —
    CVE-1999-0269 Public exploit

    Netscape Enterprise servers may list files through the PageServices query.

  • High 7.3

    IRIX fam service allows an attacker to obtain a list of all files on the server.

  • Unscored —
    CVE-1999-0125 Public exploit

    Buffer overflow in SGI IRIX mailx program.

  • Unscored —

    Buffer overflows in Sun libnsl allow root access.

  • Unscored —

    Buffer overflow in FreeBSD lpd through long DNS hostnames.

  • High 8.4
    CVE-1999-0029 Public exploit

    root privileges via buffer overflow in ordist command on SGI IRIX systems.

  • Unscored —

    OpenBSD kernel crash through TSS handling, as caused by the crashme program.

  • High 7.5

    IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.

  • Unscored —
    CVE-1999-0112 Public exploit

    Buffer overflow in AIX dtterm program for the CDE.

  • Unscored —

    The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD …

  • Unscored —

    disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.

  • Unscored —
    CVE-1999-0208 Public exploit EPSS 13%

    rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.

  • Unscored —

    ftp on HP-UX 11.00 allows local users to gain privileges.

  • Unscored —

    Local users can gain privileges using the debug utility in the MPE/iX operating system.

  • Unscored —

    Arbitrary command execution via metamail package using message headers, when user processes attacker's message using me…

  • Unscored —

    The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come fro…

  • Unscored —

    Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.

  • Unscored —

    Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't m…

  • Unscored —
    CVE-1999-0266 Public exploit

    The info2www CGI script allows remote file access or remote command execution.

  • Unscored —

    Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out …

  • Unscored —

    Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.

  • Unscored —

    Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.

  • Unscored —
    CVE-1999-0332 EPSS 13%

    Buffer overflow in NetMeeting allows denial of service and remote command execution.

  • Unscored —

    Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.

  • Unscored —
    CVE-1999-0369 Public exploit

    The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.

  • Unscored —
    CVE-1999-0526 Public exploit EPSS 21%

    An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.

  • Unscored —

    admintool in Solaris allows a local user to write to arbitrary files and gain root access.

  • Unscored —
    CVE-1999-0014 Public exploit

    Unauthorized privileged access or denial of service via dtappgather program in CDE.

  • Unscored —

    ppl program in HP-UX allows local users to create root files through symlinks.

  • Unscored —

    The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.

  • Unscored —

    Solaris SUNWadmap can be exploited to obtain root access.

  • Unscored —
    CVE-1999-0064 Public exploit

    Buffer overflow in AIX lquerylv program gives root access to local users.

  • Unscored —

    Buffer overflow in Sun's ping program can give root access to local users.

  • Unscored —

    The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.

  • Unscored —

    Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connec…

  • Unscored —
    CVE-1999-0109 Public exploit

    Buffer overflow in ffbconfig in Solaris 2.5.1.

  • Unscored —
    CVE-1999-0034 Public exploit

    Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.