Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

← August 1999 1999 / September October 1999 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 
All Critical High Medium Low Exploited only Public exploit

320 results · Feed

  • Unscored —
    CVE-1999-0551

    HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.

  • Unscored —
    CVE-1999-0288 Public exploit EPSS 21%

    The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process te…

  • Unscored —
    CVE-1999-0023 Public exploit

    Local user gains root privileges via buffer overflow in rdist, via lookup() function.

  • Unscored —
    CVE-1999-0382 Public exploit

    The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers …

  • Unscored —
    CVE-1999-0050 Public exploit

    Buffer overflow in HP-UX newgrp program.

  • Unscored —
    CVE-1999-0227

    Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.

  • Unscored —
    CVE-1999-0028

    root privileges via buffer overflow in login/scheme command on SGI IRIX systems.

  • Unscored —
    CVE-1999-0320

    SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.

  • Unscored —
    CVE-1999-0041 Public exploit

    Buffer overflow in NLS (Natural Language Service).

  • Unscored —
    CVE-1999-0437

    Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.

  • Unscored —
    CVE-1999-0005 Public exploit EPSS 19%

    Arbitrary command execution via IMAP buffer overflow in authenticate command.

  • Unscored —
    CVE-1999-0457

    Linux ftpwatch program allows local users to gain root privileges.

  • Unscored —
    CVE-1999-0279

    Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.

  • Unscored —
    CVE-1999-0099

    Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.

  • Unscored —
    CVE-1999-0044 Public exploit

    fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.

  • Unscored —
    CVE-1999-0374

    Debian GNU/Linux cfengine package is susceptible to a symlink attack.

  • Unscored —
    CVE-1999-0128 Public exploit EPSS 75%

    Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.

  • Unscored —
    CVE-1999-0494

    Denial of service in WinGate proxy through a buffer overflow in POP3.

  • Unscored —
    CVE-1999-0214

    Denial of service by sending forged ICMP unreachable packets.

  • Unscored —
    CVE-1999-0346

    CGI PHP mlog script allows an attacker to read any file on the target server.

  • Unscored —
    CVE-1999-0449 EPSS 49%

    The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct requ…

  • Unscored —
    CVE-1999-0627

    The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.

  • Unscored —
    CVE-1999-0173 Public exploit

    FormMail CGI program can be used by web servers other than the host server that the program resides on.

  • Unscored —
    CVE-1999-0182 Public exploit

    Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.

  • Unscored —
    CVE-1999-0487 Public exploit EPSS 13%

    The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.

  • Unscored —
    CVE-1999-0244

    Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.

  • Unscored —
    CVE-1999-0170 Public exploit EPSS 19%

    Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.

  • Unscored —
    CVE-1999-0448 Public exploit EPSS 25%

    IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the UR…

  • Unscored —
    CVE-1999-0139

    Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.

  • Unscored —
    CVE-1999-0122 Public exploit

    Buffer overflow in AIX lchangelv gives root access.

  • Unscored —
    CVE-1999-0172

    FormMail CGI program allows remote execution of commands.

  • Unscored —
    CVE-1999-0049

    Csetup under IRIX allows arbitrary file creation or overwriting.

  • Unscored —
    CVE-1999-0339

    Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root acces…

  • Unscored —
    CVE-1999-0158

    Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve …

  • Unscored —
    CVE-1999-0260

    The jj CGI program allows command execution via shell metacharacters.

  • Low 3.5
    CVE-1999-0159

    Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). Thi…

  • Unscored —
    CVE-1999-0326

    Vulnerability in HP-UX mediainit program.

  • Unscored —
    CVE-1999-0337

    AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.

  • Unscored —
    CVE-1999-0024

    DNS cache poisoning via BIND, by predictable query IDs.

  • Unscored —
    CVE-1999-0425

    talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.