Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 

320 results · Feed

  • Unscored —
    CVE-1999-0321 Public exploit

    Buffer overflow in Solaris kcms_configure command allows local users to gain root access.

  • Unscored —

    A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denia…

  • Unscored —

    Buffer overflow in PHP cgi program, php.cgi allows shell access.

  • Unscored —

    MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.

  • Unscored —
    CVE-1999-0414 Public exploit

    In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer befo…

  • Unscored —

    Listening TCP ports are sequentially allocated, allowing spoofing attacks.

  • Unscored —
    CVE-1999-0410 Public exploit

    The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.

  • Unscored —

    Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.

  • Unscored —
    CVE-1999-0021 Public exploit EPSS 27%

    Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.

  • Unscored —

    fpkg2swpk in HP-UX allows local users to gain root access.

  • Unscored —

    Solaris volrmmount program allows attackers to read any file.

  • Unscored —

    Linux implementations of TFTP would allow access to files outside the restricted directory.

  • Unscored —

    The Perl fingerd program allows arbitrary command execution from remote users.

  • Unscored —

    Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.

  • Unscored —

    RIP v1 is susceptible to spoofing.

  • Unscored —

    Buffer overflow in Linux Slackware crond program allows local users to gain root access.

  • Unscored —
    CVE-1999-0148 Public exploit EPSS 10%

    The handler CGI program in IRIX allows arbitrary command execution.

  • Unscored —
    CVE-1999-0376 Public exploit

    Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious pro…

  • Unscored —
    CVE-1999-0003 Public exploit EPSS 24%

    Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

  • Unscored —

    A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the…

  • Unscored —
    CVE-1999-0108 Public exploit

    The printers program in IRIX has a buffer overflow that gives root access to local users.

  • Unscored —
    CVE-1999-0060 Public exploit

    Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port,…

  • Unscored —

    HP-UX gwind program allows users to modify arbitrary files.

  • Unscored —

    Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.

  • Unscored —
    CVE-1999-0191 Public exploit EPSS 53%

    IIS newdsn.exe CGI script allows remote users to overwrite files.

  • Unscored —

    Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that …

  • Unscored —

    SGI syserr program allows local users to corrupt files.

  • Unscored —
    CVE-1999-0009 Public exploit EPSS 29%

    Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

  • Unscored —

    In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list fil…

  • Unscored —

    The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.

  • Unscored —

    getcwd() file descriptor leak in FTP.

  • Unscored —

    Buffer overflow in Cisco 7xx routers through the telnet service.

  • High 7.0
    CVE-1999-0012 EPSS 19%

    Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file …

  • Unscored —

    Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.

  • Unscored —

    Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.

  • Unscored —
    CVE-1999-0146 Public exploit EPSS 15%

    The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded…

  • Unscored —

    The DG/UX finger daemon allows remote command execution through shell metacharacters.

  • Unscored —

    Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.

  • Unscored —
    CVE-1999-0412 Public exploit EPSS 10%

    In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading …

  • Unscored —

    HP ypbind allows attackers with root privileges to modify NIS data.