Skip to content
OpenAdvisories

Archive

September 1999

Vulnerabilities first published in this month (UTC), newest first.

← August 1999 1999 / September October 1999 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29320
  30. 30 
All Critical High Medium Low Exploited only Public exploit

320 results · Feed

  • Unscored —
    CVE-1999-0329

    SGI mediad program allows local users to gain root access.

  • Unscored —
    CVE-1999-0057

    Vacation program allows command execution by remote users through a sendmail command.

  • Unscored —
    CVE-1999-0458

    L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.

  • Unscored —
    CVE-1999-0166

    NFS allows users to use a "cd .." command to access other directories besides the exported file system.

  • Unscored —
    CVE-1999-0628

    The rwho/rwhod service is running, which exposes machine status and user information.

  • Unscored —
    CVE-1999-0357 EPSS 17%

    Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packet…

  • Unscored —
    CVE-1999-0180

    in.rshd allows users to login with a NULL username and execute commands.

  • Unscored —
    CVE-1999-0053

    TCP RST denial of service in FreeBSD.

  • Unscored —
    CVE-1999-0070 Public exploit EPSS 30%

    test-cgi program allows an attacker to list files on the server.

  • Unscored —
    CVE-1999-0496

    A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's …

  • Unscored —
    CVE-1999-0281 Public exploit EPSS 13%

    Denial of service in IIS using long URLs.

  • Unscored —
    CVE-1999-0080

    Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, su…

  • Unscored —
    CVE-1999-0612 EPSS 68%

    A version of finger is running that exposes valid user information to any entity on the network.

    finger Azure Linux
  • Critical 9.8
    CVE-1999-0043 EPSS 45%

    Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and oth…

  • Unscored —
    CVE-1999-0446

    Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link w…

  • Unscored —
    CVE-1999-0384

    The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's …

  • Unscored —
    CVE-1999-0032 Public exploit

    Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as r…

  • Unscored —
    CVE-1999-0383

    ACC Tigris allows public access without a login.

  • Unscored —
    CVE-1999-0236 Public exploit EPSS 26%

    ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

    apache2 Wolfi
  • Unscored —
    CVE-1999-0267 Public exploit EPSS 10%

    Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.

  • Unscored —
    CVE-1999-0566

    An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding…

  • Unscored —
    CVE-1999-0484

    Buffer overflow in OpenBSD ping.

  • Unscored —
    CVE-1999-0077 Public exploit EPSS 31%

    Predictable TCP sequence numbers allow spoofing.

  • Unscored —
    CVE-1999-0367

    NetBSD netstat command allows local users to access kernel memory.

  • Unscored —
    CVE-1999-0276

    mSQL v2.0.1 and below allows remote execution through a buffer overflow.

  • Unscored —
    CVE-1999-0063 Public exploit

    Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.

  • Unscored —
    CVE-1999-0174 Public exploit

    The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0017

    FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

  • Unscored —
    CVE-1999-0090

    Buffer overflow in AIX rcp command allows local users to obtain root access.

  • Unscored —
    CVE-1999-0338

    AIX Licensed Program Product performance tools allow local users to gain root access.

  • Unscored —
    CVE-1999-0219 Public exploit

    Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1)…

  • Unscored —
    CVE-1999-0442 Public exploit

    Solaris ff.core allows local users to modify files.

  • Unscored —
    CVE-1999-0138

    The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing r…

  • Unscored —
    CVE-1999-0366

    In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a p…

  • Unscored —
    CVE-1999-0334

    In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.

  • Unscored —
    CVE-1999-0175 Public exploit

    The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is inter…

  • Unscored —
    CVE-1999-0372 Public exploit

    The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not dele…

  • Unscored —
    CVE-1999-0207 Public exploit

    Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.

  • Unscored —
    CVE-1999-0430

    Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of se…

  • Unscored —
    CVE-1999-0211

    Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.