Skip to content
OpenAdvisories

Archive

January 2000

Vulnerabilities first published in this month (UTC), newest first.

← December 1999 2000 / January February 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4152
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1830
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

182 results · Feed

  • Unscored —
    CVE-1999-0834 Public exploit

    Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.

  • Unscored —
    CVE-1999-0775

    Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handlin…

  • Unscored —
    CVE-1999-0999 Public exploit EPSS 22%

    Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.

  • Unscored —
    CVE-1999-0270 EPSS 32%

    Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer A…

  • Unscored —
    CVE-1999-0694

    Denial of service in AIX ptrace system call allows local users to crash the system.

  • Unscored —
    CVE-1999-0992

    HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted G…

  • Unscored —
    CVE-1999-0734

    A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database wi…

  • Unscored —
    CVE-1999-0742

    The Debian mailman package uses weak authentication, which allows attackers to gain privileges.

  • Unscored —
    CVE-1999-0708 Public exploit

    Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.

  • Unscored —
    CVE-1999-0853

    Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges …

  • Unscored —
    CVE-1999-0101 Public exploit

    Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.

  • Unscored —
    CVE-1999-0905 Public exploit

    Denial of service in Axent Raptor firewall via malformed zero-length IP options.

  • Unscored —
    CVE-1999-0881

    Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0995 EPSS 22%

    Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments …

  • Unscored —
    CVE-1999-0875 Public exploit EPSS 10%

    DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.

  • Unscored —
    CVE-1999-0770 Public exploit

    Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to…

  • Unscored —
    CVE-1999-0259

    cfingerd lists all users on a system via search.**@target.

  • Unscored —
    CVE-1999-0683 Public exploit

    Denial of service in Gauntlet Firewall via a malformed ICMP packet.

  • Unscored —
    CVE-1999-0994

    Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to cr…

  • Unscored —
    CVE-1999-0831

    Denial of service in Linux syslogd via a large number of connections.

  • Unscored —
    CVE-1999-0899 Public exploit

    The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions tha…

  • Unscored —
    CVE-1999-0233 Public exploit EPSS 16%

    IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.

  • Unscored —
    CVE-1999-0811 Public exploit

    Buffer overflow in Samba smbd program via a malformed message command.

  • Unscored —
    CVE-1999-0768 Public exploit

    Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.

  • Unscored —
    CVE-1999-0847

    Buffer overflow in free internet chess server (FICS) program, xboard.

  • Unscored —
    CVE-1999-0955

    Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.

  • Unscored —
    CVE-1999-0743

    Trn allows local users to overwrite other users' files via symlinks.

  • Unscored —
    CVE-1999-0898

    Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service…

  • Unscored —
    CVE-1999-0753 Public exploit

    The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.

  • Unscored —
    CVE-1999-1001

    Cisco Cache Engine allows a remote attacker to gain access via a null username and password.

  • Unscored —
    CVE-1999-0917

    The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.

  • Unscored —
    CVE-1999-0935 Public exploit

    classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI …

  • Unscored —
    CVE-1999-0772

    Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.

  • Unscored —
    CVE-1999-0774 Public exploit

    Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.

  • Unscored —
    CVE-1999-0817

    Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external progr…

  • Unscored —
    CVE-1999-0861

    Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.

  • Unscored —
    CVE-1999-0695

    The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0849

    Denial of service in BIND named via maxdname.

  • Unscored —
    CVE-1999-0794

    Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.

  • Unscored —
    CVE-1999-0987

    Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end o…