Archive
4 January 2000
Vulnerabilities first published on this day (UTC), newest first.
152 results · Feed
-
Unscored —
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
-
Unscored —CVE-1999-0935 Public exploit
classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI …
-
Unscored —
Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.
-
Unscored —CVE-1999-0774 Public exploit
Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.
-
Unscored —
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external progr…
-
Unscored —
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
-
Unscored —
The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
-
Unscored —
Denial of service in BIND named via maxdname.
-
Unscored —
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
-
Unscored —
Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end o…
-
Unscored —
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
-
Unscored —
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
-
Unscored —
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
-
Unscored —CVE-1999-0752 Public exploit
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
-
Unscored —
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
-
Unscored —
Denial of service in HP-UX SharedX recserv program.
-
Unscored —CVE-1999-0749 Public exploit
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
-
Unscored —
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and t…
-
Unscored —
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as th…
-
Unscored —
The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
-
Unscored —
The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads …
-
Unscored —
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" pro…
-
Unscored —
The Zeus web server administrative interface uses weak encryption for its passwords.
-
Unscored —
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
-
Unscored —
Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
-
Unscored —CVE-1999-0705 Public exploit
Buffer overflow in INN inews program.
-
Unscored —
The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
-
Unscored —
BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
-
Unscored —CVE-1999-0951 Public exploit
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
-
Unscored —
Denial of service in BIND by improperly closing TCP sessions via so_linger.
-
Unscored —CVE-1999-0933 Public exploit
TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job afte…
-
Unscored —
The open() function in FreeBSD allows local attackers to write to arbitrary files.
-
Unscored —
Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
-
Unscored —
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to loca…
-
Unscored —CVE-1999-0744 Public exploit
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a lon…
-
Unscored —CVE-1999-0909 EPSS 12%
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with…
-
Unscored —CVE-1999-0973 Public exploit
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when sn…
-
Unscored —CVE-1999-0689 Public exploit
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
-
Unscored —
Denial of service in Debian IRC Epic/epic4 client via a long string.