Skip to content
OpenAdvisories

Archive

4 January 2000

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4152
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1830
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

58 results · Clear filters · Feed

  • Unscored —
    CVE-1999-0935 Public exploit

    classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI …

  • Unscored —
    CVE-1999-0774 Public exploit

    Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.

  • Unscored —
    CVE-1999-0867 Public exploit EPSS 22%

    Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.

  • Unscored —
    CVE-1999-0752 Public exploit

    Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.

  • Unscored —
    CVE-1999-0749 Public exploit

    Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.

  • Unscored —
    CVE-1999-0705 Public exploit

    Buffer overflow in INN inews program.

  • Unscored —
    CVE-1999-0951 Public exploit

    Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.

  • Unscored —
    CVE-1999-0933 Public exploit

    TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0744 Public exploit

    Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a lon…

  • Unscored —
    CVE-1999-0973 Public exploit

    Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when sn…

  • Unscored —
    CVE-1999-0689 Public exploit

    The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

  • Unscored —
    CVE-1999-0943 Public exploit

    Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurat…

  • Unscored —
    CVE-1999-0793 Public exploit EPSS 13%

    Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.

  • Unscored —
    CVE-1999-0914 Public exploit

    Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.

  • Unscored —
    CVE-1999-0702 Public exploit EPSS 24%

    Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites featu…

  • Unscored —
    CVE-1999-0804 Public exploit

    Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header leng…

  • Unscored —
    CVE-1999-0934 Public exploit

    classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.

  • Unscored —
    CVE-1999-0977 Public exploit EPSS 13%

    Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.

  • Unscored —
    CVE-1999-0972 Public exploit

    Buffer overflow in Xshipwars xsw program.

  • Unscored —
    CVE-1999-0693 Public exploit

    Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privilege…

  • Unscored —
    CVE-1999-0848 Public exploit

    Denial of service in BIND named via consuming more than "fdmax" file descriptors.

  • Unscored —
    CVE-1999-0989 Public exploit EPSS 12%

    Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via th…

  • Unscored —
    CVE-1999-0980 Public exploit EPSS 23%

    Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument …

  • Unscored —
    CVE-1999-0986 Public exploit

    The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (…

  • Unscored —
    CVE-1999-0869 Public exploit EPSS 17%

    Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, ak…

  • Unscored —
    CVE-1999-0915 Public exploit

    URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0685 Public exploit

    Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.

  • Unscored —
    CVE-1999-0891 Public exploit EPSS 42%

    The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redire…

  • Unscored —
    CVE-1999-0771 Public exploit

    The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary …

  • Unscored —
    CVE-1999-0953 Public exploit

    WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attacke…

  • Unscored —
    CVE-1999-0674 Public exploit

    The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.

  • Unscored —
    CVE-1999-0470 Public exploit

    A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.

  • Unscored —
    CVE-1999-0877 Public exploit EPSS 18%

    Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.

  • Unscored —
    CVE-1999-0879 Public exploit

    Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables …

  • Unscored —
    CVE-1999-0700 Public exploit

    Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.

  • Unscored —
    CVE-1999-0745 Public exploit

    Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.

  • Unscored —
    CVE-1999-0715 Public exploit

    Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of servi…

  • Unscored —
    CVE-1999-0769 Public exploit

    Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental vari…

  • Unscored —
    CVE-1999-0981 Public exploit EPSS 13%

    Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-s…

  • Unscored —
    CVE-1999-0730 Public exploit

    The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.