Archive
4 January 2000
Vulnerabilities first published on this day (UTC), newest first.
152 results · Feed
-
Unscored —
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
-
Unscored —CVE-1999-0802 EPSS 10%
Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
-
Unscored —
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquot…
-
Unscored —CVE-1999-0470 Public exploit
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
-
Unscored —
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
-
Unscored —CVE-1999-0858 EPSS 14%
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Au…
-
Unscored —
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
-
Unscored —CVE-1999-0777 EPSS 12%
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permis…
-
Unscored —CVE-1999-0879 Public exploit
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables …
-
Unscored —
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, all…
-
Unscored —CVE-1999-0700 Public exploit
Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
-
Unscored —CVE-1999-0745 Public exploit
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
-
Unscored —CVE-1999-0715 Public exploit
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of servi…
-
Unscored —
HP CDE program includes the current directory in root's PATH variable.
-
Unscored —
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
-
Unscored —
The KDE klock program allows local users to unlock a session using malformed input.
-
Unscored —
Denial of service in BIND named via malformed SIG records.
-
Unscored —
MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (…
-
Unscored —
sccw allows local users to read arbitrary files.
-
Unscored —
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
-
Unscored —
Race condition in xterm allows local users to modify arbitrary files via the logging option.
-
Unscored —CVE-1999-0769 Public exploit
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental vari…
-
Unscored —
Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
-
Unscored —
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authen…
-
Unscored —
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
-
Unscored —
Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-s…
-
Unscored —CVE-1999-0730 Public exploit
The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
-
Unscored —
A malicious Palace server can force a client to execute arbitrary programs.
-
Unscored —
FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
-
Unscored —
The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable f…
-
Unscored —CVE-1999-0871 EPSS 12%
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Fram…
-
Unscored —CVE-1999-0979 Public exploit
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb t…
-
Unscored —
ypserv allows a local user to modify the GECOS and login shells of other users.
-
Unscored —
Denial of service in various Windows systems via malformed, fragmented IGMP packets.
-
Unscored —CVE-1999-0887 Public exploit
FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
-
Unscored —
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
-
Unscored —
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
-
Unscored —CVE-1999-0704 Public exploit
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
-
Unscored —
Denial of service in BIND named via naptr.
-
Unscored —
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.