Archive
January 2000
Vulnerabilities first published in this month (UTC), newest first.
182 results · Feed
-
Unscored —
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
-
Unscored —
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
-
Unscored —
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
-
Unscored —CVE-1999-0752 Public exploit
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
-
Unscored —
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
-
Unscored —
Denial of service in HP-UX SharedX recserv program.
-
Unscored —CVE-1999-0749 Public exploit
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
-
Unscored —
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and t…
-
Unscored —
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as th…
-
Unscored —
The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
-
Unscored —
The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads …
-
Unscored —
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" pro…
-
Unscored —
The Zeus web server administrative interface uses weak encryption for its passwords.
-
Unscored —
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
-
Unscored —
Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
-
Unscored —CVE-1999-0705 Public exploit
Buffer overflow in INN inews program.
-
Unscored —
The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
-
Unscored —
BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
-
Unscored —CVE-1999-0951 Public exploit
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
-
Unscored —
Denial of service in BIND by improperly closing TCP sessions via so_linger.
-
Unscored —CVE-1999-0933 Public exploit
TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job afte…
-
Unscored —
The open() function in FreeBSD allows local attackers to write to arbitrary files.
-
Unscored —
Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
-
Unscored —
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to loca…
-
Unscored —CVE-1999-0744 Public exploit
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a lon…
-
Unscored —CVE-1999-0909 EPSS 12%
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with…
-
Unscored —CVE-1999-0973 Public exploit
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when sn…
-
Unscored —CVE-1999-0689 Public exploit
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
-
Unscored —
Denial of service in Debian IRC Epic/epic4 client via a long string.
-
Unscored —CVE-1999-0943 Public exploit
Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurat…
-
Unscored —
Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
-
Unscored —
Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
-
Unscored —
The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic lin…
-
Unscored —
Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
-
Unscored —
During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to…
-
Unscored —
Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.
-
Unscored —
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
-
Unscored —
-
Unscored —CVE-1999-0914 Public exploit
Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.