Archive
January 2000
Vulnerabilities first published in this month (UTC), newest first.
182 results · Feed
-
Unscored —
mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
-
Unscored —
The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
-
Unscored —
htdig allows remote attackers to execute commands via filenames with shell metacharacters.
-
Unscored —
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites featu…
-
Unscored —
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox …
-
Unscored —CVE-1999-0804 Public exploit
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header leng…
-
Unscored —CVE-1999-0934 Public exploit
classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
-
Unscored —
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
-
Unscored —
Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the …
-
Unscored —CVE-1999-0972 Public exploit
Buffer overflow in Xshipwars xsw program.
-
Unscored —
Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.
-
Unscored —
Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.
-
Unscored —CVE-1999-0693 Public exploit
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privilege…
-
Unscored —CVE-1999-0870 EPSS 13%
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload cont…
-
Unscored —CVE-1999-0848 Public exploit
Denial of service in BIND named via consuming more than "fdmax" file descriptors.
-
Unscored —CVE-1999-0969 EPSS 13%
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets w…
-
Unscored —
Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via th…
-
Unscored —
Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument …
-
Unscored —CVE-1999-0986 Public exploit
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (…
-
Unscored —
Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, ak…
-
Unscored —
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants w…
-
Unscored —
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected t…
-
Unscored —CVE-1999-0915 Public exploit
URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —CVE-1999-0685 Public exploit
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
-
Unscored —
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local…
-
Unscored —
The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redire…
-
Unscored —CVE-1999-0771 Public exploit
The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary …
-
Unscored —CVE-1999-0953 Public exploit
WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attacke…
-
Unscored —CVE-1999-0674 Public exploit
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
-
Unscored —
Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
-
Unscored —
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
-
Unscored —CVE-1999-0802 EPSS 10%
Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
-
Unscored —
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquot…
-
Unscored —CVE-1999-0470 Public exploit
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
-
Unscored —
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
-
Unscored —CVE-1999-0858 EPSS 14%
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Au…
-
Unscored —
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
-
Unscored —CVE-1999-0777 EPSS 12%
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permis…
-
Unscored —CVE-1999-0879 Public exploit
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables …
-
Unscored —
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, all…