Archive
January 2000
Vulnerabilities first published in this month (UTC), newest first.
182 results · Feed
-
Unscored —CVE-1999-0700 Public exploit
Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
-
Unscored —CVE-1999-0745 Public exploit
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
-
Unscored —CVE-1999-0715 Public exploit
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of servi…
-
Unscored —
HP CDE program includes the current directory in root's PATH variable.
-
Unscored —
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
-
Unscored —
The KDE klock program allows local users to unlock a session using malformed input.
-
Unscored —
Denial of service in BIND named via malformed SIG records.
-
Unscored —
MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (…
-
Unscored —
sccw allows local users to read arbitrary files.
-
Unscored —
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
-
Unscored —
Race condition in xterm allows local users to modify arbitrary files via the logging option.
-
Unscored —CVE-1999-0769 Public exploit
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental vari…
-
Unscored —
Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
-
Unscored —
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authen…
-
Unscored —
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
-
Unscored —
Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-s…
-
Unscored —CVE-1999-0730 Public exploit
The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
-
Unscored —
A malicious Palace server can force a client to execute arbitrary programs.
-
Unscored —
FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
-
Unscored —
The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable f…
-
Unscored —CVE-1999-0871 EPSS 12%
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Fram…
-
Unscored —CVE-1999-0979 Public exploit
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb t…
-
Unscored —
ypserv allows a local user to modify the GECOS and login shells of other users.
-
Unscored —
Denial of service in various Windows systems via malformed, fragmented IGMP packets.
-
Unscored —CVE-1999-0887 Public exploit
FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
-
Unscored —
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
-
Unscored —
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
-
Unscored —CVE-1999-0704 Public exploit
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
-
Unscored —
Denial of service in BIND named via naptr.
-
Unscored —
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
-
Unscored —
Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
-
Unscored —CVE-1999-0682 EPSS 26%
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if t…
-
Unscored —CVE-1999-0960 Public exploit
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
-
Unscored —
Denial of service in Samba NETBIOS name service daemon (nmbd).
-
Unscored —
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Ma…
-
Unscored —
Buffer overflow in BIND 8.2 via NXT records.
-
Unscored —
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain …
-
Unscored —
BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
-
Unscored —
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search …
-
Unscored —
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in …