Archive
4 February 2000
Vulnerabilities first published on this day (UTC), newest first.
338 results · Feed
-
Unscored —
A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not con…
-
Unscored —
A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical…
-
Unscored —
The Logon box of a Windows NT system displays the name of the last user who logged in.
-
Critical 9.1
IP forwarding is enabled on a machine which is not a router or firewall.
-
Unscored —
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and C…
-
Unscored —
libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
-
Unscored —
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
-
Unscored —
A DNS server allows inverse queries.
-
Unscored —
IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.
-
Unscored —
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
-
Unscored —
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HE…
-
Unscored —
ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.
-
Unscored —CVE-1999-0489 EPSS 12%
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic contro…
-
Unscored —
A Windows NT log file has an inappropriate maximum size or retention period.
-
Unscored —
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Ti…
-
Unscored —CVE-1999-0488 EPSS 12%
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context usin…
-
Unscored —
A Sendmail alias allows input to be piped to a program.
-
Unscored —
finger allows recursive searches by using a long string of @ symbols.
-
Unscored —CVE-1999-0477 Public exploit
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server vi…
-
Unscored —
An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
-
Unscored —
The Gopher service is running.
-
Unscored —
Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.
-
Unscored —CVE-1999-0841 Public exploit
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
-
Unscored —
A system-critical NETBIOS/SMB share has inappropriate access control.
-
Unscored —
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
-
Unscored —
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Per…
-
Unscored —
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system i…
-
Unscored —CVE-1999-0347 Public exploit
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "abo…
-
Unscored —
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e i…
-
Medium 4.0
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
-
Unscored —CVE-1999-0467 Public exploit
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "…
-
Unscored —CVE-1999-0767 Public exploit
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
-
Unscored —
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local us…
-
Unscored —
NFS allows attackers to read and write any file on the system by specifying a false UID.
-
Unscored —CVE-1999-0030 Public exploit
root privileges via buffer overflow in xlock command on SGI IRIX systems.
-
Unscored —
Denial of service in Sendmail 8.8.6 in HPUX.
-
Unscored —
The chargen service is running.
-
Unscored —
Denial of service in Qmail through long SMTP commands.
-
Unscored —CVE-1999-0306 Public exploit
buffer overflow in HP xlock program.
-
Unscored —CVE-1999-0985 Public exploit
CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.