Archive
4 February 2000
Vulnerabilities first published on this day (UTC), newest first.
80 results · Clear filters · Feed
-
Unscored —
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and C…
-
Unscored —
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HE…
-
Unscored —CVE-1999-0477 Public exploit
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server vi…
-
Unscored —CVE-1999-0841 Public exploit
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
-
Unscored —
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Per…
-
Unscored —CVE-1999-0347 Public exploit
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "abo…
-
Medium 4.0
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
-
Unscored —CVE-1999-0467 Public exploit
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "…
-
Unscored —CVE-1999-0767 Public exploit
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
-
Unscored —CVE-1999-0030 Public exploit
root privileges via buffer overflow in xlock command on SGI IRIX systems.
-
Unscored —CVE-1999-0306 Public exploit
buffer overflow in HP xlock program.
-
Unscored —CVE-1999-0985 Public exploit
CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
-
Unscored —CVE-1999-0949 Public exploit
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
-
Unscored —CVE-1999-0948 Public exploit
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
-
Unscored —
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a deni…
-
Unscored —CVE-1999-0860 Public exploit
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
-
Unscored —CVE-1999-0822 Public exploit
Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
-
Unscored —CVE-1999-0925 Public exploit
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
-
Unscored —CVE-1999-0988 Public exploit
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
-
Unscored —
Teardrop IP denial of service.
-
Medium 5.9
An SNMP community name is the default (e.g. public), null, or missing.
-
Unscored —
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
-
Unscored —CVE-1999-0455 Public exploit
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server…
-
Unscored —
An SNMP community name is guessable.
-
Unscored —CVE-1999-0460 Public exploit
Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
-
Unscored —CVE-1999-0235 Public exploit
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
-
Unscored —
The registry in Windows NT can be accessed remotely by users who are not administrators.
-
Unscored —
Denial of service in RAS/PPTP on NT systems.
-
Unscored —CVE-1999-0844 Public exploit
Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
-
Unscored —CVE-1999-0970 Public exploit
The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which ca…
-
Unscored —CVE-1999-0830 Public exploit
Buffer overflow in SCO UnixWare Xsco command via a long argument.
-
Unscored —CVE-1999-0669 Public exploit
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to e…
-
Unscored —CVE-1999-0508 Public exploit
An account on a router, firewall, or other network device has a default, null, blank, or missing password.
-
Unscored —CVE-1999-0400 Public exploit
Denial of service in Linux 2.2.0 running the ldd command on a core file.
-
Unscored —
NFS exports system-critical data to the world, e.g. / or a password file.
-
Unscored —
The rsh/rlogin service is running.
-
Unscored —CVE-1999-0825 Public exploit
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
-
Unscored —CVE-1999-0828 Public exploit
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread p…
-
Unscored —
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
-
Unscored —
A Unix account has a default, null, blank, or missing password.