Skip to content
OpenAdvisories

Archive

4 February 2000

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 

80 results · Clear filters · Feed

  • Unscored —
    CVE-1999-0913 Public exploit

    dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.

  • Unscored —
    CVE-1999-0944 Public exploit

    IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.

  • Unscored —
    CVE-1999-0193 Public exploit

    Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.

  • Unscored —
    CVE-1999-0661 Public exploit EPSS 54%

    A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such…

  • Unscored —
    CVE-1999-0736 Public exploit EPSS 45%

    The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

  • Unscored —
    CVE-1999-0238 Public exploit

    php.cgi allows attackers to read any file on the system.

  • Unscored —
    CVE-1999-0287 Public exploit

    Vulnerability in the Wguest CGI program.

  • Unscored —
    CVE-1999-0497 Public exploit

    Anonymous FTP is enabled.

  • Unscored —
    CVE-1999-0855 Public exploit

    Buffer overflow in FreeBSD gdc program.

  • Unscored —
    CVE-1999-0492 Public exploit

    The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.

  • Unscored —
    CVE-1999-0426 Public exploit EPSS 11%

    The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.

  • Unscored —
    CVE-1999-0360 Public exploit

    MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing t…

  • Unscored —
    CVE-1999-0144 Public exploit

    Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

  • Unscored —
    CVE-1999-0504 Public exploit EPSS 64%

    A Windows NT local user or administrator account has a default, null, blank, or missing password.

  • Unscored —
    CVE-1999-0818 Public exploit

    Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.

  • Unscored —
    CVE-1999-0451 Public exploit

    Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.

  • Unscored —
    CVE-1999-0381 Public exploit

    super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root acc…

  • Unscored —
    CVE-1999-0857 Public exploit

    FreeBSD gdc program allows local users to modify files via a symlink attack.

  • Unscored —
    CVE-1999-0532 Public exploit EPSS 69%

    A DNS server allows zone transfers.

  • Unscored —
    CVE-1999-0107 Public exploit EPSS 20%

    Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number o…

  • Unscored —
    CVE-1999-0845 Public exploit

    Buffer overflow in SCO su program allows local users to gain root access via a long username.

  • Unscored —
    CVE-1999-0092 Public exploit

    Various vulnerabilities in the AIX portmir command allows local users to obtain root access.

  • Unscored —
    CVE-1999-0885 Public exploit

    Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.

  • Unscored —
    CVE-1999-0673 Public exploit

    Buffer overflow in ALMail32 POP3 client via From: or To: headers.

  • Unscored —
    CVE-1999-0431 Public exploit

    Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.

  • Unscored —
    CVE-1999-0821 Public exploit

    FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.

  • Unscored —
    CVE-1999-0283 Public exploit

    The Java Web Server would allow remote users to obtain the source code for CGI programs.

  • Unscored —
    CVE-1999-0750 Public exploit

    Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the u…

  • Unscored —
    CVE-2000-0035 Public exploit

    resend command in Majordomo allows local users to gain privileges via shell metacharacters.

  • Unscored —
    CVE-2000-0046 Public exploit

    Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ…

  • Unscored —
    CVE-2000-0059 Public exploit EPSS 11%

    PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, whi…

  • Unscored —
    CVE-2000-0049 Public exploit

    Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.

  • Unscored —
    CVE-2000-0028 Public exploit EPSS 23%

    Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the…

  • Unscored —
    CVE-2000-0016 Public exploit

    Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute c…

  • Unscored —
    CVE-2000-0074 Public exploit

    PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permiss…

  • Unscored —
    CVE-2000-0038 Public exploit

    glFtpD includes a default glftpd user account with a default password and a UID of 0.

  • Unscored —
    CVE-2000-0077 Public exploit

    The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate …

  • Unscored —
    CVE-2000-0017 Public exploit

    Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.

  • Unscored —
    CVE-2000-0054 Public exploit

    search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) atta…

  • Unscored —
    CVE-2000-0061 Public exploit EPSS 20%

    Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the…