Skip to content
OpenAdvisories

Archive

February 2000

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 

97 results · Clear filters · Feed

  • Unscored —
    CVE-1999-0516 Public exploit EPSS 10%

    An SNMP community name is guessable.

  • Unscored —
    CVE-1999-0460 Public exploit

    Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.

  • Unscored —
    CVE-1999-0235 Public exploit

    Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.

  • Unscored —
    CVE-1999-0562 Public exploit EPSS 10%

    The registry in Windows NT can be accessed remotely by users who are not administrators.

  • Unscored —
    CVE-1999-0140 Public exploit EPSS 14%

    Denial of service in RAS/PPTP on NT systems.

  • Unscored —
    CVE-1999-0844 Public exploit

    Denial of service in MDaemon WorldClient and WebConfig services via a long URL.

  • Unscored —
    CVE-1999-0970 Public exploit

    The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which ca…

  • Unscored —
    CVE-1999-0830 Public exploit

    Buffer overflow in SCO UnixWare Xsco command via a long argument.

  • Unscored —
    CVE-1999-0669 Public exploit

    The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to e…

  • Unscored —
    CVE-1999-0508 Public exploit

    An account on a router, firewall, or other network device has a default, null, blank, or missing password.

  • Unscored —
    CVE-1999-0400 Public exploit

    Denial of service in Linux 2.2.0 running the ldd command on a core file.

  • Unscored —
    CVE-1999-0554 Public exploit EPSS 11%

    NFS exports system-critical data to the world, e.g. / or a password file.

  • Unscored —
    CVE-1999-0651 Public exploit EPSS 12%

    The rsh/rlogin service is running.

  • Unscored —
    CVE-1999-0825 Public exploit

    The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.

  • Unscored —
    CVE-1999-0828 Public exploit

    UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread p…

  • Unscored —
    CVE-1999-0506 Public exploit EPSS 17%

    A Windows NT domain user or administrator account has a default, null, blank, or missing password.

  • Unscored —
    CVE-1999-0502 Public exploit EPSS 53%

    A Unix account has a default, null, blank, or missing password.

  • Unscored —
    CVE-1999-0913 Public exploit

    dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.

  • Unscored —
    CVE-1999-0944 Public exploit

    IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.

  • Unscored —
    CVE-1999-0193 Public exploit

    Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.

  • Unscored —
    CVE-1999-0661 Public exploit EPSS 54%

    A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such…

  • Unscored —
    CVE-1999-0736 Public exploit EPSS 45%

    The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

  • Unscored —
    CVE-1999-0238 Public exploit

    php.cgi allows attackers to read any file on the system.

  • Unscored —
    CVE-1999-0287 Public exploit

    Vulnerability in the Wguest CGI program.

  • Unscored —
    CVE-1999-0497 Public exploit

    Anonymous FTP is enabled.

  • Unscored —
    CVE-1999-0855 Public exploit

    Buffer overflow in FreeBSD gdc program.

  • Unscored —
    CVE-1999-0492 Public exploit

    The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.

  • Unscored —
    CVE-1999-0426 Public exploit EPSS 11%

    The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.

  • Unscored —
    CVE-1999-0360 Public exploit

    MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing t…

  • Unscored —
    CVE-1999-0144 Public exploit

    Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

  • Unscored —
    CVE-1999-0504 Public exploit EPSS 64%

    A Windows NT local user or administrator account has a default, null, blank, or missing password.

  • Unscored —
    CVE-1999-0818 Public exploit

    Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.

  • Unscored —
    CVE-1999-0451 Public exploit

    Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.

  • Unscored —
    CVE-1999-0381 Public exploit

    super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root acc…

  • Unscored —
    CVE-1999-0857 Public exploit

    FreeBSD gdc program allows local users to modify files via a symlink attack.

  • Unscored —
    CVE-1999-0532 Public exploit EPSS 69%

    A DNS server allows zone transfers.

  • Unscored —
    CVE-1999-0107 Public exploit EPSS 20%

    Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number o…

  • Unscored —
    CVE-1999-0845 Public exploit

    Buffer overflow in SCO su program allows local users to gain root access via a long username.

  • Unscored —
    CVE-1999-0092 Public exploit

    Various vulnerabilities in the AIX portmir command allows local users to obtain root access.

  • Unscored —
    CVE-1999-0885 Public exploit

    Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.