Skip to content
OpenAdvisories

Archive

February 2000

Vulnerabilities first published in this month (UTC), newest first.

← January 2000 2000 / February March 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-1999-0949 Public exploit

    Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.

  • Unscored —
    CVE-1999-0630

    The NT Alerter and Messenger services are running.

  • Unscored —
    CVE-1999-0001

    ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) v…

  • Unscored —
    CVE-1999-0419

    When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and re…

  • Unscored —
    CVE-1999-0406

    Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.

  • Unscored —
    CVE-1999-0401

    A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.

  • Unscored —
    CVE-1999-0389

    Buffer overflow in the bootp server in the Debian Linux netstd package.

  • Unscored —
    CVE-1999-0948 Public exploit

    Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

  • Unscored —
    CVE-1999-0541

    A password for accessing a WWW URL is guessable.

  • Unscored —
    CVE-1999-0667 Public exploit EPSS 14%

    The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a deni…

  • Unscored —
    CVE-1999-0539

    A trust relationship exists between two Unix hosts.

  • Unscored —
    CVE-1999-0860 Public exploit

    Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.

  • Unscored —
    CVE-1999-0582

    A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout a…

  • Unscored —
    CVE-1999-0399

    The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attac…

  • Unscored —
    CVE-1999-0993

    Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cac…

  • Unscored —
    CVE-1999-0453

    An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol…

  • Unscored —
    CVE-1999-0089

    Buffer overflow in AIX libDtSvc library can allow local users to gain root access.

  • Unscored —
    CVE-1999-0490

    MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG…

  • Unscored —
    CVE-1999-0822 Public exploit

    Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.

  • Unscored —
    CVE-1999-0086

    AIX routed allows remote users to modify sensitive files.

  • Unscored —
    CVE-1999-0654

    The OS/2 or POSIX subsystem in NT is enabled.

  • Unscored —
    CVE-1999-0638

    The daytime service is running.

  • Unscored —
    CVE-1999-0925 Public exploit

    UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.

  • Unscored —
    CVE-1999-0840

    Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.

  • Unscored —
    CVE-1999-0114

    Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm…

  • Unscored —
    CVE-1999-0635

    The echo service is running.

  • Unscored —
    CVE-1999-0286

    In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.

  • Unscored —
    CVE-1999-0123

    Race condition in Linux mailx command allows local users to read user files.

  • Unscored —
    CVE-1999-0664

    An application-critical Windows NT registry key has inappropriate permissions.

  • Unscored —
    CVE-1999-0523

    ICMP echo (ping) is allowed from arbitrary hosts.

  • Unscored —
    CVE-1999-0518

    A NETBIOS/SMB share password is guessable.

  • Unscored —
    CVE-1999-0988 Public exploit

    UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.

  • Unscored —
    CVE-1999-0984

    Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

  • Unscored —
    CVE-1999-0258

    Bonk variation of teardrop IP fragmentation denial of service.

  • Unscored —
    CVE-1999-0015 Public exploit EPSS 35%

    Teardrop IP denial of service.

  • Unscored —
    CVE-1999-0356

    ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.

  • Unscored —
    CVE-1999-0606

    An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private informati…

  • Unscored —
    CVE-1999-0507

    An account on a router, firewall, or other network device has a guessable password.

  • Medium 5.9
    CVE-1999-0517 Public exploit EPSS 29%

    An SNMP community name is the default (e.g. public), null, or missing.

  • Unscored —
    CVE-1999-0512 Public exploit EPSS 12%

    A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.