Skip to content
OpenAdvisories

Archive

February 2000

Vulnerabilities first published in this month (UTC), newest first.

← January 2000 2000 / February March 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-1999-0462

    suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access…

  • Unscored —
    CVE-1999-0637

    The systat service is running.

  • Unscored —
    CVE-1999-0862

    Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a pl…

  • Unscored —
    CVE-1999-0455 Public exploit

    The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server…

  • Unscored —
    CVE-1999-0611

    A system-critical Windows NT registry key has an inappropriate value.

  • Unscored —
    CVE-1999-0516 Public exploit EPSS 10%

    An SNMP community name is guessable.

  • Unscored —
    CVE-1999-0249

    Windows NT RSHSVC program allows remote users to execute arbitrary commands.

  • Unscored —
    CVE-1999-0361

    NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without log…

  • Unscored —
    CVE-1999-0530

    A system is operating in "promiscuous" mode which allows it to perform packet sniffing.

  • Unscored —
    CVE-1999-0798

    Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.

  • Unscored —
    CVE-1999-0576

    A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directo…

  • Unscored —
    CVE-1999-0255

    Buffer overflow in ircd allows arbitrary command execution.

  • Unscored —
    CVE-1999-0983

    Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the dom…

  • Unscored —
    CVE-1999-0370

    In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.

  • Unscored —
    CVE-1999-0741

    QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.

  • Unscored —
    CVE-1999-0586

    A network service is running on a nonstandard port.

  • Unscored —
    CVE-1999-0522

    The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.

  • Unscored —
    CVE-1999-0501

    A Unix account has a guessable password.

  • Unscored —
    CVE-1999-0613

    The rpc.sprayd service is running.

  • Unscored —
    CVE-1999-0033

    Command execution in Sun systems via buffer overflow in the at program.

  • Unscored —
    CVE-1999-0460 Public exploit

    Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.

  • Unscored —
    CVE-1999-0257

    Nestea variation of teardrop IP fragmentation denial of service.

  • Unscored —
    CVE-1999-0698

    Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.

  • Unscored —
    CVE-1999-0595

    A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be …

  • Unscored —
    CVE-1999-0398

    In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

  • Unscored —
    CVE-1999-0235 Public exploit

    Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.

  • Unscored —
    CVE-1999-0571

    A router's configuration service or management interface (such as a web server or telnet) is configured to allow connec…

  • Unscored —
    CVE-1999-0550

    A router's routing tables can be obtained from arbitrary hosts.

  • Unscored —
    CVE-1999-0241

    Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.

  • Unscored —
    CVE-1999-0816

    The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.

  • Unscored —
    CVE-1999-0562 Public exploit EPSS 10%

    The registry in Windows NT can be accessed remotely by users who are not administrators.

  • Unscored —
    CVE-1999-0061

    File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).

  • Unscored —
    CVE-1999-0140 Public exploit EPSS 14%

    Denial of service in RAS/PPTP on NT systems.

  • Unscored —
    CVE-1999-0844 Public exploit

    Denial of service in MDaemon WorldClient and WebConfig services via a long URL.

  • Unscored —
    CVE-1999-0243

    Linux cfingerd could be exploited to gain root access.

  • Unscored —
    CVE-1999-0556

    Two or more Unix accounts have the same UID.

  • Unscored —
    CVE-1999-0394

    DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.

  • Unscored —
    CVE-1999-0618

    The rexec service is running.

  • Unscored —
    CVE-1999-0231

    Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of …

  • Unscored —
    CVE-1999-0435

    MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.