February 2000

377 results · Feed

• Unscored —
  CVE-1999-0601

  A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.

  Feb 4, 2000
• Unscored —
  CVE-1999-0254

  A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive informa…

  Feb 4, 2000
• Unscored —
  CVE-1999-0604

  An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private informa…

  Feb 4, 2000
• Unscored —
  CVE-1999-0970 Public exploit

  The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which ca…

  Feb 4, 2000
• Unscored —
  CVE-1999-0830 Public exploit

  Buffer overflow in SCO UnixWare Xsco command via a long argument.

  Feb 4, 2000
• Unscored —
  CVE-1999-0669 Public exploit

  The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to e…

  Feb 4, 2000
• Unscored —
  CVE-1999-0444 EPSS 17%

  Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box…

  Feb 4, 2000
• Unscored —
  CVE-1999-0535

  A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, pass…

  Feb 4, 2000
• Unscored —
  CVE-1999-0508 Public exploit

  An account on a router, firewall, or other network device has a default, null, blank, or missing password.

  Feb 4, 2000
• Unscored —
  CVE-1999-0400 Public exploit

  Denial of service in Linux 2.2.0 running the ldd command on a core file.

  Feb 4, 2000
• Unscored —
  CVE-1999-0427

  Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.

  Feb 4, 2000
• Unscored —
  CVE-1999-0554 Public exploit EPSS 11%

  NFS exports system-critical data to the world, e.g. / or a password file.

  Feb 4, 2000
• Unscored —
  CVE-1999-0882

  Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

  Feb 4, 2000
• Unscored —
  CVE-1999-0919

  A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of te…

  Feb 4, 2000
• Unscored —
  CVE-1999-0345

  Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.

  Feb 4, 2000
• Unscored —
  CVE-1999-0581

  The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.

  Feb 4, 2000
• Unscored —
  CVE-1999-0651 Public exploit EPSS 12%

  The rsh/rlogin service is running.

  Feb 4, 2000
• Unscored —
  CVE-1999-0825 Public exploit

  The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.

  Feb 4, 2000
• Unscored —
  CVE-1999-0127

  swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary fi…

  Feb 4, 2000
• Unscored —
  CVE-1999-0600

  A network intrusion detection system (IDS) does not verify the checksum on a packet.

  Feb 4, 2000
• Unscored —
  CVE-1999-0828 Public exploit

  UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread p…

  Feb 4, 2000
• Unscored —
  CVE-1999-0121

  Buffer overflow in dtaction command gives root access.

  Feb 4, 2000
• Unscored —
  CVE-1999-0737 EPSS 28%

  The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

  Feb 4, 2000
• Unscored —
  CVE-1999-0748

  Buffer overflows in Red Hat net-tools package.

  Feb 4, 2000
• Unscored —
  CVE-1999-0506 Public exploit EPSS 17%

  A Windows NT domain user or administrator account has a default, null, blank, or missing password.

  Feb 4, 2000
• Unscored —
  CVE-1999-0434

  XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, …

  Feb 4, 2000
• Unscored —
  CVE-1999-0503

  A Windows NT local user or administrator account has a guessable password.

  Feb 4, 2000
• Medium 5.3
  CVE-1999-0632

  The RPC portmapper service is running.

  Feb 4, 2000
• Unscored —
  CVE-1999-0568

  rpc.admind in Solaris is not running in a secure mode.

  Feb 4, 2000
• Unscored —
  CVE-1999-0502 Public exploit EPSS 53%

  A Unix account has a default, null, blank, or missing password.

  Feb 4, 2000
• Unscored —
  CVE-1999-0913 Public exploit

  dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.

  Feb 4, 2000
• Unscored —
  CVE-1999-0186

  In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands …

  Feb 4, 2000
• Unscored —
  CVE-1999-0443

  Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.

  Feb 4, 2000
• Unscored —
  CVE-1999-0625

  The rpc.rquotad service is running.

  Feb 4, 2000
• Unscored —
  CVE-1999-0285

  Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.

  Feb 4, 2000
• Unscored —
  CVE-1999-0944 Public exploit

  IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.

  Feb 4, 2000
• Unscored —
  CVE-1999-0498

  TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as passw…

  Feb 4, 2000
• Unscored —
  CVE-1999-0193 Public exploit

  Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.

  Feb 4, 2000
• Unscored —
  CVE-1999-0661 Public exploit EPSS 54%

  A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such…

  Feb 4, 2000
• Unscored —
  CVE-1999-0598

  A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an att…

  Feb 4, 2000