Skip to content
OpenAdvisories

Archive

February 2000

Vulnerabilities first published in this month (UTC), newest first.

← January 2000 2000 / February March 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-1999-0827

    By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option,…

  • Unscored —
    CVE-1999-0594

    A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.

  • Unscored —
    CVE-1999-0469 EPSS 18%

    Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture inf…

  • Unscored —
    CVE-1999-0465

    Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.

  • Unscored —
    CVE-1999-0577

    A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.

  • Unscored —
    CVE-1999-0461

    Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete ent…

  • Unscored —
    CVE-1999-0579

    A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.

  • Unscored —
    CVE-1999-0156

    wu-ftpd FTP daemon allows any user and password combination.

  • Unscored —
    CVE-1999-0580

    The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.

  • Unscored —
    CVE-1999-0240

    Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.

  • Unscored —
    CVE-1999-0525

    IP traceroute is allowed from arbitrary hosts.

  • Unscored —
    CVE-1999-0578

    A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry key…

  • Unscored —
    CVE-1999-0641

    The UUCP service is running.

  • Unscored —
    CVE-1999-0663

    A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has be…

  • Unscored —
    CVE-1999-0165

    NFS cache poisoning.

  • Unscored —
    CVE-1999-0452

    A service or application has a backdoor password that was placed there by the developer.

  • Unscored —
    CVE-1999-0163

    In older versions of Sendmail, an attacker could use a pipe character to execute root commands.

    sendmail Azure Linux
  • Unscored —
    CVE-1999-0656

    The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs t…

    kernel Azure Linux
  • Unscored —
    CVE-1999-0650

    The netstat service is running, which provides sensitive information to remote attackers.

  • Unscored —
    CVE-1999-0597

    A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.

  • Unscored —
    CVE-1999-0591

    An event log in Windows NT has inappropriate access permissions.

  • Unscored —
    CVE-1999-0603

    In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domai…

  • Unscored —
    CVE-1999-0119

    Windows NT 4.0 beta allows users to read and delete shares.

  • Unscored —
    CVE-1999-0736 Public exploit EPSS 45%

    The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

  • Unscored —
    CVE-1999-0238 Public exploit

    php.cgi allows attackers to read any file on the system.

  • Unscored —
    CVE-1999-0593

    The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to …

  • Unscored —
    CVE-1999-0624

    The rstat/rstatd service is running.

  • Unscored —
    CVE-1999-0333

    HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via…

  • Unscored —
    CVE-1999-0352

    ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.

  • Unscored —
    CVE-1999-0454

    A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packe…

  • Unscored —
    CVE-1999-0287 Public exploit

    Vulnerability in the Wguest CGI program.

  • Unscored —
    CVE-1999-0546

    The Windows NT guest account is enabled.

  • Unscored —
    CVE-1999-0497 Public exploit

    Anonymous FTP is enabled.

  • Unscored —
    CVE-1999-0653

    A component service related to NIS+ is running.

  • Unscored —
    CVE-1999-0171

    Denial of service in syslog by sending it a large number of superfluous messages.

  • Unscored —
    CVE-1999-0850

    The default permissions for Endymion MailMan allow local users to read email or modify files.

  • Unscored —
    CVE-1999-0411

    Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs,…

  • Unscored —
    CVE-1999-0855 Public exploit

    Buffer overflow in FreeBSD gdc program.

  • Unscored —
    CVE-1999-0492 Public exploit

    The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.

  • Unscored —
    CVE-1999-0776

    Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.