Skip to content
OpenAdvisories

Archive

February 2000

Vulnerabilities first published in this month (UTC), newest first.

← January 2000 2000 / February March 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-1999-0570

    Windows NT is not using a password filter utility, e.g. PASSFILT.DLL.

  • Unscored —
    CVE-1999-0364

    Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.

  • Unscored —
    CVE-1999-0521

    An NIS domain name is easily guessable.

  • Unscored —
    CVE-1999-0583

    There is a one-way or two-way trust relationship between Windows NT domains.

  • Unscored —
    CVE-1999-0222

    Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.

  • Unscored —
    CVE-1999-0575

    A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and O…

  • Unscored —
    CVE-1999-0426 Public exploit EPSS 11%

    The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.

  • Unscored —
    CVE-1999-0360 Public exploit

    MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing t…

  • Unscored —
    CVE-1999-0590

    A system does not present an appropriate legal message or warning to a user who is accessing it.

  • Unscored —
    CVE-1999-0549

    Windows NT automatically logs in an administrator upon rebooting.

  • Unscored —
    CVE-1999-0585

    A Windows NT administrator account has the default name of Administrator.

  • Unscored —
    CVE-1999-0144 Public exploit

    Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

  • Unscored —
    CVE-1999-0561

    IIS has the #exec function enabled for Server Side Include (SSI) files.

  • Unscored —
    CVE-1999-0846

    Denial of service in MDaemon 2.7 via a large number of connection attempts.

  • Unscored —
    CVE-1999-0397

    The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.

  • Unscored —
    CVE-1999-0505

    A Windows NT domain user or administrator account has a guessable password.

  • Unscored —
    CVE-1999-0078

    pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments …

  • Unscored —
    CVE-1999-0852

    IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /u…

  • Unscored —
    CVE-1999-0599

    A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.

  • Unscored —
    CVE-1999-0271

    Progressive Networks Real Video server (pnserver) can be crashed remotely.

  • Unscored —
    CVE-1999-0629

    The ident/identd service is running.

  • Unscored —
    CVE-1999-0198

    finger .@host on some systems may print information on some user accounts.

  • Unscored —
    CVE-1999-0226

    Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.

  • Unscored —
    CVE-1999-0670

    Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.

  • Unscored —
    CVE-1999-0205

    Denial of service in Sendmail 8.6.11 and 8.6.12.

  • Unscored —
    CVE-1999-0298

    ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to ove…

  • Unscored —
    CVE-1999-0738 EPSS 29%

    The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

  • Unscored —
    CVE-1999-0510

    A router or firewall allows source routed packets from arbitrary hosts.

  • Unscored —
    CVE-1999-0504 Public exploit EPSS 64%

    A Windows NT local user or administrator account has a default, null, blank, or missing password.

  • Unscored —
    CVE-1999-0929

    Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a…

  • Unscored —
    CVE-1999-0584

    A Windows NT file system is not NTFS.

  • Unscored —
    CVE-1999-0910

    Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be …

  • Unscored —
    CVE-1999-0990

    Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.

  • Unscored —
    CVE-1999-0818 Public exploit

    Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.

  • Unscored —
    CVE-1999-0602

    A network intrusion detection system (IDS) does not properly reassemble fragmented packets.

  • Unscored —
    CVE-1999-0261

    Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.

  • Unscored —
    CVE-1999-0246

    HP Remote Watch allows a remote user to gain root access.

  • Unscored —
    CVE-1999-0843

    Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.

  • Unscored —
    CVE-1999-0829

    HP Secure Web Console uses weak encryption.

  • Unscored —
    CVE-1999-0677

    The WebRamp web administration utility has a default password.