Archive
February 2000
Vulnerabilities first published in this month (UTC), newest first.
377 results · Feed
-
Unscored —
Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.
-
Unscored —
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
-
Unscored —
Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
-
Unscored —CVE-1999-0451 Public exploit
Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
-
Unscored —CVE-1999-0381 Public exploit
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root acc…
-
Unscored —
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through …
-
Unscored —
Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using…
-
Unscored —
An SSH server allows authentication through the .rhosts file.
-
Unscored —CVE-1999-0857 Public exploit
FreeBSD gdc program allows local users to modify files via a symlink attack.
-
Unscored —
Attackers can do a denial of service of IRC by crashing the server.
-
Unscored —
A DNS server allows zone transfers.
-
Unscored —
An application-critical Windows NT registry key has an inappropriate value.
-
Unscored —
An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to bec…
-
Unscored —
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access cont…
-
Unscored —
A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content suc…
-
Unscored —
A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.
-
Unscored —
A filter in a router or firewall allows unusual fragmented packets.
-
Unscored —
The discard service is running.
-
Unscored —
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
-
Unscored —
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is i…
-
Unscored —
finger 0@host on some systems may print information on some user accounts.
-
Unscored —
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number o…
-
Unscored —
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP s…
-
Unscored —
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outd…
-
Unscored —
Buffer overflow in mstm in HP-UX allows local users to gain root access.
-
Unscored —
Linux bdash game has a buffer overflow that allows local users to gain root access.
-
Unscored —CVE-1999-0845 Public exploit
Buffer overflow in SCO su program allows local users to gain root access via a long username.
-
Unscored —
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
-
Unscored —
Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, …
-
Unscored —CVE-1999-0092 Public exploit
Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
-
Unscored —
Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
-
Unscored —
A system-critical Windows NT registry key has inappropriate permissions.
-
Unscored —CVE-1999-0885 Public exploit
Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.
-
Unscored —
A superfluous NFS server is running, but it is not importing or exporting any file systems.
-
Unscored —CVE-1999-0673 Public exploit
Buffer overflow in ALMail32 POP3 client via From: or To: headers.
-
Unscored —
Finger redirection allows finger bombs.
-
Unscored —
A NETBIOS/SMB share password is the default, null, or missing.
-
Unscored —CVE-1999-0431 Public exploit
Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
-
Unscored —
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory…
-
Unscored —
A Unix account with a name other than "root" has UID 0, i.e. root privileges.