Skip to content
OpenAdvisories

Archive

February 2000

Vulnerabilities first published in this month (UTC), newest first.

← January 2000 2000 / February March 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4338
  5. 5 
  6. 6 
  7. 7 
  8. 827
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 151
  16. 164
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 237
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
All Critical High Medium Low Exploited only Public exploit

377 results · Feed

  • Unscored —
    CVE-1999-0076

    Buffer overflow in wu-ftp from PASV command causes a core dump.

  • Unscored —
    CVE-1999-0559

    A system-critical Unix file or directory has inappropriate permissions.

  • Unscored —
    CVE-1999-0004

    MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

  • Unscored —
    CVE-1999-0712

    A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-read…

  • Unscored —
    CVE-1999-0232

    Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.

  • Unscored —
    CVE-1999-0459

    Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.

  • Unscored —
    CVE-1999-0657

    WinGate is being used.

  • Unscored —
    CVE-1999-0821 Public exploit

    FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.

  • Unscored —
    CVE-1999-0572

    .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Hors…

  • Unscored —
    CVE-1999-0529

    A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.…

  • Unscored —
    CVE-1999-0509 EPSS 33%

    Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote at…

  • Unscored —
    CVE-1999-0560

    A system-critical Windows NT file or directory has inappropriate permissions.

  • Unscored —
    CVE-1999-0229

    Denial of service in Windows NT IIS server using ..\..

  • Unscored —
    CVE-1999-0872

    Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a cronta…

  • Unscored —
    CVE-1999-0242

    Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.

  • Unscored —
    CVE-1999-0283 Public exploit

    The Java Web Server would allow remote users to obtain the source code for CGI programs.

  • Unscored —
    CVE-1999-0499

    NETBIOS share information may be published through SNMP registry keys in NT.

  • Unscored —
    CVE-1999-0216

    Denial of service of inetd on Linux through SYN and RST packets.

  • Unscored —
    CVE-1999-0739 EPSS 29%

    The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

  • Unscored —
    CVE-1999-0610

    An incorrect configuration of the Webcart CGI program could disclose private information.

  • Unscored —
    CVE-1999-0317

    Buffer overflow in Linux su command gives root access to local users.

  • Unscored —
    CVE-1999-0750 Public exploit

    Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the u…

  • Unscored —
    CVE-1999-1002

    Netscape Navigator uses weak encryption for storing a user's Netscape mail password.

  • Unscored —
    CVE-1999-1003

    War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.

  • Unscored —
    CVE-1999-1006

    Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parame…

  • Unscored —
    CVE-1999-1009

    The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to…

  • Unscored —
    CVE-2000-0035 Public exploit

    resend command in Majordomo allows local users to gain privileges via shell metacharacters.

  • Unscored —
    CVE-2000-0058

    Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve ema…

  • Unscored —
    CVE-2000-0078

    The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PAT…

  • Unscored —
    CVE-2000-0019

    IMail POP3 daemon uses weak encryption, which allows local users to read files.

  • Unscored —
    CVE-2000-0046 Public exploit

    Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ…

  • Unscored —
    CVE-2000-0055

    Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.

  • Unscored —
    CVE-2000-0059 Public exploit EPSS 11%

    PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, whi…

  • Unscored —
    CVE-2000-0085 EPSS 15%

    Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code …

  • Unscored —
    CVE-2000-0008

    FTPPro allows local users to read sensitive information, which is stored in plain text.

  • Unscored —
    CVE-2000-0068

    daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to mod…

  • Unscored —
    CVE-2000-0049 Public exploit

    Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.

  • Unscored —
    CVE-2000-0069

    The recover program in Solstice Backup allows local users to restore sensitive files.

  • Unscored —
    CVE-2000-0028 Public exploit EPSS 23%

    Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the…

  • Unscored —
    CVE-2000-0005

    HP-UX aserver program allows local users to gain privileges via a symlink attack.