Skip to content
OpenAdvisories

Archive

March 2000

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2270
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

70 results · Feed

  • Unscored —
    CVE-1999-0806 Public exploit

    Buffer overflow in Solaris dtprintinfo program.

  • Unscored —

    NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a larg…

  • Unscored —

    Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].

  • Unscored —

    Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.

  • Unscored —
    CVE-1999-0778 Public exploit

    Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query …

  • Unscored —

    iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.

  • Unscored —

    FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file …

  • Unscored —
    CVE-1999-0893 Public exploit

    userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.

  • Unscored —

    The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.

  • Unscored —
    CVE-1999-0996 Public exploit

    Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.

  • Unscored —
    CVE-1999-0789 Public exploit

    Buffer overflow in AIX ftpd in the libc library.

  • Unscored —

    Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCA…

  • Unscored —
    CVE-1999-0746 Public exploit

    A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to co…

  • Unscored —

    Cisco Cache Engine allows an attacker to replace content in the cache.

  • Unscored —

    FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.

  • Unscored —
    CVE-1999-0896 Public exploit EPSS 13%

    Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands…

  • Unscored —
    CVE-1999-0920 Public exploit EPSS 32%

    Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD co…

  • Unscored —

    A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.

  • Unscored —
    CVE-1999-0908 Public exploit

    Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result …

  • Unscored —
    CVE-1999-0786 Public exploit

    The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable a…

  • Unscored —
    CVE-1999-0678 Public exploit EPSS 31%

    A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to rea…

  • Unscored —

    WebTrends software stores account names and passwords in a file which does not have restricted access permissions.

  • Unscored —
    CVE-1999-0931 Public exploit

    Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.

  • Unscored —
    CVE-1999-0733 Public exploit

    Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.

  • Unscored —

    Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental…

  • Unscored —

    Buffer overflow in Dosemu Slang library in Linux.

  • Unscored —

    The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.

  • Unscored —
    CVE-2000-0121 Public exploit

    The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdire…

  • Unscored —
    CVE-2000-0156 Public exploit EPSS 13%

    Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security …

  • Unscored —

    Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.

  • Unscored —

    The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.

  • Unscored —
    CVE-2000-0026 Public exploit

    Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password …

  • Unscored —
    CVE-2000-0025 EPSS 35%

    IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual direct…

  • Unscored —
    CVE-2000-0177 Public exploit

    DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.

  • Unscored —

    AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed …

  • Unscored —

    ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more i…

  • Unscored —
    CVE-2000-0161 EPSS 10%

    Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows r…

  • Unscored —

    Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery …

  • Unscored —

    UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.

  • Unscored —

    Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.