25 April 2000

34 results · Feed

• Unscored —
  CVE-1999-0889

  Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has…

  Apr 25, 2000
• Unscored —
  CVE-1999-0895

  Firewall-1 does not properly restrict access to LDAP attributes.

  Apr 25, 2000
• Unscored —
  CVE-1999-0203

  In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "…

  Apr 25, 2000
• Unscored —
  CVE-1999-0780

  KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.

  Apr 25, 2000
• Unscored —
  CVE-1999-0897

  iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  Apr 25, 2000
• Unscored —
  CVE-1999-0803 Public exploit

  The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.

  Apr 25, 2000
• Unscored —
  CVE-1999-0782

  KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.

  Apr 25, 2000
• Unscored —
  CVE-1999-0950 Public exploit

  Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands th…

  Apr 25, 2000
• Unscored —
  CVE-1999-0957

  MajorCool mj_key_cache program allows local users to modify files via a symlink attack.

  Apr 25, 2000
• Unscored —
  CVE-1999-0824

  A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, poten…

  Apr 25, 2000
• Unscored —
  CVE-1999-0781

  KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search …

  Apr 25, 2000
• Unscored —
  CVE-1999-0997 Public exploit

  wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted…

  Apr 25, 2000
• Unscored —
  CVE-1999-1007 Public exploit

  Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo f…

  Apr 25, 2000
• Unscored —
  CVE-1999-1005 Public exploit

  Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) …

  Apr 25, 2000
• Unscored —
  CVE-1999-1010

  An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.

  Apr 25, 2000
• Unscored —
  CVE-2000-0165 Public exploit EPSS 11%

  The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.

  Apr 25, 2000
• Unscored —
  CVE-2000-0206 Public exploit

  The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable p…

  Apr 25, 2000
• Unscored —
  CVE-2000-0012 Public exploit

  Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.

  Apr 25, 2000
• Unscored —
  CVE-2000-0223 Public exploit

  Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privilege…

  Apr 25, 2000
• Unscored —
  CVE-2000-0010 Public exploit EPSS 11%

  WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.

  Apr 25, 2000
• Unscored —
  CVE-2000-0050

  The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.

  Apr 25, 2000
• Unscored —
  CVE-2000-0024 EPSS 12%

  IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-p…

  Apr 25, 2000
• Unscored —
  CVE-2000-0043 Public exploit

  Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.

  Apr 25, 2000
• Unscored —
  CVE-2000-0020

  DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.

  Apr 25, 2000
• Unscored —
  CVE-2000-0051

  The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmittin…

  Apr 25, 2000
• Unscored —
  CVE-2000-0184

  Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers …

  Apr 25, 2000
• Unscored —
  CVE-2000-0192 Public exploit

  The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to …

  Apr 25, 2000
• Unscored —
  CVE-2000-0112

  The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boo…

  Apr 25, 2000
• Unscored —
  CVE-2000-0014 Public exploit

  Denial of service in Savant web server via a null character in the requested URL.

  Apr 25, 2000
• Unscored —
  CVE-2000-0070

  NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LP…

  Apr 25, 2000
• Unscored —
  CVE-2000-0185 Public exploit

  RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.

  Apr 25, 2000
• Unscored —
  CVE-2000-0042

  Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long …

  Apr 25, 2000
• Unscored —
  CVE-2000-0033

  InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.

  Apr 25, 2000
• Unscored —
  CVE-2000-0181

  Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determi…

  Apr 25, 2000