cpe:/o:bsdi:bsd_os:3.1 cpe:/o:freebsd:freebsd:1.0 cpe:/o:freebsd:freebsd:1.1 cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:1.2 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.1 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.6.1 cpe:/o:freebsd:freebsd:2.1.7 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:openbsd:openbsd:2.3 cpe:/o:openbsd:openbsd:2.4 CVE-1999-0001 1999-12-30T00:00:00.000-05:00 2010-12-16T00:00:00.000-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://www.openbsd.org/errata23.html#tcpfix ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. cpe:/o:bsdi:bsd_os:1.1 cpe:/o:caldera:openlinux:1.2 cpe:/o:redhat:linux:2.0 cpe:/o:redhat:linux:2.1 cpe:/o:redhat:linux:3.0.3 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 CVE-1999-0002 1998-10-12T00:00:00.000-04:00 2009-01-26T00:00:00.000-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19981006-01-I CIAC J-006 BID 121 Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. cpe:/a:tritreal:ted_cde:4.3 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.02 cpe:/o:hp:hp-ux:10.03 cpe:/o:hp:hp-ux:11.00 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0003 1998-04-01T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19981101-01-A SGI 19981101-01-PX BID 122 Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). cpe:/a:hp:dtmail cpe:/a:university_of_washington:pine:4.02 cpe:/o:sco:unixware:7.0 CVE-1999-0004 1997-12-16T00:00:00.000-05:00 2018-10-12T17:29:02.120-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MS MS98-008 MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. cpe:/a:netscape:messaging_server:3.55 cpe:/a:university_of_washington:imap:10.234 CVE-1999-0005 1998-07-20T00:00:00.000-04:00 2008-09-09T08:33:31.117-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00177 BID 130 Arbitrary command execution via IMAP buffer overflow in authenticate command. cpe:/a:qualcomm:qpopper:2.4 CVE-1999-0006 1998-07-14T00:00:00.000-04:00 2008-09-09T08:33:31.180-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19980801-01-I BID 133 Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. cpe:/a:c2net:stonghold_web_server:2.0.1 cpe:/a:c2net:stonghold_web_server:2.2 cpe:/a:c2net:stonghold_web_server:2.3 cpe:/a:microsoft:exchange_server:5.5 cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:site_server:3.0 cpe:/a:netscape:certificate_server:1.0:patch1 cpe:/a:netscape:collabra_server:3.5.2 cpe:/a:netscape:directory_server:1.3:patch5 cpe:/a:netscape:directory_server:3.1:patch1 cpe:/a:netscape:directory_server:3.12 cpe:/a:netscape:enterprise_server:2.0 cpe:/a:netscape:enterprise_server:3.0.1b cpe:/a:netscape:enterprise_server:3.5.1 cpe:/a:netscape:fasttrack_server:3.01b cpe:/a:netscape:messaging_server:3.54 cpe:/a:netscape:proxy_server:3.5.1 cpe:/a:open_market:secure_webserver:2.1 cpe:/a:ssleay:ssleay:0.6.6 cpe:/a:ssleay:ssleay:0.8.1 cpe:/a:ssleay:ssleay:0.9 CVE-1999-0007 1998-06-26T00:00:00.000-04:00 2018-10-12T17:29:02.277-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS98-002 Information from SSL-encrypted sessions via PKCS #1. cpe:/o:hp:hp-ux:10.34 cpe:/o:hp:hp-ux:11.00 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0008 1998-06-08T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00170 Buffer overflow in NIS+, in Sun's rpc.nisd program. cpe:/a:data_general:dg_ux:5.4_3.0 cpe:/a:data_general:dg_ux:5.4_3.1 cpe:/a:data_general:dg_ux:5.4_4.1 cpe:/a:data_general:dg_ux:5.4_4.11 cpe:/a:isc:bind:4.9.6 cpe:/a:isc:bind:8.1 cpe:/a:isc:bind:8.1.1 cpe:/o:bsdi:bsd_os:2.0 cpe:/o:bsdi:bsd_os:2.0.1 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:caldera:openlinux:1.0 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 cpe:/o:nec:asl_ux_4800:64 cpe:/o:netbsd:netbsd:1.0 cpe:/o:netbsd:netbsd:1.1 cpe:/o:netbsd:netbsd:1.2 cpe:/o:netbsd:netbsd:1.2.1 cpe:/o:netbsd:netbsd:1.3 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:open_desktop:5.0 cpe:/o:sco:unixware:2.1 cpe:/o:sco:unixware:7.0 cpe:/o:sgi:irix:3.2 cpe:/o:sgi:irix:3.3 cpe:/o:sgi:irix:3.3.1 cpe:/o:sgi:irix:3.3.2 cpe:/o:sgi:irix:3.3.3 cpe:/o:sgi:irix:4.0 cpe:/o:sgi:irix:4.0.1 cpe:/o:sgi:irix:4.0.1t cpe:/o:sgi:irix:4.0.2 cpe:/o:sgi:irix:4.0.3 cpe:/o:sgi:irix:4.0.4 cpe:/o:sgi:irix:4.0.4b cpe:/o:sgi:irix:4.0.4t cpe:/o:sgi:irix:4.0.5 cpe:/o:sgi:irix:4.0.5_iop cpe:/o:sgi:irix:4.0.5_ipr cpe:/o:sgi:irix:4.0.5a cpe:/o:sgi:irix:4.0.5d cpe:/o:sgi:irix:4.0.5e cpe:/o:sgi:irix:4.0.5f cpe:/o:sgi:irix:4.0.5g cpe:/o:sgi:irix:4.0.5h cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0009 1998-04-08T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19980603-01-PX SUN 00180 BID 134 HP HPSBUX9808-083 Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. cpe:/a:data_general:dg_ux:y2k_patchr4.11mu05 cpe:/a:data_general:dg_ux:y2k_patchr4.12mu03 cpe:/a:data_general:dg_ux:y2k_patchr4.20mu01 cpe:/a:data_general:dg_ux:y2k_patchr4.20mu02 cpe:/a:data_general:dg_ux:y2k_patchr4.20mu03 cpe:/a:isc:bind:4.9 cpe:/a:isc:bind:8 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 cpe:/o:nec:asl_ux_4800:11 cpe:/o:nec:asl_ux_4800:13 cpe:/o:netbsd:netbsd:1.3 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:unix:3.2v4 cpe:/o:sco:unixware:2.1 cpe:/o:sco:unixware:7.0 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.6 CVE-1999-0010 1998-04-08T00:00:00.000-04:00 2018-10-30T12:26:22.717-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 19980603-01-PX HP HPSBUX9808-083 Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. cpe:/a:data_general:dg_ux:y2k_patchr4.11mu05 cpe:/a:data_general:dg_ux:y2k_patchr4.12mu03 cpe:/a:data_general:dg_ux:y2k_patchr4.20mu01 cpe:/a:data_general:dg_ux:y2k_patchr4.20mu02 cpe:/a:data_general:dg_ux:y2k_patchr4.20mu03 cpe:/a:isc:bind:4.9 cpe:/a:isc:bind:8 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 cpe:/o:nec:asl_ux_4800:11 cpe:/o:nec:asl_ux_4800:13 cpe:/o:netbsd:netbsd:1.3 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:unix:3.2v4 cpe:/o:sco:unixware:2.1 cpe:/o:sco:unixware:7.0 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.6 CVE-1999-0011 1998-04-08T00:00:00.000-04:00 2018-10-30T12:26:22.717-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 19980603-01-PX SUN 00180 HP HPSBUX9808-083 Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. cpe:/a:microsoft:frontpage cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:personal_web_server:4.0 cpe:/a:netscape:enterprise_server:3.0 cpe:/a:netscape:fasttrack_server:2.01 cpe:/a:netscape:fasttrack_server:3.01 CVE-1999-0012 1998-02-06T00:00:00.000-05:00 2008-09-09T08:33:31.947-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. cpe:/a:ssh:ssh:1.2.0 cpe:/a:ssh:ssh:1.2.1 cpe:/a:ssh:ssh:1.2.2 cpe:/a:ssh:ssh:1.2.3 cpe:/a:ssh:ssh:1.2.4 cpe:/a:ssh:ssh:1.2.5 cpe:/a:ssh:ssh:1.2.6 cpe:/a:ssh:ssh:1.2.7 cpe:/a:ssh:ssh:1.2.8 cpe:/a:ssh:ssh:1.2.9 cpe:/a:ssh:ssh:1.2.10 cpe:/a:ssh:ssh:1.2.11 cpe:/a:ssh:ssh:1.2.12 cpe:/a:ssh:ssh:1.2.13 cpe:/a:ssh:ssh:1.2.14 CVE-1999-0013 1998-01-22T00:00:00.000-05:00 2008-09-09T08:33:32.007-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user. cpe:/a:cde:cde:1.01 cpe:/a:cde:cde:1.01_x86 cpe:/a:cde:cde:1.02 cpe:/a:cde:cde:1.02_x86 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:vvos:10.24 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 CVE-1999-0014 1998-01-21T00:00:00.000-05:00 2008-09-09T08:33:32.087-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00185 HP HPSBUX9801-075 Unauthorized privileged access or denial of service via dtappgather program in CDE. cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:9.01 cpe:/o:hp:hp-ux:9.03 cpe:/o:hp:hp-ux:9.04 cpe:/o:hp:hp-ux:9.05 cpe:/o:hp:hp-ux:9.07 cpe:/o:hp:hp-ux:10 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:11.00 cpe:/o:microsoft:windows_95:0.0a cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:3.5.1:sp1 cpe:/o:microsoft:windows_nt:3.5.1:sp2 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:netbsd:netbsd:1.0 cpe:/o:netbsd:netbsd:1.1 cpe:/o:netbsd:netbsd:1.2 cpe:/o:netbsd:netbsd:1.2.1 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 CVE-1999-0015 1997-12-16T00:00:00.000-05:00 2018-05-02T21:29:00.707-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov Teardrop IP denial of service. cpe:/a:gnu:inet:5.01 cpe:/a:microsoft:winsock:2.0 cpe:/o:cisco:ios:7000 cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:9.01 cpe:/o:hp:hp-ux:9.03 cpe:/o:hp:hp-ux:9.04 cpe:/o:hp:hp-ux:9.05 cpe:/o:hp:hp-ux:9.07 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:11.00 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:netbsd:netbsd:1.0 cpe:/o:netbsd:netbsd:1.1 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 CVE-1999-0016 1997-12-01T00:00:00.000-05:00 2008-09-09T08:33:32.243-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX9801-076 Land IP denial of service. cpe:/a:gnu:inet:5.01 cpe:/a:gnu:inet:6.01 cpe:/a:gnu:inet:6.02 cpe:/a:washington_university:wu-ftpd:2.4 cpe:/o:caldera:openlinux:1.2 cpe:/o:freebsd:freebsd:1.0 cpe:/o:freebsd:freebsd:1.1 cpe:/o:freebsd:freebsd:1.2 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.7 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 cpe:/o:netbsd:netbsd:1.0 cpe:/o:netbsd:netbsd:1.1 cpe:/o:netbsd:netbsd:1.2 cpe:/o:netbsd:netbsd:1.2.1 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:5.0.4 cpe:/o:sco:unixware:2.1 cpe:/o:siemens:reliant_unix cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.4::x86 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5::x86 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.5.1::x86 CVE-1999-0017 1997-12-10T00:00:00.000-05:00 2008-09-09T08:33:32.320-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0018 1997-12-05T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 127 Buffer overflow in statd allows root privileges. cpe:/a:data_general:dg_ux:4.11 cpe:/a:ncr:mp-ras:2.03 cpe:/a:ncr:mp-ras:3.0 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:nighthawk:cx_ux cpe:/o:nighthawk:powerux cpe:/o:sco:open_desktop:2 cpe:/o:sco:open_desktop:3 cpe:/o:sco:openserver:3.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:unixware:2 cpe:/o:sgi:irix:6.1 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.4::x86 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5::x86 CVE-1999-0019 1996-04-24T00:00:00.000-04:00 2008-09-09T08:33:32.460-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SUN 00135 Delete or create a file via rpc.statd, due to invalid information. CVE-1999-0020 1999-01-01T00:00:00.000-05:00 2008-09-09T08:33:34.853-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. cpe:/a:muhammad_a._muquit:wwwcount:2.3 CVE-1999-0021 1997-11-05T00:00:00.000-05:00 2008-09-09T08:33:34.930-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 128 Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program. cpe:/o:bsdi:bsd_os:1.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:hp:hp-ux:10.00 cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sun:solaris:4.1.3 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 CVE-1999-0022 1996-07-03T00:00:00.000-04:00 2018-10-30T12:26:22.653-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00179 Local user gains root privileges via buffer overflow in rdist, via expstr() function. cpe:/a:inet:inet:5.01 cpe:/a:inet:inet:6.01 cpe:/o:bsdi:bsd_os cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.2 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:sco:internet_faststart:1.0 cpe:/o:sco:open_desktop:2.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:2.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 cpe:/o:sco:tcp_ip:1.2.0 cpe:/o:sco:tcp_ip:1.2.1 cpe:/o:sco:unixware:2.0 cpe:/o:sco:unixware:2.1 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0023 1996-07-24T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Local user gains root privileges via buffer overflow in rdist, via lookup() function. cpe:/a:isc:bind:4.9.5 cpe:/a:isc:bind:8.1 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:bsdi:bsd_os:3.0 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:nec:asl_ux_4800:64 cpe:/o:nec:ews-ux_v:4.2 cpe:/o:nec:ews-ux_v:4.2mp cpe:/o:nec:up-ux_v:4.2mp cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:unix:3.2v4 cpe:/o:sco:unixware:2.1 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0024 1997-08-13T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 DNS cache poisoning via BIND, by predictable query IDs. cpe:/o:sgi:irix CVE-1999-0025 1997-07-16T00:00:00.000-04:00 2018-05-02T21:29:00.957-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1997-21 CERT-VN VU#20851 BID 346 XF df-bo(440) root privileges via buffer overflow in df command on SGI IRIX systems. cpe:/o:sgi:irix CVE-1999-0026 1997-07-16T00:00:00.000-04:00 2008-09-09T08:33:35.307-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS root privileges via buffer overflow in pset command on SGI IRIX systems. cpe:/o:sgi:irix CVE-1999-0027 1997-07-16T00:00:00.000-04:00 2009-02-25T00:00:00.000-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS root privileges via buffer overflow in eject command on SGI IRIX systems. cpe:/o:sgi:irix CVE-1999-0028 1997-07-16T00:00:00.000-04:00 2008-09-09T08:33:35.447-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS root privileges via buffer overflow in login/scheme command on SGI IRIX systems. cpe:/o:sgi:irix CVE-1999-0029 1997-07-16T00:00:00.000-04:00 2008-09-09T08:33:35.523-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS root privileges via buffer overflow in ordist command on SGI IRIX systems. cpe:/o:sgi:irix CVE-1999-0030 1997-07-16T00:00:00.000-04:00 2008-09-09T08:33:35.587-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS root privileges via buffer overflow in xlock command on SGI IRIX systems. cpe:/a:microsoft:ie:3.0 cpe:/a:microsoft:ie:4.0 cpe:/a:netscape:communicator:2.0 cpe:/a:netscape:communicator:3.0 cpe:/a:netscape:communicator:4.0 CVE-1999-0031 1997-07-08T00:00:00.000-04:00 2008-09-09T08:33:35.790-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX9707-065 JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability. cpe:/o:bsdi:bsd_os:2.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:next:nextstep:4.0 cpe:/o:next:nextstep:4.1 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 CVE-1999-0032 1996-10-25T00:00:00.000-04:00 2008-09-09T08:33:35.867-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19980402-01-PX CIAC I-042 BID 707 Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option. cpe:/a:ncr:mp-ras:3.0 cpe:/o:ibm:aix cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:3.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:unixware:2.1 cpe:/o:sco:unixware:3.2v4 cpe:/o:sgi:irix cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.4::x86 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5::x86 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.5.1::x86 CVE-1999-0033 1997-06-12T00:00:00.000-04:00 2008-09-09T08:33:35.930-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Command execution in Sun systems via buffer overflow in the at program. cpe:/a:larry_wall:perl:5.3 cpe:/a:sgi:freeware:1.0 cpe:/a:sgi:freeware:2.0 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:bsdi:bsd_os:3.0 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 CVE-1999-0034 1997-05-29T00:00:00.000-04:00 2008-09-09T08:33:36.007-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. cpe:/a:gnu:inet:5.01 cpe:/o:sgi:irix CVE-1999-0035 1997-05-29T00:00:00.000-04:00 2008-09-09T08:33:36.087-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0036 1997-05-26T00:00:00.000-04:00 2018-05-02T21:29:01.083-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19970508-02-PX CIAC H-106 XF sgi-lockout(557) IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:redhat:linux CVE-1999-0037 1997-05-21T00:00:00.000-04:00 2008-09-09T08:33:36.227-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. cpe:/a:data_general:dg_ux:1.0 cpe:/a:data_general:dg_ux:2.0 cpe:/a:data_general:dg_ux:3.0 cpe:/a:data_general:dg_ux:4.0 cpe:/a:data_general:dg_ux:5.0 cpe:/a:data_general:dg_ux:6.0 cpe:/a:data_general:dg_ux:7.0 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:debian:debian_linux:0.93 cpe:/o:debian:debian_linux:1.1 cpe:/o:debian:debian_linux:1.2 cpe:/o:debian:debian_linux:1.3 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.08 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:10.34 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0038 1997-04-26T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in xlock program allows local users to execute commands as root. cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 CVE-1999-0039 1997-05-06T00:00:00.000-04:00 2018-05-02T21:29:01.223-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS SGI 19970501-02-PX CERT CA-1997-12 BID 374 XF http-sgi-webdist(333) webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter. cpe:/o:bsdi:bsd_os:2.0 cpe:/o:bsdi:bsd_os:2.0.1 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:9.01 cpe:/o:hp:hp-ux:9.10 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.08 cpe:/o:hp:hp-ux:10.09 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:10.34 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:nec:asl_ux_4800:64 cpe:/o:nec:ews-ux_v:4.2 cpe:/o:nec:ews-ux_v:4.2mp cpe:/o:nec:up-ux_v:4.2mp cpe:/o:sgi:irix:4.0 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0040 1997-05-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. cpe:/a:gnu:libc:5.0.9 cpe:/a:gnu:libc:5.2.18 cpe:/a:gnu:libc:5.3.12 cpe:/o:cray:unicos:1.5::mk cpe:/o:cray:unicos:9.0 cpe:/o:cray:unicos:9.2 cpe:/o:cray:unicos_max:1.3 cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:redhat:linux:4.0 cpe:/o:slackware:slackware_linux:3.1 CVE-1999-0041 1997-02-13T00:00:00.000-05:00 2008-09-09T08:33:36.507-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in NLS (Natural Language Service). cpe:/a:university_of_washington:imap:4 cpe:/a:university_of_washington:pop:3 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:bsdi:bsd_os:3.0 cpe:/o:caldera:openlinux:1.0 cpe:/o:ibm:aix:4.2.1 cpe:/o:redhat:linux:2.0 cpe:/o:redhat:linux:4.0 CVE-1999-0042 1997-04-07T00:00:00.000-04:00 2008-09-09T08:33:36.570-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in University of Washington's implementation of IMAP and POP servers. cpe:/a:isc:inn:1.4sec cpe:/a:isc:inn:1.4sec2 cpe:/a:isc:inn:1.4unoff3 cpe:/a:isc:inn:1.4unoff4 cpe:/a:isc:inn:1.5 cpe:/a:netscape:news_server:1.1 cpe:/h:nec:goah_intrasv:1.1 cpe:/h:nec:goah_networksv:1.2 cpe:/h:nec:goah_networksv:2.2 cpe:/h:nec:goah_networksv:3.1 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:caldera:openlinux:1.0 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 CVE-1999-0043 1996-12-04T00:00:00.000-05:00 2008-09-09T08:33:36.647-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 CVE-1999-0044 1996-12-03T00:00:00.000-05:00 2008-09-09T08:33:36.743-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19970301-01-P fsdump command in IRIX allows local users to obtain root access by modifying sensitive files. cpe:/a:apache:http_server:0.8.11 cpe:/a:apache:http_server:0.8.14 cpe:/a:apache:http_server:1.0 cpe:/a:apache:http_server:1.0.2 cpe:/a:apache:http_server:1.0.3 cpe:/a:apache:http_server:1.0.5 cpe:/a:apache:http_server:1.1 cpe:/a:netscape:commerce_server:1.12 cpe:/a:netscape:communications_server:1.1 cpe:/a:netscape:communications_server:1.12 cpe:/a:netscape:enterprise_server:2.0a CVE-1999-0045 1996-12-10T00:00:00.000-05:00 2008-09-09T08:33:36.807-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 List of arbitrary files on Web host via nph-test-cgi script. cpe:/a:data_general:dg_ux:1.0 cpe:/a:data_general:dg_ux:2.0 cpe:/a:data_general:dg_ux:3.0 cpe:/a:data_general:dg_ux:4.0 cpe:/o:bsdi:bsd_os:1.1 cpe:/o:bsdi:bsd_os:2.0 cpe:/o:bsdi:bsd_os:2.0.1 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:debian:debian_linux:0.93 cpe:/o:digital:ultrix:2.2 cpe:/o:digital:ultrix:3.0 cpe:/o:digital:ultrix:4.0 cpe:/o:digital:ultrix:4.1 cpe:/o:digital:ultrix:4.2 cpe:/o:digital:ultrix:4.3 cpe:/o:digital:ultrix:4.3a cpe:/o:digital:ultrix:4.4 cpe:/o:digital:ultrix:4.5 cpe:/o:digital:unix:3.2g cpe:/o:digital:unix:4.0 cpe:/o:digital:unix:4.0a cpe:/o:digital:unix:4.0b cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.08 cpe:/o:hp:hp-ux:10.09 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:10.34 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:netbsd:netbsd:1.0 cpe:/o:netbsd:netbsd:1.1 cpe:/o:next:nextstep:1.0 cpe:/o:next:nextstep:1.0a cpe:/o:next:nextstep:2.0 cpe:/o:next:nextstep:2.1 cpe:/o:next:nextstep:3.0 cpe:/o:next:nextstep:3.1 cpe:/o:next:nextstep:3.2 cpe:/o:next:nextstep:3.3 cpe:/o:next:nextstep:4.0 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0046 1997-02-06T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow of rlogin program using TERM environmental variable. cpe:/a:eric_allman:sendmail:8.8.3 cpe:/a:eric_allman:sendmail:8.8.4 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:caldera:openlinux:1.0 CVE-1999-0047 1997-01-28T00:00:00.000-05:00 2008-09-09T08:33:36.947-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 685 MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. cpe:/a:debian:netkit:0.07 cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:nec:asl_ux_4800 cpe:/o:nec:ews-ux_v cpe:/o:nec:up-ux_v CVE-1999-0048 1997-01-27T00:00:00.000-05:00 2008-09-09T08:33:37.007-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00147 Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges. cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 CVE-1999-0049 1997-01-08T00:00:00.000-05:00 2008-09-09T08:33:37.087-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Csetup under IRIX allows arbitrary file creation or overwriting. cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:9.01 cpe:/o:hp:hp-ux:9.03 cpe:/o:hp:hp-ux:9.04 cpe:/o:hp:hp-ux:9.05 cpe:/o:hp:hp-ux:9.06 cpe:/o:hp:hp-ux:9.07 cpe:/o:hp:hp-ux:9.08 cpe:/o:hp:hp-ux:9.09 cpe:/o:hp:hp-ux:9.10 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 CVE-1999-0050 1996-12-01T00:00:00.000-05:00 2008-09-09T08:33:37.147-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in HP-UX newgrp program. cpe:/a:globetrotter:flexlm:4.0 cpe:/a:globetrotter:flexlm:4.1 cpe:/a:globetrotter:flexlm:5.0 cpe:/a:sgi:license_oeo:3.0 cpe:/a:sgi:license_oeo:3.1 cpe:/a:sgi:license_oeo:3.1.1 cpe:/o:sgi:irix:3.3.2 cpe:/o:sgi:irix:3.3.3 cpe:/o:sgi:irix:4.0 cpe:/o:sgi:irix:4.0.1 cpe:/o:sgi:irix:4.0.1t cpe:/o:sgi:irix:4.0.2 cpe:/o:sgi:irix:4.0.3 cpe:/o:sgi:irix:4.0.4 cpe:/o:sgi:irix:4.0.4b cpe:/o:sgi:irix:4.0.4t cpe:/o:sgi:irix:4.0.5 cpe:/o:sgi:irix:4.0.5_iop cpe:/o:sgi:irix:4.0.5_ipr cpe:/o:sgi:irix:4.0.5a cpe:/o:sgi:irix:4.0.5d cpe:/o:sgi:irix:4.0.5e cpe:/o:sgi:irix:4.0.5f cpe:/o:sgi:irix:4.0.5g cpe:/o:sgi:irix:4.0.5h cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:4.1.4jl cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0051 1997-01-06T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. cpe:/o:bsdi:bsd_os:4.0 cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:openbsd:openbsd:2.2 cpe:/o:openbsd:openbsd:2.3 cpe:/o:openbsd:openbsd:2.4 CVE-1999-0052 1998-11-04T00:00:00.000-05:00 2018-05-02T21:29:01.350-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov XF freebsd-ip-frag-dos(1389) IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. cpe:/o:freebsd:freebsd:6.2:stable CVE-1999-0053 1998-10-13T00:00:00.000-04:00 2008-09-05T16:16:20.580-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 TCP RST denial of service in FreeBSD. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0054 1998-06-10T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SUN 00171 Sun's ftpd daemon can be subjected to a denial of service. cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.1 cpe:/o:ibm:aix:4.3.2 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0055 1998-05-14T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00172 AIXAPAR IX80543 Buffer overflows in Sun libnsl allow root access. cpe:/o:sun:sunos cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0056 1998-09-09T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00174 Buffer overflow in Sun's ping program can give root access to local users. cpe:/a:eric_allman:vacation cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.09 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:vvos cpe:/o:ibm:aix cpe:/o:sun:solaris cpe:/o:sun:sunos CVE-1999-0057 1998-11-16T00:00:00.000-05:00 2008-09-09T08:33:39.103-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX9811-087 Vacation program allows command execution by remote users through a sendmail command. cpe:/a:php:php:1.0 cpe:/a:php:php:2.0b10 CVE-1999-0058 1997-04-17T00:00:00.000-04:00 2008-09-09T08:33:39.163-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 712 Buffer overflow in PHP cgi program, php.cgi allows shell access. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 CVE-1999-0059 1997-07-14T00:00:00.000-04:00 2018-05-02T21:29:01.473-04:00 7.1 NETWORK MEDIUM NONE COMPLETE NONE NONE http://nvd.nist.gov BID 353 XF irix-fam(325) IRIX fam service allows an attacker to obtain a list of all files on the server. cpe:/h:lucent:ascend_max_router:1.0 cpe:/h:lucent:ascend_max_router:2.0 cpe:/h:lucent:ascend_max_router:3.0 cpe:/h:lucent:ascend_max_router:4.0 cpe:/h:lucent:ascend_max_router:5.0 cpe:/h:lucent:ascend_pipeline_router:1.0 cpe:/h:lucent:ascend_pipeline_router:2.0 cpe:/h:lucent:ascend_pipeline_router:3.0 cpe:/h:lucent:ascend_pipeline_router:4.0 cpe:/h:lucent:ascend_pipeline_router:5.0 cpe:/h:lucent:ascend_pipeline_router:6.0 cpe:/h:lucent:ascend_tnt_router:1.0 cpe:/h:lucent:ascend_tnt_router:2.0 CVE-1999-0060 1998-03-16T00:00:00.000-05:00 2008-09-09T08:33:39.307-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool. cpe:/o:bsdi:bsd_os cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:openbsd:openbsd:2.1 CVE-1999-0061 1997-10-02T00:00:00.000-04:00 2008-09-09T08:33:39.383-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). cpe:/o:openbsd:openbsd:2.3 CVE-1999-0062 1998-08-03T00:00:00.000-04:00 2008-09-09T08:33:39.447-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. cpe:/o:cisco:ios:11.3aa cpe:/o:cisco:ios:11.3db cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0%281%29w cpe:/o:cisco:ios:12.0%281%29xa3 cpe:/o:cisco:ios:12.0%281%29xb cpe:/o:cisco:ios:12.0%281%29xe cpe:/o:cisco:ios:12.0%282%29xc cpe:/o:cisco:ios:12.0%282%29xd cpe:/o:cisco:ios:12.0db cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0t CVE-1999-0063 1999-01-11T00:00:00.000-05:00 2008-09-09T08:33:39.523-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 CVE-1999-0064 1997-05-26T00:00:00.000-04:00 2008-09-09T08:33:39.587-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in AIX lquerylv program gives root access to local users. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0065 1998-08-31T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUN 00181 Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. cpe:/a:john_s._roberts:anyform:1.0 cpe:/a:john_s._roberts:anyform:2.0 CVE-1999-0066 1995-07-31T00:00:00.000-04:00 2008-09-09T08:33:39.727-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 719 AnyForm CGI remote execution. cpe:/a:apache:http_server:1.0.3 cpe:/a:ncsa:ncsa_httpd:1.5a::export CVE-1999-0067 1996-03-20T00:00:00.000-05:00 2008-09-09T08:33:39.807-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CERT CA-1996-06 BID 629 phf CGI program allows remote command execution through shell metacharacters. cpe:/a:php:php:1.0 cpe:/a:php:php:2.0 cpe:/a:php:php:2.0b10 CVE-1999-0068 1997-10-19T00:00:00.000-04:00 2008-09-09T08:33:39.867-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 713 CGI PHP mylog script allows an attacker to read any file on the target server. cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0069 1998-04-29T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00169 Solaris ufsrestore buffer overflow. cpe:/a:apache:http_server cpe:/a:ncsa:ncsa_web_server CVE-1999-0070 1996-04-01T00:00:00.000-05:00 2008-09-09T08:33:40.007-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 test-cgi program allows an attacker to list files on the server. cpe:/a:apache:http_server:1.1.1 CVE-1999-0071 1997-09-01T00:00:00.000-04:00 2008-09-09T08:33:40.070-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 CVE-1999-0072 1997-10-22T00:00:00.000-04:00 2008-09-09T08:33:40.147-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in AIX xdat gives root access to local users. cpe:/o:digital:osf_1:1.2 cpe:/o:digital:osf_1:1.3 cpe:/o:digital:osf_1:2.0 cpe:/o:digital:osf_1:3.0 cpe:/o:digital:osf_1:3.2 cpe:/o:digital:unix:3.2g cpe:/o:digital:unix:4.0 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 CVE-1999-0073 1995-10-13T00:00:00.000-04:00 2008-09-09T08:33:40.210-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access. cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:microsoft:windows_nt cpe:/o:netbsd:netbsd:2.0.4 CVE-1999-0074 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:40.273-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Listening TCP ports are sequentially allocated, allowing spoofing attacks. cpe:/a:washington_university:wu-ftpd CVE-1999-0075 1996-10-16T00:00:00.000-04:00 2008-09-09T08:33:40.353-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. cpe:/a:washington_university:wu-ftpd CVE-1999-0076 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:40.413-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in wu-ftp from PASV command causes a core dump. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0077 1995-01-01T00:00:00.000-05:00 2017-10-09T21:29:00.310-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov XF tcp-seq-predict(139) Predictable TCP sequence numbers allow spoofing. cpe:/a:ncr:mp-ras:2.03 cpe:/a:ncr:mp-ras:3.0 cpe:/a:ncr:mp-ras:3.01 cpe:/o:bsdi:bsd_os cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:hp:hp-ux cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:nec:up-ux_v cpe:/o:next:nextstep cpe:/o:sco:openserver:5 cpe:/o:sco:unixware:2.1 cpe:/o:sgi:irix:5.3 cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 CVE-1999-0078 1996-04-18T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 1.9 LOCAL MEDIUM NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. cpe:/a:bisonware:bisonware_ftp_server:3.5 CVE-1999-0079 1997-09-12T00:00:00.000-04:00 2008-09-09T08:33:40.617-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. cpe:/a:washington_university:wu-ftpd:2.4 CVE-1999-0080 1995-11-30T00:00:00.000-05:00 2008-09-09T08:33:40.697-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. cpe:/a:washington_university:wu-ftpd CVE-1999-0081 1997-01-11T00:00:00.000-05:00 2008-09-09T08:33:40.757-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 wu-ftp allows files to be overwritten via the rnfr command. cpe:/a:ftp:ftp cpe:/a:ftpcd:ftpcd CVE-1999-0082 1988-11-11T00:00:00.000-05:00 2008-09-09T08:33:40.853-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS FARMERVENEMA Improving the Security of Your Site by Breaking Into it CWD ~root command in ftpd allows root access. cpe:/o:sgi:irix CVE-1999-0083 1997-06-11T00:00:00.000-04:00 2008-09-09T08:33:40.913-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 getcwd() file descriptor leak in FTP. cpe:/a:sun:nfs CVE-1999-0084 1990-05-01T00:00:00.000-04:00 2017-10-09T21:29:00.387-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS XF nfs-mknod(78) Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0. cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:ibm:aix:4.2 cpe:/o:netbsd:netbsd:2.0.4 CVE-1999-0085 1996-08-21T00:00:00.000-04:00 2018-05-02T21:29:01.600-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS XF rwhod-vuln(118) XF rwhod(119) Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 CVE-1999-0086 1998-01-08T00:00:00.000-05:00 2008-09-09T08:33:41.163-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 AIX routed allows remote users to modify sensitive files. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 CVE-1999-0087 1998-02-01T00:00:00.000-05:00 2008-09-09T08:33:41.243-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. cpe:/o:ibm:aix:4.3 CVE-1999-0088 1998-10-26T00:00:00.000-05:00 2008-09-05T16:16:25.877-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. cpe:/o:ibm:aix:4.3 CVE-1999-0089 1997-10-28T00:00:00.000-05:00 2008-09-05T16:16:26.003-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in AIX libDtSvc library can allow local users to gain root access. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 CVE-1999-0090 1997-10-01T00:00:00.000-04:00 2008-09-09T08:33:41.447-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in AIX rcp command allows local users to obtain root access. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 CVE-1999-0091 1997-10-28T00:00:00.000-05:00 2008-09-09T08:33:41.507-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in AIX writesrv command allows local users to obtain root access. cpe:/o:ibm:aix:4.2.1 CVE-1999-0092 1997-10-29T00:00:00.000-05:00 2008-09-09T08:33:41.587-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Various vulnerabilities in the AIX portmir command allows local users to obtain root access. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 CVE-1999-0093 1997-10-29T00:00:00.000-05:00 2008-09-09T08:33:41.647-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 CVE-1999-0094 1997-10-29T00:00:00.000-05:00 2008-09-09T08:33:41.710-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS AIX piodmgrsu command allows local users to gain additional group privileges. cpe:/a:eric_allman:sendmail:5.58 CVE-1999-0095 1988-10-01T00:00:00.000-04:00 2019-06-11T16:29:00.263-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FULLDISC 20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149) MLIST [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit MLIST [oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit BID 1 The debug command in Sendmail is enabled, allowing attackers to execute commands as root. cpe:/o:bsdi:bsd_os cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.6.1 cpe:/o:sco:internet_faststart:1.0 cpe:/o:sco:internet_faststart:1.1 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 CVE-1999-0096 1996-12-10T00:00:00.000-05:00 2008-09-09T08:33:41.883-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SUN 00122 Sendmail decode alias can be used to overwrite sensitive files. cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:9.01 cpe:/o:hp:hp-ux:9.03 cpe:/o:hp:hp-ux:9.04 cpe:/o:hp:hp-ux:9.05 cpe:/o:hp:hp-ux:9.06 cpe:/o:hp:hp-ux:9.07 cpe:/o:hp:hp-ux:9.08 cpe:/o:hp:hp-ux:9.09 cpe:/o:hp:hp-ux:9.10 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:11.00 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3c cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0097 1997-10-29T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). cpe:/a:apple:appleshare:-:::ja cpe:/a:pmail:mercury_mail_server:- cpe:/a:seattlelab:slmail:2.6 CVE-1999-0098 1998-04-01T00:00:00.000-05:00 2018-01-08T18:30:53.627-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2018-01-04T11:09:39.117-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities. cpe:/o:bsdi:bsd_os:2.0 cpe:/o:bsdi:bsd_os:2.0.1 cpe:/o:convex:convexos:10.1 cpe:/o:convex:convexos:10.2 cpe:/o:convex:convexos:11.0 cpe:/o:convex:convexos:11.1 cpe:/o:convex:spp-ux:3 cpe:/o:cray:unicos:8.0 cpe:/o:cray:unicos:8.3 cpe:/o:cray:unicos:9.0 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 CVE-1999-0099 1995-10-19T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. cpe:/a:isc:inn:1.5.1 CVE-1999-0100 1997-01-01T00:00:00.000-05:00 2008-09-09T08:33:42.163-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Remote access in AIX innd 1.5.1, using control messages. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 CVE-1999-0101 1996-12-10T00:00:00.000-05:00 2008-09-09T08:33:45.460-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC H-13 Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names. cpe:/a:seattle_lab_software:slmail:3.0.2421 CVE-1999-0102 1998-07-09T00:00:00.000-04:00 2008-09-09T08:33:45.540-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line. CVE-1999-0103 1996-02-08T00:00:00.000-05:00 2018-08-22T14:29:00.293-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MISC https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01 Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm. cpe:/o:caldera:openlinux:2.0 cpe:/o:hp:hp-ux cpe:/o:microsoft:windows_95:0a cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 CVE-1999-0104 1997-12-16T00:00:00.000-05:00 2018-08-22T06:29:00.307-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 80175 A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. CVE-1999-0105 1997-03-01T00:00:00.000-05:00 2008-09-09T08:33:45.743-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 finger allows recursive searches by using a long string of @ symbols. CVE-1999-0106 1997-03-01T00:00:00.000-05:00 2008-09-09T08:33:45.807-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Finger redirection allows finger bombs. cpe:/a:apache:http_server:0.8.11 cpe:/a:apache:http_server:0.8.14 cpe:/a:apache:http_server:1.0 cpe:/a:apache:http_server:1.0.2 cpe:/a:apache:http_server:1.0.3 cpe:/a:apache:http_server:1.0.5 cpe:/a:apache:http_server:1.1 cpe:/a:apache:http_server:1.1.1 cpe:/a:apache:http_server:1.2.5 CVE-1999-0107 1997-12-30T00:00:00.000-05:00 2008-09-09T08:33:45.883-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters. cpe:/o:sgi:irix CVE-1999-0108 1998-05-01T00:00:00.000-04:00 2018-05-02T21:29:01.833-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970527 another day, another buffer overflow.... The printers program in IRIX has a buffer overflow that gives root access to local users. cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0109 1997-02-10T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00140 Buffer overflow in ffbconfig in Solaris 2.5.1. CVE-1999-0110 1999-01-01T00:00:00.000-05:00 2008-09-09T08:33:46.557-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 CVE-1999-0111 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:46.617-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 RIP v1 is susceptible to spoofing. cpe:/a:cde:cde cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 CVE-1999-0112 1997-05-01T00:00:00.000-04:00 2018-05-02T21:29:01.973-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS XF dtterm-bo(878) Buffer overflow in AIX dtterm program for the CDE. cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 CVE-1999-0113 1994-05-23T00:00:00.000-04:00 2008-09-09T08:33:46.773-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 458 Some implementations of rlogin allow root access if given a -froot parameter. cpe:/a:elm_development_group:elm:2.4 CVE-1999-0114 1998-01-01T00:00:00.000-05:00 2008-09-09T08:33:46.837-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack. cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 CVE-1999-0115 1997-09-01T00:00:00.000-04:00 2008-09-09T08:33:46.913-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1800 AIX bugfiler program allows local users to gain root access. cpe:/h:ibm:sng:2.1 cpe:/h:ibm:sng:2.2 cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 CVE-1999-0116 1996-09-19T00:00:00.000-04:00 2008-09-09T08:33:46.977-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 19961202-01-PX SUN 00136 Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood. cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 CVE-1999-0117 1992-03-31T00:00:00.000-05:00 2008-09-09T08:33:47.057-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS AIX passwd allows local users to gain root access. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 CVE-1999-0118 1998-11-01T00:00:00.000-05:00 2016-10-17T21:59:01.967-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19981119 RSI.0011.11-09-98.AIX.INFOD AIX infod allows local users to gain root access through an X display. cpe:/o:microsoft:windows_nt:4.0::beta CVE-1999-0119 1999-01-19T00:00:00.000-05:00 2008-09-05T16:16:30.393-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Windows NT 4.0 beta allows users to read and delete shares. cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1 CVE-1999-0120 1994-03-21T00:00:00.000-05:00 2018-10-30T12:25:25.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00126 Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root. CVE-1999-0121 1999-01-21T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in dtaction command gives root access. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 CVE-1999-0122 1997-07-21T00:00:00.000-04:00 2008-09-09T08:33:48.460-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in AIX lchangelv gives root access. cpe:/o:slackware:slackware_linux:3.0 CVE-1999-0123 1995-12-01T00:00:00.000-05:00 2008-09-05T16:16:30.923-04:00 3.7 LOCAL HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Race condition in Linux mailx command allows local users to read user files. cpe:/a:university_of_minnesota:gopherd CVE-1999-0124 1993-08-09T00:00:00.000-04:00 2008-09-09T08:33:48.587-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon. cpe:/o:redhat:linux:4.2 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.3 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0125 1998-01-25T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SGI 19980605-01-PX Buffer overflow in SGI IRIX mailx program. cpe:/a:xfree86_project:xfree86 CVE-1999-0126 1998-05-03T00:00:00.000-04:00 2008-09-09T08:33:48.727-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC J-010 SGI IRIX buffer overflow in xterm and Xaw allows root access. cpe:/o:hp:hp-ux CVE-1999-0127 1996-12-19T00:00:00.000-05:00 2008-09-09T08:33:48.807-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access. cpe:/h:ibm:sng cpe:/h:ibm:sng:2.1 cpe:/h:ibm:sng:2.2 cpe:/o:digital:osf_1:1.3.3 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:linux:linux_kernel:1.3.0 cpe:/o:linux:linux_kernel:2.0 cpe:/o:sco:internet_faststart:1.0 cpe:/o:sco:internet_faststart:1.1 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 cpe:/o:sco:tcp_ip:1.2.1 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.4::x86 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5::x86 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.5.1::x86 CVE-1999-0128 1996-12-18T00:00:00.000-05:00 2008-09-09T08:33:48.867-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. cpe:/a:eric_allman:sendmail:8.8 cpe:/a:eric_allman:sendmail:8.8.1 cpe:/a:eric_allman:sendmail:8.8.2 cpe:/a:eric_allman:sendmail:8.8.3 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.6.1 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:sco:internet_faststart:1.0 cpe:/o:sco:internet_faststart:1.1 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0129 1996-12-03T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. cpe:/a:caldera:network_desktop:1.0 cpe:/a:eric_allman:sendmail:8.7 cpe:/a:eric_allman:sendmail:8.8 cpe:/a:eric_allman:sendmail:8.8.1 cpe:/a:eric_allman:sendmail:8.8.2 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:ibm:aix:4.2 cpe:/o:redhat:linux:4.0 CVE-1999-0130 1996-11-16T00:00:00.000-05:00 2008-09-09T08:33:49.007-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 716 Local users can start Sendmail in daemon mode and gain root privileges. cpe:/a:eric_allman:sendmail:8.6 cpe:/a:eric_allman:sendmail:8.7.1 cpe:/a:eric_allman:sendmail:8.7.2 cpe:/a:eric_allman:sendmail:8.7.3 cpe:/a:eric_allman:sendmail:8.7.4 cpe:/a:eric_allman:sendmail:8.7.5 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:digital:osf_1:1.3.2 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:redhat:linux:3.0.3 cpe:/o:sco:internet_faststart:1.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 CVE-1999-0131 1996-09-11T00:00:00.000-04:00 2008-09-09T08:33:49.070-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 717 Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 CVE-1999-0132 1996-08-15T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov CERT CA-1996-19 XF expreserve(401) Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. cpe:/a:adobe:framemaker CVE-1999-0133 1996-08-14T00:00:00.000-04:00 2008-09-09T08:33:49.210-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access. cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.4::x86 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5::x86 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.5.1::x86 CVE-1999-0134 1996-08-06T00:00:00.000-04:00 2008-09-09T08:33:49.273-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS vold in Solaris 2.x allows local users to gain root access. cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0135 1996-07-25T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS admintool in Solaris allows a local user to write to arbitrary files and gain root access. cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5::x86 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.5.1::x86 CVE-1999-0136 1996-07-31T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access. cpe:/a:fred_n._van_kempen:dip:3.3.7o CVE-1999-0137 1996-07-09T00:00:00.000-04:00 2008-09-09T08:33:49.477-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The dip program on many Linux systems allows local users to gain root access via a buffer overflow. cpe:/o:apple:a_ux:3.1.1 cpe:/o:digital:osf_1:1.3 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:hp:hp-ux:8 cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10 cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4 cpe:/o:linux:linux_kernel:1.2.0 cpe:/o:linux:linux_kernel:2.0 cpe:/o:nec:asl_ux_4800 cpe:/o:nec:ews-ux_v:4.2 cpe:/o:nec:ews-ux_v:4.2mp cpe:/o:nec:up-ux_v:4.2mp CVE-1999-0138 1996-06-26T00:00:00.000-04:00 2008-09-09T08:33:49.557-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- CVE-1999-0139 1998-12-12T00:00:00.000-05:00 2018-10-30T12:25:26.310-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access. cpe:/o:microsoft:windows_nt CVE-1999-0140 1999-06-30T00:00:00.000-04:00 2008-09-05T16:16:33.893-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in RAS/PPTP on NT systems. cpe:/a:netscape:navigator:2.02 CVE-1999-0141 1996-03-29T00:00:00.000-05:00 2008-09-09T08:33:49.757-04:00 3.7 LOCAL HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUN 00134 Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet. cpe:/a:netscape:navigator cpe:/a:sun:java CVE-1999-0142 1996-03-01T00:00:00.000-05:00 2008-09-09T08:33:49.820-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts. cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5 cpe:/a:process_software:multinet:3.4 cpe:/a:process_software:multinet:3.5 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 CVE-1999-0143 1996-02-21T00:00:00.000-05:00 2018-10-30T12:26:22.170-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys. cpe:/a:qmail:qmail:- CVE-1999-0144 1997-06-01T00:00:00.000-04:00 2017-12-18T21:29:00.567-05:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MISC http://cr.yp.to/qmail/venema.html BUGTRAQ 19970612 qmail-dos-2.c, another denial of service attack BUGTRAQ 19970612 Re: Denial of service (qmail-smtpd) MISC http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html BID 2237 XF qmail-rcpt(208) Denial of service in Qmail by specifying a large number of recipients with the RCPT command. cpe:/a:eric_allman:sendmail CVE-1999-0145 1993-09-30T00:00:00.000-04:00 2019-06-11T16:29:00.417-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FULLDISC 20190611 The Return of the WIZard: RCE in Exim (CVE-2019-10149) FARMERVENEMA Improving the Security of Your Site by Breaking Into it CERT CA-1990-11 CERT CA-1993-14 MLIST [oss-security] 20190605 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit MLIST [oss-security] 20190606 Re: CVE-2019-10149: Exim 4.87 to 4.91: possible remote exploit BUGTRAQ 19950206 sendmail wizard thing... Sendmail WIZ command enabled, allowing root access. cpe:/a:ncsa:campas cpe:/a:ncsa:servers CVE-1999-0146 1997-07-15T00:00:00.000-04:00 2018-05-02T21:29:02.083-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1975 XF http-cgi-campas(298) The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file. cpe:/a:university_of_arizona:glimpse_http:2.0 cpe:/a:university_of_arizona:webglimpse:1.5 CVE-1999-0147 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:50.820-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0148 1997-09-01T00:00:00.000-04:00 2008-09-09T08:33:50.883-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SGI 19970501-02-PX BID 380 The handler CGI program in IRIX allows arbitrary command execution. cpe:/o:sgi:irix:6.2 CVE-1999-0149 1997-04-19T00:00:00.000-04:00 2018-05-02T21:29:02.193-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS SGI 19970501-02-PX BID 373 XF http-sgi-wrap(290) The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack. cpe:/a:gnu:fingerd CVE-1999-0150 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:51.023-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The Perl fingerd program allows arbitrary command execution from remote users. cpe:/a:satan:satan:1.0 cpe:/a:satan:satan:1.1 CVE-1999-0151 1995-04-03T00:00:00.000-04:00 2008-09-09T08:33:52.570-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access. cpe:/a:data_general:dg_ux CVE-1999-0152 1997-08-11T00:00:00.000-04:00 2008-09-09T08:33:52.663-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The DG/UX finger daemon allows remote command execution through shell metacharacters. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_nt cpe:/o:sco:openserver:5.0 CVE-1999-0153 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:52.743-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. cpe:/a:microsoft:internet_information_server:2.0 cpe:/a:microsoft:internet_information_server:3.0 CVE-1999-0154 1999-12-31T00:00:00.000-05:00 2008-09-09T08:33:52.807-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. cpe:/a:aladdin_enterprises:ghostscript:2.6 cpe:/a:aladdin_enterprises:ghostscript:3.22 CVE-1999-0155 1995-08-31T00:00:00.000-04:00 2008-09-09T08:33:52.867-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The ghostscript command with the -dSAFER option allows remote attackers to execute commands. cpe:/a:washington_university:wu-ftpd CVE-1999-0156 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:52.947-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS wu-ftpd FTP daemon allows any user and password combination. cpe:/o:cisco:ios:11.2p cpe:/o:cisco:ios:11.3t cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0t cpe:/o:cisco:pix_firewall_software:4.2%281%29 CVE-1999-0157 1998-08-18T00:00:00.000-04:00 2018-10-30T12:25:31.607-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. cpe:/o:cisco:pix_firewall_software:4.1%286%29 cpe:/o:cisco:pix_firewall_software:4.2%281%29 CVE-1999-0158 1998-08-31T00:00:00.000-04:00 2018-10-30T12:25:31.607-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CISCO 20010913 Cisco PIX Firewall Manager File Exposure Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known. cpe:/o:cisco:ios:9.1 cpe:/o:cisco:ios:11.0%2820.3%29 cpe:/o:cisco:ios:11.1%2815%29ca cpe:/o:cisco:ios:11.1%2816%29 cpe:/o:cisco:ios:11.1%2816%29aa cpe:/o:cisco:ios:11.1%2816%29ia cpe:/o:cisco:ios:11.1%2817%29cc cpe:/o:cisco:ios:11.1%2817%29ct cpe:/o:cisco:ios:11.2%288%29sa3 cpe:/o:cisco:ios:11.2%289%29p cpe:/o:cisco:ios:11.2%289%29xa cpe:/o:cisco:ios:11.2%2810%29 cpe:/o:cisco:ios:11.2%2810%29bc cpe:/o:cisco:ios:11.3%281%29 cpe:/o:cisco:ios:11.3%281%29ed cpe:/o:cisco:ios:11.3%281%29t CVE-1999-0159 1998-08-12T00:00:00.000-04:00 2008-09-09T08:33:53.147-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases. cpe:/o:cisco:ios:4.1 cpe:/o:cisco:ios:9.1 cpe:/o:cisco:ios:10.3 cpe:/o:cisco:ios:11.0 cpe:/o:cisco:ios:11.1 cpe:/o:cisco:ios:11.2 cpe:/o:cisco:ios:11.2p CVE-1999-0160 1997-10-01T00:00:00.000-04:00 2008-09-09T08:33:53.210-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. cpe:/o:cisco:ios:10.3%283.4%29 cpe:/o:cisco:ios:10.3%284.2%29 CVE-1999-0161 1995-07-31T00:00:00.000-04:00 2008-09-09T08:33:53.290-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering. cpe:/o:cisco:ios:11.2 CVE-1999-0162 1998-09-01T00:00:00.000-04:00 2008-09-09T08:33:53.353-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. cpe:/a:eric_allman:sendmail CVE-1999-0163 1997-01-01T00:00:00.000-05:00 2008-09-09T08:33:53.413-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS In older versions of Sendmail, an attacker could use a pipe character to execute root commands. cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.4::x86 CVE-1999-0164 1995-08-29T00:00:00.000-04:00 2008-09-09T08:33:53.493-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS A race condition in the Solaris ps command allows an attacker to overwrite critical files. cpe:/a:sun:nfs cpe:/o:bsdi:bsd_os cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:3.5 cpe:/o:sun:sunos:4.0 cpe:/o:sun:sunos:4.0.1 cpe:/o:sun:sunos:4.0.2 cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 CVE-1999-0165 1997-03-01T00:00:00.000-05:00 2018-10-30T12:26:22.170-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NFS cache poisoning. cpe:/a:sun:nfs CVE-1999-0166 1997-01-01T00:00:00.000-05:00 2008-09-09T08:33:53.633-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NFS allows users to use a "cd .." command to access other directories besides the exported file system. cpe:/o:sun:sunos:4.1.1 CVE-1999-0167 1991-12-06T00:00:00.000-05:00 2008-09-09T08:33:53.697-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system. cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c CVE-1999-0168 1992-06-04T00:00:00.000-04:00 2008-09-09T08:33:53.757-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export restrictions. cpe:/a:sun:nfs CVE-1999-0169 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:53.837-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS NFS allows attackers to read and write any file on the system by specifying a false UID. cpe:/o:digital:ultrix CVE-1999-0170 1997-01-01T00:00:00.000-05:00 2008-09-09T08:33:53.897-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0171 1997-01-01T00:00:00.000-05:00 2008-09-09T08:33:53.977-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in syslog by sending it a large number of superfluous messages. cpe:/a:matt_wright:formmail CVE-1999-0172 1995-08-02T00:00:00.000-04:00 2008-09-09T08:33:54.040-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS FormMail CGI program allows remote execution of commands. cpe:/a:matt_wright:formmail CVE-1999-0173 1997-01-01T00:00:00.000-05:00 2008-09-09T08:33:54.103-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FormMail CGI program can be used by web servers other than the host server that the program resides on. cpe:/a:netscape:communicator:4.0 cpe:/a:netscape:communicator:4.05 cpe:/a:netscape:communicator:4.06 cpe:/a:netscape:communicator:4.07 cpe:/a:netscape:communicator:4.51 CVE-1999-0174 1997-02-01T00:00:00.000-05:00 2008-09-09T08:33:54.180-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:novell:web_server:1.0 CVE-1999-0175 1996-07-01T00:00:00.000-04:00 2008-09-09T08:33:54.243-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server. cpe:/a:webgais_development_team:webgais:1.0b2 CVE-1999-0176 1997-07-10T00:00:00.000-04:00 2008-09-09T08:33:54.307-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The Webgais program allows a remote user to execute arbitrary commands. cpe:/a:oreilly:website:2.0 CVE-1999-0177 1997-09-01T00:00:00.000-04:00 2008-09-09T08:33:54.383-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs. cpe:/a:oreilly:oreilly_website:1.1e CVE-1999-0178 1997-01-01T00:00:00.000-05:00 2017-10-09T21:29:00.513-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19970106 Re: signal handling BID 2078 XF http-website-winsample(295) Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_nt:3.5.1 CVE-1999-0179 1997-01-01T00:00:00.000-05:00 2018-08-13T17:47:00.367-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q140818 Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share. CVE-1999-0180 1997-01-01T00:00:00.000-05:00 2008-09-09T08:33:54.727-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS in.rshd allows users to login with a NULL username and execute commands. cpe:/a:rpc.walld:rpc.walld CVE-1999-0181 1994-01-01T00:00:00.000-05:00 2008-09-09T08:33:54.790-04:00 6.8 NETWORK MEDIUM NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands. cpe:/a:samba:samba:1.9.17:p2 CVE-1999-0182 1997-09-30T00:00:00.000-04:00 2008-09-09T08:33:54.853-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC H-110 Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. cpe:/a:tftp:tftp cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0183 1997-09-01T00:00:00.000-04:00 2008-09-09T08:33:54.947-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Linux implementations of TFTP would allow access to files outside the restricted directory. cpe:/a:isc:bind:9.4.0 CVE-1999-0184 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:55.007-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0185 1997-10-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUN 00156 In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution. cpe:/o:sun:solaris:2.6 CVE-1999-0186 1998-10-01T00:00:00.000-04:00 2008-09-09T08:33:55.227-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CONFIRM http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. CVE-1999-0187 1999-01-01T00:00:00.000-05:00 2008-09-09T08:33:59.307-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of CVE-1999-0022. Notes: All CVE users should reference CVE-1999-0022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0188 1998-12-17T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SUN 00182 The passwd command in Solaris can be subjected to a denial of service. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0189 1997-06-04T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SUN 00142 Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0190 1998-04-08T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00167 Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. cpe:/a:microsoft:internet_information_server:3.0 CVE-1999-0191 1997-09-01T00:00:00.000-04:00 2008-09-09T08:33:59.570-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IIS newdsn.exe CGI script allows remote users to overwrite files. cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:6.0::i386 cpe:/o:slackware:slackware_linux:3.2 cpe:/o:slackware:slackware_linux:3.3 cpe:/o:slackware:slackware_linux:3.4 cpe:/o:slackware:slackware_linux:3.5 cpe:/o:slackware:slackware_linux:3.6 cpe:/o:slackware:slackware_linux:3.9 cpe:/o:slackware:slackware_linux:4.0 CVE-1999-0192 1997-10-18T00:00:00.000-04:00 2008-09-09T08:33:59.647-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. cpe:/a:ascend:cascadeview_ux:1.0 CVE-1999-0193 1997-12-01T00:00:00.000-05:00 2008-09-09T08:33:59.710-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option. CVE-1999-0194 1999-05-01T00:00:00.000-04:00 2008-09-09T08:33:59.773-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in in.comsat allows attackers to generate messages. cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:sgi:irix CVE-1999-0195 1997-07-01T00:00:00.000-04:00 2008-09-09T08:33:59.853-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1. cpe:/a:webgais_development_team:webgais:1.0 CVE-1999-0196 1997-07-08T00:00:00.000-04:00 2008-09-09T08:33:59.913-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 2077 websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). CVE-1999-0197 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 finger 0@host on some systems may print information on some user accounts. CVE-1999-0198 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 finger .@host on some systems may print information on some user accounts. CVE-1999-0200 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password. cpe:/a:ftp:ftp CVE-1999-0201 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:00.197-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. cpe:/a:university_of_washington:wu-ftpd:2.4.1 CVE-1999-0202 1997-01-01T00:00:00.000-05:00 2010-03-26T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. cpe:/a:eric_allman:sendmail:8.6.10 CVE-1999-0203 1995-08-17T00:00:00.000-04:00 2008-09-09T08:34:00.710-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program. cpe:/a:eric_allman:sendmail:8.6.9 CVE-1999-0204 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:00.773-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. cpe:/a:eric_allman:sendmail:8.6.11 cpe:/a:eric_allman:sendmail:8.6.12 CVE-1999-0205 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:00.853-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Sendmail 8.6.11 and 8.6.12. cpe:/a:eric_allman:sendmail:8.8 cpe:/a:eric_allman:sendmail:8.8.1 CVE-1999-0206 1996-10-01T00:00:00.000-04:00 2008-09-09T08:34:00.913-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access. cpe:/a:great_circle_associates:majordomo:1.90 cpe:/a:great_circle_associates:majordomo:1.91 CVE-1999-0207 1994-06-09T00:00:00.000-04:00 2008-09-09T08:34:00.977-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:nec:asl_ux_4800 cpe:/o:nec:ews-ux_v cpe:/o:nec:up-ux_v cpe:/o:sgi:irix:3 cpe:/o:sgi:irix:4 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.2 CVE-1999-0208 1995-12-12T00:00:00.000-05:00 2008-09-09T08:34:01.057-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. cpe:/o:sun:sunos:3.5 cpe:/o:sun:sunos:4.0 cpe:/o:sun:sunos:4.0.1 cpe:/o:sun:sunos:4.0.2 cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 CVE-1999-0209 1990-08-14T00:00:00.000-04:00 2008-09-09T08:34:01.117-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 8 The SunView (SunTools) selection_svc facility allows remote users to read files. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0210 1997-11-26T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19971126 Solaris 2.5.1 automountd exploit (fwd) BUGTRAQ 19990103 SUN almost has a clue! (automountd) CERT CA-99-05 BID 235 HP HPSBUX9910-104 Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters. cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c cpe:/o:sun:sunos:5.0 CVE-1999-0211 1994-02-14T00:00:00.000-05:00 2018-10-30T12:25:12.013-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 24 Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone. cpe:/o:sun:sunos cpe:/o:sun:sunos:5.0 CVE-1999-0212 1998-04-29T00:00:00.000-04:00 2018-10-30T12:25:12.013-04:00 7.8 NETWORK LOW NONE COMPLETE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC I-048 Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server. cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0213 1998-07-15T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 CVE-1999-0214 1992-07-21T00:00:00.000-04:00 2008-09-09T08:34:01.507-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service by sending forged ICMP unreachable packets. cpe:/o:sgi:irix:3 cpe:/o:sgi:irix:4 cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0215 1998-10-26T00:00:00.000-05:00 2008-09-09T08:34:01.633-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 19981004-01-PX CIAC J-012 Routed allows attackers to append data to files. cpe:/a:gnu:inet:5.01 cpe:/o:hp:hp-ux:10 cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0216 1997-11-01T00:00:00.000-05:00 2008-09-09T08:34:01.727-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service of inetd on Linux through SYN and RST packets. cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.0.3c cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3a1 cpe:/o:sun:sunos:4.1psr_a CVE-1999-0217 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:01.790-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. cpe:/h:livingston_portmaster:portmaster CVE-1999-0218 1995-10-01T00:00:00.000-04:00 2008-09-09T08:34:01.853-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Livingston portmaster machines could be rebooted via a series of commands. cpe:/a:cat_soft:serv-u:2.5 CVE-1999-0219 1997-07-01T00:00:00.000-04:00 2018-05-02T21:29:02.397-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov NTBUGTRAQ 19990503 Buffer overflows in FTP Serv-U 2.5 NTBUGTRAQ 19990504 Re: Buffer overflows in FTP Serv-U 2.5 BID 269 XF ftp-servu(205) Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command. CVE-1999-0220 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Attackers can do a denial of service of IRC by crashing the server. cpe:/h:lucent:ascend_routers CVE-1999-0221 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:02.057-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service of Ascend routers through port 150 (remote administration). cpe:/h:cisco:router CVE-1999-0222 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:02.133-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. cpe:/o:sun:sunos:5.4 CVE-1999-0223 1999-03-01T00:00:00.000-05:00 2018-10-30T12:26:22.170-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?patchid=103291&collection=fpatches BID 1878 Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0224 1999-07-23T00:00:00.000-04:00 2008-09-09T08:34:02.257-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Windows NT messenger service through a long username. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0225 1998-02-14T00:00:00.000-05:00 2008-09-09T08:34:02.523-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MSKB Q180963 NAI 19980214 Windows NT Logon Denial of Service Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size. cpe:/o:microsoft:windows_nt:- CVE-1999-0226 1999-01-01T00:00:00.000-05:00 2017-05-03T12:18:49.923-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2017-04-28T10:28:28.117-04:00 Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0227 1997-06-01T00:00:00.000-04:00 2018-08-13T17:47:00.493-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q154087 Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 CVE-1999-0228 1997-02-07T00:00:00.000-05:00 2018-08-13T17:47:00.570-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q162567 Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT. cpe:/a:microsoft:internet_information_server CVE-1999-0229 1999-05-12T00:00:00.000-04:00 2008-09-09T08:34:02.790-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Windows NT IIS server using ..\.. cpe:/o:cisco:ios:4.1 cpe:/o:cisco:ios:4.1.1 cpe:/o:cisco:ios:4.1.2 CVE-1999-0230 1997-12-15T00:00:00.000-05:00 2008-09-09T08:34:02.867-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in Cisco 7xx routers through the telnet service. cpe:/a:seattle_lab_software:slmail:2.6 CVE-1999-0231 1999-01-01T00:00:00.000-05:00 2008-09-05T16:16:46.843-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access. cpe:/a:ncsa_httpd_project:ncsa_httpd:1.5c CVE-1999-0232 1995-02-01T00:00:00.000-05:00 2017-05-03T12:19:09.940-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2017-04-28T10:34:45.943-04:00 ALLOWS_ADMIN_ACCESS Buffer overflow in NCSA WebServer (version 1.5c) gives remote access. cpe:/a:microsoft:internet_information_server:1.0 CVE-1999-0233 1996-02-25T00:00:00.000-05:00 2018-08-13T17:47:00.727-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q148188 MSKB Q155056 IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. cpe:/o:caldera:openlinux cpe:/o:redhat:linux:3.0.3 cpe:/o:sgi:irix cpe:/o:suse:suse_linux:4.2 cpe:/o:yggdrasil:linux CVE-1999-0234 1996-10-08T00:00:00.000-04:00 2008-09-09T08:34:03.147-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Bash treats any character with a value of 255 as a command separator. cpe:/a:ncsa:ncsa_web_server:1.3 cpe:/a:ncsa:ncsa_web_server:1.4 cpe:/a:ncsa:ncsa_web_server:1.4.1 CVE-1999-0235 1995-02-17T00:00:00.000-05:00 2008-09-09T08:34:03.210-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access. cpe:/a:apache:http_server cpe:/a:ncsa:servers CVE-1999-0236 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:03.273-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. cpe:/a:webcom:cgi_guestbook CVE-1999-0237 1997-09-01T00:00:00.000-04:00 2008-09-09T08:34:03.353-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Remote execution of arbitrary commands through Guestbook CGI program. cpe:/a:php:php:1.0 cpe:/a:php:php:2.0 cpe:/a:php:php:2.0b10 CVE-1999-0238 1997-08-01T00:00:00.000-04:00 2008-09-09T08:34:03.413-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 php.cgi allows attackers to read any file on the system. cpe:/a:netscape:fasttrack_server:3.01 CVE-1999-0239 1998-01-01T00:00:00.000-05:00 2008-09-09T08:34:03.477-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET. CVE-1999-0240 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy. cpe:/a:xfree86_project:x11r6 cpe:/o:sgi:irix cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- CVE-1999-0241 1995-11-01T00:00:00.000-05:00 2018-10-30T12:25:26.310-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. cpe:/o:slackware:slackware_linux CVE-1999-0242 1995-03-01T00:00:00.000-05:00 2008-09-09T08:34:03.680-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords. CVE-1999-0243 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Linux cfingerd could be exploited to gain root access. cpe:/a:livingston:radius:1.x CVE-1999-0244 1997-12-01T00:00:00.000-05:00 2008-09-09T08:34:03.820-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root. cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0245 1995-09-07T00:00:00.000-04:00 2008-09-09T08:34:03.883-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Some configurations of NIS+ in Linux allowed attackers to log in as the user "+". cpe:/o:hp:hp-ux CVE-1999-0246 1996-10-01T00:00:00.000-04:00 2008-09-09T08:34:03.960-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS HP Remote Watch allows a remote user to gain root access. cpe:/a:isc:inn:1.4 cpe:/a:isc:inn:1.4sec cpe:/a:isc:inn:1.4sec2 cpe:/a:isc:inn:1.4unoff3 cpe:/a:isc:inn:1.4unoff4 cpe:/a:isc:inn:1.5 cpe:/a:isc:inn:1.5.1 CVE-1999-0247 1997-07-21T00:00:00.000-04:00 2008-09-09T08:34:04.023-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NAI 19970721 INN news server vulnerabilities BID 1443 Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands. cpe:/a:ssh:ssh:1.2.27 CVE-1999-0248 1999-01-01T00:00:00.000-05:00 2008-09-05T16:16:49.157-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html CONFIRM http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1 A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0249 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:04.273-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Windows NT RSHSVC program allows remote users to execute arbitrary commands. cpe:/a:dan_bernstein:qmail:1.01 CVE-1999-0250 1997-07-01T00:00:00.000-04:00 2016-10-17T21:59:07.420-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov MISC http://cr.yp.to/qmail/venema.html BUGTRAQ 19970612 qmail-dos-2.c, another denial of service attack MISC http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html Denial of service in Qmail through long SMTP commands. cpe:/a:talkd:talkd CVE-1999-0251 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:04.413-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in talk program allows remote attackers to disrupt a user's display. cpe:/a:lsoft:listserv CVE-1999-0252 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:08.337-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in listserv allows arbitrary command execution. cpe:/a:microsoft:internet_information_server:1.0 cpe:/a:microsoft:internet_information_server:2.0 cpe:/a:microsoft:internet_information_server:3.0 CVE-1999-0253 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:08.397-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. cpe:/o:sun:solaris:2.6 CVE-1999-0254 1998-11-02T00:00:00.000-05:00 2008-09-09T08:34:08.460-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. CVE-1999-0255 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in ircd allows arbitrary command execution. cpe:/a:jgaa:warftpd:1.66 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_nt CVE-1999-0256 1998-02-01T00:00:00.000-05:00 2008-09-09T08:34:08.603-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in War FTP allows remote execution of commands. cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0257 1998-04-01T00:00:00.000-05:00 2008-09-09T08:34:08.663-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Nestea variation of teardrop IP fragmentation denial of service. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_nt CVE-1999-0258 1998-02-13T00:00:00.000-05:00 2008-09-09T08:34:08.743-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Bonk variation of teardrop IP fragmentation denial of service. cpe:/a:infodrom:cfingerd:1.2.2 CVE-1999-0259 1997-05-23T00:00:00.000-04:00 2008-09-09T08:34:08.807-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 cfingerd lists all users on a system via search.**@target. cpe:/a:renaud_deraison:jj CVE-1999-0260 1996-12-24T00:00:00.000-05:00 2008-09-09T08:34:08.867-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The jj CGI program allows command execution via shell metacharacters. CVE-1999-0261 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:08.947-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://www.insecure.org/sploits/netmanage.chameleon.overflows.html Netmanager Chameleon SMTPd has several buffer overflows that cause a crash. cpe:/a:renaud_deraison:faxsurvey CVE-1999-0262 1998-08-04T00:00:00.000-04:00 2018-05-02T21:29:02.507-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 2056 XF http-cgi-faxsurvey(1532) Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. cpe:/o:sun:sunos:- CVE-1999-0263 1998-07-16T00:00:00.000-04:00 2018-10-30T12:25:26.683-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUN 00173 Solaris SUNWadmap can be exploited to obtain root access. cpe:/a:miva:htmlscript CVE-1999-0264 1998-01-27T00:00:00.000-05:00 2008-09-09T08:34:09.147-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 htmlscript CGI program allows remote read access to files. cpe:/o:microware:os-9 cpe:/o:novell:netware:3.12 CVE-1999-0265 1997-01-01T00:00:00.000-05:00 2018-08-13T17:47:00.837-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q154174 ICMP redirect messages may crash or lock up a host. cpe:/a:roar_smith:info2www CVE-1999-0266 1998-03-01T00:00:00.000-05:00 2008-09-09T08:34:09.273-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 1995 The info2www CGI script allows remote file access or remote command execution. cpe:/a:ncsa:ncsa_httpd:1.3 CVE-1999-0267 1997-09-23T00:00:00.000-04:00 2008-09-09T08:34:09.353-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. cpe:/a:metainfo:metaweb CVE-1999-0268 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:09.413-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MetaInfo MetaWeb web server allows users to upload, execute, and read scripts. cpe:/a:netscape:enterprise_server CVE-1999-0269 1998-08-01T00:00:00.000-04:00 2008-09-09T08:34:09.477-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Netscape Enterprise servers may list files through the PageServices query. cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0270 1998-04-03T00:00:00.000-05:00 2018-05-02T21:29:02.613-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov SGI 19980401-01-P CIAC I-041 BID 64 XF sgi-pfdispaly(810) Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files. CVE-1999-0271 1998-01-15T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Progressive Networks Real Video server (pnserver) can be crashed remotely. cpe:/a:slmail:slmail:3.0.2421 CVE-1999-0272 1997-10-01T00:00:00.000-04:00 2008-09-09T08:34:09.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Slmail v2.5 through the POP3 port. cpe:/o:sun:sunos:5.5.1 CVE-1999-0273 1998-01-01T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service through Solaris 2.5.1 telnet by sending ^D characters. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 CVE-1999-0274 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:09.820-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made. cpe:/o:microsoft:windows_nt CVE-1999-0275 1997-06-10T00:00:00.000-04:00 2008-09-09T08:34:09.883-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Windows NT DNS servers by flooding port 53 with too many characters. cpe:/a:hughes:msql:2.0. cpe:/a:hughes:msql:2.0.1 CVE-1999-0276 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:09.960-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS mSQL v2.0.1 and below allows remote execution through a buffer overflow. cpe:/o:sun:sunos:5.0 CVE-1999-0277 1996-10-28T00:00:00.000-05:00 2018-10-30T12:25:12.013-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The WorkMan program can be used to overwrite any file to get root access. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0278 1998-06-01T00:00:00.000-04:00 2018-10-12T17:29:02.433-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS98-003 In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. cpe:/a:excite:ews:1.1 CVE-1999-0279 1998-01-01T00:00:00.000-05:00 2008-09-09T08:34:10.180-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Excite for Web Servers (EWS) allows remote command execution via shell metacharacters. cpe:/a:microsoft:ie:3.0 cpe:/a:microsoft:ie:3.0.1 CVE-1999-0280 1997-04-01T00:00:00.000-05:00 2008-09-09T08:34:10.243-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Remote command execution in Microsoft Internet Explorer using .lnk and .url files. cpe:/a:microsoft:internet_information_server:2.0 cpe:/a:microsoft:internet_information_server:3.0 CVE-1999-0281 1997-06-01T00:00:00.000-04:00 2008-09-09T08:34:10.307-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in IIS using long URLs. CVE-1999-0282 1997-09-23T00:00:00.000-04:00 2008-09-09T08:34:13.757-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1584, CVE-1999-1586. Reason: This candidate combined references from one issue with the description from another issue. Notes: Users should consult CVE-1999-1584 and CVE-1999-1586 to obtain the appropriate name. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-1999-0283 1999-01-01T00:00:00.000-05:00 2016-10-17T21:59:08.627-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 19970716 Viewable .jhtml source with JavaWebServer The Java Web Server would allow remote users to obtain the source code for CGI programs. cpe:/a:ibm:lotus_domino_mail_server cpe:/a:microsoft:exchange_server:4.0 cpe:/a:microsoft:exchange_server:5.0 CVE-1999-0284 1998-01-01T00:00:00.000-05:00 2008-09-09T08:34:13.897-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. cpe:/o:microsoft:windows_nt CVE-1999-0285 1999-01-01T00:00:00.000-05:00 2008-09-05T16:16:54.203-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. CVE-1999-0286 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages. cpe:/a:webcom:cgi_guestbook CVE-1999-0287 1999-04-09T00:00:00.000-04:00 2008-09-09T08:34:14.103-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Vulnerability in the Wguest CGI program. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 CVE-1999-0288 1998-08-01T00:00:00.000-04:00 2018-05-02T21:29:02.833-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MISC http://safenetworks.com/Windows/wins.html XF nt-winsupd-fix(1233) The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets. cpe:/a:apache:http_server CVE-1999-0289 1999-12-12T00:00:00.000-05:00 2008-09-05T16:16:54.733-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. cpe:/a:qbik:wingate CVE-1999-0290 1998-02-21T00:00:00.000-05:00 2008-09-09T08:34:14.337-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost. cpe:/a:qbik:wingate CVE-1999-0291 1999-02-01T00:00:00.000-05:00 2008-09-09T08:34:14.397-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication. cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 CVE-1999-0292 1997-04-01T00:00:00.000-05:00 2008-09-09T08:34:14.460-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service through Winpopup using large user names. cpe:/o:cisco:ios CVE-1999-0293 1998-01-01T00:00:00.000-05:00 2008-09-09T08:34:14.540-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS AAA authentication on Cisco systems allows attackers to execute commands without authorization. cpe:/a:microsoft:wins CVE-1999-0294 1997-10-01T00:00:00.000-04:00 2008-09-09T08:34:14.603-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 All records in a WINS database can be deleted through SNMP for a denial of service. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0295 1997-10-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00157 Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- CVE-1999-0296 1998-02-01T00:00:00.000-05:00 2018-10-30T12:25:26.310-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00162 Solaris volrmmount program allows attackers to read any file. cpe:/a:paul_vixie:vixie_cron:3.0 cpe:/o:bsdi:bsd_os:2.1 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:netbsd:netbsd:2.0.4 cpe:/o:redhat:linux CVE-1999-0297 1996-12-12T00:00:00.000-05:00 2008-09-09T08:34:14.807-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. cpe:/o:slackware:slackware_linux:2.1 cpe:/o:slackware:slackware_linux:2.2 cpe:/o:slackware:slackware_linux:2.3 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 CVE-1999-0298 1997-02-05T00:00:00.000-05:00 2008-09-09T08:34:14.867-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS NAI 19970205 Vulnerabilities in Ypbind when run with -ypset/-ypsetme ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack. cpe:/o:freebsd:freebsd:6.2:stable CVE-1999-0299 1997-03-05T00:00:00.000-05:00 2008-09-05T16:16:56.250-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in FreeBSD lpd through long DNS hostnames. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0300 1997-10-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUN 00155 nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0301 1997-08-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00149 Buffer overflow in SunOS/Solaris ps command. cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0302 1998-09-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUN 00176 SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server. cpe:/o:digital:osf_1:1.1 cpe:/o:netbsd:netbsd:1.3 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:openbsd:openbsd:2.1 cpe:/o:openbsd:openbsd:2.2 cpe:/o:sun:solaris:::x86 cpe:/o:sun:solaris:1.1.3:u1 cpe:/o:sun:solaris:1.1.4::jl cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0303 1998-05-21T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. cpe:/o:bsdi:bsd_os:3.0 cpe:/o:freebsd:freebsd:2.2 cpe:/o:netbsd:netbsd:2.0.4 cpe:/o:openbsd:openbsd:2.2 CVE-1999-0304 1998-02-01T00:00:00.000-05:00 2008-09-09T08:34:15.867-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS mmap function in BSD allows local attackers in the kmem group to modify memory through devices. cpe:/o:bsdi:bsd_os cpe:/o:freebsd:freebsd:2.2 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:openbsd:openbsd:2.0 cpe:/o:openbsd:openbsd:2.1 cpe:/o:openbsd:openbsd:2.2 CVE-1999-0305 1998-02-01T00:00:00.000-05:00 2018-05-02T21:29:02.927-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MISC http://www.openbsd.org/advisories/sourceroute.txt XF bsd-sourceroute(736) The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections. cpe:/o:hp:vvos:10.24 CVE-1999-0306 1997-11-04T00:00:00.000-05:00 2008-09-09T08:34:16.007-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 buffer overflow in HP xlock program. cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:10.00 CVE-1999-0307 2000-12-20T00:00:00.000-05:00 2008-09-09T08:34:16.070-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in HP-UX cstm program allows local users to gain root privileges. cpe:/o:hp:hp-ux:8 cpe:/o:hp:hp-ux:9 CVE-1999-0308 1996-10-01T00:00:00.000-04:00 2008-09-09T08:34:16.197-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX9410-018 HP-UX gwind program allows users to modify arbitrary files. cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 CVE-1999-0309 1997-02-01T00:00:00.000-05:00 2013-07-21T00:11:26.663-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS HP HPSBUX9702-056 HP-UX vgdisplay program gives root access to local users. cpe:/a:ssh:ssh:1.2.25 CVE-1999-0310 1998-09-01T00:00:00.000-04:00 2008-09-09T08:34:16.353-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SSH 1.2.25 on HP-UX allows access to new user accounts. cpe:/o:hp:hp-ux:10 CVE-1999-0311 1996-11-01T00:00:00.000-05:00 2008-09-09T08:34:16.413-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS HP HPSBUX9612-042 fpkg2swpk in HP-UX allows local users to gain root access. cpe:/o:hp:hp-ux CVE-1999-0312 1993-01-13T00:00:00.000-05:00 2008-09-09T08:34:16.477-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP ypbind allows attackers with root privileges to modify NIS data. cpe:/o:sgi:irix:6.4::s2mp CVE-1999-0313 1998-07-01T00:00:00.000-04:00 2017-10-09T21:29:00.577-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19980701-01-P MISC http://www.securityfocus.com/bid/213/exploit BID 214 XF sgi-disk-bandwidth(1441) disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames. cpe:/o:sgi:irix:6.4 CVE-1999-0314 1998-07-01T00:00:00.000-04:00 2017-10-09T21:29:00.637-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19980701-01-P BID 213 MISC http://www.securityfocus.com/bid/213/exploit XF sgi-ioconfig(1199) ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0315 1997-04-01T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00138 Buffer overflow in Solaris fdformat command gives root access to local users. cpe:/a:sam_lantinga:splitvt:1.6.3 CVE-1999-0316 1995-12-01T00:00:00.000-05:00 2008-09-09T08:34:16.757-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Linux splitvt command gives root access to local users. cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0317 1999-11-25T00:00:00.000-05:00 2008-09-09T08:34:16.837-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Linux su command gives root access to local users. cpe:/o:hp:hp-ux:11 cpe:/o:ibm:aix:4 cpe:/o:redhat:linux:6.0 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8 CVE-1999-0318 1997-03-01T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. CVE-1999-0319 1996-10-01T00:00:00.000-04:00 2008-09-09T08:34:16.960-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0320 1998-03-01T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files. cpe:/o:sun:solaris CVE-1999-0321 1998-12-01T00:00:00.000-05:00 2008-09-09T08:34:17.103-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Solaris kcms_configure command allows local users to gain root access. cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.2 CVE-1999-0322 1997-10-29T00:00:00.000-05:00 2008-09-09T08:34:17.163-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The open() function in FreeBSD allows local attackers to write to arbitrary files. cpe:/o:bsdi:bsd_os:3.0 cpe:/o:freebsd:freebsd:2.2 cpe:/o:netbsd:netbsd:2.0.4 cpe:/o:openbsd:openbsd:2.2 CVE-1999-0323 1998-02-20T00:00:00.000-05:00 2008-09-09T08:34:17.353-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS NETBSD 1998-003 FreeBSD mmap function allows users to modify append-only or immutable files. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 CVE-1999-0324 1996-09-01T00:00:00.000-04:00 2008-09-09T08:34:17.413-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS HP HPSBUX9702-053 ppl program in HP-UX allows local users to create root files through symlinks. cpe:/o:hp:hp-ux:8 cpe:/o:hp:hp-ux:9 CVE-1999-0325 1995-12-01T00:00:00.000-05:00 2008-09-09T08:34:17.477-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS HP HPSBUX9406-013 vhe_u_mnt program in HP-UX allows local users to create root files through symlinks. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.30 CVE-1999-0326 1997-10-01T00:00:00.000-04:00 2008-09-09T08:34:17.557-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX9710-071 Vulnerability in HP-UX mediainit program. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0327 1997-11-01T00:00:00.000-05:00 2008-09-09T08:34:17.617-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 19971103-01-PX SGI syserr program allows local users to corrupt files. cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0328 1997-11-01T00:00:00.000-05:00 2008-09-09T08:34:17.697-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19971103-01-PX SGI permissions program allows local users to gain root privileges. cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0329 1998-06-01T00:00:00.000-04:00 2008-09-09T08:34:17.757-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19980602-01-PX SGI mediad program allows local users to gain root access. cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0330 1998-03-01T00:00:00.000-05:00 2008-09-09T08:34:17.820-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Linux bdash game has a buffer overflow that allows local users to gain root access. cpe:/a:microsoft:ie:3.0.2 cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 CVE-1999-0331 1998-01-01T00:00:00.000-05:00 2008-09-09T08:34:17.897-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Buffer overflow in Internet Explorer 4.0(1). cpe:/a:microsoft:netmeeting:2.1 CVE-1999-0332 1998-12-01T00:00:00.000-05:00 2018-08-13T17:47:00.930-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q184346 Buffer overflow in NetMeeting allows denial of service and remote command execution. cpe:/o:hp:hp-ux CVE-1999-0333 1998-08-01T00:00:00.000-04:00 2008-09-09T08:34:18.040-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack. cpe:/o:sun:solaris:::x86 cpe:/o:sun:sunos:5.0 CVE-1999-0334 1993-12-16T00:00:00.000-05:00 2018-10-30T12:25:12.013-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access. cpe:/o:bsdi:bsd_os:2.1 cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0335 1996-08-01T00:00:00.000-04:00 2008-09-09T08:34:18.180-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS DEPRECATED. This entry has been deprecated. It is a duplicate of CVE-1999-0032. cpe:/o:hp:hp-ux:10 CVE-1999-0336 1996-11-01T00:00:00.000-05:00 2008-09-09T08:34:18.243-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in mstm in HP-UX allows local users to gain root access. cpe:/o:ibm:aix:1.2.1 cpe:/o:ibm:aix:1.3 cpe:/o:ibm:aix:2.2.1 cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 CVE-1999-0337 1994-06-03T00:00:00.000-04:00 2008-09-09T08:34:18.320-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled. cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 CVE-1999-0338 1994-02-24T00:00:00.000-05:00 2008-09-09T08:34:18.383-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS AIX Licensed Program Product performance tools allow local users to gain root access. cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0339 1998-08-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access. cpe:/o:slackware:slackware_linux:3.4 CVE-1999-0340 1997-12-01T00:00:00.000-05:00 2008-09-09T08:34:18.523-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Linux Slackware crond program allows local users to gain root access. cpe:/o:debian:debian_linux:1.3.1 cpe:/o:slackware:slackware_linux:2.1 cpe:/o:slackware:slackware_linux:2.2 cpe:/o:slackware:slackware_linux:2.3 CVE-1999-0341 1998-01-01T00:00:00.000-05:00 2008-09-09T08:34:18.587-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in the Linux mail program "deliver" allows local users to gain root access. cpe:/a:pam:pam:0.64 CVE-1999-0342 1998-12-01T00:00:00.000-05:00 2008-09-09T08:34:18.663-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Linux PAM modules allow local users to gain root access using temporary files. cpe:/a:palace:palace_client CVE-1999-0343 1998-10-02T00:00:00.000-04:00 2008-09-09T08:34:18.727-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS A malicious Palace server can force a client to execute arbitrary programs. cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0344 1998-08-01T00:00:00.000-04:00 2018-10-12T17:29:02.700-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q190288 MS MS98-009 NT users can gain debug-level access on a system process using the Sechole exploit. cpe:/h:ibm:sng:2.1 cpe:/h:ibm:sng:2.2 cpe:/o:freebsd:freebsd:1.0 cpe:/o:freebsd:freebsd:1.1 cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:1.2 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 cpe:/o:sco:internet_faststart:1.0 cpe:/o:sco:internet_faststart:1.1 cpe:/o:sco:open_desktop:3 cpe:/o:sco:openserver:5 cpe:/o:sun:sunos CVE-1999-0345 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:18.867-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. cpe:/a:php:php_fi CVE-1999-0346 1997-10-16T00:00:00.000-04:00 2008-09-09T08:34:18.930-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 713 CGI PHP mlog script allows an attacker to read any file on the target server. CVE-1999-0347 1999-01-26T00:00:00.000-05:00 2016-10-17T21:59:09.703-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 19990126 Javascript ecurity bug in Internet Explorer NTBUGTRAQ 19990126 Javascript ecurity bug in Internet Explorer Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0348 1999-01-27T00:00:00.000-05:00 2018-08-13T17:47:01.103-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q197003 IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0349 1999-01-27T00:00:00.000-05:00 2018-10-12T17:29:02.967-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q188348 EEYE IIS Remote FTP Exploit/DoS Attack MS MS99-003 A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands. cpe:/a:rational_software:clearcase:3.2 CVE-1999-0350 1999-02-08T00:00:00.000-05:00 2008-09-09T08:34:19.570-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits. cpe:/a:ftp:ftp_pasv CVE-1999-0351 1999-02-01T00:00:00.000-05:00 2018-05-02T21:29:03.020-04:00 6.4 NETWORK LOW NONE PARTIAL NONE PARTIAL http://nvd.nist.gov MISC http://attrition.org/security/advisory/misc/infowar/iw_sec_01.txt XF pasv-pizza-thief-dos(3389) FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client. CVE-1999-0352 1999-01-25T00:00:00.000-05:00 2008-09-09T08:34:24.353-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 CVE-1999-0353 1999-02-10T00:00:00.000-05:00 2013-09-03T00:01:48.897-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC J-026 HP HPSBUX9902-091 rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:word:97 CVE-1999-0354 1999-11-01T00:00:00.000-05:00 2018-10-12T17:29:03.310-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS MS MS99-002 Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message. cpe:/a:ca:controlit:4.5 CVE-1999-0355 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:24.557-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service. CVE-1999-0356 1999-01-25T00:00:00.000-05:00 2008-09-09T08:34:24.617-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book. cpe:/o:microsoft:windows_98::gold CVE-1999-0357 1999-01-25T00:00:00.000-05:00 2008-09-09T08:34:24.697-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets. cpe:/o:digital:unix:4.0 cpe:/o:digital:unix:4.0a cpe:/o:digital:unix:4.0b cpe:/o:digital:unix:4.0c cpe:/o:digital:unix:4.0d cpe:/o:digital:unix:4.0e CVE-1999-0358 1999-02-01T00:00:00.000-05:00 2008-09-09T08:34:24.757-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC J-027 BUGTRAQ 19990125 Digital Unix 4.0 exploitable buffer overflows Digital Unix 4.0 has a buffer overflow in the inc program of the mh package. cpe:/a:marc_schaefer:ptylogin CVE-1999-0359 2001-03-12T00:00:00.000-05:00 2008-09-09T08:34:24.820-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords. cpe:/a:microsoft:site_server:2.0 CVE-1999-0360 1999-01-30T00:00:00.000-05:00 2016-10-17T21:59:10.937-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 19990130 Security Advisory for Internet Information Server 4 with Site MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely. CVE-1999-0361 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging. cpe:/a:ipswitch:ws_ftp_server:1.0.1eval cpe:/a:ipswitch:ws_ftp_server:1.0.2eval CVE-1999-0362 1999-02-02T00:00:00.000-05:00 2008-09-09T08:34:25.023-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 EEYE AD02021999 BID 217 WS_FTP server remote denial of service through cwd command. cpe:/a:plp:line_printer_control cpe:/o:suse:suse_linux:5.2 CVE-1999-0363 1999-02-02T00:00:00.000-05:00 2008-09-09T08:34:25.103-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 328 SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise. cpe:/a:fms_inc.:total_vb_sourcebook:6.0 cpe:/a:microsoft:access:97 CVE-1999-0364 1999-01-01T00:00:00.000-05:00 2016-10-17T21:59:12.267-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 19990204 Microsoft Access 97 Stores Database Password as Plaintext Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data. cpe:/a:metainfo:metaip:3.1 cpe:/a:metainfo:sendmail:2.0 cpe:/a:metainfo:sendmail:2.5 CVE-1999-0365 1999-02-04T00:00:00.000-05:00 2008-09-09T08:34:25.243-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry. cpe:/o:microsoft:windows_nt:4.0:sp4 CVE-1999-0366 1999-02-08T00:00:00.000-05:00 2018-10-12T17:29:03.433-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS MSKB Q214840 MS MS99-004 In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value. cpe:/o:netbsd:netbsd:2.0.4 CVE-1999-0367 1999-02-09T00:00:00.000-05:00 2008-09-09T08:34:25.367-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NetBSD netstat command allows local users to access kernel memory. cpe:/a:proftpd_project:proftpd:1.2_pre1 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr9 cpe:/o:caldera:openlinux:1.3 cpe:/o:debian:debian_linux:2.0 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 cpe:/o:sco:openserver:5.0.3 cpe:/o:sco:openserver:5.0.4 cpe:/o:sco:openserver:5.0.5 cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:slackware:slackware_linux:3.4 cpe:/o:slackware:slackware_linux:3.5 cpe:/o:slackware:slackware_linux:3.6 CVE-1999-0368 1999-02-09T00:00:00.000-05:00 2008-09-09T08:34:25.447-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. cpe:/o:sun:solaris:::x86 cpe:/o:sun:solaris:1.1.3:u1 cpe:/o:sun:solaris:1.1.4::jl cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0369 1997-02-01T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00183 The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0370 1999-02-10T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 165 In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files. cpe:/a:university_of_kansas:lynx:2.7.1 CVE-1999-0371 1999-02-11T00:00:00.000-05:00 2008-09-09T08:34:25.647-04:00 1.2 LOCAL HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Lynx allows a local user to overwrite sensitive files through /tmp symlinks. cpe:/a:microsoft:backoffice:4.0 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0372 1999-02-12T00:00:00.000-05:00 2018-10-12T17:29:03.667-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q217004 MS MS99-005 The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted. cpe:/o:debian:debian_linux:2.0 CVE-1999-0373 1999-02-01T00:00:00.000-05:00 2008-09-09T08:34:25.773-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root. cpe:/o:debian:debian_linux:2.0 CVE-1999-0374 1999-02-16T00:00:00.000-05:00 2008-09-09T08:34:25.853-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Debian GNU/Linux cfengine package is susceptible to a symlink attack. cpe:/a:network_flight_recorder:network_flight_recorder:2.0.3 CVE-1999-0375 1999-02-16T00:00:00.000-05:00 2008-09-09T08:34:25.913-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands. cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 CVE-1999-0376 1999-02-20T00:00:00.000-05:00 2018-10-12T17:29:03.933-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MS MS99-006 Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs. cpe:/o:unix:unix CVE-1999-0377 1999-02-22T00:00:00.000-05:00 2016-12-27T21:59:00.167-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov SECTRACK 1033881 Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services. cpe:/a:trend_micro:interscan_viruswall CVE-1999-0378 1999-02-22T00:00:00.000-05:00 2008-09-09T08:34:26.117-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands. cpe:/a:microsoft:backoffice_resource_kit:2.0 CVE-1999-0379 1999-02-22T00:00:00.000-05:00 2018-10-12T17:29:04.060-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 498 MS MS99-007 Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting. cpe:/a:seattle_lab_software:slmail:3.0.2421 CVE-1999-0380 1999-02-25T00:00:00.000-05:00 2017-10-09T21:29:00.700-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990225 ALERT: SLMail 3.2 (and 3.1) with the Remote Administration Service NTBUGTRAQ 199902225 ALERT: SLMail 3.2 (and 3.1) with the Remote Administration Service NTBUGTRAQ SLmail 3.2 Build 3113 (Web Administration Security Fix) BID 497 XF slmail-ras-ntfs-bypass(5392) SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user. cpe:/o:debian:debian_linux:2.0 cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0381 1999-02-26T00:00:00.000-05:00 2008-09-09T08:34:26.320-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 342 BUGTRAQ 19990225 SUPER buffer overflow super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access. cpe:/o:microsoft:windows_nt:3.5.1:sp1 cpe:/o:microsoft:windows_nt:3.5.1:sp2 cpe:/o:microsoft:windows_nt:3.5.1:sp3 cpe:/o:microsoft:windows_nt:3.5.1:sp4 cpe:/o:microsoft:windows_nt:3.5.1:sp5 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 CVE-1999-0382 1999-03-12T00:00:00.000-05:00 2018-10-12T17:29:04.310-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MS MS99-008 The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges. cpe:/a:acc:tigris:10.5.8 CVE-1999-0383 1999-02-02T00:00:00.000-05:00 2008-09-09T08:34:26.460-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 183 ACC Tigris allows public access without a login. cpe:/a:microsoft:office:98::mac cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:project:98 cpe:/a:microsoft:visual_basic:5.0 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0384 1999-01-01T00:00:00.000-05:00 2018-10-12T17:29:04.433-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MS MS99-001 The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content. cpe:/a:microsoft:exchange_server:5.5 CVE-1999-0385 1998-12-01T00:00:00.000-05:00 2018-10-12T17:29:04.577-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MS MS99-009 The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands. cpe:/a:microsoft:frontpage cpe:/a:microsoft:personal_web_server:4.0 CVE-1999-0386 1999-03-01T00:00:00.000-05:00 2018-10-12T17:29:04.730-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-010 Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold CVE-1999-0387 1999-11-29T00:00:00.000-05:00 2018-10-12T17:29:04.980-04:00 7.8 NETWORK LOW NONE COMPLETE NONE NONE http://nvd.nist.gov MSKB Q168115 BID 829 MS MS99-052 A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords. cpe:/a:datalynx:suguard:1.0 CVE-1999-0388 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:26.807-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root. cpe:/o:debian:debian_linux:1.1 cpe:/o:debian:debian_linux:1.2 cpe:/o:debian:debian_linux:1.3 cpe:/o:debian:debian_linux:1.3.1 cpe:/o:debian:debian_linux:2.0 CVE-1999-0389 1999-01-03T00:00:00.000-05:00 2008-09-09T08:34:26.883-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 324 Buffer overflow in the bootp server in the Debian Linux netstd package. cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:suse:suse_linux:5.0 cpe:/o:suse:suse_linux:5.1 CVE-1999-0390 1999-01-04T00:00:00.000-05:00 2008-09-09T08:34:27.087-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-006.1 BID 187 Buffer overflow in Dosemu Slang library in Linux. cpe:/a:microsoft:terminal_server cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:3.5.1:sp1 cpe:/o:microsoft:windows_nt:3.5.1:sp2 cpe:/o:microsoft:windows_nt:3.5.1:sp3 cpe:/o:microsoft:windows_nt:3.5.1:sp4 cpe:/o:microsoft:windows_nt:3.5.1:sp5 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0391 1999-01-05T00:00:00.000-05:00 2008-09-09T08:34:27.147-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user. cpe:/a:thomas_boutell:cgic_library:1.05 CVE-1999-0392 1999-01-10T00:00:00.000-05:00 2008-09-09T08:34:27.227-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in Thomas Boutell's cgic library version up to 1.05. cpe:/a:eric_allman:sendmail:8.8 cpe:/a:eric_allman:sendmail:8.9.2 CVE-1999-0393 1999-01-01T00:00:00.000-05:00 2016-10-17T21:59:15.110-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990121 Sendmail 8.8.x/8.9.x bugware Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers. CVE-1999-0394 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 DPEC Online Courseware allows an attacker to change another user's password without knowing the original password. cpe:/a:backweb_technologies:backweb_polite_agent_protocol CVE-1999-0395 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:27.430-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ISS 19990118 Vulnerability in the BackWeb Polite Agent Protocol A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server. cpe:/o:netbsd:netbsd:2.0.4 cpe:/o:openbsd:openbsd:2.4 CVE-1999-0396 1999-02-17T00:00:00.000-05:00 2008-09-09T08:34:27.523-04:00 2.6 NETWORK HIGH NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service. CVE-1999-0397 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext. cpe:/a:ssh:ssh:1.2.27 cpe:/a:ssh:ssh2:2.0.11 CVE-1999-0398 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:27.663-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login. cpe:/a:khaled_mardam-bey:mirc:5.5 CVE-1999-0399 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:27.727-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands. cpe:/o:linux:linux_kernel:2.2.0 CVE-1999-0400 1999-01-26T00:00:00.000-05:00 2008-09-05T16:17:11.140-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 344 Denial of service in Linux 2.2.0 running the ldd command on a core file. cpe:/o:linux:linux_kernel:2.2.1 CVE-1999-0401 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:27.867-04:00 3.7 LOCAL HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files. cpe:/a:gnu:wget:1.5.3 CVE-1999-0402 1999-01-02T00:00:00.000-05:00 2008-09-09T08:34:29.727-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself. cpe:/h:cyrix:linux CVE-1999-0403 1999-02-01T00:00:00.000-05:00 2016-10-17T21:59:16.267-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990204 Cyrix bug: freeze in hell, badboy A bug in Cyrix CPUs on Linux allows local users to perform a denial of service. cpe:/a:smartmax_software:mailmax CVE-1999-0404 1999-02-14T00:00:00.000-05:00 2008-09-09T08:34:29.867-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution. cpe:/o:debian:debian_linux:2.0 cpe:/o:debian:debian_linux:2.0.5 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:redhat:linux:5.2::i386 cpe:/o:suse:suse_linux:4.2 cpe:/o:suse:suse_linux:4.3 cpe:/o:suse:suse_linux:4.4 cpe:/o:suse:suse_linux:4.4.1 cpe:/o:suse:suse_linux:5.0 cpe:/o:suse:suse_linux:5.1 cpe:/o:suse:suse_linux:5.2 cpe:/o:suse:suse_linux:5.3 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 CVE-1999-0405 1999-02-18T00:00:00.000-05:00 2008-09-09T08:34:29.930-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS A buffer overflow in lsof allows local users to obtain root privilege. cpe:/o:digital:unix CVE-1999-0406 1999-02-19T00:00:00.000-05:00 2008-09-09T08:34:30.007-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0407 1999-02-09T00:00:00.000-05:00 2016-10-17T21:59:17.610-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 19990209 ALERT: IIS4 allows proxied password attacks over NetBIOS BUGTRAQ 19990209 Re: IIS4 allows proxied password attacks over NetBIOS By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. cpe:/a:sun:cobalt_raq CVE-1999-0408 1999-02-25T00:00:00.000-05:00 2008-09-09T08:34:30.163-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 337 Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server. cpe:/o:suse:suse_linux:3.5 cpe:/o:suse:suse_linux:5.2 CVE-1999-0409 1999-03-04T00:00:00.000-05:00 2008-09-09T08:34:30.243-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 319 Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access. cpe:/o:sun:sunos:- CVE-1999-0410 1999-03-05T00:00:00.000-05:00 2018-10-30T12:25:26.310-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 293 The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access. cpe:/o:sco:openserver:3.0 cpe:/o:sco:openserver:5 CVE-1999-0411 1999-03-07T00:00:00.000-05:00 2008-09-09T08:34:30.383-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access. cpe:/a:microsoft:internet_information_server:2.0 cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0412 1999-02-19T00:00:00.000-05:00 2008-09-09T08:34:30.447-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 501 In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 CVE-1999-0413 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:30.523-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19990301-01-PX A buffer overflow in the SGI X server allows local users to gain root access through the X server font path. cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 CVE-1999-0414 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:30.587-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection. cpe:/h:cisco:cisco_7xx_routers:3.2 cpe:/h:cisco:cisco_7xx_routers:4.2 CVE-1999-0415 1999-03-11T00:00:00.000-05:00 2008-09-09T08:34:30.647-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC J-034 CISCO 19990311 Cisco 7xx TCP and HTTP Vulnerabilities The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. cpe:/h:cisco:cisco_7xx_routers CVE-1999-0416 1999-03-11T00:00:00.000-05:00 2008-09-09T08:34:30.743-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC J-034 CISCO 19990311 Cisco 7xx TCP and HTTP Vulnerabilities Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port. cpe:/o:sun:sunos:5.7 CVE-1999-0417 1999-03-09T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 448 64 bit Solaris 7 procfs allows local users to perform a denial of service. CVE-1999-0418 1999-03-08T00:00:00.000-05:00 2016-10-17T21:59:19.097-04:00 6.4 NETWORK LOW NONE PARTIAL NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990308 SMTP server account probing Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection. CVE-1999-0419 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:30.947-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service. cpe:/a:netbsd:umapfs CVE-1999-0420 1999-03-17T00:00:00.000-05:00 2008-09-09T08:34:31.007-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program. cpe:/o:slackware:slackware_linux:3.6 CVE-1999-0421 1999-03-17T00:00:00.000-05:00 2008-09-09T08:34:31.070-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 338 During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password. cpe:/o:netbsd:netbsd:1.3.3 CVE-1999-0422 1999-03-17T00:00:00.000-05:00 2008-09-09T08:34:31.147-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set. cpe:/o:hp:hp-ux CVE-1999-0423 1994-06-01T00:00:00.000-04:00 2008-09-09T08:34:31.210-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX9903-093 Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges. cpe:/a:netscape:communicator:4.5 CVE-1999-0424 1999-03-18T00:00:00.000-05:00 2008-09-09T08:34:31.273-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes. cpe:/a:netscape:communicator:4.5 CVE-1999-0425 1999-03-18T00:00:00.000-05:00 2008-09-09T08:34:31.337-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes. cpe:/o:suse:suse_linux:6.0 CVE-1999-0426 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:31.413-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. cpe:/a:qualcomm:eudora:4.2 cpe:/a:qualcomm:eudora:4.3 cpe:/a:qualcomm:eudora_light:3.0 cpe:/a:qualcomm:eudora_pro:1.00 CVE-1999-0427 2000-05-01T00:00:00.000-04:00 2008-09-09T08:34:31.477-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names. cpe:/a:openssl:openssl cpe:/a:ssleay:ssleay CVE-1999-0428 1999-03-22T00:00:00.000-05:00 2008-09-09T08:34:31.540-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls. cpe:/a:ibm:lotus_notes:4.5 CVE-1999-0429 1999-03-01T00:00:00.000-05:00 2016-10-17T21:59:20.377-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990323 BUGTRAQ 19990324 Re: LNotes encryption BUGTRAQ 19990326 Lotus Notes Encryption Bug BUGTRAQ 19990326 Re: Lotus Notes security advisory The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference. cpe:/a:cisco:catalyst_12xx_supervisor_software:4.29 cpe:/a:cisco:catalyst_29xx_supervisor_software:1.0 cpe:/a:cisco:catalyst_29xx_supervisor_software:2.1.5 cpe:/a:cisco:catalyst_29xx_supervisor_software:2.1.501 cpe:/a:cisco:catalyst_29xx_supervisor_software:2.1.502 cpe:/a:cisco:catalyst_5xxx_supervisor_software:1.0 cpe:/a:cisco:catalyst_5xxx_supervisor_software:2.1.5 cpe:/a:cisco:catalyst_5xxx_supervisor_software:2.1.501 cpe:/a:cisco:catalyst_5xxx_supervisor_software:2.1.502 CVE-1999-0430 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:31.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload. cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre6 CVE-1999-0431 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:31.757-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service. cpe:/o:hp:hp-ux:11.00 CVE-1999-0432 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:31.820-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX9903-094 ftp on HP-UX 11.00 allows local users to gain privileges. cpe:/a:xfree86_project:x11r6:3.3.3 cpe:/o:netbsd:netbsd:1.3.2 cpe:/o:netbsd:netbsd:1.3.3 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:slackware:slackware_linux:3.3 cpe:/o:slackware:slackware_linux:3.4 cpe:/o:slackware:slackware_linux:3.5 cpe:/o:slackware:slackware_linux:3.6 cpe:/o:slackware:slackware_linux:4.0 cpe:/o:suse:suse_linux:5.1 cpe:/o:suse:suse_linux:5.2 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 CVE-1999-0433 1999-03-21T00:00:00.000-05:00 2008-09-09T08:34:31.883-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. cpe:/o:caldera:openlinux:1.2 cpe:/o:debian:debian_linux:2.0 cpe:/o:debian:debian_linux:2.0:r5 cpe:/o:debian:debian_linux:2.1 cpe:/o:netbsd:netbsd:1.3.3 cpe:/o:redhat:linux:5.1 cpe:/o:suse:suse_linux:5.3 CVE-1999-0434 1999-03-30T00:00:00.000-05:00 2008-09-09T08:34:31.977-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 359 XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 CVE-1999-0435 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:32.040-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM. cpe:/a:hp:desms cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 CVE-1999-0436 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:32.117-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX9903-095 Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges. cpe:/h:ramp_networks:webramp CVE-1999-0437 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:32.180-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port. cpe:/h:ramp_networks:webramp_200i:1.0 cpe:/h:ramp_networks:webramp_m3:1.0 CVE-1999-0438 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:32.243-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address. cpe:/a:procmail:procmail:3.12 cpe:/o:caldera:openlinux CVE-1999-0439 1999-04-05T00:00:00.000-04:00 2008-09-09T08:34:32.320-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file. cpe:/a:netscape:communicator:4.5 cpe:/a:netscape:navigator:4.0 cpe:/a:netscape:navigator:4.01 cpe:/a:netscape:navigator:4.02 cpe:/a:netscape:navigator:4.03 cpe:/a:netscape:navigator:4.04 cpe:/a:netscape:navigator:4.05 cpe:/a:netscape:navigator:4.06 cpe:/a:netscape:navigator:4.07 cpe:/a:netscape:navigator:4.08 cpe:/a:netscape:navigator:4.61 cpe:/a:sun:java CVE-1999-0440 1999-03-01T00:00:00.000-05:00 2016-10-17T21:59:21.563-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CONFIRM http://java.sun.com/pr/1999/03/pr990329-01.html BUGTRAQ 19990405 Security Hole in Java 2 (and JDK 1.1.x) BID 1939 The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. cpe:/a:qbik:wingate:3.0 CVE-1999-0441 1999-02-22T00:00:00.000-05:00 2008-09-09T08:34:32.460-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 EEYE AD02221999 BID 509 Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service. cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0442 1999-01-07T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 327 Solaris ff.core allows local users to modify files. cpe:/a:bmc:patrol_agent:3.2.3 CVE-1999-0443 1999-04-01T00:00:00.000-05:00 2008-09-09T08:34:32.603-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19990409 Patrol security bugs Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt CVE-1999-0444 1999-04-12T00:00:00.000-04:00 2008-09-09T08:34:32.663-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files. cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0%281%29w cpe:/o:cisco:ios:12.0%281%29xa3 cpe:/o:cisco:ios:12.0%281%29xb cpe:/o:cisco:ios:12.0%281%29xe cpe:/o:cisco:ios:12.0%282%29xc cpe:/o:cisco:ios:12.0%282%29xd cpe:/o:cisco:ios:12.0%282%29xf cpe:/o:cisco:ios:12.0%282%29xg cpe:/o:cisco:ios:12.0db cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0t CVE-1999-0445 1999-04-01T00:00:00.000-05:00 2008-09-09T08:34:32.757-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:netbsd:netbsd:1.3.2 cpe:/o:netbsd:netbsd:1.3.3 CVE-1999-0446 1999-04-12T00:00:00.000-04:00 2008-09-09T08:34:32.837-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS. cpe:/o:hp:mpe_ix CVE-1999-0447 1999-04-01T00:00:00.000-05:00 2013-07-23T00:04:49.940-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS HP HPSBMP9904-006 Local users can gain privileges using the debug utility in the MPE/iX operating system. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0448 1999-01-01T00:00:00.000-05:00 2008-09-09T08:34:32.977-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0449 1999-01-26T00:00:00.000-05:00 2008-09-09T08:34:33.040-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 193 The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts. cpe:/a:microsoft:internet_information_server:2.0 cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-1999-0450 1999-01-26T00:00:00.000-05:00 2018-10-30T12:25:10.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 194 In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.2.0 CVE-1999-0451 1999-01-19T00:00:00.000-05:00 2008-09-05T16:17:18.560-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 343 Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port. CVE-1999-0452 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A service or application has a backdoor password that was placed there by the developer. cpe:/h:cisco:router CVE-1999-0453 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:18.810-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). CVE-1999-0454 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso. cpe:/a:allaire:coldfusion_server:4.0 CVE-1999-0455 1999-12-25T00:00:00.000-05:00 2008-09-09T08:34:36.197-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 115 The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly. cpe:/o:debian:debian_linux:1.3 cpe:/o:debian:debian_linux:1.3.1 cpe:/o:debian:debian_linux:2.0 CVE-1999-0457 1999-01-17T00:00:00.000-05:00 2008-09-09T08:34:36.273-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 317 Linux ftpwatch program allows local users to gain root privileges. cpe:/a:l0pht:l0phtcrack:2.5 CVE-1999-0458 1999-01-06T00:00:00.000-05:00 2008-09-09T08:34:36.337-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information. CVE-1999-0459 1999-02-01T00:00:00.000-05:00 2008-09-09T08:34:36.397-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot. cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.1 cpe:/o:linux:linux_kernel:2.3.0 CVE-1999-0460 1999-02-19T00:00:00.000-05:00 2008-09-05T16:17:19.560-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 312 Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service. cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:sgi:irix CVE-1999-0461 1999-01-28T00:00:00.000-05:00 2008-09-09T08:34:36.540-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address. cpe:/o:suse:suse_linux:5.3 CVE-1999-0462 1999-03-17T00:00:00.000-05:00 2008-09-09T08:34:36.603-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 339 suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk. cpe:/a:l0pht:l0phtcrack:2.5 CVE-1999-0463 1998-12-01T00:00:00.000-05:00 2008-09-09T08:34:36.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 19981201-01-PX Remote attackers can perform a denial of service using IRIX fcagent. cpe:/a:tripwire:tripwire:1.2 CVE-1999-0464 1999-01-04T00:00:00.000-05:00 2016-10-17T21:59:22.817-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990104 Tripwire mess.. CONFIRM http://marc.info/?l=bugtraq&m=91592136122066&w=2 Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames. CVE-1999-0465 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter. cpe:/o:netbsd:netbsd:1.3 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:netbsd:netbsd:1.3.2 cpe:/o:netbsd:netbsd:1.3.3 CVE-1999-0466 1999-04-21T00:00:00.000-04:00 2008-09-09T08:34:36.883-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device. cpe:/a:webcom:cgi_guestbook CVE-1999-0467 1999-04-01T00:00:00.000-05:00 2008-09-09T08:34:36.947-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter. cpe:/a:microsoft:ie:5.0 CVE-1999-0468 1999-04-09T00:00:00.000-04:00 2018-10-12T17:29:05.403-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-012 Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component. cpe:/a:microsoft:ie:5.0 CVE-1999-0469 1999-04-01T00:00:00.000-05:00 2008-09-09T08:34:37.087-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client. cpe:/o:novell:netware:4.0 CVE-1999-0470 1999-04-09T00:00:00.000-04:00 2008-09-09T08:34:37.147-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 482 A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted. cpe:/a:winroute:winroute CVE-1999-0471 1999-04-09T00:00:00.000-04:00 2008-09-09T08:34:37.227-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button. cpe:/a:snmp:snmp cpe:/h:network_appliance:netcache CVE-1999-0472 1999-04-07T00:00:00.000-04:00 2008-09-09T08:34:37.290-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it. cpe:/a:andrew_tridgell:rsync:2.3.1 CVE-1999-0473 1999-04-07T00:00:00.000-04:00 2008-09-09T08:34:37.353-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 145 The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred. cpe:/a:mirabilis:icq:99a_2.13build1700 CVE-1999-0474 1999-04-05T00:00:00.000-04:00 2008-09-09T08:34:37.430-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory. cpe:/a:procmail:procmail CVE-1999-0475 1999-04-05T00:00:00.000-04:00 2008-09-09T08:34:37.493-04:00 1.2 LOCAL HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. cpe:/o:sco:openserver CVE-1999-0476 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:37.570-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user. cpe:/a:allaire:coldfusion_server:2.0 cpe:/a:allaire:coldfusion_server:3.0 cpe:/a:allaire:coldfusion_server:3.01 cpe:/a:allaire:coldfusion_server:3.11 cpe:/a:allaire:coldfusion_server:3.12 cpe:/a:allaire:coldfusion_server:4.0 CVE-1999-0477 1999-12-25T00:00:00.000-05:00 2008-09-05T16:17:21.920-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 115 The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly. cpe:/a:sendmail:sendmail:8.9.2 CVE-1999-0478 1998-12-01T00:00:00.000-05:00 2008-09-09T08:34:37.710-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX9904-097 Denial of service in HP-UX sendmail 8.8.6 related to accepting connections. cpe:/a:netscape:enterprise_server:3.6 cpe:/o:hp:hp-ux:10.24 CVE-1999-0479 1999-03-01T00:00:00.000-05:00 2008-09-09T08:34:37.773-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX9903-092 Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. cpe:/a:midnight_commander:midnight_commander:4 CVE-1999-0480 1999-04-01T00:00:00.000-05:00 2008-09-09T08:34:37.837-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. cpe:/o:openbsd:openbsd:2.4 CVE-1999-0481 1999-03-22T00:00:00.000-05:00 2008-09-09T08:34:37.913-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in "poll" in OpenBSD. cpe:/o:openbsd:openbsd CVE-1999-0482 1999-03-21T00:00:00.000-05:00 2008-09-09T08:34:37.977-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 OpenBSD kernel crash through TSS handling, as caused by the crashme program. cpe:/o:openbsd:openbsd CVE-1999-0483 1999-02-25T00:00:00.000-05:00 2008-09-09T08:34:38.057-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 OpenBSD crash using nlink value in FFS and EXT2FS filesystems. cpe:/o:openbsd:openbsd CVE-1999-0484 1999-02-23T00:00:00.000-05:00 2008-09-09T08:34:38.117-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in OpenBSD ping. cpe:/o:openbsd:openbsd:2.4 CVE-1999-0485 1999-02-19T00:00:00.000-05:00 2008-09-09T08:34:38.197-04:00 2.6 NETWORK HIGH NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD. cpe:/a:aol:instant_messenger:3.5 CVE-1999-0486 1998-02-01T00:00:00.000-05:00 2008-09-09T08:34:38.257-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 CVE-1999-0487 1999-05-01T00:00:00.000-04:00 2018-10-12T17:29:05.623-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-011 The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:4.0.1:sp1 cpe:/a:microsoft:ie:5.0 CVE-1999-0488 1999-04-21T00:00:00.000-04:00 2018-10-12T17:29:05.840-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS MS MS99-012 Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0489 1999-05-17T00:00:00.000-04:00 2018-10-12T17:29:06.027-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov MS MS99-015 MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 CVE-1999-0490 1999-04-21T00:00:00.000-04:00 2018-10-12T17:29:06.200-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS MS MS99-012 MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag. cpe:/a:gnu:bash:1.14.0 cpe:/a:gnu:bash:1.14.1 cpe:/a:gnu:bash:1.14.2 cpe:/a:gnu:bash:1.14.3 cpe:/a:gnu:bash:1.14.4 cpe:/a:gnu:bash:1.14.5 cpe:/a:gnu:bash:1.14.6 cpe:/a:gnu:bash:1.14.7 cpe:/a:gnu:bash:2.0 cpe:/a:gnu:bash:2.01 cpe:/a:gnu:bash:2.01.1 cpe:/a:gnu:bash:2.02 cpe:/a:gnu:bash:2.02.1 cpe:/a:gnu:bash:2.03 cpe:/a:gnu:bash:2.04 cpe:/a:gnu:bash:2.05 cpe:/a:gnu:bash:2.05:a CVE-1999-0491 1999-04-20T00:00:00.000-04:00 2014-12-31T10:18:18.390-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2014-12-31T10:09:30.480-05:00 ALLOWS_USER_ACCESS BID 119 The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. CVE-1999-0492 1999-04-23T00:00:00.000-04:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5.1 CVE-1999-0493 1999-06-07T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990103 SUN almost has a clue! (automountd) SUN 00186 CERT CA-99-05 CIAC J-045 BID 450 rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd. cpe:/a:wingate:wingate CVE-1999-0494 1998-07-01T00:00:00.000-04:00 2008-09-09T08:34:38.913-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in WinGate proxy through a buffer overflow in POP3. CVE-1999-0495 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0496 1997-01-01T00:00:00.000-05:00 2018-08-13T17:47:01.617-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q146965 A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin. CVE-1999-0497 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Anonymous FTP is enabled. CVE-1999-0498 1991-09-27T00:00:00.000-04:00 2008-09-09T08:34:39.197-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0499 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:39.257-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NETBIOS share information may be published through SNMP registry keys in NT. CVE-1999-0501 1998-06-01T00:00:00.000-04:00 2008-09-09T08:34:39.337-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS A Unix account has a guessable password. cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11 cpe:/o:redhat:linux:6.0 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8 CVE-1999-0502 1998-03-01T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Unix account has a default, null, blank, or missing password. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0503 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:39.460-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS A Windows NT local user or administrator account has a guessable password. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0504 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:56.807-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS A Windows NT local user or administrator account has a default, null, blank, or missing password. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0505 1998-10-01T00:00:00.000-04:00 2008-09-09T08:34:56.883-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS A Windows NT domain user or administrator account has a guessable password. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0506 1998-10-01T00:00:00.000-04:00 2008-09-09T08:34:56.977-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS A Windows NT domain user or administrator account has a default, null, blank, or missing password. CVE-1999-0507 1998-04-01T00:00:00.000-05:00 2008-09-09T08:34:57.040-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An account on a router, firewall, or other network device has a guessable password. CVE-1999-0508 1998-06-01T00:00:00.000-04:00 2008-09-09T08:34:57.117-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An account on a router, firewall, or other network device has a default, null, blank, or missing password. CVE-1999-0509 1996-05-29T00:00:00.000-04:00 2008-09-09T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands. CVE-1999-0510 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:57.243-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A router or firewall allows source routed packets from arbitrary hosts. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0511 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:57.320-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS IP forwarding is enabled on a machine which is not a router or firewall. CVE-1999-0512 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. cpe:/o:digital:unix:3.2g cpe:/o:digital:unix:4.0 cpe:/o:digital:unix:4.0a cpe:/o:digital:unix:4.0b cpe:/o:digital:unix:4.0c cpe:/o:digital:unix:4.0d cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.1 cpe:/o:netbsd:netbsd:1.2 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0513 1998-01-05T00:00:00.000-05:00 2018-10-30T12:26:22.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. CVE-1999-0514 1998-03-01T00:00:00.000-05:00 2008-09-09T08:34:57.523-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target. CVE-1999-0515 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv. CVE-1999-0516 1998-08-01T00:00:00.000-04:00 2008-09-09T08:34:57.663-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An SNMP community name is guessable. cpe:/o:hp:hp-ux:10 cpe:/o:hp:hp-ux:11.00 cpe:/o:sun:sunos:5.0 CVE-1999-0517 1997-01-01T00:00:00.000-05:00 2018-10-30T12:25:12.013-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An SNMP community name is the default (e.g. public), null, or missing. cpe:/o:microsoft:windows_95 CVE-1999-0518 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:57.837-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A NETBIOS/SMB share password is guessable. cpe:/a:microsoft:outlook:2000 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_nt CVE-1999-0519 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:57.913-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A NETBIOS/SMB share password is the default, null, or missing. CVE-1999-0520 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system-critical NETBIOS/SMB share has inappropriate access control. CVE-1999-0521 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:58.057-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An NIS domain name is easily guessable. CVE-1999-0522 1996-05-28T00:00:00.000-04:00 2008-09-09T08:34:58.117-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate. CVE-1999-0523 1999-01-01T00:00:00.000-05:00 2010-12-01T00:00:00.000-05:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ICMP echo (ping) is allowed from arbitrary hosts. cpe:/o:apple:mac_os cpe:/o:apple:mac_os_x cpe:/o:cisco:ios cpe:/o:hp:hp-ux cpe:/o:hp:tru64 cpe:/o:ibm:aix cpe:/o:ibm:os2 cpe:/o:linux:linux_kernel cpe:/o:microsoft:all_windows:abstract_cpe cpe:/o:novell:netware cpe:/o:santa_cruz_operation:sco_unix cpe:/o:windriver:bsdos CVE-1999-0524 1997-08-01T00:00:00.000-04:00 2017-07-10T21:29:00.430-04:00 0.0 LOCAL LOW NONE NONE NONE NONE http://nvd.nist.gov MISC http://descriptions.securescout.com/tc/11010 MISC http://descriptions.securescout.com/tc/11011 CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 MISC http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1434 XF icmp-netmask(306) XF icmp-timestamp(322) CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10053 ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. CVE-1999-0525 1997-01-01T00:00:00.000-05:00 2014-11-24T14:41:36.463-05:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS IP traceroute is allowed from arbitrary hosts. cpe:/a:x.org:x11:7.1_1.1.0 CVE-1999-0526 1997-07-01T00:00:00.000-04:00 2008-09-09T08:34:59.133-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CERT-VN VU#704969 An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server. CVE-1999-0527 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten. CVE-1999-0528 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of. CVE-1999-0529 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc. CVE-1999-0530 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system is operating in "promiscuous" mode which allows it to perform packet sniffing. CVE-1999-0531 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "An SMTP service supports EXPN, VRFY, HELP, ESMTP, and/or EHLO." CVE-1999-0532 1997-07-01T00:00:00.000-04:00 2008-09-09T08:34:59.493-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A DNS server allows zone transfers. CVE-1999-0533 1997-07-01T00:00:00.000-04:00 2008-09-09T08:34:59.557-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A DNS server allows inverse queries. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0534 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:59.617-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0535 1997-01-01T00:00:00.000-05:00 2008-09-09T08:34:59.697-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness. cpe:/a:microsoft:ie:6.0.2900 cpe:/a:netscape:communicator CVE-1999-0537 1998-04-01T00:00:00.000-05:00 2008-09-09T08:34:59.757-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc. CVE-1999-0539 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A trust relationship exists between two Unix hosts. CVE-1999-0541 1997-07-01T00:00:00.000-04:00 2008-09-09T08:34:59.897-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A password for accessing a WWW URL is guessable. cpe:/o:microsoft:windows_nt CVE-1999-0546 1998-10-01T00:00:00.000-04:00 2008-09-09T08:34:59.960-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The Windows NT guest account is enabled. CVE-1999-0547 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An SSH server allows authentication through the .rhosts file. CVE-1999-0548 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A superfluous NFS server is running, but it is not importing or exporting any file systems. cpe:/o:microsoft:windows_nt CVE-1999-0549 1999-01-01T00:00:00.000-05:00 2008-09-05T00:00:00.000-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Windows NT automatically logs in an administrator upon rebooting. CVE-1999-0550 1997-01-01T00:00:00.000-05:00 2008-09-09T08:35:00.243-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS A router's routing tables can be obtained from arbitrary hosts. cpe:/a:hp:openmail:4.1 cpe:/a:hp:openmail:5.1 cpe:/a:hp:openmail:5.10 CVE-1999-0551 1998-04-01T00:00:00.000-05:00 2008-09-09T08:35:00.397-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX9804-078 HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests. CVE-1999-0554 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NFS exports system-critical data to the world, e.g. / or a password file. CVE-1999-0555 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Unix account with a name other than "root" has UID 0, i.e. root privileges. CVE-1999-0556 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Two or more Unix accounts have the same UID. CVE-1999-0559 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system-critical Unix file or directory has inappropriate permissions. cpe:/o:microsoft:windows_nt CVE-1999-0560 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:30.513-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system-critical Windows NT file or directory has inappropriate permissions. CVE-1999-0561 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IIS has the #exec function enabled for Server Side Include (SSI) files. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0562 1997-01-01T00:00:00.000-05:00 2017-10-18T21:29:00.407-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS The registry in Windows NT can be accessed remotely by users who are not administrators. CVE-1999-0564 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled. CVE-1999-0565 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Sendmail alias allows input to be piped to a program. cpe:/o:ibm:aix CVE-1999-0566 1997-08-01T00:00:00.000-04:00 2008-09-09T08:35:04.587-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities. cpe:/o:sun:solaris CVE-1999-0568 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:31.217-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 rpc.admind in Solaris is not running in a secure mode. CVE-1999-0569 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file. cpe:/o:microsoft:windows_nt CVE-1999-0570 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:31.450-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Windows NT is not using a password filter utility, e.g. PASSFILT.DLL. CVE-1999-0571 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0572 1997-01-01T00:00:00.000-05:00 2008-09-09T00:00:00.000-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks. cpe:/o:microsoft:windows_nt CVE-1999-0575 1997-01-01T00:00:00.000-05:00 2008-09-09T08:35:05.023-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking. cpe:/o:microsoft:windows_nt CVE-1999-0576 1997-01-01T00:00:00.000-05:00 2008-09-09T08:35:05.103-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories. cpe:/o:microsoft:windows_nt CVE-1999-0577 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:32.107-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories. cpe:/o:microsoft:windows_nt CVE-1999-0578 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:32.247-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. cpe:/o:microsoft:windows_nt CVE-1999-0579 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:32.390-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. CVE-1999-0580 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions. cpe:/o:microsoft:windows_nt CVE-1999-0581 1999-01-01T00:00:00.000-05:00 2008-09-05T16:17:32.623-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0582 1997-01-01T00:00:00.000-05:00 2008-09-09T08:35:05.493-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc. CVE-1999-0583 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 There is a one-way or two-way trust relationship between Windows NT domains. CVE-1999-0584 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT file system is not NTFS. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:3.5.1:sp1 cpe:/o:microsoft:windows_nt:3.5.1:sp2 cpe:/o:microsoft:windows_nt:3.5.1:sp3 cpe:/o:microsoft:windows_nt:3.5.1:sp5 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0585 2000-07-01T00:00:00.000-04:00 2008-09-09T08:35:05.697-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT administrator account has the default name of Administrator. CVE-1999-0586 1999-01-01T00:00:00.000-05:00 2014-11-04T08:52:09.123-05:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A network service is running on a nonstandard port. CVE-1999-0587 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data. CVE-1999-0588 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A filter in a router or firewall allows unusual fragmented packets. CVE-1999-0589 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system-critical Windows NT registry key has inappropriate permissions. cpe:/o:apple:mac_os cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:3.5.1:sp1 cpe:/o:microsoft:windows_nt:3.5.1:sp2 cpe:/o:microsoft:windows_nt:3.5.1:sp3 cpe:/o:microsoft:windows_nt:3.5.1:sp5 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0590 2000-06-01T00:00:00.000-04:00 2008-09-09T08:35:06.040-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system does not present an appropriate legal message or warning to a user who is accessing it. CVE-1999-0591 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An event log in Windows NT has inappropriate access permissions. CVE-1999-0592 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The Logon box of a Windows NT system displays the name of the last user who logged in. cpe:/o:microsoft:windows_nt CVE-1999-0593 1999-01-01T00:00:00.000-05:00 2017-07-10T21:29:00.523-04:00 4.9 LOCAL LOW NONE NONE NONE COMPLETE http://nvd.nist.gov CONFIRM http://technet.microsoft.com/en-us/library/cc722469.aspx MISC http://www.microsoft.com/technet/archive/winntas/deploy/confeat/06wntpcc.mspx?mfr=true XF nt-shutdown-without-logon(1291) The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in. CVE-1999-0594 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0595 2000-01-20T00:00:00.000-05:00 2008-09-09T08:35:06.367-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. CVE-1999-0596 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT log file has an inappropriate maximum size or retention period. CVE-1999-0597 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire. CVE-1999-0598 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection. CVE-1999-0599 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers. CVE-1999-0600 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A network intrusion detection system (IDS) does not verify the checksum on a packet. CVE-1999-0601 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. CVE-1999-0602 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A network intrusion detection system (IDS) does not properly reassemble fragmented packets. CVE-1999-0603 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc. cpe:/a:selena_sol:selena_sol_webstore:1.0 CVE-1999-0604 1999-04-20T00:00:00.000-04:00 2016-10-17T21:59:25.707-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990420 Shopping Carts exposing CC data An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. cpe:/a:austin_contract_computing:merchant_order_form:1.0 cpe:/a:austin_contract_computing:merchant_order_form:1.2 CVE-1999-0605 1999-04-01T00:00:00.000-05:00 2016-10-17T21:59:26.893-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990420 Shopping Carts exposing CC data An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. cpe:/a:seaside_enterprises:ezmall:2000 CVE-1999-0606 1999-04-01T00:00:00.000-05:00 2016-10-17T21:59:28.080-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990420 Shopping Carts exposing CC data An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information. cpe:/a:i-soft:quikstore CVE-1999-0607 1999-04-20T00:00:00.000-04:00 2016-10-17T21:59:29.393-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990420 Shopping Carts exposing CC data quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges. cpe:/a:pdgsoft:pdg_shopping_cart:1.5 CVE-1999-0608 1999-04-01T00:00:00.000-05:00 2017-10-09T21:29:00.763-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990420 Shopping Carts exposing CC data CONFIRM http://www.pdgsoft.com/Security/security.html. XF pdgsoftcart-misconfig(3857) An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information. cpe:/a:mercantec:softcart CVE-1999-0609 1999-04-01T00:00:00.000-05:00 2016-10-17T21:59:31.957-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990420 Shopping Carts exposing CC data An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. cpe:/a:mountain_network_systems:webcart CVE-1999-0610 1999-04-01T00:00:00.000-05:00 2016-10-17T21:59:33.083-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990420 Shopping Carts exposing CC data An incorrect configuration of the Webcart CGI program could disclose private information. CVE-1999-0611 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system-critical Windows NT registry key has an inappropriate value. cpe:/a:gnu:finger_service cpe:/a:gnu:fingerd cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-0612 1997-03-01T00:00:00.000-05:00 2008-09-09T08:35:07.647-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A version of finger is running that exposes valid user information to any entity on the network. CVE-1999-0613 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The rpc.sprayd service is running. CVE-1999-0614 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The FTP service is running." CVE-1999-0615 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The SNMP service is running." CVE-1999-0616 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The TFTP service is running." CVE-1999-0617 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The SMTP service is running." CVE-1999-0618 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The rexec service is running. CVE-1999-0619 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The Telnet service is running." CVE-1999-0620 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A component service related to NIS is running." CVE-1999-0621 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A component service related to NETBIOS is running." CVE-1999-0622 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A component service related to DNS service is running." CVE-1999-0623 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The X Windows service is running." CVE-1999-0624 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The rstat/rstatd service is running. CVE-1999-0625 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The rpc.rquotad service is running. cpe:/a:sun:rpc.ruserd CVE-1999-0626 1997-01-01T00:00:00.000-05:00 2008-09-09T08:35:08.680-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A version of rusers is running that exposes valid user information to any entity on the network. cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 CVE-1999-0627 1992-03-01T00:00:00.000-05:00 2008-09-09T08:35:08.743-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:ibm:aix:4.2 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:netbsd:netbsd:2.0.4 CVE-1999-0628 1997-07-01T00:00:00.000-04:00 2008-09-09T08:35:08.820-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The rwho/rwhod service is running, which exposes machine status and user information. CVE-1999-0629 1999-01-01T00:00:00.000-05:00 2010-12-01T00:00:00.000-05:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The ident/identd service is running. CVE-1999-0630 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The NT Alerter and Messenger services are running. CVE-1999-0631 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The NFS service is running." CVE-1999-0632 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The RPC portmapper service is running. CVE-1999-0633 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The HTTP/WWW service is running." CVE-1999-0634 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The SSH service is running." CVE-1999-0635 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FULLDISC 20060116 ACT P202S VoIP wireless phone multiple undocumented ports/services The echo service is running. CVE-1999-0636 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The discard service is running. CVE-1999-0637 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The systat service is running. CVE-1999-0638 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The daytime service is running. CVE-1999-0639 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The chargen service is running. CVE-1999-0640 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The Gopher service is running. CVE-1999-0641 1999-01-01T00:00:00.000-05:00 2007-07-13T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The UUCP service is running. CVE-1999-0642 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A POP service is running." CVE-1999-0643 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The IMAP service is running." CVE-1999-0644 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The NNTP news service is running." CVE-1999-0645 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The IRC service is running." CVE-1999-0646 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The LDAP service is running." CVE-1999-0647 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The bootparam (bootparamd) service is running." CVE-1999-0648 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The X25 service is running." CVE-1999-0649 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "The FSP service is running." CVE-1999-0650 1999-01-01T00:00:00.000-05:00 2017-07-10T21:29:00.603-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov XF netstat(72) The netstat service is running, which provides sensitive information to remote attackers. CVE-1999-0651 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The rsh/rlogin service is running. CVE-1999-0652 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A database service is running, e.g. a SQL server, Oracle, or mySQL." CVE-1999-0653 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A component service related to NIS+ is running. CVE-1999-0654 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The OS/2 or POSIX subsystem in NT is enabled. CVE-1999-0655 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is not about any specific product, protocol, or design, so it is out of scope of CVE. Notes: the former description is: "A service may include useful information in its banner or help function (such as the name and version), making it useful for information gathering activities." cpe:/o:linux:linux_kernel CVE-1999-0656 1999-01-01T00:00:00.000-05:00 2017-07-10T21:29:00.647-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MISC http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638 XF linux-ugidd(348) The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names. CVE-1999-0657 1999-01-01T00:00:00.000-05:00 2007-07-21T00:00:00.000-04:00 0.0 NETWORK LOW NONE NONE NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 WinGate is being used. CVE-1999-0658 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "DCOM is running." CVE-1999-0659 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A Windows NT Primary Domain Controller (PDC) or Backup Domain Controller (BDC) is present." CVE-1999-0660 1999-01-01T00:00:00.000-05:00 2008-08-01T00:00:00.000-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is not about any specific product, protocol, or design, so it is out of scope of CVE. It might be more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A hacker utility, back door, or Trojan Horse is installed on a system, e.g. NetBus, Back Orifice, Rootkit, etc." CVE-1999-0661 1999-01-01T00:00:00.000-05:00 2016-10-17T21:59:34.207-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 20020801 trojan horse in recent openssh (version 3.4 portable 1) BUGTRAQ 20020801 OpenSSH Security Advisory: Trojaned Distribution Files BUGTRAQ 20021009 Re: CERT Advisory CA-2002-28 Trojan Horse Sendmail CERT CA-1994-07 CERT CA-1994-14 CERT CA-1999-01 CERT CA-1999-02 CERT CA-2002-28 XF sendmail-backdoor(10313) BID 5921 A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6. CVE-1999-0662 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete. CVE-1999-0663 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified. CVE-1999-0664 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An application-critical Windows NT registry key has inappropriate permissions. CVE-1999-0665 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 An application-critical Windows NT registry key has an inappropriate value. cpe:/h:arp_protocol:arp_protocol CVE-1999-0667 1997-09-19T00:00:00.000-04:00 2008-09-09T08:35:12.070-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 CVE-1999-0668 1999-08-21T00:00:00.000-04:00 2018-10-12T17:29:06.357-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CIAC J-064 MSKB Q240308 BID 598 MS MS99-032 The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 CVE-1999-0669 1999-09-01T00:00:00.000-04:00 2008-09-09T08:35:12.210-04:00 4.0 NETWORK HIGH NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC J-064 The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 CVE-1999-0670 1999-09-01T00:00:00.000-04:00 2018-10-12T17:29:06.777-04:00 4.0 NETWORK HIGH NONE PARTIAL PARTIAL NONE http://nvd.nist.gov CIAC J-064 MS MS99-032 Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands. cpe:/a:toxsoft:nextftp:1.82 CVE-1999-0671 1999-08-03T00:00:00.000-04:00 2008-09-09T08:35:12.617-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 572 Buffer overflow in ToxSoft NextFTP client through CWD command. cpe:/a:fujitsu:chocoa:1.0beta7r CVE-1999-0672 1999-08-01T00:00:00.000-04:00 2008-09-09T08:35:12.680-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 573 Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics. cpe:/a:crear:almail32:1.10 CVE-1999-0673 1999-08-08T00:00:00.000-04:00 2008-09-09T08:35:12.757-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 574 Buffer overflow in ALMail32 POP3 client via From: or To: headers. cpe:/o:netbsd:netbsd:1.0 cpe:/o:netbsd:netbsd:1.1 cpe:/o:netbsd:netbsd:1.2 cpe:/o:netbsd:netbsd:1.2.1 cpe:/o:netbsd:netbsd:1.3 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:netbsd:netbsd:1.3.2 cpe:/o:netbsd:netbsd:1.3.3 cpe:/o:netbsd:netbsd:1.4 cpe:/o:openbsd:openbsd:2.0 cpe:/o:openbsd:openbsd:2.1 cpe:/o:openbsd:openbsd:2.2 cpe:/o:openbsd:openbsd:2.3 cpe:/o:openbsd:openbsd:2.4 cpe:/o:openbsd:openbsd:2.5 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0674 1999-08-09T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC J-067 BID 570 The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. cpe:/a:checkpoint:firewall-1:3.0 cpe:/a:checkpoint:firewall-1:4.0 CVE-1999-0675 1999-08-09T00:00:00.000-04:00 2008-09-09T08:35:12.883-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990809 FW1 UDP Port 0 DoS BID 576 Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host. cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0676 1999-08-09T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 575 BUGTRAQ 19990808 sdtcm_convert sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack. cpe:/h:ramp_networks:webramp_200i:1.0 cpe:/h:ramp_networks:webramp_m3:1.0 CVE-1999-0677 1999-08-03T00:00:00.000-04:00 2008-09-09T08:35:13.023-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 577 The WebRamp web administration utility has a default password. cpe:/a:apache:http_server cpe:/o:debian:debian_linux:4.0 CVE-1999-0678 1999-01-17T00:00:00.000-05:00 2008-09-09T08:35:13.103-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 318 A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server. cpe:/a:hybrid_network:hybrid_ircd:5.03p7 cpe:/a:hybrid_network:hybrid_ircd:6.0beta58 CVE-1999-0679 1999-08-13T00:00:00.000-04:00 2008-09-09T08:35:13.290-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS CONFIRM http://www.efnet.org/archive/servers/hybrid/ChangeLog BID 581 Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option. cpe:/a:microsoft:terminal_server CVE-1999-0680 1999-08-09T00:00:00.000-04:00 2018-10-12T17:29:06.967-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q238600 CIAC J-057 BID 571 MS MS99-028 Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service. cpe:/a:microsoft:frontpage:97 cpe:/a:microsoft:frontpage:98 cpe:/a:microsoft:personal_web_server:1.0 cpe:/a:microsoft:personal_web_server:1.1 CVE-1999-0681 2001-03-12T00:00:00.000-05:00 2017-10-09T21:29:00.827-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990807 Crash FrontPage Remotely... BID 568 XF frontpage-pws-dos(3117) Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL. cpe:/a:microsoft:exchange_server:5.5 cpe:/a:microsoft:exchange_server:5.5:sp1 cpe:/a:microsoft:exchange_server:5.5:sp2 CVE-1999-0682 1999-08-06T00:00:00.000-04:00 2018-10-12T17:29:07.340-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q237927 CIAC J-056 BID 567 MS MS99-027 Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled. cpe:/a:network_associates:gauntlet_firewall:5.0 CVE-1999-0683 1999-07-30T00:00:00.000-04:00 2008-09-09T08:35:13.570-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 556 Denial of service in Gauntlet Firewall via a malformed ICMP packet. cpe:/a:hp:sendmail:8.8.6 CVE-1999-0684 1999-04-19T00:00:00.000-04:00 2008-09-09T08:35:13.647-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Sendmail 8.8.6 in HPUX. cpe:/a:netscape:communicator:4.5 cpe:/a:netscape:communicator:4.06 cpe:/a:netscape:communicator:4.51 cpe:/a:netscape:communicator:4.61 CVE-1999-0685 1999-09-02T00:00:00.000-04:00 2008-09-09T08:35:13.710-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 618 Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option. cpe:/a:netscape:enterprise_server cpe:/o:hp:hp-ux:10.24 CVE-1999-0686 1999-05-07T00:00:00.000-04:00 2008-09-09T08:35:13.773-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC J-046 HP HPSBUX9906-098 Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL. cpe:/a:cde:cde:1.0.1 cpe:/a:cde:cde:1.0.2 cpe:/a:cde:cde:1.1 cpe:/a:cde:cde:1.2 cpe:/a:cde:cde:2.0 cpe:/a:cde:cde:2.1 cpe:/a:cde:cde:2.120 cpe:/o:digital:unix:4.0d cpe:/o:digital:unix:4.0f cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.1 cpe:/o:ibm:aix:4.3.2 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0687 1999-09-13T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUN 00192 CIAC K-001 BID 637 HP HPSBUX9909-103 The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:11.00 CVE-1999-0688 1999-07-01T00:00:00.000-04:00 2008-09-09T08:35:13.913-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 545 HP HPSBUX9907-101 Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. cpe:/a:cde:cde:1.0.1 cpe:/a:cde:cde:1.0.2 cpe:/a:cde:cde:1.1 cpe:/a:cde:cde:1.2 cpe:/a:cde:cde:2.0 cpe:/a:cde:cde:2.1 cpe:/a:cde:cde:2.120 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0689 1999-09-13T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SUN 00192 BID 636 HP HPSBUX9909-103 The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. cpe:/a:cde:cde cpe:/o:hp:hp-ux:10 CVE-1999-0690 1999-07-01T00:00:00.000-04:00 2008-09-09T08:35:14.057-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC J-053 HP HPSBUX9907-100 HP CDE program includes the current directory in root's PATH variable. cpe:/a:cde:cde:1.0.1 cpe:/a:cde:cde:1.0.2 cpe:/a:cde:cde:1.1 cpe:/a:cde:cde:1.2 cpe:/a:cde:cde:2.0 cpe:/a:cde:cde:2.1 cpe:/o:digital:unix:4.0d cpe:/o:digital:unix:4.0e cpe:/o:digital:unix:4.0f cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.1 cpe:/o:ibm:aix:4.3.2 cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0691 1999-09-13T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SUN 00192 BID 635 HP HPSBUX9909-103 Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. cpe:/o:cray:unicos cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 cpe:/o:sgi:irix:6.5.1 cpe:/o:sgi:irix:6.5.2 cpe:/o:sgi:irix:6.5.3 cpe:/o:sgi:irix:6.5.4 CVE-1999-0692 1999-07-19T00:00:00.000-04:00 2008-09-09T08:35:14.180-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19990701-01-P CIAC J-052 The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges. cpe:/o:hp:hp-ux:10 cpe:/o:hp:hp-ux:11 cpe:/o:ibm:aix:4 cpe:/o:sco:unixware:7 CVE-1999-0693 2000-03-02T00:00:00.000-05:00 2018-05-02T21:29:03.397-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SUN 00192 BID 641 HP HPSBUX9909-103 Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.3 CVE-1999-0694 1999-08-11T00:00:00.000-04:00 2008-09-09T08:35:14.320-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC J-055 Denial of service in AIX ptrace system call allows local users to crash the system. cpe:/a:sybase:powerdynamo:3.0.652 CVE-1999-0695 2000-04-11T00:00:00.000-04:00 2008-09-09T08:35:14.383-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 620 The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack. cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:11.00 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0696 1999-07-01T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00188 CIAC J-051 HP HPSBUX9908-102 Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). cpe:/o:sco:openserver:5.0.4 cpe:/o:sco:openserver:5.0.5 CVE-1999-0697 1999-09-09T00:00:00.000-04:00 2008-09-09T08:35:14.523-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 621 SCO Doctor allows local users to gain root privileges through a Tools option. CVE-1999-0698 1999-01-01T00:00:00.000-05:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux. cpe:/a:bluestone:sapphire_web:5.0 CVE-1999-0699 2000-04-11T00:00:00.000-04:00 2008-09-09T08:35:14.663-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 623 The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 CVE-1999-0700 1999-07-29T00:00:00.000-04:00 2018-10-12T17:29:07.700-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov MSKB Q237185 MS MS99-026 Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0701 2000-04-11T00:00:00.000-04:00 2018-10-12T17:29:07.933-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q173039 BID 626 MS MS99-036 After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 CVE-1999-0702 1999-09-10T00:00:00.000-04:00 2018-10-12T17:29:08.247-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov MSKB Q241361 BID 627 MS MS99-037 Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability. cpe:/o:bsdi:bsd_os:3.2 cpe:/o:freebsd:freebsd:3.2 cpe:/o:openbsd:openbsd:2.5 CVE-1999-0703 1999-08-03T00:00:00.000-04:00 2008-09-09T08:35:14.947-04:00 3.6 LOCAL LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC J-066 OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. cpe:/o:bsdi:bsd_os:3.1 cpe:/o:bsdi:bsd_os:4.0.1 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:6.0::i386 CVE-1999-0704 1999-09-16T00:00:00.000-04:00 2008-09-09T08:35:15.007-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 614 Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. cpe:/a:isc:inn cpe:/o:redhat:linux:6.0 CVE-1999-0705 1999-09-01T00:00:00.000-04:00 2008-09-09T08:35:15.070-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 616 Buffer overflow in INN inews program. cpe:/a:isc:inn:1.5.1 cpe:/a:isc:inn:1.7 cpe:/a:isc:inn:1.7.2 cpe:/a:isc:inn:2.0 cpe:/a:isc:inn:2.1 cpe:/a:isc:inn:2.2 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:6.0::i386 CVE-1999-0706 2000-04-27T00:00:00.000-04:00 2008-09-09T08:35:15.147-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 583 Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. cpe:/a:hp:visualize_conference_ftp cpe:/o:hp:hp-ux:10.20 CVE-1999-0707 1999-07-01T00:00:00.000-04:00 2008-09-09T08:35:15.210-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS CIAC J-050 BID 493 HP HPSBUX9906-099 The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization. cpe:/a:infodrom:cfingerd:1.4.2 CVE-1999-0708 1999-09-21T00:00:00.000-04:00 2008-09-09T08:35:15.273-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 651 Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field. cpe:/o:redhat:linux:5.2 cpe:/o:redhat:linux:6.0 CVE-1999-0710 1999-07-25T00:00:00.000-04:00 2018-05-02T21:29:03.490-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS FEDORA FLSA-2006:152809 DEBIAN DSA-576 FEDORA FEDORA-2005-373 CONFIRM http://www.redhat.com/support/errata/archives/rh52-errata-general.html#squid REDHAT RHSA-1999:025 REDHAT RHSA-2005:489 BID 2059 XF http-cgi-cachemgr(2385) The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems. cpe:/a:oracle:oracle8i:8.0.3 cpe:/a:oracle:oracle8i:8.0.4 cpe:/a:oracle:oracle8i:8.0.5 cpe:/a:oracle:oracle8i:8.0.5.1 cpe:/a:oracle:oracle8i:8.1.5 CVE-1999-0711 1999-04-29T00:00:00.000-04:00 2016-10-17T21:59:35.457-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19990506 Oracle Security Followup, patch and FAQ: setuid on oratclsh BUGTRAQ 19990430 *Huge* security hole in Oracle 8.0.5 with Intellegent agent installed The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root. cpe:/a:caldera:coas:1.0.5 cpe:/a:caldera:coas:1.0.6 cpe:/a:caldera:coas:1.0.7 cpe:/o:caldera:openlinux:2.2 CVE-1999-0712 1999-04-27T00:00:00.000-04:00 2008-09-09T08:35:15.523-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable. cpe:/a:cde:cde cpe:/a:mit:kerberos:5 cpe:/a:transarc:afs cpe:/o:digital:unix CVE-1999-0713 1999-06-11T00:00:00.000-04:00 2008-09-09T08:35:15.603-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC J-044 The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges. cpe:/o:digital:unix:3.2g cpe:/o:digital:unix:4.0 cpe:/o:digital:unix:4.0a cpe:/o:digital:unix:4.0b cpe:/o:digital:unix:4.0c cpe:/o:digital:unix:4.0d cpe:/o:digital:unix:4.0e CVE-1999-0714 1999-02-15T00:00:00.000-05:00 2008-09-09T08:35:15.663-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Vulnerability in Compaq Tru64 UNIX edauth command. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0715 1999-05-20T00:00:00.000-04:00 2018-10-12T17:29:08.543-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q230677 MS MS99-016 Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0716 1999-05-17T00:00:00.000-04:00 2018-10-12T17:29:08.810-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q231605 MS MS99-015 Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. cpe:/a:microsoft:excel cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0717 1999-05-07T00:00:00.000-04:00 2018-10-12T17:29:09.077-04:00 2.6 NETWORK HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov MSKB Q231304 MS MS99-014 A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. cpe:/a:ibm:gina:1.0 CVE-1999-0718 2001-03-12T00:00:00.000-05:00 2017-10-09T21:29:00.903-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 19990823 IBM Gina security warning BID 608 XF ibm-gina-group-add(3166) IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key. cpe:/a:gnu:gnumeric:0.27 CVE-1999-0719 1999-08-05T00:00:00.000-04:00 2008-09-09T08:35:16.007-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 563 The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code. cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0720 1999-08-23T00:00:00.000-04:00 2008-09-09T08:35:16.070-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 597 BUGTRAQ 19990823 [Linux] glibc 2.1.x / wu-ftpd <=2.5 / BeroFTPD / lynx / vlock / mc / glibc 2.0.x The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0721 1999-07-20T00:00:00.000-04:00 2018-10-12T17:29:09.327-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov MSKB Q231457 CIAC J-049 MS MS99-020 Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. cpe:/h:sun:cobalt_raq_2 CVE-1999-0722 1999-08-08T00:00:00.000-04:00 2008-09-09T08:35:17.993-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 558 The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0723 1999-06-23T00:00:00.000-04:00 2018-10-12T17:29:09.637-04:00 7.1 NETWORK MEDIUM NONE NONE NONE COMPLETE http://nvd.nist.gov MSKB Q233323 CIAC J-049 BID 478 MS MS99-021 The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input. cpe:/o:openbsd:openbsd:2.5 CVE-1999-0724 1999-08-12T00:00:00.000-04:00 2008-09-09T08:35:18.133-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function. cpe:/a:microsoft:internet_information_server:3.0:::ja cpe:/a:microsoft:internet_information_server:3.0:::ko cpe:/a:microsoft:internet_information_server:3.0:::zh cpe:/a:microsoft:internet_information_server:4.0:::ja cpe:/a:microsoft:internet_information_server:4.0:::ko cpe:/a:microsoft:internet_information_server:4.0:::zh CVE-1999-0725 1999-08-19T00:00:00.000-04:00 2018-10-12T17:29:10.027-04:00 7.1 NETWORK MEDIUM NONE COMPLETE NONE NONE http://nvd.nist.gov MSKB Q233335 BID 477 MS MS99-022 XF iis-double-byte-code-page(2302) When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page". cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4 CVE-1999-0726 1999-06-30T00:00:00.000-04:00 2018-10-12T17:29:10.480-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov MSKB Q234557 BID 499 MS MS99-023 An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header. cpe:/o:openbsd:openbsd:2.5 CVE-1999-0727 1999-08-06T00:00:00.000-04:00 2008-09-09T08:35:18.337-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise CVE-1999-0728 1999-07-06T00:00:00.000-04:00 2018-10-12T17:29:10.793-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov MSKB Q236359 MS MS99-024 A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them. cpe:/a:ibm:lotus_domino_server:4.6 CVE-1999-0729 2001-03-12T00:00:00.000-05:00 2008-09-09T08:35:18.477-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC J-061 BID 601 ISS 19990823 Denial of Service Attack against Lotus Notes Domino Server 4.6 Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request. cpe:/o:debian:debian_linux:4.0 CVE-1999-0730 1999-06-12T00:00:00.000-04:00 2008-09-05T16:17:50.577-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack. cpe:/o:caldera:openlinux:1.3 cpe:/o:caldera:openlinux:2.2 CVE-1999-0731 1999-06-23T00:00:00.000-04:00 2008-09-09T08:35:18.603-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 489 The KDE klock program allows local users to unlock a session using malformed input. cpe:/o:debian:debian_linux:4.0 CVE-1999-0732 1999-08-19T00:00:00.000-04:00 2016-09-16T21:59:00.307-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links. cpe:/a:vmware:workstation:1.0.1 CVE-1999-0733 1999-06-26T00:00:00.000-04:00 2008-09-09T08:35:18.743-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 490 Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable. cpe:/a:cisco:ciscosecure CVE-1999-0734 1999-08-19T00:00:00.000-04:00 2019-10-09T18:43:07.980-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS XF ciscosecure-read-write(3133) CISCO 19990819 CiscoSecure Access Control Server for UNIX Remote Administration Vulnerability A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. cpe:/a:kde:k-mail:1.1 CVE-1999-0735 2000-01-04T00:00:00.000-05:00 2008-09-09T08:35:18.883-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 REDHAT RHSA-1999:015-01 BID 300 KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0736 1999-05-07T00:00:00.000-04:00 2018-10-12T17:29:11.077-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-013 The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0737 1999-05-07T00:00:00.000-04:00 2018-10-12T17:29:11.310-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-013 The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0738 1999-05-07T00:00:00.000-04:00 2018-10-12T17:29:11.450-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-013 The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0739 1999-05-07T00:00:00.000-04:00 2018-10-12T17:29:11.560-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-013 The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.2 cpe:/o:redhat:linux:6.0 CVE-1999-0740 1999-08-19T00:00:00.000-04:00 2008-09-09T08:35:19.210-04:00 6.4 NETWORK LOW NONE PARTIAL NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 594 Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable. cpe:/a:qms:crownnet_unix_utilities:2060 CVE-1999-0741 1999-08-19T00:00:00.000-04:00 2008-09-09T08:35:19.290-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 593 QMS CrownNet Unix Utilities for 2060 allows root to log on without a password. cpe:/o:debian:debian_linux:2.1 CVE-1999-0742 1999-06-22T00:00:00.000-04:00 2008-09-09T08:35:19.353-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 480 The Debian mailman package uses weak authentication, which allows attackers to gain privileges. cpe:/o:debian:debian_linux:4.0 CVE-1999-0743 1999-08-20T00:00:00.000-04:00 2018-05-02T21:29:03.660-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov XF trn-symlinks(3144) Trn allows local users to overwrite other users' files via symlinks. cpe:/a:netscape:enterprise_server cpe:/a:netscape:fasttrack_server CVE-1999-0744 2000-01-04T00:00:00.000-05:00 2008-09-05T16:17:52.527-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 603 Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request. cpe:/o:ibm:aix:2.2.1 cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 CVE-1999-0745 1999-08-18T00:00:00.000-04:00 2008-09-09T08:35:19.557-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC J-059 BID 590 Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. cpe:/o:slackware:slackware_linux:3.2 cpe:/o:slackware:slackware_linux:3.6 cpe:/o:suse:suse_linux:4.4 cpe:/o:suse:suse_linux:4.4.1 cpe:/o:suse:suse_linux:5.0 cpe:/o:suse:suse_linux:5.1 cpe:/o:suse:suse_linux:5.2 cpe:/o:suse:suse_linux:5.3 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.2 CVE-1999-0746 1999-08-16T00:00:00.000-04:00 2008-09-09T08:35:19.633-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 587 A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service. cpe:/o:bsdi:bsd_os:4.0.1 CVE-1999-0747 1999-08-18T00:00:00.000-04:00 2008-09-09T08:35:19.697-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 589 BUGTRAQ 19990816 Symmetric Multiprocessing (SMP) Vulnerbility in BSDi 4.0.1 Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load. cpe:/o:redhat:linux:6.0 CVE-1999-0748 1999-06-24T00:00:00.000-04:00 2008-09-09T08:35:19.773-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Buffer overflows in Red Hat net-tools package. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold CVE-1999-0749 1999-08-16T00:00:00.000-04:00 2018-10-12T17:29:11.700-04:00 2.6 NETWORK HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov BID 586 MS MS99-033 Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument. cpe:/a:microsoft:hotmail CVE-1999-0750 1999-09-13T00:00:00.000-04:00 2008-09-09T08:35:19.913-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 630 Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account. cpe:/a:netscape:enterprise_server:3.5.1 cpe:/a:netscape:enterprise_server:3.6:sp2 CVE-1999-0751 1999-09-13T00:00:00.000-04:00 2018-05-02T21:29:03.757-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 631 XF netscape-accept-bo(3256) Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch. cpe:/a:netscape:enterprise_server CVE-1999-0752 1999-07-06T00:00:00.000-04:00 2008-09-09T08:35:20.057-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. cpe:/a:hughes:msql:2.0 cpe:/a:hughes:msql:2.0.10 CVE-1999-0753 1999-08-17T00:00:00.000-04:00 2008-09-09T08:35:20.147-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 591 The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories. cpe:/a:isc:inn CVE-1999-0754 1999-05-11T00:00:00.000-04:00 2008-09-09T08:35:20.243-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-011.0 MISC http://www.redhat.com/corp/support/errata/inn99_05_22.html BID 255 The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0755 1999-05-27T00:00:00.000-04:00 2018-10-12T17:29:11.873-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q230681 MS MS99-017 Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option. cpe:/a:allaire:coldfusion_server:4.0 cpe:/a:allaire:coldfusion_server:4.0.1 CVE-1999-0756 2001-03-12T00:00:00.000-05:00 2017-10-09T21:29:01.047-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov ALLAIRE ASB99-07 XF coldfusion-admin-dos(2207) ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility. cpe:/a:allaire:coldfusion_server CVE-1999-0757 2001-03-12T00:00:00.000-05:00 2017-12-18T21:29:00.673-05:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov ALLAIRE ASB99-08 XF coldfusion-encryption(2208) The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates. cpe:/a:netscape:enterprise_server:3.5.1 cpe:/a:netscape:fasttrack_server:3.01 CVE-1999-0758 2001-03-12T00:00:00.000-05:00 2008-09-09T08:35:20.807-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL. cpe:/a:fuseware:fusemail:2.7 CVE-1999-0759 1999-09-13T00:00:00.000-04:00 2008-09-09T08:35:20.913-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CONFIRM http://www.crosswinds.net/~fuseware/faq.html#8 BID 634 Buffer overflow in FuseMAIL POP service via long USER and PASS commands. cpe:/a:allaire:coldfusion_server:2.0 cpe:/a:allaire:coldfusion_server:3.0 cpe:/a:allaire:coldfusion_server:3.0.1 cpe:/a:allaire:coldfusion_server:3.1 cpe:/a:allaire:coldfusion_server:3.1.1 cpe:/a:allaire:coldfusion_server:3.1.2 cpe:/a:allaire:coldfusion_server:4.0 cpe:/a:allaire:coldfusion_server:4.0.1 CVE-1999-0760 2001-03-12T00:00:00.000-05:00 2017-10-09T21:29:01.107-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS ALLAIRE ASB99-10 BID 550 XF coldfusion-server-cfml-tags(3288) Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges. cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 CVE-1999-0761 2000-09-16T00:00:00.000-04:00 2008-09-09T08:35:21.057-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 644 Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. cpe:/a:netscape:communicator:4.6::windows_95 cpe:/a:netscape:communicator:4.x cpe:/a:netscape:navigator CVE-1999-0762 1999-05-24T00:00:00.000-04:00 2008-09-09T08:35:21.133-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information. cpe:/o:netbsd:netbsd:1.3 CVE-1999-0763 1999-05-01T00:00:00.000-04:00 2008-09-09T08:35:21.197-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. cpe:/o:netbsd:netbsd:1.3 CVE-1999-0764 1999-05-01T00:00:00.000-04:00 2008-09-09T08:35:21.273-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NetBSD allows ARP packets to overwrite static ARP entries. cpe:/o:sgi:irix:6.0 CVE-1999-0765 1999-05-19T00:00:00.000-04:00 2008-09-09T08:35:21.353-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19990501-01-A BID 262 SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. cpe:/a:microsoft:java_virtual_machine CVE-1999-0766 1999-10-21T00:00:00.000-04:00 2018-10-12T17:29:12.137-04:00 9.3 NETWORK MEDIUM NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q240346 BID 600 MS MS99-031 The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment. cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.7 CVE-1999-0767 1999-09-08T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:6.0::i386 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 CVE-1999-0768 1999-08-25T00:00:00.000-04:00 2008-09-09T08:35:21.557-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 602 Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. cpe:/a:paul_vixie:vixie_cron:3.0_pl1 cpe:/o:caldera:openlinux:2.2 cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:6.0::i386 CVE-1999-0769 1999-08-25T00:00:00.000-04:00 2008-09-09T08:35:21.617-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 611 Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. cpe:/a:checkpoint:firewall-1:3.0 cpe:/a:checkpoint:firewall-1:4.0 CVE-1999-0770 1999-07-29T00:00:00.000-04:00 2008-09-09T08:35:21.680-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 549 Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems. cpe:/a:compaq:insight_management_agent cpe:/a:compaq:power_management:2.0 CVE-1999-0771 1999-05-26T00:00:00.000-04:00 2008-09-09T08:35:37.647-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack. cpe:/a:compaq:insight_management_agent cpe:/a:compaq:power_management:2.0 CVE-1999-0772 1999-06-01T00:00:00.000-04:00 2008-09-09T08:35:37.727-04:00 6.4 NETWORK LOW NONE PARTIAL NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301. cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.7 CVE-1999-0773 1999-05-11T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19990511 Solaris2.6 and 2.7 lpset overflow Buffer overflow in Solaris lpset program allows local users to gain root access. cpe:/a:martin_stover:mars_nwe:0.99 CVE-1999-0774 1999-08-31T00:00:00.000-04:00 2008-09-09T08:35:37.883-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 617 Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names. cpe:/o:cisco:ios:11.2%2814%29gs2 cpe:/o:cisco:ios:11.2%2815%29g CVE-1999-0775 1999-06-10T00:00:00.000-04:00 2008-09-09T08:35:37.947-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list. cpe:/a:computer_software_manufaktur:alibaba:2.0 CVE-1999-0776 1999-05-12T00:00:00.000-04:00 2008-09-09T08:35:38.023-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 19990506 ".."-hole in Alibaba 2.0 Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack. cpe:/a:microsoft:commercial_internet_system:2.5 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-0777 1999-09-23T00:00:00.000-04:00 2018-10-12T17:29:12.433-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS MSKB Q241407 MSKB Q242559 BID 658 MS MS99-039 IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. cpe:/a:xi_graphics:accelerated-x_server:4 cpe:/a:xi_graphics:accelerated-x_server:5 CVE-1999-0778 1999-06-25T00:00:00.000-04:00 2008-09-09T08:35:38.147-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 488 Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter. cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 CVE-1999-0779 1998-09-03T00:00:00.000-04:00 2008-09-09T08:35:38.290-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX9810-086 Denial of service in HP-UX SharedX recserv program. cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:kde:kde:1.0 cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0780 1998-11-18T00:00:00.000-05:00 2016-10-17T21:59:36.910-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19981118 Multiple KDE security vulnerabilities (root compromise) KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:kde:kde:1.0 cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0781 1998-11-18T00:00:00.000-05:00 2016-10-17T21:59:38.177-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19981118 Multiple KDE security vulnerabilities (root compromise) KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables. cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:kde:kde:1.0 cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-0782 1998-11-18T00:00:00.000-05:00 2016-10-17T21:59:39.333-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19981118 Multiple KDE security vulnerabilities (root compromise) KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable. cpe:/o:freebsd:freebsd:2.2 CVE-1999-0783 1998-06-16T00:00:00.000-04:00 2011-03-07T21:01:10.657-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC I-057 FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. cpe:/a:oracle:database_server:7.1.4 cpe:/a:oracle:database_server:7.3.3 CVE-1999-0784 2001-03-12T00:00:00.000-05:00 2008-09-05T16:17:58.370-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19981228 Oracle8 TNSLSNR DoS BUGTRAQ 19990104 Re: Fw:"NERP" DoS attack possible in Oracle NTBUGTRAQ 19980827 NERP DoS attack possible in Oracle Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP. cpe:/a:isc:inn:2.0 cpe:/a:isc:inn:2.1 cpe:/a:isc:inn:2.2 CVE-1999-0785 1999-05-11T00:00:00.000-04:00 2008-09-09T08:35:38.710-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 254 The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-0786 1999-09-22T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 659 The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack. cpe:/a:ssh:ssh:1.2.27 CVE-1999-0787 1999-09-17T00:00:00.000-04:00 2016-10-17T21:59:40.537-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19990917 A few bugs... BUGTRAQ 19990924 [Fwd: Truth about ssh 1.2.27 vulnerability] BID 660 The SSH authentication agent follows symlinks via a UNIX domain socket. cpe:/a:knox_software:arkeia:4.0 cpe:/a:knox_software:arkeia:4.1 CVE-1999-0788 1999-09-26T00:00:00.000-04:00 2016-10-17T21:59:42.053-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990924 Multiple vendor Knox Arkiea local root/remote DoS BID 662 Arkiea nlservd allows remote attackers to conduct a denial of service. cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.1 cpe:/o:ibm:aix:4.3.2 CVE-1999-0789 1999-09-28T00:00:00.000-04:00 2008-09-09T08:35:38.993-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC J-072 BID 679 Buffer overflow in AIX ftpd in the libc library. cpe:/a:netscape:communicator:4.0 CVE-1999-0790 2000-04-01T00:00:00.000-05:00 2008-09-09T08:35:39.210-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://home.netscape.com/security/notes/jscachebrowsing.html A remote attacker can read information from a Netscape user's cache via JavaScript. cpe:/a:hybrid_network:hsmp cpe:/h:hybrid_network:cable_modem CVE-1999-0791 1999-10-06T00:00:00.000-04:00 2008-09-09T08:35:39.290-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 695 Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol. cpe:/h:osicom:routermate CVE-1999-0792 1998-09-01T00:00:00.000-04:00 2008-09-09T08:35:39.493-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://www2.merton.ox.ac.uk/~security/rootshell/0022.html ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration. cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 CVE-1999-0793 1999-11-17T00:00:00.000-05:00 2018-10-12T17:29:12.857-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS99-043 Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet. cpe:/a:microsoft:excel CVE-1999-0794 1999-10-01T00:00:00.000-04:00 2018-10-12T17:29:12.997-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q241900 MSKB Q241901 MSKB Q241902 MS MS99-044 Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file. cpe:/o:sun:solaris cpe:/o:sun:sunos CVE-1999-0795 1998-03-01T00:00:00.000-05:00 2008-09-09T08:35:39.697-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches. cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.2 CVE-1999-0796 1998-05-01T00:00:00.000-04:00 2008-09-09T08:35:39.773-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. cpe:/o:sun:sunos CVE-1999-0797 1998-06-29T00:00:00.000-04:00 2008-09-09T08:35:39.837-04:00 2.6 NETWORK HIGH NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC I-070 NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries. cpe:/o:bsdi:bsd_os cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:openbsd:openbsd:2.3 cpe:/o:openbsd:openbsd:2.4 cpe:/o:redhat:linux cpe:/o:sco:internet_faststart cpe:/o:sco:openserver cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 CVE-1999-0798 1998-12-04T00:00:00.000-05:00 2016-10-17T21:59:43.317-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19981204 bootpd remote vulnerability Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. cpe:/o:cmu:bootpd:2.4.3 CVE-1999-0799 1997-06-01T00:00:00.000-04:00 2008-09-09T08:35:39.977-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location. cpe:/a:allaire:forums:2.0.4 CVE-1999-0800 2001-03-12T00:00:00.000-05:00 2017-10-09T21:29:01.153-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 19990211 ACFUG List: Alert: Allaire Forums GetFile bug ALLAIRE ASB99-05 XF allaire-forums-file-read(1748) The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm. cpe:/a:bmc:patrol_agent:3.2.3 CVE-1999-0801 1999-04-09T00:00:00.000-04:00 2008-09-09T08:35:40.103-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS XF bmc-patrol-frames(2075) BUGTRAQ 19990409 Patrol security bugs BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. cpe:/a:microsoft:ie:5.0 CVE-1999-0802 1999-05-27T00:00:00.000-04:00 2018-10-12T17:29:13.467-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q231450 MS MS99-018 Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon. cpe:/a:ibm:aix_enetwork_firewall:3.2 cpe:/a:ibm:aix_enetwork_firewall:3.3 CVE-1999-0803 1999-05-25T00:00:00.000-04:00 2016-10-17T21:59:44.553-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19990525 IBM eNetwork Firewall for AIX The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack. cpe:/o:debian:debian_linux:2.1 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:redhat:linux:6.0::i386 cpe:/o:suse:suse_linux:6.1 CVE-1999-0804 1999-06-01T00:00:00.000-04:00 2008-09-09T08:35:40.307-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 302 Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths. cpe:/o:novell:netware:4.11 CVE-1999-0805 2001-03-12T00:00:00.000-05:00 2017-12-18T21:29:00.753-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990512 DoS with Netware 4.x's TTS XF novell-tts-dos(2184) Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests. cpe:/o:sun:sunos:5.0 CVE-1999-0806 1999-05-10T00:00:00.000-04:00 2018-10-30T12:25:12.013-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Solaris dtprintinfo program. cpe:/a:netscape:directory_server CVE-1999-0807 1999-05-01T00:00:00.000-04:00 2008-09-09T08:35:40.507-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users. cpe:/a:isc:dhcp_client:1.0 cpe:/a:isc:dhcp_client:2.0 CVE-1999-0808 1999-12-31T00:00:00.000-05:00 2016-10-17T21:59:45.740-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MISC ftp://ftp.isc.org/isc/dhcp/dhcp-1.0-history/dhcp-1.0.0-1.0pl1.diff.gz CIAC I-053 BUGTRAQ 19980518 DHCP 1.0 and 2.0 SECURITY ALERT! (fwd) Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options. cpe:/a:netscape:communicator:4.0 CVE-1999-0809 1999-07-09T00:00:00.000-04:00 2008-09-09T08:35:40.773-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed". cpe:/a:samba:samba:2.0.5 CVE-1999-0810 1999-07-21T00:00:00.000-04:00 2008-09-05T16:18:02.060-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Samba NETBIOS name service daemon (nmbd). cpe:/a:samba:samba:2.0.4 CVE-1999-0811 1999-07-21T00:00:00.000-04:00 2008-09-09T08:35:40.913-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 536 Buffer overflow in Samba smbd program via a malformed message command. cpe:/a:samba:samba:2.0.5 CVE-1999-0812 2000-07-12T00:00:00.000-04:00 2008-09-05T16:18:02.340-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations. cpe:/a:infodrom:cfingerd:1.4.0 CVE-1999-0813 1999-08-10T00:00:00.000-04:00 2008-09-09T08:35:41.057-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges. cpe:/o:redhat:linux:6.0 CVE-1999-0814 1999-08-11T00:00:00.000-04:00 2008-09-09T08:35:41.133-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 REDHAT RHSA-1999:027 Red Hat pump DHCP client allows remote attackers to gain root access in some configurations. cpe:/o:microsoft:windows_nt:4.0::server CVE-1999-0815 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:01.217-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q196270 XF nt-snmpagent-leak(1974) Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries. cpe:/h:motorola:motorola_cablerouter CVE-1999-0816 1998-05-10T00:00:00.000-04:00 2008-09-09T08:35:41.257-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19980510 Security Vulnerability in Motorola CableRouters The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024. cpe:/a:university_of_kansas:lynx CVE-1999-0817 1999-09-15T00:00:00.000-04:00 2008-09-05T16:18:03.027-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet. cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-1999-0818 1999-11-20T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 831 BUGTRAQ 19991130 another hole of Solaris7 kcms_configure Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0819 1999-12-01T00:00:00.000-05:00 2016-10-17T21:59:47.070-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991130 NTmail and VRFY NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it. cpe:/o:freebsd:freebsd:3.3 CVE-1999-0820 1999-12-01T00:00:00.000-05:00 2008-09-09T08:35:41.570-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 838 FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. cpe:/o:freebsd:freebsd:3.3 CVE-1999-0821 1999-11-08T00:00:00.000-05:00 2008-09-09T08:36:00.337-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 838 FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. cpe:/a:qualcomm:qpopper:3.0 cpe:/a:qualcomm:qpopper:3.0b20 CVE-1999-0822 1999-11-30T00:00:00.000-05:00 2008-09-09T08:36:00.460-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 830 Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. cpe:/o:freebsd:freebsd:3.3 CVE-1999-0823 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:00.587-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 839 Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 cpe:/o:microsoft:windows_nt:4.0:sp6 CVE-1999-0824 1999-11-30T00:00:00.000-05:00 2008-09-09T08:36:00.710-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 833 A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 CVE-1999-0825 1999-12-03T00:00:00.000-05:00 2008-09-09T08:36:00.837-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 849 The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. cpe:/o:freebsd:freebsd:3.3 CVE-1999-0826 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:00.913-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 840 Buffer overflow in FreeBSD angband allows local users to gain privileges. cpe:/a:microsoft:ie:3.0 cpe:/a:microsoft:ie:3.0.2 cpe:/a:microsoft:ie:3.1 cpe:/a:microsoft:ie:3.2 cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0:a_mac_os cpe:/a:microsoft:ie:4.0.1:sp2 cpe:/a:microsoft:ie:4.1 cpe:/a:microsoft:ie:4.5 cpe:/a:microsoft:ie:5.0 cpe:/a:netscape:navigator:4.5 CVE-1999-0827 1999-11-01T00:00:00.000-05:00 2008-09-09T08:36:00.993-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.1 CVE-1999-0828 1999-12-02T00:00:00.000-05:00 2008-09-09T08:36:01.057-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 853 UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission. cpe:/a:hp:secure_web_console CVE-1999-0829 1999-11-01T00:00:00.000-05:00 2008-09-09T08:36:01.117-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP Secure Web Console uses weak encryption. cpe:/o:sco:unixware:7.0 CVE-1999-0830 1999-11-01T00:00:00.000-05:00 2008-09-09T08:36:01.197-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in SCO UnixWare Xsco command via a long argument. cpe:/a:cobalt:qube:1.0 cpe:/a:cobalt:qube:2.0 cpe:/a:sun:cobalt_raq:1.1 cpe:/h:sun:cobalt_raq_2 cpe:/h:sun:cobalt_raq_3i cpe:/o:debian:debian_linux:2.2 cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 CVE-1999-0831 1999-11-19T00:00:00.000-05:00 2008-09-09T08:36:01.257-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-035.0 BID 809 Denial of service in Linux syslogd via a large number of connections. cpe:/o:debian:debian_linux:2.1 cpe:/o:redhat:linux:5.2::i386 CVE-1999-0832 1999-11-09T00:00:00.000-05:00 2008-09-09T08:36:01.413-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-033.0 DEBIAN 19991111 buffer overflow in nfs server SUSE 19991110 Security hole in nfs-server < 2.2beta47 within nkita REDHAT RHSA-1999:053-01 BID 782 BUGTRAQ 19991109 undocumented bugs - nfsd Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. cpe:/a:isc:bind:8.2 cpe:/a:isc:bind:8.2.1 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-1999-0833 1999-11-10T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-034.1 BID 788 Buffer overflow in BIND 8.2 via NXT records. cpe:/a:rsa:rsaref:2.0 CVE-1999-0834 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:01.540-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 843 Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library. cpe:/o:ibm:aix:4.3 cpe:/o:sco:openserver:5 cpe:/o:sco:unixware:2 cpe:/o:sco:unixware:7 cpe:/o:sun:sunos:5.7 CVE-1999-0835 1999-11-10T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-034.1 BID 788 Denial of service in BIND named via malformed SIG records. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-1999-0836 1998-12-02T00:00:00.000-05:00 2008-09-09T08:36:01.727-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SCO SB-99.22a BID 842 BUGTRAQ 19991202 UnixWare 7 uidadmin exploit + discussion UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. cpe:/a:isc:bind:8.2 cpe:/a:isc:bind:8.2.1 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-1999-0837 1999-11-10T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-034.1 SUN 00194 BID 788 Denial of service in BIND by improperly closing TCP sessions via so_linger. cpe:/a:deerfield:serv-u_ftp-server:2.5a CVE-1999-0838 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:01.867-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 859 Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command. cpe:/a:microsoft:ie:5::windows_nt_4.0 cpe:/a:microsoft:ie:5.0::windows_95 cpe:/a:microsoft:ie:5.0::windows_98 CVE-1999-0839 1999-11-29T00:00:00.000-05:00 2018-10-12T17:29:13.700-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q246972 BID 828 MS MS99-051 Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled. cpe:/o:sun:sunos:5.7 CVE-1999-0840 1999-11-30T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC http://www.securiteam.com/exploits/3J5QQPPQ0O.html BUGTRAQ 19991129 Solaris7 dtmail/dtmailpr/mailtool Buffer Overflow BID 832 XF solaris-dtmail-overflow(3579) XF solaris-dtmailpr-overflow(3580) Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option. cpe:/o:sun:sunos:5.7 CVE-1999-0841 1999-11-30T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC http://www.securiteam.com/exploits/3J5QQPPQ0O.html BUGTRAQ 19991129 Solaris7 dtmail/dtmailpr/mailtool Buffer Overflow BID 832 XF cde-mailtool-bo(3732) Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type. cpe:/a:symantec:mail-gear:1.0 CVE-1999-0842 1999-11-29T00:00:00.000-05:00 2008-09-09T08:36:02.273-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 827 BUGTRAQ 19991129 Symantec Mail-Gear 1.0 Web interface Server Directory Traversal Vulnerability Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack. cpe:/h:cisco:router CVE-1999-0843 1999-11-04T00:00:00.000-05:00 2008-09-09T08:36:02.337-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port. cpe:/a:deerfield:mdaemon:2.8.5 cpe:/a:deerfield:mdaemon:2.8.6 CVE-1999-0844 1999-11-24T00:00:00.000-05:00 2008-09-09T08:36:02.397-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 820 BID 823 Denial of service in MDaemon WorldClient and WebConfig services via a long URL. cpe:/o:sco:unixware:7.0 CVE-1999-0845 1999-11-25T00:00:00.000-05:00 2008-09-09T08:36:02.477-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in SCO su program allows local users to gain root access via a long username. cpe:/a:deerfield:mdaemon:2.8.5 cpe:/a:deerfield:mdaemon:2.8.6 CVE-1999-0846 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:02.540-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in MDaemon 2.7 via a large number of connection attempts. cpe:/a:freechess.org:fics_program CVE-1999-0847 1999-11-29T00:00:00.000-05:00 2008-09-05T16:18:07.340-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in free internet chess server (FICS) program, xboard. cpe:/a:isc:bind:8.2 cpe:/a:isc:bind:8.2.1 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-1999-0848 1999-11-10T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-034.1 SUN 00194 BID 788 Denial of service in BIND named via consuming more than "fdmax" file descriptors. cpe:/a:isc:bind:4.9.5 cpe:/a:isc:bind:4.9.5:p1 cpe:/a:isc:bind:4.9.6 cpe:/a:isc:bind:4.9.7 cpe:/a:isc:bind:8.1 cpe:/a:isc:bind:8.1.1 cpe:/a:isc:bind:8.2 cpe:/a:isc:bind:8.2:p1 cpe:/a:isc:bind:8.2.1 CVE-1999-0849 1999-11-10T00:00:00.000-05:00 2008-09-09T08:36:02.743-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-034.1 SUN 00194 BID 788 Denial of service in BIND named via maxdname. cpe:/a:endymion:mailman_webmail:3.0.18 CVE-1999-0850 1999-12-02T00:00:00.000-05:00 2008-09-09T08:36:02.807-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 845 The default permissions for Endymion MailMan allow local users to read email or modify files. cpe:/o:ibm:aix:4.3 cpe:/o:sco:openserver:5 cpe:/o:sco:unixware:2 cpe:/o:sco:unixware:7 cpe:/o:sun:sunos:5.7 CVE-1999-0851 1999-11-10T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-034.1 SUN 00194 BID 788 Denial of service in BIND named via naptr. cpe:/a:ibm:websphere_application_server:3.0 CVE-1999-0852 1999-12-02T00:00:00.000-05:00 2008-09-09T08:36:02.947-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 844 IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. cpe:/a:netscape:enterprise_server:3.5.1 cpe:/a:netscape:enterprise_server:3.6 cpe:/a:netscape:enterprise_server:3.6:sp2 cpe:/a:netscape:fasttrack_server:3.01 CVE-1999-0853 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:03.007-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 847 Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure. cpe:/a:infopop:ultimate_bulletin_board:5.07 CVE-1999-0854 1999-11-01T00:00:00.000-05:00 2008-09-09T08:36:03.197-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000225 FW: Important UBB News For Licensed Users CONFIRM http://www.ultimatebb.com/home/versions.shtml Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file. cpe:/o:freebsd:freebsd:3.3 CVE-1999-0855 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:03.257-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 834 Buffer overflow in FreeBSD gdc program. cpe:/o:slackware:slackware_linux:7.0 CVE-1999-0856 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:03.320-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. cpe:/o:freebsd:freebsd:3.3 CVE-1999-0857 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:03.397-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 835 FreeBSD gdc program allows local users to modify files via a symlink attack. cpe:/a:microsoft:ie:5.0 CVE-1999-0858 1999-12-02T00:00:00.000-05:00 2018-10-12T17:29:13.997-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov MSKB Q247333 BID 846 MS MS99-054 Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server. cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0859 1999-12-01T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 837 Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0860 1999-12-01T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 837 Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack. cpe:/a:microsoft:commercial_internet_system:2.0 cpe:/a:microsoft:commercial_internet_system:2.5 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:site_server:3.0 cpe:/a:microsoft:site_server_commerce:3.0 CVE-1999-0861 1999-08-11T00:00:00.000-04:00 2018-10-12T17:29:14.293-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q244613 MS MS99-053 Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext. cpe:/a:postgresql:postgresql:6.3.2 cpe:/a:postgresql:postgresql:6.5.3 cpe:/a:postgresql:postgresql:6.5.3.1 CVE-1999-0862 1999-12-02T00:00:00.000-05:00 2008-09-09T08:36:03.743-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file. cpe:/o:freebsd:freebsd:3.3 CVE-1999-0863 1999-11-08T00:00:00.000-05:00 2008-09-09T08:36:03.820-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-1999-0864 1999-12-03T00:00:00.000-05:00 2016-10-17T21:59:48.350-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991215 Recent postings about SCO UnixWare 7 BUGTRAQ 19991220 SCO OpenServer Security Status BUGTRAQ 19991223 FYI, SCO Security patches available. BID 851 BUGTRAQ 19991202 UnixWare coredumps follow symlinks UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file. cpe:/a:stalker:communigate_pro:3.1 CVE-1999-0865 1999-12-03T00:00:00.000-05:00 2016-10-17T21:59:49.413-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991203 CommuniGatePro 3.1 for NT DoS NTBUGTRAQ 19991203 CommuniGatePro 3.1 for NT Buffer Overflow BID 860 Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-1999-0866 1999-12-03T00:00:00.000-05:00 2016-10-17T21:59:50.663-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO SB-99.24a BUGTRAQ 19991215 Recent postings about SCO UnixWare 7 BUGTRAQ 19991220 SCO OpenServer Security Status BUGTRAQ 19991223 FYI, SCO Security patches available. BID 848 Buffer overflow in UnixWare xauto program allows local users to gain root privilege. cpe:/a:microsoft:commercial_internet_system:2.0 cpe:/a:microsoft:commercial_internet_system:2.5 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:site_server:3.0:unknown:commerce CVE-1999-0867 1999-08-11T00:00:00.000-04:00 2018-10-12T17:29:14.543-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q238349 CIAC J-058 BID 579 MS MS99-029 Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers. cpe:/a:isc:inn:1.5.1 cpe:/a:netscape:news_server:1.1 cpe:/h:nec:goah_intrasv:r1.1 cpe:/h:nec:goah_networksv:r1.2 cpe:/h:nec:goah_networksv:r2.2 cpe:/h:nec:goah_networksv:r3.1 cpe:/h:sun:sparc cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 CVE-1999-0868 1997-02-20T00:00:00.000-05:00 2008-09-09T08:36:04.147-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN. cpe:/a:microsoft:ie:3.0 cpe:/a:microsoft:ie:3.0.1 cpe:/a:microsoft:ie:3.0.2 cpe:/a:microsoft:ie:3.2 cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:netscape:navigator CVE-1999-0869 1998-12-01T00:00:00.000-05:00 2018-10-12T17:29:14.967-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS98-020 Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing. cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:4.0.1:sp1 CVE-1999-0870 1998-10-01T00:00:00.000-04:00 2018-10-12T17:29:15.123-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS98-015 Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 CVE-1999-0871 1998-09-04T00:00:00.000-04:00 2018-10-12T17:29:15.230-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS98-013 XF ie-crossframe-file-read(3668) Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability. cpe:/a:paul_vixie:vixie_cron:3.0_pl1 cpe:/o:caldera:openlinux:2.2 cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:6.0::i386 CVE-1999-0872 1999-08-25T00:00:00.000-04:00 2008-09-09T08:36:06.587-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 611 BID 759 Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. cpe:/a:sky_communications:skyfull:1.1.4 CVE-1999-0873 1999-10-30T00:00:00.000-04:00 2008-09-09T08:36:06.647-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 759 Buffer overflow in Skyfull mail server via MAIL FROM command. cpe:/a:microsoft:internet_information_server:4.0 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0874 1999-06-16T00:00:00.000-04:00 2018-10-12T17:29:15.560-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q234905 CIAC J-048 EEYE AD06081999 MS MS99-019 Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95:0a cpe:/o:microsoft:windows_95:0b cpe:/o:microsoft:windows_98se cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- CVE-1999-0875 1999-08-11T00:00:00.000-04:00 2018-10-30T12:25:26.310-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q216141 BID 578 DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. cpe:/a:microsoft:ie:3.0::mac_os cpe:/a:microsoft:ie:3.1::mac_os cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0:a cpe:/a:microsoft:ie:4.1 CVE-1999-0876 2000-01-04T00:00:00.000-05:00 2018-08-13T17:47:03.993-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov MSKB Q185959 MSKB Q176697 Buffer overflow in Internet Explorer 4.0 via EMBED tag. cpe:/a:microsoft:ie:4.01 cpe:/a:microsoft:ie:4.01:sp1 cpe:/a:microsoft:ie:5.0 CVE-1999-0877 1999-10-01T00:00:00.000-04:00 2018-10-12T17:29:16.077-04:00 4.3 NETWORK MEDIUM NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q243638 MS MS99-042 Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME. cpe:/a:beroftpd:beroftpd:1.3.2 cpe:/a:beroftpd:beroftpd:1.3.3 cpe:/a:beroftpd:beroftpd:1.3.4 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr4 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr5 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr6 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr8 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr9 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr10 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr11 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr12 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr13 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr14 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr15 cpe:/a:washington_university:wu-ftpd:2.4.2_vr16 cpe:/a:washington_university:wu-ftpd:2.4.2_vr17 cpe:/a:washington_university:wu-ftpd:2.5 CVE-1999-0878 1999-08-22T00:00:00.000-04:00 2008-09-09T08:36:06.993-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 599 Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR. cpe:/o:bsdi:bsd_os:2.1 cpe:/o:bsdi:bsd_os:3.0 cpe:/o:caldera:openlinux:1.0 CVE-1999-0879 1999-10-01T00:00:00.000-04:00 2008-09-09T08:36:07.070-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file. cpe:/o:bsdi:bsd_os:2.1 cpe:/o:bsdi:bsd_os:3.0 cpe:/o:caldera:openlinux:1.0 CVE-1999-0880 1999-10-01T00:00:00.000-04:00 2008-09-09T08:36:07.133-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly. cpe:/a:blueface:falcon_web_server:1.0 CVE-1999-0881 1999-10-26T00:00:00.000-04:00 2008-09-09T08:36:07.197-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 743 Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:falcon:falcon_web_server:1.0.0.1006 CVE-1999-0882 1999-10-28T00:00:00.000-04:00 2008-09-09T08:36:07.273-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Falcon web server allows remote attackers to determine the absolute path of the web root via long file names. cpe:/a:zeus_technologies:zeus_web_server:3.3.1 cpe:/a:zeus_technologies:zeus_web_server:3.3.2 CVE-1999-0883 1999-10-25T00:00:00.000-04:00 2018-05-02T21:29:03.957-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BID 742 XF zeus-remote-root(3380) Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine. cpe:/a:zeus_technologies:zeus_web_server:3.3.1 cpe:/a:zeus_technologies:zeus_web_server:3.3.2 CVE-1999-0884 1999-10-25T00:00:00.000-04:00 2018-05-02T21:29:04.053-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 742 XF zeus-weak-password(3833) The Zeus web server administrative interface uses weak encryption for its passwords. cpe:/a:computer_software_manufaktur:alibaba:2.0 CVE-1999-0885 1999-11-03T00:00:00.000-05:00 2008-09-09T08:36:07.477-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 770 BUGTRAQ 19991103 More Alibaba Web Server problems... Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0886 1999-09-17T00:00:00.000-04:00 2018-10-12T17:29:16.327-04:00 9.0 NETWORK LOW SINGLE_INSTANCE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q242294 BID 645 MS MS99-041 The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. cpe:/a:floosietek:ftgate:2.1 CVE-1999-0887 1999-11-04T00:00:00.000-05:00 2008-09-09T08:36:07.603-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 EEYE AD05261999 FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack. cpe:/a:oracle:database_server:7.3.3 cpe:/a:oracle:database_server:7.3.4 cpe:/a:oracle:oracle8i:8.0.3 cpe:/a:oracle:oracle8i:8.0.4 cpe:/a:oracle:oracle8i:8.0.5 cpe:/a:oracle:oracle8i:8.0.5.1 cpe:/a:oracle:oracle8i:8.1.5 CVE-1999-0888 1999-08-16T00:00:00.000-04:00 2008-09-09T08:36:07.680-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 585 dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script. cpe:/h:cisco:675_router CVE-1999-0889 1999-07-01T00:00:00.000-04:00 2008-09-09T08:36:07.743-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set. cpe:/a:ihtml_merchant:ihtml_merchant CVE-1999-0890 1999-09-16T00:00:00.000-04:00 2008-09-09T08:36:07.977-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS CONFIRM http://www.ihtmlmerchant.com/support_patches_feedback.htm BID 694 iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error. cpe:/a:microsoft:ie:5.0 CVE-1999-0891 1999-09-01T00:00:00.000-04:00 2018-10-12T17:29:16.687-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q242542 CIAC K-002 CERT-VN VU#37828 BID 674 MS MS99-040 The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. cpe:/a:netscape:communicator:4.5 CVE-1999-0892 1999-12-24T00:00:00.000-05:00 2008-09-09T08:36:08.133-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font. cpe:/o:sco:openserver:5.0 CVE-1999-0893 1999-10-11T00:00:00.000-04:00 2008-09-09T08:36:08.197-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. cpe:/o:redhat:linux CVE-1999-0894 2000-01-04T00:00:00.000-05:00 2008-09-05T16:18:14.153-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals. cpe:/a:checkpoint:firewall-1:4.0 CVE-1999-0895 1999-10-20T00:00:00.000-04:00 2008-09-09T08:36:08.337-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 725 BUGTRAQ 19991020 Checkpoint FireWall-1 V4.0: possible bug in LDAP authentication Firewall-1 does not properly restrict access to LDAP attributes. cpe:/a:realnetworks:realserver_g2:1.0 CVE-1999-0896 1999-11-04T00:00:00.000-05:00 2008-09-09T08:36:08.557-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS MISC http://service.real.com/help/faq/servg260.html BID 767 Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password. cpe:/a:apple:ichat_server:3.0 CVE-1999-0897 1998-09-09T00:00:00.000-04:00 2016-10-17T21:59:51.930-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19980908 bug in iChat 3.0 (maybe others) iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 cpe:/o:microsoft:windows_nt:4.0:sp6 CVE-1999-0898 1999-11-04T00:00:00.000-05:00 2018-10-12T17:29:17.187-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q243649 BID 768 MS MS99-047 Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 cpe:/o:microsoft:windows_nt:4.0:sp6 CVE-1999-0899 1999-11-04T00:00:00.000-05:00 2018-10-12T17:29:17.480-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q243649 BID 769 MS MS99-047 The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider. cpe:/a:linux-nis:rpc.yppasswdd CVE-1999-0900 1999-10-23T00:00:00.000-04:00 2008-09-09T08:36:08.837-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation. cpe:/a:linux-nis:ypserv CVE-1999-0901 1999-10-23T00:00:00.000-04:00 2008-09-09T08:36:08.897-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ypserv allows a local user to modify the GECOS and login shells of other users. cpe:/a:linux-nis:ypserv CVE-1999-0902 1999-10-23T00:00:00.000-04:00 2008-09-09T08:36:08.977-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ypserv allows local administrators to modify password tables. cpe:/o:ibm:aix:4.3.2 CVE-1999-0903 1999-10-26T00:00:00.000-04:00 2008-09-09T08:36:09.040-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. cpe:/a:byte_fusion:bftelnet:1.1 CVE-1999-0904 1999-11-03T00:00:00.000-05:00 2008-09-09T08:36:09.103-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 771 Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username. cpe:/a:axent:raptor_firewall CVE-1999-0905 1999-10-21T00:00:00.000-04:00 2008-09-09T08:36:09.163-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 736 Denial of service in Axent Raptor firewall via malformed zero-length IP options. cpe:/o:suse:suse_linux:6.2 CVE-1999-0906 1999-09-23T00:00:00.000-04:00 2008-09-09T08:36:09.243-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 656 Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable. cpe:/a:steven_j._merrifield:soundcard_cw:1.1::linux CVE-1999-0907 1999-09-16T00:00:00.000-04:00 2008-09-09T08:36:09.307-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 sccw allows local users to read arbitrary files. cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0908 1999-09-23T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 655 Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter. cpe:/a:microsoft:terminal_server cpe:/o:microsoft:windows_95:0a cpe:/o:microsoft:windows_95:0b cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0909 1999-09-20T00:00:00.000-04:00 2018-10-12T17:29:17.793-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q238453 BID 646 MS MS99-038 Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability. cpe:/a:microsoft:commercial_internet_system:2.0 cpe:/a:microsoft:commercial_internet_system:2.5 cpe:/a:microsoft:site_server:3.0 cpe:/a:microsoft:site_server_commerce:3.0:alpha CVE-1999-0910 1999-09-10T00:00:00.000-04:00 2018-10-12T17:29:18.153-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 625 MS MS99-035 Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user. cpe:/a:proftpd_project:proftpd:1.2_pre1 cpe:/a:proftpd_project:proftpd:1.2_pre2 cpe:/a:proftpd_project:proftpd:1.2_pre3 cpe:/a:proftpd_project:proftpd:1.2_pre4 cpe:/a:proftpd_project:proftpd:1.2_pre5 CVE-1999-0911 1999-08-27T00:00:00.000-04:00 2008-09-09T08:36:09.587-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS DEBIAN 19990210 BID 612 Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 CVE-1999-0912 1999-09-22T00:00:00.000-04:00 2008-09-09T08:36:09.647-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 653 FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files. cpe:/a:network_security_wizards:dragon-fire_ids:1.0 CVE-1999-0913 1999-08-05T00:00:00.000-04:00 2016-10-17T21:59:53.037-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990804 NSW Dragon Fire gets drowned BID 564 dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters. cpe:/o:debian:debian_linux:1.1 cpe:/o:debian:debian_linux:1.2 cpe:/o:debian:debian_linux:1.3 cpe:/o:debian:debian_linux:1.3.1 cpe:/o:debian:debian_linux:2.0 CVE-1999-0914 1999-01-03T00:00:00.000-05:00 2008-09-09T08:36:09.773-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 324 Buffer overflow in the FTP client in the Debian GNU/Linux netstd package. cpe:/a:pacific_software:url_live:1.0 CVE-1999-0915 1999-10-28T00:00:00.000-04:00 2008-09-09T08:36:09.853-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 746 URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:webtrends:webtrends_enterprise_suite:v3.5 cpe:/a:webtrends:webtrends_for_firewalls:v1.2 cpe:/a:webtrends:webtrends_log_analyzer:v4.51 cpe:/a:webtrends:webtrends_professional_suite:v3.01 cpe:/a:webtrends:webtrends_security_analyzer:v2.0 CVE-1999-0916 1999-06-29T00:00:00.000-04:00 2008-09-09T08:36:09.913-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 WebTrends software stores account names and passwords in a file which does not have restricted access permissions. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 CVE-1999-0917 1999-05-27T00:00:00.000-04:00 2018-10-12T17:29:18.340-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q231452 MS MS99-018 The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-1999-0918 1999-07-03T00:00:00.000-04:00 2018-10-12T17:29:18.577-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov MSKB Q238329 BID 514 MS MS99-034 Denial of service in various Windows systems via malformed, fragmented IGMP packets. cpe:/h:motorola:motorola_cablerouter CVE-1999-0919 1998-05-10T00:00:00.000-04:00 2017-12-18T21:29:00.863-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980510 Security Vulnerability in Motorola CableRouters XF motorola-cable-crash(2004) A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections. cpe:/a:university_of_washington:imap:4.4 cpe:/a:university_of_washington:pop2d CVE-1999-0920 1999-05-26T00:00:00.000-04:00 2008-09-09T08:36:10.197-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 283 Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. cpe:/a:bmc:patrol_agent:3.2.5 CVE-1999-0921 1999-04-01T00:00:00.000-05:00 2008-09-09T08:36:12.087-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 XF bmc-patrol-udp-dos(4291) BUGTRAQ 19990409 Patrol security bugs BID 1879 BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service. cpe:/a:allaire:coldfusion_server:4.0 CVE-1999-0922 2001-03-12T00:00:00.000-05:00 2008-09-09T08:36:12.273-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLAIRE ASB99-02 An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file. cpe:/a:allaire:coldfusion_server:4.0 CVE-1999-0923 2001-03-12T00:00:00.000-05:00 2008-09-05T16:18:18.370-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS ALLAIRE ASB99-02 Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls. cpe:/a:allaire:coldfusion_server:4.0 CVE-1999-0924 2001-03-12T00:00:00.000-05:00 2017-10-09T21:29:01.327-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov ALLAIRE ASB99-02 XF coldfusion-syntax-checker(1742) The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service. cpe:/a:messagemedia:unitymail:2.0 CVE-1999-0925 1999-09-03T00:00:00.000-04:00 2016-10-17T21:59:54.447-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980903 Web servers / possible DOS Attack / mime header flooding UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers. cpe:/a:apache:http_server:1.2.5 CVE-1999-0926 1999-09-03T00:00:00.000-04:00 2008-09-05T16:18:18.793-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990903 Web servers / possible DOS Attack / mime header flooding Apache allows remote attackers to conduct a denial of service via a large number of MIME headers. cpe:/a:gordano:ntmail:4.20 CVE-1999-0927 1999-05-26T00:00:00.000-04:00 2008-09-09T08:36:12.617-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 EEYE AD05261999 BID 279 NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:smartdesk:websuite:2.1 CVE-1999-0928 1999-05-23T00:00:00.000-04:00 2008-09-09T08:36:12.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 278 Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL. cpe:/a:novell:http_server:2.51r1 cpe:/a:novell:http_server:3.1r1 cpe:/o:novell:netware:4.1 cpe:/o:novell:netware:4.11 CVE-1999-0929 1999-06-16T00:00:00.000-04:00 2008-09-09T08:36:12.757-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests. cpe:/a:matt_wright:wwwboard CVE-1999-0930 1998-09-03T00:00:00.000-04:00 2018-05-02T21:29:04.160-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BID 1795 CONFIRM http://www.worldwidemart.com/scripts/faq/wwwboard/q5.shtml XF http-cgi-wwwboard(2344) wwwboard allows a remote attacker to delete message board articles via a malformed argument. cpe:/a:mediahouse_software:statistics_server:4.28 cpe:/a:mediahouse_software:statistics_server:5.0 CVE-1999-0931 1999-09-30T00:00:00.000-04:00 2008-09-09T08:36:13.070-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 734 Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands. cpe:/a:mediahouse_software:statistics_server:4.28 cpe:/a:mediahouse_software:statistics_server:5.1 CVE-1999-0932 1999-09-30T00:00:00.000-04:00 2008-09-09T08:36:13.133-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 735 Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file. cpe:/a:teamshare:teamtrack:3.0 CVE-1999-0933 1999-10-01T00:00:00.000-04:00 2008-09-09T08:36:13.197-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 689 TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. CVE-1999-0934 1999-12-15T00:00:00.000-05:00 2018-05-02T21:29:04.223-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 2020 XF http-cgi-classifieds-read(3102) classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters. CVE-1999-0935 1999-12-15T00:00:00.000-05:00 2005-05-02T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form. CVE-1999-0936 1998-12-03T00:00:00.000-05:00 2005-05-02T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters. CVE-1999-0937 1998-12-03T00:00:00.000-05:00 2005-05-02T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable. cpe:/a:university_college_london:sdr:2.6.2 CVE-1999-0938 1999-06-28T00:00:00.000-04:00 2016-09-16T21:59:01.277-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages. cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2::pre_potato CVE-1999-0939 1999-08-26T00:00:00.000-04:00 2008-09-09T08:36:13.617-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 605 Denial of service in Debian IRC Epic/epic4 client via a long string. cpe:/a:mutt:mutt_mail_client CVE-1999-0940 1999-09-27T00:00:00.000-04:00 2008-09-05T16:18:20.557-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages. cpe:/a:mutt:mutt:0.95.6 CVE-1999-0941 1998-07-28T00:00:00.000-04:00 2016-10-17T21:59:55.663-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19980728 mutt x.x Mutt mail client allows a remote attacker to execute commands via shell metacharacters. cpe:/o:sco:unixware:7.1 CVE-1999-0942 1999-10-04T00:00:00.000-04:00 2008-09-09T08:36:13.820-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes. cpe:/a:openlink:openlink:a CVE-1999-0943 1999-10-15T00:00:00.000-04:00 2008-09-09T08:36:13.883-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 720 Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator. CVE-1999-0944 1999-10-24T00:00:00.000-04:00 2005-10-20T00:00:00.000-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections. cpe:/a:microsoft:exchange_server:5.0 cpe:/a:microsoft:exchange_server:5.5 CVE-1999-0945 2001-03-12T00:00:00.000-05:00 2018-08-13T17:47:04.790-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q169174 CIAC I-080 ISS 19980724 Denial of Service attacks against Microsoft Exchange 5.0 to 5.5 XF exchange-dos(1223) Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands. cpe:/a:yamaha:midiplug:1.1bj CVE-1999-0946 1999-11-02T00:00:00.000-05:00 2016-10-17T21:59:56.947-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19991102 Some holes for Win/UNIX softwares BID 760 Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag. cpe:/a:an:an-httpd:1.2b CVE-1999-0947 1999-11-02T00:00:00.000-05:00 2016-10-17T21:59:58.180-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19991102 Some holes for Win/UNIX softwares BID 762 AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.7 cpe:/o:turbolinux:turbolinux:4.2 CVE-1999-0948 1999-11-02T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 757 Buffer overflow in uum program for Canna input system allows local users to gain root privileges. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.7 cpe:/o:turbolinux:turbolinux:4.2 CVE-1999-0949 1999-11-02T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 757 Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. cpe:/a:texas_imperial_software:wftpd:2.34 cpe:/a:texas_imperial_software:wftpd:2.40 CVE-1999-0950 1999-10-28T00:00:00.000-04:00 2008-09-09T08:36:14.367-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 747 Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. cpe:/a:omnicron:omnihttpd:1.1 cpe:/a:omnicron:omnihttpd:2.4pro CVE-1999-0951 1999-10-22T00:00:00.000-04:00 2008-09-09T08:36:14.430-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 739 Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands. cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.7 CVE-1999-0952 1999-01-28T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990126 Buffer overflow in Solaris 2.6/2.7 /usr/bin/lpstat Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. cpe:/a:matt_wright:wwwboard:2.0_alpha_2.1 CVE-1999-0953 1999-09-16T00:00:00.000-04:00 2008-09-09T08:36:14.557-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers. cpe:/a:matt_wright:wwwboard:2.0_alpha_2 CVE-1999-0954 1999-09-16T00:00:00.000-04:00 2008-09-09T08:36:14.633-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 649 WWWBoard has a default username and default password. cpe:/a:washington_university:wu-ftpd:2.4.1 CVE-1999-0955 1997-09-23T00:00:00.000-04:00 2017-07-18T21:29:00.190-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command. cpe:/o:next:nextstep:1.0 cpe:/o:next:nextstep:1.0a cpe:/o:next:nextstep:2.0 cpe:/o:next:nextstep:2.1 cpe:/o:next:nextstep:3.0 CVE-1999-0956 1997-09-19T00:00:00.000-04:00 2008-09-09T08:36:14.757-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service. cpe:/a:great_circle_associates:majorcool:1.0.3 CVE-1999-0957 1997-06-18T00:00:00.000-04:00 2008-09-09T08:36:14.837-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MajorCool mj_key_cache program allows local users to modify files via a symlink attack. cpe:/a:todd_miller:sudo:1.5 cpe:/a:todd_miller:sudo:1.5.2 cpe:/a:todd_miller:sudo:1.5.3 CVE-1999-0958 1998-01-12T00:00:00.000-05:00 2016-10-17T22:00:00.697-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980112 Re: hole in sudo for MP-RAS. sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0959 1997-02-01T00:00:00.000-05:00 2018-05-02T21:29:04.317-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19980301-01-PX BID 469 XF irix-startmidi-file-creation(1634) IRIX startmidi program allows local users to modify arbitrary files via a symlink attack. cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-0960 1998-03-20T00:00:00.000-05:00 2008-09-09T08:36:15.040-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19980301-01-PX IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option. cpe:/o:hp:hp-ux:9.04 cpe:/o:hp:hp-ux:9.05 CVE-1999-0961 1996-09-21T00:00:00.000-04:00 2016-10-17T22:00:02.150-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19960921 Vunerability in HP sysdiag ? HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10 CVE-1999-0962 1997-05-14T00:00:00.000-04:00 2008-09-09T08:36:15.227-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS HP HPSBUX9701-045 Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option. cpe:/o:freebsd:freebsd:2.2 CVE-1999-0963 1999-12-01T00:00:00.000-05:00 2008-09-09T08:36:15.290-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. cpe:/o:freebsd:freebsd:2.1.6 CVE-1999-0964 2000-01-01T00:00:00.000-05:00 2008-09-09T08:36:15.367-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. cpe:/a:x.org:xterm CVE-1999-0965 1997-09-19T00:00:00.000-04:00 2008-09-09T08:36:15.430-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Race condition in xterm allows local users to modify arbitrary files via the logging option. cpe:/o:sun:sunos:5.5 CVE-1999-0966 1997-01-27T00:00:00.000-05:00 2018-10-30T12:25:36.810-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0]. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:outlook_express cpe:/a:microsoft:windows_explorer CVE-1999-0967 1997-11-01T00:00:00.000-05:00 2008-09-09T08:36:15.570-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. cpe:/a:james_seter:bnc_irc:2.2.4 CVE-1999-0968 1998-12-26T00:00:00.000-05:00 2017-10-09T21:29:01.437-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19981226 bnc exploit BID 1927 XF bnc-proxy-bo(1546) Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 CVE-1999-0969 1998-09-29T00:00:00.000-04:00 2018-10-12T17:29:18.887-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q193233 MS MS98-014 The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork. cpe:/a:omnicron:omnihttpd CVE-1999-0970 1999-06-05T00:00:00.000-04:00 2017-12-18T21:29:00.923-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990605 Remote Exploit (Bug) in OmniHTTPd Web Server BID 1808 XF omnihttpd-dos(2271) The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created. cpe:/a:university_of_cambridge:exim:1.62 CVE-1999-0971 1997-07-22T00:00:00.000-04:00 2008-09-09T08:36:34.243-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19970722 Security hole in exim 1.62: local root exploit Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file. cpe:/a:wolfpack_development:xshipwars:1.0 cpe:/a:wolfpack_development:xshipwars:1.2.4 CVE-1999-0972 1999-12-09T00:00:00.000-05:00 2008-09-09T08:36:34.320-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 863 Buffer overflow in Xshipwars xsw program. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0973 1999-12-07T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 858 Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0974 1999-12-09T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00190 BID 864 Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 CVE-1999-0975 1999-12-10T00:00:00.000-05:00 2008-09-09T08:36:34.523-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 868 The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed. cpe:/a:eric_allman:sendmail:8.9.3 CVE-1999-0976 1999-12-07T00:00:00.000-05:00 2008-09-09T08:36:34.633-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 857 Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-0977 1999-12-10T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00191 BID 2354 BID 866 Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request. cpe:/o:debian:debian_linux:2.1 CVE-1999-0978 1999-12-09T00:00:00.000-05:00 2008-09-09T08:36:34.853-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 867 htdig allows remote attackers to execute commands via filenames with shell metacharacters. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-1999-0979 2000-04-11T00:00:00.000-04:00 2016-10-17T22:00:03.167-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991215 Recent postings about SCO UnixWare 7 BID 869 The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise CVE-1999-0980 2000-05-16T00:00:00.000-04:00 2018-10-12T17:29:19.123-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q246045 MS MS99-055 Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request. cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 CVE-1999-0981 1999-12-08T00:00:00.000-05:00 2018-10-12T17:29:19.373-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q246094 MS MS99-050 Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect." cpe:/a:sun:web-based_enterprise_management:1.0 cpe:/a:sun:web-based_enterprise_management:2.0 cpe:/o:sun:solaris:8.0:beta CVE-1999-0982 1999-12-05T00:00:00.000-05:00 2008-09-09T08:36:35.147-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. cpe:/a:internic:whois_lookup:1.0 CVE-1999-0983 1999-11-09T00:00:00.000-05:00 2008-09-09T08:36:35.243-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. cpe:/a:matts_whois:matts_whois:1.0 CVE-1999-0984 1999-11-09T00:00:00.000-05:00 2008-09-09T08:36:35.307-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. cpe:/a:cc:cc_whois:1.0 CVE-1999-0985 1999-11-09T00:00:00.000-05:00 2008-09-09T08:36:35.367-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. cpe:/o:debian:debian_linux:2.1 cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:redhat:linux:5.2::i386 CVE-1999-0986 1999-12-08T00:00:00.000-05:00 2008-09-09T08:36:35.447-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 870 The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. cpe:/o:microsoft:windows_nt CVE-1999-0987 1999-11-18T00:00:00.000-05:00 2018-08-13T17:47:05.150-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov MSKB Q237923 Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name. cpe:/o:sco:unixware:2.0 cpe:/o:sco:unixware:2.0.3 cpe:/o:sco:unixware:2.1 cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 cpe:/o:sco:unixware:7.1.16 CVE-1999-0988 1999-12-04T00:00:00.000-05:00 2008-09-09T08:36:35.570-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. cpe:/a:microsoft:ie:5::windows_nt_4.0 cpe:/a:microsoft:ie:5.0::windows_95 cpe:/a:microsoft:ie:5.0::windows_98 CVE-1999-0989 1999-12-06T00:00:00.000-05:00 2008-09-09T08:36:35.647-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 861 Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol. cpe:/a:gnome:gdm:2.0_beta4 CVE-1999-0990 1999-12-05T00:00:00.000-05:00 2008-09-09T08:36:35.710-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. cpe:/a:goodtech:telnet_server_nt:2.2.1 CVE-1999-0991 1999-12-06T00:00:00.000-05:00 2008-09-09T08:36:35.773-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 862 Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name. cpe:/o:hp:vvos CVE-1999-0992 2000-01-18T00:00:00.000-05:00 2008-09-05T16:18:28.057-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX9912-107 HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP). cpe:/a:microsoft:exchange_server:5.0 cpe:/a:microsoft:exchange_server:5.5 CVE-1999-0993 1999-12-13T00:00:00.000-05:00 2017-01-19T21:59:00.230-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise CVE-1999-0994 1999-12-16T00:00:00.000-05:00 2018-10-12T17:29:19.607-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q248183 BID 873 MS MS99-056 Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise CVE-1999-0995 1999-12-16T00:00:00.000-05:00 2018-10-12T17:29:19.903-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov MSKB Q248185 BID 875 MS MS99-057 Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request." cpe:/a:infoseek:ultraseek_server:3.1 CVE-1999-0996 1999-12-15T00:00:00.000-05:00 2008-09-09T08:36:36.117-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS EEYE AD19991215 Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request. cpe:/a:millenux_gmbh:anonftp:2.8.1 cpe:/a:university_of_washington:wu-ftpd:2.4.2 cpe:/a:university_of_washington:wu-ftpd:2.5.0 cpe:/a:university_of_washington:wu-ftpd:2.6.0 cpe:/o:redhat:linux:5.2 cpe:/o:redhat:linux:6.0 cpe:/o:redhat:linux:6.1 CVE-1999-0997 1999-12-20T00:00:00.000-05:00 2008-09-05T16:18:28.777-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS DEBIAN DSA-377 wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress. cpe:/h:cisco:cache_engine:2 CVE-1999-0998 1999-12-16T00:00:00.000-05:00 2008-09-09T08:36:36.257-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Cisco Cache Engine allows an attacker to replace content in the cache. cpe:/a:microsoft:sql_server:7.0 CVE-1999-0999 1999-11-19T00:00:00.000-05:00 2018-10-12T17:29:20.233-04:00 4.3 NETWORK MEDIUM NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q248749 BID 817 MS MS99-059 Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet. cpe:/h:cisco:cache_engine:2 CVE-1999-1000 1999-12-16T00:00:00.000-05:00 2008-09-09T08:36:36.397-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. cpe:/h:cisco:cache_engine:1.0 CVE-1999-1001 1999-12-16T00:00:00.000-05:00 2008-09-09T08:36:36.460-04:00 2.6 NETWORK HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Cisco Cache Engine allows a remote attacker to gain access via a null username and password. cpe:/a:netscape:communicator:4.7 CVE-1999-1002 2000-01-12T00:00:00.000-05:00 2016-10-17T22:00:04.213-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991216 Reinventing the wheel (aka "Decoding Netscape Mail passwords") BUGTRAQ 19991220 Netscape password scrambling MISC http://www.rstcorp.com/news/bad-crypto.html Netscape Navigator uses weak encryption for storing a user's Netscape mail password. cpe:/a:jgaa:warftpd:1.70 CVE-1999-1003 1999-12-13T00:00:00.000-05:00 2008-09-09T08:36:36.647-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections. cpe:/a:symantec:norton_antivirus:2000 CVE-1999-1004 1999-12-16T00:00:00.000-05:00 2008-09-09T08:36:36.837-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://service1.symantec.com/SUPPORT/nav.nsf/df0a595864594c86852567ac0063608c/6206f660a1f2516a882568660082c930?OpenDocument&Highlight=0,poproxy BUGTRAQ 19991217 NAV2000 Email Protection DoS BUGTRAQ 19991220 Norton Email Protection Remote Overflow (Addendum) Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command. cpe:/a:netscape:enterprise_server:3.0.7a cpe:/a:novell:groupwise:5.2 cpe:/a:novell:groupwise:5.5 CVE-1999-1005 1999-12-19T00:00:00.000-05:00 2016-10-17T22:00:05.277-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991219 Groupewise Web Interface BID 879 Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter. cpe:/a:novell:groupwise:5.2 cpe:/a:novell:groupwise:5.5 CVE-1999-1006 1999-12-19T00:00:00.000-05:00 2016-10-17T22:00:06.290-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991219 Groupewise Web Interface Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter. cpe:/a:vdonet:vdolive_player:3.0.2 CVE-1999-1007 1999-12-13T00:00:00.000-05:00 2016-10-17T22:00:07.493-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991213 VDO Live Player 3.02 Buffer Overflow BID 872 Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file. cpe:/o:freebsd:freebsd:3.3 cpe:/o:mandrakesoft:mandrake_linux:7.0 CVE-1999-1008 2000-05-17T00:00:00.000-04:00 2016-10-17T22:00:08.510-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC http://marc.info/?l=freebsd-security&m=94531826621620&w=2 BID 871 xsoldier program allows local users to gain root access via a long argument. cpe:/a:disney:go_express_search CVE-1999-1009 1999-12-12T00:00:00.000-05:00 2008-09-09T08:36:37.180-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system. cpe:/a:openbsd:openssh:1.2.27 CVE-1999-1010 1999-12-14T00:00:00.000-05:00 2016-10-17T22:00:09.573-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991214 sshd1 allows unencrypted sessions regardless of server policy An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. cpe:/a:microsoft:data_access_components:1.5 cpe:/a:microsoft:data_access_components:2.0 cpe:/a:microsoft:data_access_components:2.1 cpe:/a:microsoft:index_server:2.0 cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:site_server:3.0 CVE-1999-1011 1999-07-19T00:00:00.000-04:00 2018-10-15T14:29:01.137-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC J-054 MS MS98-004 MS MS99-025 BID 529 The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands. cpe:/a:lotus:domino:4.6.1::as_400 CVE-1999-1012 1999-05-04T00:00:00.000-04:00 2008-09-05T16:18:30.900-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990504 AS/400 BID 173 SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string. cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2.1 CVE-1999-1013 1999-09-23T00:00:00.000-04:00 2016-10-17T22:00:10.730-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990923 named-xfer hole on AIX (fwd) BID 673 named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file. cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-1999-1014 1999-09-13T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990913 Solaris 2.7 /usr/bin/mail BUGTRAQ 19990927 Working Solaris x86 /usr/bin/mail exploit BID 672 XF sun-usrbinmail-local-bo(3297) Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument. cpe:/a:apple:appleshare_mail_server:5.0.3 CVE-1999-1015 1998-04-08T00:00:00.000-04:00 2017-11-21T14:16:30.237-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2017-11-21T14:03:53.370-05:00 BUGTRAQ 19980408 AppleShare IP Mail Server BID 61 Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command. cpe:/a:microsoft:frontpage:::express cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:outlook_express:5.0 cpe:/a:qualcomm:eudora CVE-1999-1016 1999-08-27T00:00:00.000-04:00 2016-10-17T22:00:14.137-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990827 HTML code to crash IE5 and Outlook Express 5 BID 606 Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell. cpe:/a:seattle_lab_software:emurl:2.0 CVE-1999-1017 1999-07-28T00:00:00.000-04:00 2016-10-17T22:00:15.137-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990728 Seattle Labs EMURL Vulnerability BID 544 Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message. cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.10 CVE-1999-1018 1999-07-27T00:00:00.000-04:00 2016-10-17T22:00:16.213-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990727 Linux 2.2.10 ipchains Advisory BID 543 IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets. cpe:/a:cabletron:spectrum_enterprise_manager:5.0 CVE-1999-1019 1999-06-23T00:00:00.000-04:00 2016-10-17T22:00:17.277-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990624 Re: Cabletron Spectrum security vulnerability BUGTRAQ 19990623 Cabletron Spectrum security vulnerability BID 495 SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise. cpe:/o:novell:netware:4.1 cpe:/o:novell:netware:4.11:sp5b CVE-1999-1020 1998-09-18T00:00:00.000-04:00 2017-12-18T21:29:01.017-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19980918 NMRC Advisory - Default NDS Rights BID 484 XF novell-nds(1364) The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE. cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 CVE-1999-1021 1992-12-30T00:00:00.000-05:00 2017-10-09T21:29:01.483-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SUN 00117 CERT CA-1992-15 BID 47 XF nfs-uid(82) NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade. cpe:/o:sgi:irix:4 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 CVE-1999-1022 1994-10-02T00:00:00.000-04:00 2017-12-18T21:29:01.097-05:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19941002 BID 464 XF sgi-serialports(2111) serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program. cpe:/o:sun:sunos:5.7 CVE-1999-1023 1999-06-10T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990610 Sun Useradd program expiration date bug BID 426 useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired. cpe:/a:lbl:tcpdump:3.4 CVE-1999-1024 2001-11-28T00:00:00.000-05:00 2016-10-17T22:00:20.810-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990616 tcpdump 3.4 bug? BUGTRAQ 19990617 Re: tcpdump 3.4 bug? BUGTRAQ 19990620 Re: tcpdump 3.4 bug? (final) BID 313 ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet. cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.6 CVE-1999-1025 1998-11-12T00:00:00.000-05:00 2018-10-30T12:25:26.310-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19981012 Annoying Solaris/CDE/NIS+ bug SUNBUG 4115685 BID 294 CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 CVE-1999-1026 1996-12-20T00:00:00.000-05:00 2016-10-17T22:00:22.870-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19961220 Solaris 2.5 x86 aspppd (semi-exploitable-hole) BID 292 aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file. cpe:/o:sun:solaris:2.6 CVE-1999-1027 1998-05-07T00:00:00.000-04:00 2018-05-02T21:29:04.520-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980507 admintool mode 0777 in Solaris 2.6 HW3/98 BID 290 XF solaris-admintool-world-writable(7296) Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program. cpe:/a:symantec:pcanywhere:8.0 CVE-1999-1028 1999-05-28T00:00:00.000-04:00 2016-10-17T22:00:25.043-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990528 DoS against PC Anywhere XF pcanywhere-dos(2256) BID 288 Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631. cpe:/a:ssh:ssh2:2.0 cpe:/a:ssh:ssh2:2.0.1 cpe:/a:ssh:ssh2:2.0.2 cpe:/a:ssh:ssh2:2.0.3 cpe:/a:ssh:ssh2:2.0.4 cpe:/a:ssh:ssh2:2.0.5 cpe:/a:ssh:ssh2:2.0.6 cpe:/a:ssh:ssh2:2.0.7 cpe:/a:ssh:ssh2:2.0.8 cpe:/a:ssh:ssh2:2.0.9 cpe:/a:ssh:ssh2:2.0.10 cpe:/a:ssh:ssh2:2.0.11 CVE-1999-1029 1999-05-13T00:00:00.000-04:00 2017-12-18T21:29:01.173-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990513 - J.J.F. / Hackers Team warns for SSHD 2.x brute force password hacking BID 277 XF ssh2-bruteforce(2193) SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs. cpe:/a:behold_software:web_page_counter:2.7 CVE-1999-1030 1999-05-19T00:00:00.000-04:00 2016-10-17T22:00:27.187-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990519 Denial of Service in Counter.exe version 2.70 NTBUGTRAQ 19990519 Denial of Service in Counter.exe version 2.70 BID 267 counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation. cpe:/a:behold_software:web_page_counter:2.7 CVE-1999-1031 1999-05-19T00:00:00.000-04:00 2016-10-17T22:00:28.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990519 Denial of Service in Counter.exe version 2.70 NTBUGTRAQ 19990519 Denial of Service in Counter.exe version 2.70 BID 267 counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument. cpe:/o:digital:ultrix:4.1 cpe:/o:digital:ultrix:4.2 CVE-1999-1032 1991-12-31T00:00:00.000-05:00 2017-10-09T21:29:01.547-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC B-36 CERT CA-1991-11 BID 26 XF ultrix-telnet(584) Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges. cpe:/a:microsoft:outlook_express:4.27.3110.1 cpe:/a:microsoft:outlook_express:4.72.3120.0 cpe:/a:microsoft:outlook_express:4.72.3612.1700 CVE-1999-1033 1999-05-11T00:00:00.000-04:00 2016-10-17T22:00:29.717-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990511 Outlook Express Win98 bug BUGTRAQ 19990512 Outlook Express Win98 bug, addition. BID 252 Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang. cpe:/o:att:svr4:4.0 CVE-1999-1034 1991-05-23T00:00:00.000-04:00 2017-10-09T21:29:01.590-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1991-08 CIAC B-28 BID 23 XF sysv-login(583) Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1035 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:20.937-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q192296 MS MS98-019 XF iis-get-dos(1823) IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability. cpe:/a:cops:cops:1.04 CVE-1999-1036 1998-06-26T00:00:00.000-04:00 2016-10-17T22:00:30.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980626 vulnerability in satan, cops & tiger COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk. cpe:/a:coast:satan:1.1.1 CVE-1999-1037 1998-06-26T00:00:00.000-04:00 2016-10-17T22:00:31.873-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980626 vulnerability in satan, cops & tiger BUGTRAQ 19980627 Re: vulnerability in satan, cops & tiger XF satan-rexsatan-symlink(7167) rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file. cpe:/a:tamu:tiger:2.2.3 CVE-1999-1038 1998-06-26T00:00:00.000-04:00 2016-10-17T22:00:33.077-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980626 vulnerability in satan, cops & tiger Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable. cpe:/o:sgi:irix:6.4 CVE-1999-1039 1998-05-27T00:00:00.000-04:00 2008-09-09T08:36:46.180-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19980502-01-P3030 Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise. cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1040 1998-04-08T00:00:00.000-04:00 2016-10-17T22:00:34.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19980501-01-P CIAC I-055 BUGTRAQ 19980408 SGI O2 ipx security issue Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable. cpe:/o:sco:openserver:5.0 cpe:/o:sco:unix:3.2v4 CVE-1999-1041 1998-08-27T00:00:00.000-04:00 2016-10-17T22:00:35.640-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO SB-98.05a BUGTRAQ 19980926 Root exploit for SCO OpenServer. CERT VB-98.10 BUGTRAQ 19980827 SCO mscreen vul. Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file. cpe:/a:cisco:resource_manager:1.0 cpe:/a:cisco:resource_manager:1.1 CVE-1999-1042 1999-12-31T00:00:00.000-05:00 2008-09-05T16:18:35.183-04:00 1.2 LOCAL HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CISCO 19980813 CRM Temporary File Vulnerability Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings. cpe:/a:microsoft:exchange_server:5.0 cpe:/a:microsoft:exchange_server:5.5 CVE-1999-1043 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:21.233-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MS MS98-007 Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error). cpe:/o:digital:unix:v4.0 cpe:/o:digital:unix:v4.0d CVE-1999-1044 1998-05-07T00:00:00.000-04:00 2011-03-07T21:01:31.423-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CIAC I-050 XF dgux-advfs-softlinks(7431) Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges. cpe:/a:realnetworks:realserver:5.0 CVE-1999-1045 1998-01-15T00:00:00.000-05:00 2016-10-17T22:00:36.890-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov BUGTRAQ 19980115 [rootshell] Security Bulletin #7 BUGTRAQ 19980115 pnserver exploit.. BUGTRAQ 19980817 Re: Real Audio Server Version 5 bug? MISC http://service.real.com/help/faq/serv501.html XF realserver-pnserver-remote-dos(7297) pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request. cpe:/a:ipswitch:imail:5.0 CVE-1999-1046 1999-03-01T00:00:00.000-05:00 2017-12-18T21:29:01.253-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990302 Multiple IMail Vulnerabilites BID 504 XF imail-imonitor-overflow(1897) Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181. cpe:/a:bsdi:gauntlet:5.0 CVE-1999-1047 1999-10-18T00:00:00.000-04:00 2016-10-17T22:00:39.517-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19991018 Gauntlet 5.0 BSDI warning BUGTRAQ 19991019 Re: Gauntlet 5.0 BSDI warning XF gauntlet-bsdi-bypass(3397) When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities. cpe:/o:debian:debian_linux:1.3.1 cpe:/o:redhat:linux:4.2 CVE-1999-1048 1998-09-05T00:00:00.000-04:00 2017-10-09T21:29:01.717-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19970821 Buffer overflow in /bin/bash DEBIAN 19980909 problem with very long pathnames BUGTRAQ 19980905 BASH buffer overflow, LiNUX x86 exploit XF linux-bash-bo(3414) Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory. cpe:/a:ca:arcserve_backup:6.5 CVE-1999-1049 1999-02-21T00:00:00.000-05:00 2016-10-17T22:00:41.907-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990222 Severe Security Hole in ARCserve NT agents (fwd) ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password. cpe:/a:matt_wright:formhandler.cgi:1.0 cpe:/a:matt_wright:formhandler.cgi:2.0 cpe:/a:matt_wright:formhandler.cgi:3.0 CVE-1999-1050 1999-11-12T00:00:00.000-05:00 2017-12-18T21:29:01.330-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991112 FormHandler.cgi BUGTRAQ 19991116 Re: FormHandler.cgi BID 798 BID 799 XF formhandler-cgi-absolute-path(3550) Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template. cpe:/a:matt_wright:formhandler.cgi:1.0 cpe:/a:matt_wright:formhandler.cgi:2.0 cpe:/a:matt_wright:formhandler.cgi:3.0 CVE-1999-1051 1999-11-16T00:00:00.000-05:00 2008-09-05T16:18:36.447-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19991116 Re: FormHandler.cgi Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter. cpe:/a:microsoft:frontpage CVE-1999-1052 1999-08-24T00:00:00.000-04:00 2016-10-17T22:00:43.000-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990824 Front Page form_results Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users. cpe:/a:apache:http_server:1.3.9 cpe:/a:matt_wright:matt_wright_guestbook:2.3 CVE-1999-1053 1999-09-13T00:00:00.000-04:00 2008-09-05T16:18:36.713-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19991105 Guestbook.pl, sloppy SSI handling in Apache? (VD#2) VULN-DEV 19990913 Guestbook perl script (long) VULN-DEV 19990916 Re: Guestbook perl script (error fix) BID 776 guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->". cpe:/a:globetrotter:flexlm:6.0d CVE-1999-1054 1998-09-25T00:00:00.000-04:00 2016-10-17T22:00:44.140-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980925 Globetrotter FlexLM 'lmdown' bogosity The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command. cpe:/a:microsoft:excel:97 CVE-1999-1055 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:21.373-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BID 179 MS MS98-018 XF excel-call(1737) Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability." CVE-1999-1056 1992-12-31T00:00:00.000-05:00 2008-09-09T08:36:47.930-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1395. Reason: This candidate is a duplicate of CVE-1999-1395. Notes: All CVE users should reference CVE-1999-1395 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. cpe:/o:digital:vms:5.3 CVE-1999-1057 1990-10-25T00:00:00.000-04:00 2008-09-05T16:18:37.230-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC B-04 CERT CA-1990-07 XF vms-analyze-processdump-privileges(7137) BID 12 VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command. cpe:/a:arcane_software:vermillion_ftp_daemon:1.23 CVE-1999-1058 1999-11-22T00:00:00.000-05:00 2017-12-18T21:29:01.410-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991122 Remote DoS Attack in Vermillion FTP Daemon (VFTPD) v1.23 Vulnerability NTBUGTRAQ 19991122 Remote DoS Attack in Vermillion FTP Daemon (VFTPD) v1.23 Vulnerability BID 818 XF vermillion-ftp-cwd-overflow(3543) Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands. cpe:/o:att:svr4:4.0 CVE-1999-1059 1992-02-25T00:00:00.000-05:00 2008-09-05T16:18:37.527-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CERT CA-1992-04 XF att-rexecd(3159) BID 36 Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands. cpe:/a:tetrix:tetrinet:1.13.16 CVE-1999-1060 1999-02-17T00:00:00.000-05:00 2016-10-17T22:00:46.437-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990217 Tetrix 1.13.16 is Vulnerable BID 340 Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname. cpe:/h:hp:jetdirect CVE-1999-1061 1997-10-04T00:00:00.000-04:00 2017-12-18T21:29:01.470-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19971004 HP Laserjet 4M Plus DirectJet Problem XF laserjet-unpassworded(1876) HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging. cpe:/h:hp:jetdirect CVE-1999-1062 1997-10-04T00:00:00.000-04:00 2017-12-18T21:29:01.533-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19971004 HP Laserjet 4M Plus DirectJet Problem XF laserjet-unpassworded(1876) HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100. cpe:/a:cdomain:cdomainfree:1.0 cpe:/a:cdomain:cdomainfree:2.0 cpe:/a:cdomain:cdomainfree:2.1 cpe:/a:cdomain:cdomainfree:2.2 cpe:/a:cdomain:cdomainfree:2.3 cpe:/a:cdomain:cdomainfree:2.4 CVE-1999-1063 1999-06-01T00:00:00.000-04:00 2017-12-18T21:29:01.613-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990601 whois_raw.cgi problem BID 304 XF http-cgi-cdomain(2251) CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter. cpe:/a:windowmaker:windowmaker:0.60.0 CVE-1999-1064 1999-08-22T00:00:00.000-04:00 2016-10-17T22:00:50.297-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990822 BUGTRAQ 19990824 Re: WindowMaker bugs (was sub:none ) BID 596 Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]). cpe:/a:palm_pilot:hotsync_manager:3.0.4 CVE-1999-1065 1999-11-04T00:00:00.000-05:00 2016-10-17T22:00:51.813-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991104 Palm Hotsync vulnerable to DoS attack Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode. cpe:/a:sgi:quake_1_server CVE-1999-1066 1999-12-22T00:00:00.000-05:00 2016-10-17T22:00:53.097-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991222 Quake "smurf" - Quake War Utils Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request. cpe:/o:sgi:irix:6.3 CVE-1999-1067 1997-05-07T00:00:00.000-04:00 2016-10-17T22:00:54.377-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19970507 Re: SGI Security Advisory 19970501-01-A - Vulnerability in webdist.cgi SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities. cpe:/a:oracle:http_server:2.1 CVE-1999-1068 1997-07-23T00:00:00.000-04:00 2016-10-17T22:00:55.580-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19970723 DoS against Oracle Webserver 2.1 with PL/SQL stored procedures Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request. cpe:/a:icat:electronic_commerce_suite:3.0.0 CVE-1999-1069 1997-11-08T00:00:00.000-05:00 2017-12-18T21:29:01.673-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19971108 Security bug in iCat Suite version 3.0 BID 2126 XF icat-carbo-server-vuln(1620) Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter. cpe:/a:xylogics:annex CVE-1999-1070 1998-07-25T00:00:00.000-04:00 2008-09-05T16:18:39.087-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19980725 Annex DoS Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter. cpe:/a:excite:ews:1.1 CVE-1999-1071 1998-11-30T00:00:00.000-05:00 2017-12-18T21:29:01.753-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19981130 Security bugs in Excite for Web Servers 1.1 XF excite-world-write(1417) Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file. cpe:/a:excite:ews:1.1 CVE-1999-1072 1998-11-30T00:00:00.000-05:00 2016-10-17T22:00:58.440-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19981130 Security bugs in Excite for Web Servers 1.1 Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi. cpe:/a:excite:ews:1.1 CVE-1999-1073 1998-11-30T00:00:00.000-05:00 2016-10-17T22:00:59.613-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19981130 Security bugs in Excite for Web Servers 1.1 Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack. cpe:/a:webmin:webmin:0.1 cpe:/a:webmin:webmin:0.2 cpe:/a:webmin:webmin:0.3 cpe:/a:webmin:webmin:0.4 cpe:/a:webmin:webmin:0.21 cpe:/a:webmin:webmin:0.22 cpe:/a:webmin:webmin:0.31 cpe:/a:webmin:webmin:0.41 cpe:/a:webmin:webmin:0.42 CVE-1999-1074 1999-12-31T00:00:00.000-05:00 2008-09-09T08:36:49.460-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19980501 Warning! Webmin Security Advisory BID 98 CONFIRM http://www.webmin.com/webmin/changes.html Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking. cpe:/o:ibm:aix:4.1.5 CVE-1999-1075 1998-03-18T00:00:00.000-05:00 2016-10-17T22:01:00.660-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980318 AIX 4.1.5 DoS attack (aka "Port 1025 problem") inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd. cpe:/o:apple:mac_os:9 CVE-1999-1076 1999-10-26T00:00:00.000-04:00 2016-10-17T22:01:01.987-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991026 Mac OS 9 Idle Lock Bug BID 745 Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session. cpe:/o:apple:mac_os:9 CVE-1999-1077 1999-11-01T00:00:00.000-05:00 2016-10-17T22:01:03.190-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991101 Re: Mac OS 9 Idle Lock Bug BID 756 Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock. cpe:/a:ipswitch:ws_ftp_pro:6.0 CVE-1999-1078 1999-07-29T00:00:00.000-04:00 2008-09-05T16:18:40.227-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 19990729 WS_FTP Pro 6.0 Weak Password Encryption Vulnerability BID 547 WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges. cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.2 CVE-1999-1079 1999-05-06T00:00:00.000-04:00 2016-10-17T22:01:04.660-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990506 AIX Security Fixes Update BUGTRAQ 19990825 AIX security summary BID 439 AIXAPAR IX80470 Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program. cpe:/o:sun:sunos:5.7 CVE-1999-1080 1995-05-10T00:00:00.000-04:00 2018-05-02T21:29:04.613-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990510 SunOS 5.7 rmmount, no nosuid. BUGTRAQ 19991011 BID 250 XF solaris-rmmount-gain-root(8350) rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf. cpe:/a:novell:web_server:2.0::examples_toolkit CVE-1999-1081 2002-01-15T00:00:00.000-05:00 2017-12-18T21:29:01.817-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MISC http://www.roxanne.org/faqs/www-secure/wwwsf4.html#Q35 MISC http://www.w3.org/Security/Faq/wwwsf8.html#Q87 XF http-nov-files(2054) Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. cpe:/a:t._hauck:jana_web_server:1.0 cpe:/a:t._hauck:jana_web_server:1.40 cpe:/a:t._hauck:jana_web_server:1.45 cpe:/a:t._hauck:jana_web_server:1.46 CVE-1999-1082 1999-10-08T00:00:00.000-04:00 2016-10-17T22:01:07.207-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991008 Jana webserver exploit BID 699 Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack. cpe:/a:t._hauck:jana_web_server:1.0 cpe:/a:t._hauck:jana_web_server:1.45 cpe:/a:t._hauck:jana_web_server:1.46 CVE-1999-1083 1999-10-08T00:00:00.000-04:00 2016-10-17T22:01:08.333-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000502 Security Bug in Jana HTTP Server BID 699 Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack. cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::workstation CVE-1999-1084 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:21.687-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS NTBUGTRAQ 19980622 Yet another "get yourself admin rights exploit": MSKB Q103861 CIAC K-029 BID 1044 MS MS00-008 The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash. cpe:/a:ssh:secure_shell:1.2.23 cpe:/a:ssh:secure_shell:1.2.25 CVE-1999-1085 1998-06-12T00:00:00.000-04:00 2016-10-17T22:01:10.787-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19980612 CORE-SDI-04: SSH insertion attack BUGTRAQ 19980703 UPDATE: SSH insertion attack XF ssh-insert(1126) CERT-VN VU#13877 SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack." cpe:/o:novell:netware:4.1 cpe:/o:novell:netware:4.11:sp5b cpe:/o:novell:netware:5.0 CVE-1999-1086 1999-07-15T00:00:00.000-04:00 2016-10-17T22:01:12.287-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990715 NMRC Advisory: Netware 5 Client Hijacking BID 528 Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:4.0.1:sp1 CVE-1999-1087 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:22.137-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q168617 CONFIRM http://www.microsoft.com/Windows/Ie/security/dotless.asp MS MS98-016 XF ie-dotless(2209) Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.02 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 CVE-1999-1088 1997-01-09T00:00:00.000-05:00 2018-05-02T21:29:04.723-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC H-21 XF hp-chsh(2012) Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10 cpe:/o:hp:hp-ux:10.20 CVE-1999-1089 1996-12-13T00:00:00.000-05:00 2017-07-10T21:29:00.867-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC H-16 CIAC H-21 BUGTRAQ 19961209 the HP Bug of the Week! XF hp-chfn(2008) Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument. cpe:/a:ncsa:telnet CVE-1999-1090 1991-09-10T00:00:00.000-04:00 2017-10-09T21:29:01.950-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CERT CA-1991-15 XF ftp-ncsa(1844) The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files. cpe:/a:rtin:rtin cpe:/a:tin:tin:1.2 CVE-1999-1091 2002-01-15T00:00:00.000-05:00 2017-12-18T21:29:01.910-05:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19960903 [BUG] Vulnerability in TIN BUGTRAQ 19960903 Re: BoS: [BUG] Vulnerability in TIN BUGTRAQ 19970329 symlink bug in tin/rtin XF tin-tmpfile(431) UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack. cpe:/a:iain_lea:tin:1.40 CVE-1999-1092 1999-11-17T00:00:00.000-05:00 2016-10-17T22:01:16.020-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991117 default permissions for tin tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:4.0.1:sp1 CVE-1999-1093 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:22.577-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q191200 XF java-script-patch(1276) MS MS98-011 Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page. cpe:/a:microsoft:ie:4.0.1 CVE-1999-1094 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:01.997-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980114 L0pht Advisory MSIE4.0(1) MSKB Q176697 XF iemk-bug(917) Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue." cpe:/o:redhat:linux:4.1 cpe:/o:slackware:slackware_linux:3.3 CVE-1999-1095 1997-10-06T00:00:00.000-04:00 2016-10-17T22:01:18.240-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19971006 KSR[T] Advisory #3: updatedb / crontabs BUGTRAQ 19980302 overwrite any file with updatedb BUGTRAQ 19980303 updatedb stuff sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort. cpe:/o:kde:kde:1.0 CVE-1999-1096 1998-05-16T00:00:00.000-04:00 2017-12-18T21:29:01.957-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980516 kde exploit BUGTRAQ 19980517 simple kde exploit fix XF kde-klock-home-bo(1644) Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable. cpe:/a:microsoft:netmeeting:2.1 CVE-1999-1097 1999-05-04T00:00:00.000-04:00 2017-12-18T21:29:02.017-05:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19990504 Microsoft Netmeeting Hole XF netmeeting-clipboard(2187) Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty. cpe:/o:bsd:bsd CVE-1999-1098 1995-03-03T00:00:00.000-05:00 2008-09-05T16:18:43.087-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-1995-03 CIAC F-12 XF bsd-telnet(516) Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing. cpe:/a:kth:kth_kerberos:4 CVE-1999-1099 1996-11-22T00:00:00.000-05:00 2017-10-09T21:29:02.047-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19961122 L0pht Kerberos Advisory XF kerberos-user-grab(65) Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user. cpe:/a:cisco:pix_private_link:4.1%286%29 CVE-1999-1100 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:02.107-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CIAC I-056 CISCO 19980616 PIX Private Link Key Processing and Cryptography Issues XF cisco-pix-parse-error(1579) Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack. cpe:/a:kab_software:lydia:3.2 CVE-1999-1101 1999-02-19T00:00:00.000-05:00 2008-09-09T08:36:51.883-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 19990219 Yet Another password storing problem (was: Re: Possible Netscape Crypto Security Flaw) Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges. cpe:/o:apple:a_ux:2.0.1 cpe:/o:bsd:bsd:4.3 cpe:/o:sgi:irix:5.2 cpe:/o:sun:sunos:4.1.1 CVE-1999-1102 1999-12-31T00:00:00.000-05:00 2008-09-05T16:18:43.633-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC E-25a BUGTRAQ 19940307 8lgm Advisory Releases MISC http://www.phreak.org/archives/security/8lgm/8lgm.lpr lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times. cpe:/o:digital:osf_1:3.2c CVE-1999-1103 1996-04-03T00:00:00.000-05:00 2008-09-05T16:18:43.777-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC G-18 CERT VB-96.05 XF osf-dxconsole-gain-privileges(7138) MISC http://www.tao.ca/fire/bos/0209.html dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter. cpe:/o:microsoft:windows_95 CVE-1999-1104 1999-12-31T00:00:00.000-05:00 2016-10-17T22:01:23.350-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19951205 Cracked: WINDOWS.PWL BUGTRAQ 19980120 How to recover private keys for various Microsoft products NTBUGTRAQ 19980121 How to recover private keys for various Microsoft products MSKB Q140557 XF win95-nbsmbpwl(71) Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. cpe:/o:microsoft:windows_95 CVE-1999-1105 1999-12-31T00:00:00.000-05:00 2008-09-05T16:18:44.057-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 XF win95-netware-hidden-share(7231) MISC http://www.net-security.sk/bugs/NT/netware1.html CONFIRM http://www.zdnet.com/eweek/reviews/1016/tr42bug.html Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive. cpe:/o:kde:kde CVE-1999-1106 1998-04-29T00:00:00.000-04:00 2017-12-18T21:29:02.097-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980429 Security hole in kppp BID 92 XF kde-kppp-account-bo(1643) Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument. cpe:/o:kde:kde:1.0 CVE-1999-1107 1998-11-18T00:00:00.000-05:00 2017-12-18T21:29:02.173-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19981118 Multiple KDE security vulnerabilities (root compromise) XF kde-kppp-path-bo(1650) Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable. CVE-1999-1108 1998-11-18T00:00:00.000-05:00 2008-09-09T08:36:53.930-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1107. Reason: This candidate is a duplicate of CVE-1999-1107. Notes: All CVE users should reference CVE-1999-1107 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. cpe:/a:sendmail:sendmail:8.10.0 CVE-1999-1109 1999-12-22T00:00:00.000-05:00 2016-10-17T22:01:25.913-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991222 Re: procmail / Sendmail - five bugs BUGTRAQ 20000113 Re: procmail / Sendmail - five bugs XF sendmail-etrn-dos(7760) BID 904 Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated. cpe:/a:microsoft:ie:5.0 CVE-1999-1110 1999-11-14T00:00:00.000-05:00 2008-09-05T16:18:44.697-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19991114 IE 5.0 and Windows Media Player ActiveX object allow checking the existence of local files and directories BID 793 Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client. cpe:/a:immunix:stackguard:1.21 CVE-1999-1111 1999-11-09T00:00:00.000-05:00 2017-10-09T21:29:02.153-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19911109 ImmuniX OS Security Alert: StackGuard 1.21 Released BID 786 XF immunix-stackguard-bo(3524) Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack which directly modifies a pointer to a return address instead of using a buffer overflow to reach the return address entry itself. cpe:/a:irfanview:irfanview:3.0.7 CVE-1999-1112 1999-11-09T00:00:00.000-05:00 2017-12-18T21:29:02.267-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MISC http://stud4.tuwien.ac.at/~e9227474/main2.html BUGTRAQ 19991109 Irfan view 3.07 buffer overflow BID 781 XF irfan-view32-bo(3549) Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header. cpe:/a:eudora:internet_mail_server:1.2 cpe:/a:eudora:internet_mail_server:2.0 cpe:/a:eudora:internet_mail_server:2.01 CVE-1999-1113 1998-04-14T00:00:00.000-04:00 2016-10-17T22:01:28.147-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980414 MacOS based buffer overflows... BID 75 Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106. cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1114 1998-04-08T00:00:00.000-04:00 2017-10-09T21:29:02.217-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS AUSCERT AA-96.17 SGI 19980405-01-I CIAC H-15A BID 467 XF ksh-suid_exec(2100) Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges. cpe:/o:hp:apollo_domain_os:sr10.2 cpe:/o:hp:apollo_domain_os:sr10.3:beta CVE-1999-1115 1990-12-31T00:00:00.000-05:00 2008-09-05T16:18:45.430-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CERT CA-1990-04 CIAC A-30 XF apollo-suidexec-unauthorized-access(6721) BID 7 Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh). cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1116 1997-05-03T00:00:00.000-04:00 2017-10-09T21:29:02.310-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19970503-01-PX BID 462 XF sgi-runpriv(2108) Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 CVE-1999-1117 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:02.373-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov CIAC H-13 BUGTRAQ 19961125 lquerypv fix BUGTRAQ 19961125 AIX lquerypv BUGTRAQ 19961124 BID 455 XF ibm-lquerypv(1752) lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter. cpe:/o:sun:solaris:2.6 CVE-1999-1118 1998-03-11T00:00:00.000-05:00 2017-10-09T21:29:02.420-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov SUN 00165 BID 433 XF sun-ndd(817) ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters. cpe:/o:ibm:aix:::32-bit CVE-1999-1119 1992-04-27T00:00:00.000-04:00 2017-10-09T21:29:02.467-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1992-09 BID 41 XF aix-anon-ftp(3154) FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1120 1997-01-04T00:00:00.000-05:00 2017-10-09T21:29:02.530-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS SGI 19961203-01-PX SGI 19961203-02-PX BUGTRAQ 19970104 Irix: netprint story BID 395 XF sgi-netprint(2107) netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges. cpe:/o:ibm:aix:3.2 CVE-1999-1121 1992-03-19T00:00:00.000-05:00 2017-10-09T21:29:02.590-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1992-06 BID 38 XF ibm-uucp(554) The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges. cpe:/o:sun:sunos:4.0 cpe:/o:sun:sunos:4.0.1 cpe:/o:sun:sunos:4.0.3 CVE-1999-1122 1989-07-26T00:00:00.000-04:00 2018-05-02T21:29:04.817-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CERT CA-1989-02 CIAC CIAC-08 BID 3 XF sun-restore-gain-privileges(6695) Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges. cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 CVE-1999-1123 1991-05-20T00:00:00.000-04:00 2017-12-18T21:29:02.330-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SUN 00107 CERT CA-1991-07 BID 21 BID 22 XF sun-sourcetapes(582) The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall. cpe:/a:allaire:coldfusion CVE-1999-1124 1999-12-31T00:00:00.000-05:00 2008-09-05T16:18:46.713-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://packetstorm.securify.com/mag/phrack/phrack54/P54-08 HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host. cpe:/a:oracle:http_server:1.0 cpe:/a:oracle:http_server:2.1 CVE-1999-1125 1997-09-19T00:00:00.000-04:00 2016-10-17T22:01:32.197-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970919 Instresting practises of Oracle [Oracle Webserver] Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file. cpe:/a:cisco:resource_manager:1.1 CVE-1999-1126 1999-12-31T00:00:00.000-05:00 2017-12-18T21:29:02.410-05:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov CIAC I-086 CISCO 19980813 CRM Temporary File Vulnerability XF cisco-crm-file-vuln(1575) Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_". cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1127 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:22.827-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q195733 XF nt-spoolss(523) MS MS98-017 Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability. cpe:/a:microsoft:ie:3.0.1 CVE-1999-1128 1997-03-01T00:00:00.000-05:00 2008-09-10T15:01:09.773-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS MISC http://members.tripod.com/~unibyte/iebug3.htm MISC http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user. cpe:/h:cisco:catalyst_2900_vlan cpe:/o:cisco:ios:11.2%288%29sa5 CVE-1999-1129 1999-09-01T00:00:00.000-04:00 2017-12-18T21:29:02.470-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MISC http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htm BUGTRAQ 19990901 VLAN Security BID 615 XF cisco-catalyst-vlan-frames(3294) Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag. cpe:/a:netscape:enterprise_server:3.5.1 CVE-1999-1130 1999-07-30T00:00:00.000-04:00 2016-10-17T22:01:33.460-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990730 Netscape Enterprise Server yeilds source of JHTML NTBUGTRAQ 19990730 Netscape Enterprise Server yeilds source of JHTML BID 559 Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1131 1997-10-24T00:00:00.000-04:00 2017-10-09T21:29:02.637-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov SGI 19980601-01-PX CIAC I-060 CERT VB-97.12 XF sgi-osf-dce-dos(1123) Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1132 1999-12-31T00:00:00.000-05:00 2016-10-17T22:01:34.570-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19981005 NMRC Advisory - Lame NT Token Ring DoS NTBUGTRAQ 19981002 NMRC Advisory - Lame NT Token Ring DoS MSKB Q179157 XF token-ring-dos(1399) Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10 CVE-1999-1133 1997-09-01T00:00:00.000-04:00 2017-12-18T21:29:02.533-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS HP HPSBUX9709-069 XF hp-vue-dt(499) HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users. cpe:/o:hp:hp-ux:9 CVE-1999-1134 1994-05-18T00:00:00.000-04:00 2008-09-10T15:01:10.243-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC E-23 HP HPSBUX9404-008 XF hp-vue(2284) Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066. cpe:/o:hp:hp-ux:9 CVE-1999-1135 1994-04-20T00:00:00.000-04:00 2017-12-18T21:29:02.597-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS HP HPSBUX9504-027 XF hp-vue(2284) Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438. cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:mpe_ix:5.0 cpe:/o:hp:mpe_ix:5.5 CVE-1999-1136 1998-07-30T00:00:00.000-04:00 2017-10-09T21:29:02.687-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov HP HPSBMP9807-005 BUGTRAQ 19980729 HP-UX Predictive & Netscape SSL Vulnerabilities CIAC I-081 HP HPSBUX9807-081 XF mpeix-predictive(1413) Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems. cpe:/o:sun:solaris cpe:/o:sun:sunos cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.2 CVE-1999-1137 1993-10-01T00:00:00.000-04:00 2018-10-30T12:25:11.980-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov SUN 00122 CIAC E-01 XF sun-audio(549) The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone. cpe:/o:sco:open_desktop:1.0 cpe:/o:sco:open_desktop:2.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:open_desktop_lite:3.0 cpe:/o:sco:openserver:3.0 cpe:/o:sco:unix:system_v386_3.2_operating_system cpe:/o:sco:unix:system_v386_3.2_operating_system_2.0 cpe:/o:sco:unix:system_v386_3.2_operating_system_4.0 cpe:/o:sco:unix:system_v386_3.2_operating_system_4.x CVE-1999-1138 1993-09-17T00:00:00.000-04:00 2017-10-09T21:29:02.797-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1993-13 XF sco-homedir(546) SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable. cpe:/o:hp:hp-ux:11.00 CVE-1999-1139 1997-09-01T00:00:00.000-04:00 2016-10-17T22:01:38.587-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970901 HP UX Bug :) BUGTRAQ 19980121 HP-UX CUE, CUD and LAND vulnerabilities CIAC I-027B HP HPSBUX9801-074 XF hp-cue(2007) Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file. cpe:/a:alec_muffet:cracklib:2.5 CVE-1999-1140 1997-12-14T00:00:00.000-05:00 2017-10-09T21:29:02.840-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19971214 buffer overflows in cracklib?! CERT VB-97.16 XF cracklib-bo(1539) Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field. cpe:/h:ascom:timeplex_routers CVE-1999-1141 1997-05-15T00:00:00.000-04:00 2017-12-18T21:29:02.660-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19970515 MicroSolved finds hole in Ascom Timeplex Router Security XF ascom-timeplex-debug(1824) Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters. cpe:/o:sun:sunos:4.1.2 CVE-1999-1142 1992-05-27T00:00:00.000-04:00 2017-10-09T21:29:02.887-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SUN 00116 CERT CA-1992-11 XF sun-env(3152) SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user. cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1143 1997-05-28T00:00:00.000-04:00 2017-10-09T21:29:02.950-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19970504-01-PX CIAC H-065 XF sgi-rld(2109) Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs. cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 CVE-1999-1144 1997-01-30T00:00:00.000-05:00 2017-10-09T21:29:02.997-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS HP HPSBUX9701-051 XF hp-mpower(2056) Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 CVE-1999-1145 1997-01-07T00:00:00.000-05:00 2017-10-09T21:29:03.060-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC H-21 HP HPSBUX9701-044 XF hp-glanceplus(2059) Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges. cpe:/o:hp:hp-ux:8 cpe:/o:hp:hp-ux:9 CVE-1999-1146 1994-05-04T00:00:00.000-04:00 2017-10-09T21:29:03.107-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS HP HPSBUX9405-011 XF hp-glanceplus-gpm(2060) Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. cpe:/a:platinum:policy_compliance_manager:7.0 CVE-1999-1147 1998-12-04T00:00:00.000-05:00 2018-05-02T21:29:04.910-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19981204 [SAFER-981204.DOS.1.3] Buffer Overflow in Platinum PCM 7.0 XF pcm-dos-execute(1430) Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1148 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:23.077-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q189262 MS MS98-006 XF iis-passive-ftp(1215) FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time. cpe:/a:computer_software_manufaktur:csm_proxy:4.1 CVE-1999-1149 1998-07-16T00:00:00.000-04:00 2017-12-18T21:29:02.720-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980716 S.A.F.E.R. Security Bulletin 980708.DOS.1.1 XF csm-proxy-dos(1422) Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port. cpe:/h:livingston_portmaster:portmaster:initial CVE-1999-1150 1998-06-30T00:00:00.000-04:00 2017-12-18T21:29:02.767-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980630 Livingston Portmaster - ISN generation is loosy! XF portmaster-fixed-isn(1882) Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions. cpe:/h:compaq_microcom:microcom_6000_access_integrator:initial CVE-1999-1151 1998-06-03T00:00:00.000-04:00 2017-12-18T21:29:02.830-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980603 Compaq/Microcom 6000 DoS + more XF microcom-dos(2089) Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password. cpe:/h:compaq_microcom:microcom_6000_access_integrator CVE-1999-1152 1998-06-03T00:00:00.000-04:00 2016-10-17T22:01:45.917-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19980603 Compaq/Microcom 6000 DoS + more Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack. cpe:/a:hamcards_postcard_cgi:hamcards_postcard_cgi:1.0 CVE-1999-1153 1998-11-09T00:00:00.000-05:00 2017-12-18T21:29:02.910-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov XF cgi-perl-mail-programs(1400) HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. cpe:/a:lakeweb:filemail_cgi_script CVE-1999-1154 1998-11-09T00:00:00.000-05:00 2017-12-18T21:29:02.987-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MISC http://lakeweb.com/scripts/ BUGTRAQ 19981109 Several new CGI vulnerabilities XF cgi-perl-mail-programs(1400) LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. cpe:/a:lakeweb:mail_list_cgi_script CVE-1999-1155 1998-11-09T00:00:00.000-05:00 2017-12-18T21:29:03.050-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MISC http://lakeweb.com/scripts/ BUGTRAQ 19981109 Several new CGI vulnerabilities XF cgi-perl-mail-programs(1400) LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. cpe:/a:bisonware:bisonware_ftp_server:4.1 CVE-1999-1156 1999-05-17T00:00:00.000-04:00 2018-05-02T21:29:04.990-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov XF bisonware-port-crash(2254) BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1157 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:03.217-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q192774 XF tcpipsys-icmp-dos(3894) Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface. cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-1158 1997-05-13T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS AUSCERT AA-97.09 SUN 00139 Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd. cpe:/a:ssh:ssh2:2.0.11 CVE-1999-1159 1998-12-29T00:00:00.000-05:00 2017-10-09T21:29:03.280-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19981229 ssh2 security problem (and patch) (fwd) XF ssh-privileged-port-forward(1471) SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10 CVE-1999-1160 1997-02-02T00:00:00.000-05:00 2016-10-17T22:01:48.620-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC H-33 HP HPSBUX9702-055 XF hp-ftpd-kftpd(7437) Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges. cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:10 CVE-1999-1161 1996-11-03T00:00:00.000-05:00 2016-10-17T22:01:49.807-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC H-32 BUGTRAQ 19961103 Re: Untitled BUGTRAQ 19961104 ppl bugs HP HPSBUX9704-057 XF hp-ppl(7438) Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump. cpe:/o:sco:open_desktop:1.1 cpe:/o:sco:open_desktop:2.0 cpe:/o:sco:unix:4.0 CVE-1999-1162 1993-05-24T00:00:00.000-04:00 2008-09-05T16:18:52.117-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-1993-08 XF sco-passwd-deny(542) Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system. cpe:/h:hp:9000:800 CVE-1999-1163 1999-11-24T00:00:00.000-05:00 2016-10-17T22:01:50.917-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS HP HPSBUX9911-105 XF hp-ssp(7439) Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation. cpe:/a:microsoft:outlook:97 cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook:2000 cpe:/a:microsoft:outlook_express CVE-1999-1164 1999-06-25T00:00:00.000-04:00 2016-10-17T22:01:51.997-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990625 Outlook denial of service Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang. cpe:/a:gnu:fingerd:1.37 CVE-1999-1165 1999-07-21T00:00:00.000-04:00 2016-10-17T22:01:53.120-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990721 old gnu finger bugs BUGTRAQ 19950317 GNU finger 1.37 executes ~/.fingerrc with gid root BID 535 GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files. cpe:/o:linux:linux_kernel:2.0.37 CVE-1999-1166 1999-07-11T00:00:00.000-04:00 2008-09-05T16:18:52.680-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19990711 Linux 2.0.37 segment limit bug BID 523 Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory. cpe:/a:third_voice:third_voice_web CVE-1999-1167 1999-12-31T00:00:00.000-05:00 2008-09-05T16:18:52.820-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 XF thirdvoice-cross-site-scripting(7252) MISC http://www.wired.com/news/technology/0,1282,20636,00.html CONFIRM http://www.wired.com/news/technology/0,1282,20677,00.html Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation. cpe:/a:iss:internet_security_scanner:5.3::linux CVE-1999-1168 1999-02-20T00:00:00.000-05:00 2008-09-05T16:18:52.963-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19990220 ISS install.iss security hole install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file. cpe:/a:flavio_veloso:nobo:1.2 CVE-1999-1169 1999-02-04T00:00:00.000-05:00 2008-09-10T15:01:14.867-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990204 NOBO denial of service nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets. cpe:/a:ipswitch:imail:5.0 cpe:/a:progress:ipswitch_ws_ftp_server:1.0.1.e cpe:/a:progress:ipswitch_ws_ftp_server:1.0.2.e CVE-1999-1170 1999-01-02T00:00:00.000-05:00 2019-08-13T10:39:21.853-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS NTBUGTRAQ 19990204 WS FTP Server Remote DoS Attack BID 218 IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920. cpe:/a:ipswitch:imail:5.0 cpe:/a:progress:ipswitch_ws_ftp_server:1.0.1.e cpe:/a:progress:ipswitch_ws_ftp_server:1.0.2.e CVE-1999-1171 1999-02-02T00:00:00.000-05:00 2019-08-13T10:39:21.853-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS NTBUGTRAQ 19990204 WS FTP Server Remote DoS Attack BID 218 IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920. cpe:/a:maximizer:maximizer_enterprise:4 CVE-1999-1172 1999-01-14T00:00:00.000-05:00 2008-09-05T16:18:53.523-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990114 security hole in Maximizer By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared. cpe:/a:corel:wordperfect:8::linux CVE-1999-1173 1998-12-18T00:00:00.000-05:00 2016-10-17T22:01:57.123-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19981218 wordperfect 8 for linux security Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack. cpe:/h:iomega:zip_100_mb_drive CVE-1999-1174 2001-12-21T00:00:00.000-05:00 2008-09-10T15:01:15.883-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS MISC http://www.counterpane.com/crypto-gram-9812.html#doghouse ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to access the target disk. cpe:/o:cisco:ios:11.2 CVE-1999-1175 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:03.560-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CIAC I-054 CISCO 19980513 Cisco Web Cache Control Protocol Router Vulnerability XF cisco-wccp-vuln(1577) Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048. cpe:/a:aaron_ledbetter:cidentd cpe:/a:jidentd:jidentd CVE-1999-1176 1998-01-10T00:00:00.000-05:00 2016-10-17T22:01:58.310-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980110 Cidentd BUGTRAQ 19980911 Re: security problems with jidentd Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script. cpe:/a:lincoln_d._stein:nph-publish:1.2 CVE-1999-1177 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:03.733-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov MISC http://www.w3.org/Security/Faq/wwwsf4.html CONFIRM http://www-genome.wi.mit.edu/WWW/tools/CGI_scripts/server_publish/nph-publish XF http-cgi-nphpublish(2055) Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation. cpe:/a:sambar:sambar_server:4.1:beta CVE-1999-1178 1998-06-10T00:00:00.000-04:00 2017-12-18T21:29:03.127-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19980610 Sambar Server Beta BUG.. XF sambar-dump-env(3223) Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script. cpe:/a:sysadmin_magazine:man.sh CVE-1999-1179 1998-05-15T00:00:00.000-04:00 2008-09-05T16:18:54.523-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 19980515 May SysAdmin man.sh security hole Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands. cpe:/a:oreilly:website:1.1e cpe:/a:oreilly:website_pro:2.0 cpe:/a:oreilly:website_pro:2.1 cpe:/a:oreilly:website_pro:2.4 CVE-1999-1180 1999-02-16T00:00:00.000-05:00 2008-09-10T15:01:17.897-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat. cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.4 CVE-1999-1181 1998-09-29T00:00:00.000-04:00 2008-09-05T16:18:54.807-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19980901-01-PX CIAC J-003 XF irix-register(7441) Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges. cpe:/a:delix:dld:5.2 cpe:/o:caldera:openlinux_lite:1.1 cpe:/o:debian:debian_linux:4.0 cpe:/o:lst:lst_power_linux:2.2 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:suse:suse_linux:5.0 CVE-1999-1182 1997-07-17T00:00:00.000-04:00 2016-10-17T22:01:59.543-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970717 KSR[T] Advisory #2: ld.so BUGTRAQ 19970722 ld.so vulnerability BUGTRAQ 19980204 An old ld-linux.so hole Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error. cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1183 1998-04-02T00:00:00.000-05:00 2013-08-21T00:05:33.603-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19980403-01-PX SGI 19980403-02-PX XF sgi-mailcap(809) System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type. cpe:/a:elm_development_group:elm:2.3 cpe:/a:elm_development_group:elm:2.4 CVE-1999-1184 1997-05-13T00:00:00.000-04:00 2016-10-17T22:02:00.857-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19970513 BUGTRAQ 19970514 Re: ELM overflow Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable. cpe:/a:sco:cmw:3.0 cpe:/o:sco:internet_faststart:all_versions cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:3.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver_enterprise_system:5.0.4p CVE-1999-1185 1998-10-06T00:00:00.000-04:00 2017-07-10T21:29:00.930-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980926 Root exploit for SCO OpenServer. XF sco-openserver-mscreen-bo(1379) Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file. cpe:/a:rxvt:rxvt cpe:/o:redhat:linux:2.1 cpe:/o:slackware:slackware_linux:3.0 CVE-1999-1186 1996-01-02T00:00:00.000-05:00 2016-10-17T22:02:03.637-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19960102 rxvt security hole rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter. cpe:/a:university_of_washington:pine:3.94 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:slackware:slackware_linux:3.0 CVE-1999-1187 1996-08-26T00:00:00.000-04:00 2017-12-18T21:29:03.190-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19960826 [BUG] Vulnerability in PINE XF pine-tmpfile(416) Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail. cpe:/a:oracle:mysql:3.21 CVE-1999-1188 1998-12-27T00:00:00.000-05:00 2019-10-07T12:38:14.390-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19981227 mysql: mysqld creates world readable logs.. XF mysql-readable-log-files(1568) mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database. cpe:/a:netscape:communicator:4.7 cpe:/a:netscape:navigator:4.7 CVE-1999-1189 1999-11-24T00:00:00.000-05:00 2017-10-09T21:29:03.857-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991124 Netscape Communicator 4.7 - Navigator Overflows BUGTRAQ 19991127 Netscape Communicator 4.7 - Navigator Overflows BID 822 XF netscape-long-argument-bo(7884) Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file. cpe:/a:admiral_systems:emailclub:1.0.0.5 CVE-1999-1190 1999-11-15T00:00:00.000-05:00 2008-09-05T16:18:56.133-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS MISC http://www.securiteam.com/exploits/E-MailClub__FROM__remote_buffer_overflow.html BID 801 Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-1191 1997-05-19T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS AUSCERT AA-97.18 BUGTRAQ 19970519 Re: Finally, most of an exploit for Solaris 2.5.1's ps. SUN 00144 XF solaris-chkey-bo(7442) BID 207 Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-1192 1997-06-24T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00143 XF solaris-eeprom-bo(7444) BID 206 Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. cpe:/a:next:next:2.1 CVE-1999-1193 1991-05-14T00:00:00.000-04:00 2017-10-09T21:29:03.903-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1991-06 BID 20 XF next-me(581) The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root. cpe:/o:digital:ultrix:4.0 cpe:/o:digital:ultrix:4.1 CVE-1999-1194 1991-05-01T00:00:00.000-04:00 2017-10-09T21:29:03.967-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1991-05 BID 17 XF dec-chroot(577) chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges. cpe:/a:network_associates:virusscan:4.0.2 CVE-1999-1195 1999-05-05T00:00:00.000-04:00 2016-10-17T22:02:08.357-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990505 NAI AntiVirus Update Problem NTBUGTRAQ 19990505 NAI AntiVirus Update Problem BID 169 NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly. cpe:/a:hummingbird:exceed:5.0 CVE-1999-1196 1999-04-07T00:00:00.000-04:00 2008-09-05T16:18:56.977-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990427 NT/Exceed D.O.S. BID 158 Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000. cpe:/o:sun:sunos:4.1.1 CVE-1999-1197 1990-12-20T00:00:00.000-05:00 2008-09-05T16:18:57.117-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CERT CA-1990-12 XF sunos-tioccons-console-redirection(7140) BID 14 TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges. cpe:/a:next:next:2.0 CVE-1999-1198 1990-10-03T00:00:00.000-04:00 2008-09-05T16:18:57.260-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC B-01 CERT CA-1990-06 XF nextstep-builddisk-root-access(7141) BID 11 BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges. cpe:/a:apache:http_server:1.3.1 CVE-1999-1199 1998-08-07T00:00:00.000-04:00 2016-10-17T22:02:09.967-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 19980807 YA Apache DoS attack BUGTRAQ 19980808 Debian Apache Security Update BUGTRAQ 19980811 Apache 'sioux' DOS fix for TurboLinux BUGTRAQ 19980810 Apache DoS Attack CONFIRM http://www.redhat.com/support/errata/rh51-errata-general.html#apache Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability. cpe:/a:vintra_systems:smtp_mailserver CVE-1999-1200 1998-07-20T00:00:00.000-04:00 2017-12-18T21:29:03.267-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19980720 DOS in Vintra systems Mailserver software. XF vintra-mail-dos(1617) Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold CVE-1999-1201 1999-02-06T00:00:00.000-05:00 2017-10-09T21:29:04.030-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990206 New Windows 9x Bug: TCP Chorusing BID 225 XF win-multiple-ip-dos(7542) Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing. cpe:/a:startech:pop3_proxy_server cpe:/a:startech:telnet_server CVE-1999-1202 1998-07-03T00:00:00.000-04:00 2017-12-18T21:29:03.330-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980703 Windows95 Proxy DoS Vulnerabilites XF startech-pop3-overflow(2088) StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command. cpe:/o:ascend:multilink_ppp_for_isdn:4.6 CVE-1999-1203 1999-02-12T00:00:00.000-05:00 2016-10-17T22:02:15.110-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990210 Security problems in ISDN equipment authentication BUGTRAQ 19990212 PPP/ISDN multilink security issue - summary XF ascend-ppp-isdn-dos(7498) Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier. cpe:/a:checkpoint:firewall-1 CVE-1999-1204 1998-05-11T00:00:00.000-04:00 2017-10-09T21:29:04.093-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980511 Firewall-1 Reserved Keywords Vulnerability CONFIRM http://www.checkpoint.com/techsupport/config/keywords.html XF fw1-user-defined-keywords-access(7293) Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator. cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 CVE-1999-1205 1996-06-07T00:00:00.000-04:00 2018-05-02T21:29:05.083-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19960607 HP-UX B.10.01 vulnerability HP HPSBUX9607-035 XF hp-nettune(414) nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information. cpe:/a:systemsoft:systemwizard CVE-1999-1206 1999-12-31T00:00:00.000-05:00 2016-10-17T22:02:19.047-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990729 New ActiveX security problems in Windows 98 PCs BID 555 CONFIRM http://www.systemsoft.com/l-2/l-3/support-systemwizard.htm SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control. cpe:/a:network_general:netxray:all_versions CVE-1999-1207 1998-02-18T00:00:00.000-05:00 2017-12-18T21:29:03.377-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MISC http://www.efri.hr/~crv/security/bugs/NT/netxtray.html XF netxray-bo(907) Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request. cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.2 CVE-1999-1208 1997-07-21T00:00:00.000-04:00 2017-10-09T21:29:04.153-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970721 AIX ping (Exploit) BUGTRAQ 19970721 AIX ping, lchangelv, xlock fixes XF ping-bo(803) Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument. cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:openserver:3.0 cpe:/o:sco:openserver:5.0 CVE-1999-1209 1997-11-20T00:00:00.000-05:00 2017-10-09T21:29:04.200-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19971204 scoterm exploit CERT VB-97.14 XF sco-scoterm(690) Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges. cpe:/o:digital:unix:4.0b CVE-1999-1210 1997-11-12T00:00:00.000-05:00 2017-12-18T21:29:03.457-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19971112 Digital Unix Security Problem XF dec-xterm(613) xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access. cpe:/o:sun:sunos:4.1.1 CVE-1999-1211 1991-03-27T00:00:00.000-05:00 2017-12-18T21:29:03.553-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1991-02 XF sun-intelnetd(574) Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges. cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.0.3c CVE-1999-1212 1991-03-27T00:00:00.000-05:00 2017-12-18T21:29:03.613-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1991-02 XF sun-intelnetd(574) Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges. cpe:/o:hp:hp-ux:10.30 CVE-1999-1213 1997-10-01T00:00:00.000-04:00 2017-12-18T21:29:03.677-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov HP HPSBUX9710-070 XF hp-telnetdos(571) Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service. cpe:/o:bsd:bsd cpe:/o:bsd:bsd:4.4 cpe:/o:freebsd:freebsd:6.2:stable cpe:/o:netbsd:netbsd:2.0.4 cpe:/o:openbsd:openbsd:2.1 cpe:/o:sgi:irix CVE-1999-1214 1997-09-15T00:00:00.000-04:00 2017-10-09T21:29:04.310-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MISC http://www.openbsd.com/advisories/signals.txt XF openbsd-iosig(556) The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID. cpe:/o:novell:netware:4.0 cpe:/o:novell:netware:4.01 CVE-1999-1215 1993-09-16T00:00:00.000-04:00 2017-10-09T21:29:04.357-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CIAC D-21 CERT CA-1993-12 XF novell-login(545) LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges. cpe:/h:cisco:router:8.2 cpe:/h:cisco:router:8.3 cpe:/h:cisco:router:9.0 cpe:/h:cisco:router:9.1 cpe:/h:cisco:router:9.17 CVE-1999-1216 1993-04-22T00:00:00.000-04:00 2017-12-18T21:29:03.753-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CIAC D-15 CERT CA-1993-07 XF cisco-sourceroute(541) Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command. cpe:/o:microsoft:windows_nt CVE-1999-1217 1997-07-25T00:00:00.000-04:00 2017-10-09T21:29:04.403-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS NTBUGTRAQ 19970723 NT security - why bother? NTBUGTRAQ 19970725 Re: NT security - why bother? XF nt-path(526) The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories. cpe:/o:commodore:amiga_unix:2.1p2a CVE-1999-1218 1993-02-18T00:00:00.000-05:00 2017-12-18T21:29:03.817-05:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov CERT CA-1993-04 XF amiga-finger(522) Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files. cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.2 CVE-1999-1219 1994-08-11T00:00:00.000-04:00 2018-05-02T21:29:05.193-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC E-33 CERT CA-1994-13 BID 468 XF sgi-prn-mgr(511) Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command. cpe:/a:great_circle_associates:majordomo:1.94.3 CVE-1999-1220 1997-08-24T00:00:00.000-04:00 2017-12-18T21:29:03.877-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19970824 Vulnerability in Majordomo XF majordomo-advertise(502) Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header. cpe:/o:digital:unix:3 CVE-1999-1221 1996-11-17T00:00:00.000-05:00 2017-12-18T21:29:03.957-05:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19961117 Digital Unix v3.x (v4.x?) security vulnerability XF dgux-chpwd(399) dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::terminal_server CVE-1999-1222 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:04.467-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q188571 XF dns-netbtsys-dos(3893) Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup. cpe:/a:microsoft:internet_information_server:3.0 CVE-1999-1223 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:04.513-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q187503 XF url-asp-av(3892) IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters. cpe:/a:university_of_washington:imapd cpe:/a:university_of_washington:imapd:4.1 CVE-1999-1224 1997-10-08T00:00:00.000-04:00 2017-12-18T21:29:04.017-05:00 3.6 LOCAL LOW NONE PARTIAL NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19971008 L0pht Advisory: IMAP4rev1 imapd server XF imapd-core(349) IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information. cpe:/o:digital:ultrix cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:netbsd:netbsd:2.0.4 cpe:/o:openbsd:openbsd cpe:/o:sun:solaris CVE-1999-1225 1997-08-24T00:00:00.000-04:00 2017-12-18T21:29:04.097-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19970824 Serious security flaw in rpc.mountd on several operating systems. XF mountd-file-exists(347) rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not. cpe:/a:netscape:communicator:4.7 CVE-1999-1226 1999-10-28T00:00:00.000-04:00 2017-10-09T21:29:04.577-04:00 2.6 NETWORK HIGH NONE NONE NONE PARTIAL http://nvd.nist.gov XF netscape-huge-key-dos(3436) Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key. cpe:/a:ethereal_group:ethereal CVE-1999-1227 1999-07-30T00:00:00.000-04:00 2017-12-18T21:29:04.160-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.html MISC http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.html XF ethereal-dev-capturec-root(3334) Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file. cpe:/a:logicode:quicktel:28.8 cpe:/h:diamond:supra:33.6 cpe:/h:diamond:supra:v.90 cpe:/h:us_robotics:us_robotics:33.6 CVE-1999-1228 1998-09-27T00:00:00.000-04:00 2017-12-18T21:29:04.220-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980927 1+2=3, +++ATH0=Old school DoS MISC http://www.macintouch.com/modemsecurity.html XF global-village-modem-dos(3320) Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others. cpe:/a:id_software:quake_2_server:3.13 CVE-1999-1229 1998-02-25T00:00:00.000-05:00 2017-12-18T21:29:04.283-05:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19980225 Quake 2 Linux 3.13 (and lower) allow users to read arbitrary files XF linux-quake2(733) Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file. cpe:/a:id_software:quake_2 CVE-1999-1230 1997-12-24T00:00:00.000-05:00 2017-12-18T21:29:04.363-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19971224 Quake II Remote Denial of Service XF quake2-dos(698) Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself. cpe:/a:ssh:ssh2:2.0 cpe:/a:ssh:ssh2:2.0.1 cpe:/a:ssh:ssh2:2.0.2 cpe:/a:ssh:ssh2:2.0.3 cpe:/a:ssh:ssh2:2.0.4 cpe:/a:ssh:ssh2:2.0.5 cpe:/a:ssh:ssh2:2.0.6 cpe:/a:ssh:ssh2:2.0.7 cpe:/a:ssh:ssh2:2.0.8 cpe:/a:ssh:ssh2:2.0.9 cpe:/a:ssh:ssh2:2.0.10 cpe:/a:ssh:ssh2:2.0.11 cpe:/a:ssh:ssh2:2.0.12 CVE-1999-1231 1999-06-09T00:00:00.000-04:00 2017-12-18T21:29:04.427-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990609 ssh advirsory XF ssh-leak(2276) ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server. cpe:/o:sgi:irix:6.2 CVE-1999-1232 1997-05-16T00:00:00.000-04:00 2017-12-18T21:29:04.487-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970516 Irix and WWW XF sgi-day5datacopier(3316) Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1233 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:23.403-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB 241562 BID 657 MS MS99-039 XF iis-unresolved-domain-access(3306) IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1234 1999-10-26T00:00:00.000-04:00 2017-12-18T21:29:04.550-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991026 Re: LSA vulnerability on NT40 SP5 XF msrpc-samr-open-dos(3293) LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo. cpe:/a:microsoft:ie:5.0 CVE-1999-1235 1999-08-25T00:00:00.000-04:00 2017-12-18T21:29:04.613-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS XF nt-ie5-user-ftp-password(3289) Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link. cpe:/a:true_north:internet_anywhere_mail_server:2.3.1 cpe:/a:true_north:internet_anywhere_mail_server:3.1 CVE-1999-1236 1999-10-01T00:00:00.000-04:00 2017-12-18T21:29:04.677-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19991001 Vulnerabilities in the Internet Anywhere Mail Server BID 731 XF iams-passwords-plaintext(3285) Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf. cpe:/a:apache:http_server CVE-1999-1237 1999-06-06T00:00:00.000-04:00 2017-12-18T21:29:04.737-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990606 Buffer overflows in smbval library XF smbvalid-bo(2272) Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods. cpe:/o:hp:hp-ux:8 cpe:/o:hp:hp-ux:9 cpe:/o:hp:hp-ux:9.05 CVE-1999-1238 1994-09-21T00:00:00.000-04:00 2017-12-18T21:29:04.830-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS HP HPSBUX9409-017 XF hp-core-diag-fileset(2262) Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges. cpe:/o:hp:hp-ux:9 CVE-1999-1239 1994-07-13T00:00:00.000-04:00 2017-12-18T21:29:04.893-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS HP HPSBUX9407-015 XF hp-xauthority(2261) HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so. cpe:/a:gracenote:cddbd CVE-1999-1240 1996-11-26T00:00:00.000-05:00 2017-12-18T21:29:04.957-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS XF cddbd-bo(2203) Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message. cpe:/a:microsoft:ie:6.0.2900 CVE-1999-1241 1999-05-06T00:00:00.000-04:00 2017-12-18T21:29:05.017-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html XF ie-filesystemobject(2173) Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object. cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:9.01 CVE-1999-1242 1994-02-07T00:00:00.000-05:00 2017-12-18T21:29:05.097-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS HP HPSBUX9402-003 XF hp-subnet-config(2162) Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges. cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 CVE-1999-1243 1995-03-03T00:00:00.000-05:00 2017-10-09T21:29:04.687-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS SGI 19950301-01-P373 CIAC F-16 XF sgi-permissions(2113) SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges. cpe:/a:darren_reed:ipfilter:3.2.3 cpe:/a:darren_reed:ipfilter:3.2.4 cpe:/a:darren_reed:ipfilter:3.2.5 cpe:/a:darren_reed:ipfilter:3.2.6 cpe:/a:darren_reed:ipfilter:3.2.7 cpe:/a:darren_reed:ipfilter:3.2.8 cpe:/a:darren_reed:ipfilter:3.2.9 cpe:/a:darren_reed:ipfilter:3.2.10 CVE-1999-1244 1999-04-15T00:00:00.000-04:00 2017-12-18T21:29:05.190-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990415 FSA-99.04-IPFILTER-v3.2.10 XF ipfilter-temp-file(2087) IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file. cpe:/a:ucd-snmp:ucd-snmp:3.52 CVE-1999-1245 1999-04-06T00:00:00.000-04:00 2017-12-18T21:29:05.300-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov XF ucd-snmpd-community(2086) vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information. cpe:/a:microsoft:site_server:3.0 CVE-1999-1246 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:04.747-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q229972 XF siteserver-directmail-passwords(2068) Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges. cpe:/o:hp:hp-ux:9 CVE-1999-1247 1999-02-24T00:00:00.000-05:00 2017-12-18T21:29:05.363-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS HP HPSBUX9402-006 XF hp-dce9000(2061) Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges. cpe:/o:hp:hp-ux:8.00 cpe:/o:hp:hp-ux:8.02 cpe:/o:hp:hp-ux:8.06 cpe:/o:hp:hp-ux:9.00 CVE-1999-1248 1994-11-30T00:00:00.000-05:00 2017-12-18T21:29:05.427-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS HP HPSBUX9411-019 XF hp-supportwatch(2058) Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges. cpe:/o:hp:hp-ux:10.20 CVE-1999-1249 1997-01-06T00:00:00.000-05:00 2017-10-09T21:29:04.797-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS HP HPSBUX9701-047 XF hp-movemail(2057) movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges. cpe:/a:blue_world_communications:lasso_cgi CVE-1999-1250 1997-08-19T00:00:00.000-04:00 2017-12-18T21:29:05.503-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19970819 Lasso CGI security hole (fwd) XF http-cgi-lasso(2044) Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files. cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 CVE-1999-1251 1996-12-24T00:00:00.000-05:00 2017-12-18T21:29:05.567-05:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov HP HPSBUX9612-043 XF hp-audio-panic(2010) Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service. cpe:/o:sco:unixware:2.0.x cpe:/o:sco:unixware:2.1.0 CVE-1999-1252 1996-09-04T00:00:00.000-04:00 2017-12-18T21:29:05.627-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO 96:002 CERT VB-96.15 XF sco-system-call(1966) Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges. cpe:/o:sco:internet_faststart:1.0 cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 CVE-1999-1253 1996-06-07T00:00:00.000-04:00 2017-12-18T21:29:05.690-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO 96:001 CERT VB-96.10 XF sco-kernel(1965) Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt CVE-1999-1254 1999-03-08T00:00:00.000-05:00 2017-12-18T21:29:05.753-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990308 Winfreeze EXPLOIT Win9x/NT XF win-redirects-freeze(1947) Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables. cpe:/a:ccs_network:hyperseek_search_engine:2000 CVE-1999-1255 1999-02-19T00:00:00.000-05:00 2017-12-18T21:29:05.817-05:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov XF hyperseek-modify(1914) Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter. cpe:/a:oracle:database_assistant:1.0 CVE-1999-1256 1999-03-04T00:00:00.000-05:00 2017-12-18T21:29:05.877-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS NTBUGTRAQ 19990304 Oracle Plaintext Password BUGTRAQ 19990304 Oracle Plaintext Password XF oracle-passwords(1902) Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file. cpe:/h:xyplex:maxserver_xyplex_terminal_server:6.0.1_s1 cpe:/h:xyplex:maxserver_xyplex_terminal_server:6.0.2_s4 CVE-1999-1257 1997-11-26T00:00:00.000-05:00 2017-12-18T21:29:05.940-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19971126 Xyplex terminal server bug XF xyplex-controlz-login(1825) XF xyplex-question-login(1826) Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark). cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 CVE-1999-1258 1991-01-15T00:00:00.000-05:00 2017-10-09T21:29:04.857-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov SUN 00102 XF sun-pwdauthd(1782) rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information. cpe:/a:microsoft:office:98::mac CVE-1999-1259 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:04.903-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q189529 XF office-extraneous-data(1780) Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information. cpe:/a:hughes:msql:2.0.6 CVE-1999-1260 1999-02-15T00:00:00.000-05:00 2017-12-18T21:29:06.003-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990215 KSR[T] Advisory #10: mSQL ServerStats XF msql-serverstats(1777) mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query. cpe:/a:metamail_corporation:metamail:7.2 CVE-1999-1261 1997-10-24T00:00:00.000-04:00 2017-12-18T21:29:06.067-05:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19990211 Rainbow Six Buffer Overflow..... XF rainbowsix-nick-bo(1772) Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command. cpe:/a:netscape:communicator:4.01 cpe:/a:netscape:communicator:4.5 cpe:/a:netscape:communicator:4.06 cpe:/a:netscape:communicator:4.07 cpe:/a:netscape:communicator:4.08 CVE-1999-1262 1997-08-01T00:00:00.000-04:00 2017-10-09T21:29:04.950-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990202 Unsecured server in applets under Netscape XF java-socket-open(1727) Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities. cpe:/a:metamail_corporation:metamail:2.7 CVE-1999-1263 2003-08-15T00:00:00.000-04:00 2017-10-09T21:29:04.997-04:00 2.6 NETWORK HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19971024 Vulnerability in metamail XF metamail-file-creation(1677) Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file. cpe:/h:ramp_networks:webramp:300 cpe:/h:ramp_networks:webramp:m3 cpe:/h:ramp_networks:webramp:m3i cpe:/h:ramp_networks:webramp:m3t CVE-1999-1264 1999-01-21T00:00:00.000-05:00 2017-12-19T21:29:00.257-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990203 WebRamp M3 Perceived Bug BUGTRAQ 19990121 WebRamp M3 remote network access bug XF webramp-remote-access(1670) WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled. cpe:/a:seatle_lab_software:slmail:3.1 CVE-1999-1265 1998-09-22T00:00:00.000-04:00 2018-05-02T21:29:05.287-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980922 WARNING! SMTP Denial of Service in SLmail ver 3.1 NTBUGTRAQ 19980922 WARNING! SMTP Denial of Service in SLmail ver 3.1 XF slmail-parens-overload(1664) SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO. cpe:/a:metamail_corporation:metamail:7.2 CVE-1999-1266 1997-06-13T00:00:00.000-04:00 2017-12-18T21:29:06.207-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19970613 rshd gives away usernames XF rsh-username-leaks(1660) rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system. cpe:/o:kde:kde CVE-1999-1267 1997-05-05T00:00:00.000-04:00 2017-12-18T21:29:06.267-05:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19970505 Hole in the KDE desktop XF kde-flawed-ipc(1646) KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server. cpe:/o:kde:kde CVE-1999-1268 1999-01-06T00:00:00.000-05:00 2017-12-18T21:29:06.330-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC http://lists.kde.org/?l=kde-devel&m=91560433413263&w=2 XF kde-konsole-hijack(1645) Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices. cpe:/o:kde:kde_beta_3:initial CVE-1999-1269 1998-02-06T00:00:00.000-05:00 2017-12-18T21:29:06.377-05:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19980206 serious security hole in KDE Beta 3 XF kde-kss-file-clobber(1641) Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file. cpe:/o:kde:kde:1.0 CVE-1999-1270 1998-07-11T00:00:00.000-04:00 2017-12-18T21:29:06.440-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MISC http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2 XF kde-kmail-passphrase-leak(1639) KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps. cpe:/a:macromedia:dreamweaver:initial CVE-1999-1271 1998-06-11T00:00:00.000-04:00 2017-12-18T21:29:06.503-05:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19980611 Unsecure passwords in Macromedia Dreamweaver XF dreamweaver-weak-passwords(1636) Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users. cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1272 1998-03-01T00:00:00.000-05:00 2017-12-18T21:29:06.567-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19980301-01-PX XF irix-cdrom-confidence(1635) Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. cpe:/a:national_science_foundation:squid_web_proxy:1.1.20 CVE-1999-1273 1998-02-20T00:00:00.000-05:00 2017-12-18T21:29:06.627-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19980220 Simple way to bypass squid ACLs XF squid-regexp-acl(1627) Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. cpe:/a:ipass:roamserver:3.1 CVE-1999-1274 1997-12-29T00:00:00.000-05:00 2017-12-18T21:29:06.690-05:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19971229 iPass RoamServer 3.1 XF ipass-temporary-files(1625) iPass RoamServer 3.1 creates temporary files with world-writable permissions. cpe:/a:ibm:lotus_cc_mail:8.0 CVE-1999-1275 1997-09-08T00:00:00.000-04:00 2017-12-18T21:29:06.753-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19970908 Password unsecurity in cc:Mail release 8 XF lotus-ccmail-passwords(1619) Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges. cpe:/o:debian:debian_linux:2.1 cpe:/o:linux:linux_kernel:2.6.20.1 CVE-1999-1276 1998-12-07T00:00:00.000-05:00 2017-10-09T21:29:05.047-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS DEBIAN 19981207 fte-console: does not drop its root priviliges XF fte-console-privileges(1609) fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device. cpe:/a:backweb_technologies:backweb_client CVE-1999-1277 1998-12-24T00:00:00.000-05:00 2017-12-18T21:29:06.817-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19981224 BackWeb - Password issue (used by NAI for Corporate customer notification). XF backweb-cleartext-passwords(1565) BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password. cpe:/a:nlog:nlog CVE-1999-1278 1998-12-25T00:00:00.000-05:00 2017-12-18T21:29:06.877-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19981225 Re: Nlog v1.0 Released - Nmap 2.x log management / analyzing tool BUGTRAQ 19981226 Nlog 1.1b released - security holes fixed XF http-cgi-nlog-metachars(1549) XF http-cgi-nlog-netbios(1550) nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl. cpe:/a:microsoft:sna_server:2.11 cpe:/a:microsoft:sna_server:3.0 CVE-1999-1279 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.107-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q138001 XF snaserver-shared-folders(1548) An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU. cpe:/a:hummingbird:exceed:6.0.1.0 CVE-1999-1280 1998-12-03T00:00:00.000-05:00 2017-12-18T21:29:06.940-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19981203 Remote Tools w/Exceed v.6.0.1.0 fer 95 XF exceed-cleartext-passwords(1547) Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file. cpe:/a:winddance_networks_corporation:breeze_network_server CVE-1999-1281 1998-12-26T00:00:00.000-05:00 2017-12-18T21:29:07.003-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19981226 Breeze Network Server remote reboot and other bogosity. XF breeze-remote-reboot(1544) Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program. cpe:/a:realnetworks:realsystem_g2_server CVE-1999-1282 1998-12-10T00:00:00.000-05:00 2017-12-18T21:29:07.067-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19981210 RealSystem passwords XF realsystem-readable-conf-file(1542) RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges. cpe:/a:opera_software:opera_web_browser:3.2.1 CVE-1999-1283 1998-08-14T00:00:00.000-04:00 2017-12-18T21:29:07.127-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980814 URL exploit to crash Opera Browser XF opera-slash-crash(1541) Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag. cpe:/a:puppets_place:nukenabber CVE-1999-1284 1998-11-05T00:00:00.000-05:00 2017-10-09T21:29:05.153-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19981107 Re: various *lame* DoS attacks MISC http://www.dynamsol.com/puppet/text/new.txt BUGTRAQ 19981105 various *lame* DoS attacks XF nukenabber-timeout-dos(1540) NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection. cpe:/o:linux:linux_kernel:2.1.132 CVE-1999-1285 1998-12-27T00:00:00.000-05:00 2017-12-18T21:29:07.190-05:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19981227 [patch] fix for urandom read(2) not interruptible XF linux-random-read-dos(1472) Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.2 CVE-1999-1286 1997-05-09T00:00:00.000-04:00 2017-12-18T21:29:07.253-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX BUGTRAQ 19970509 Re: Irix: misc BID 330 XF irix-addnetpr(1433) addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file. cpe:/a:stephen_turner:analog:3.0 CVE-1999-1287 1999-12-31T00:00:00.000-05:00 2017-12-18T21:29:07.317-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov CONFIRM http://www.statslab.cam.ac.uk/~sret1/analog/security.html XF analog-remote-file(1410) Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface. cpe:/a:samba:samba:1.9.18 cpe:/o:caldera:openlinux:1.0 cpe:/o:caldera:openlinux:1.1 cpe:/o:caldera:openlinux:1.2 cpe:/o:caldera:openlinux:1.3 cpe:/o:redhat:linux cpe:/o:turbolinux:turbolinux CVE-1999-1288 1998-11-19T00:00:00.000-05:00 2017-10-09T21:29:05.217-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CALDERA SA-1998.35 BUGTRAQ 19981119 Vulnerability in Samba on RedHat, Caldera and PHT TurboLinux XF samba-wsmbconf(1406) Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program. cpe:/a:mirabilis:icq:98_beta CVE-1999-1289 1998-11-11T00:00:00.000-05:00 2017-12-18T21:29:07.410-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19981111 WARNING: Another ICQ IP address vulnerability XF icq-ip-info(1398) ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration. cpe:/a:chris_matthee:nftp:1.40 CVE-1999-1290 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.280-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19981117 nftp vulnerability (fwd) CONFIRM http://www.ayukov.com/nftp/history.html XF nftp-bo(1397) Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1291 1998-10-05T00:00:00.000-04:00 2017-12-18T21:29:07.470-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19981005 New Windows Vulnerability XF nt-brkill(1383) TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target. cpe:/a:kolban:webcam32:4.8.3 CVE-1999-1292 1998-09-01T00:00:00.000-04:00 2017-12-18T21:29:07.533-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ISS 19980901 Remote Buffer Overflow in the Kolban Webcam32 Program XF webcam32-buffer-overflow(1366) Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL. cpe:/a:apache:http_server:1.2.5 CVE-1999-1293 1999-12-31T00:00:00.000-05:00 2016-10-17T22:02:47.833-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 19980106 Apache security advisory CONFIRM http://www.apache.org/info/security_bulletin_1.2.5.html mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core. cpe:/o:microsoft:windows_nt:3.51 CVE-1999-1294 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.357-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q146604 XF nt-filemgr(562) Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission. cpe:/a:transarc:dce_distributed_file_system:1.1 CVE-1999-1295 1996-09-17T00:00:00.000-04:00 2017-12-18T21:29:07.597-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CERT VB-96.16 XF dfs-login-groups(7154) Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS. cpe:/a:mit:kerberos:5-1.5.2 CVE-1999-1296 1997-04-29T00:00:00.000-04:00 2016-10-17T22:02:49.053-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970429 vulnerabilities in kerberos Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable. cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 CVE-1999-1297 1998-07-15T00:00:00.000-04:00 2018-10-30T12:26:22.043-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov SUNBUG 1077164 XF sun-cmdtool-echo(7482) cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key. cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.7 cpe:/o:freebsd:freebsd:2.2 cpe:/o:freebsd:freebsd:2.2.1 CVE-1999-1298 1997-04-07T00:00:00.000-04:00 2008-09-10T15:01:40.477-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS FREEBSD FreeBSD-SA-97:03 XF freebsd-sysinstall-ftp-password(7537) Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources. cpe:/o:redhat:linux:4.0 cpe:/o:slackware:slackware_linux:3.1 CVE-1999-1299 1997-02-03T00:00:00.000-05:00 2016-10-17T22:02:50.257-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970203 Linux rcp bug rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file. cpe:/o:cray:unicos:6.0 cpe:/o:cray:unicos:6.1 CVE-1999-1300 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:11.820-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC B-31 Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration. cpe:/o:freebsd:freebsd:2.1.5 CVE-1999-1301 1996-07-16T00:00:00.000-04:00 2008-09-05T16:19:11.960-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS FREEBSD FreeBSD-SA-96:17 CIAC G-31 XF rzsz-command-execution(7540) A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs. cpe:/o:sco:open_desktop:2.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:open_desktop_lite:3.0 cpe:/o:sco:openserver_enterprise_system:3.0 cpe:/o:sco:openserver_network_system:3.0 cpe:/o:sco:unix:3.2 cpe:/o:sco:unix:4.0 cpe:/o:sco:unix:4.1 cpe:/o:sco:unix:4.2 CVE-1999-1302 1994-11-30T00:00:00.000-05:00 2017-07-10T21:29:01.070-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO 94:001 CERT VB-94:01 XF sco-pt_chmod(7586) Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access. cpe:/o:sco:open_desktop:2.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:open_desktop_lite:3.0 cpe:/o:sco:openserver_enterprise_system:3.0 cpe:/o:sco:openserver_network_system:3.0 cpe:/o:sco:unix:3.2 cpe:/o:sco:unix:4.0 cpe:/o:sco:unix:4.1 cpe:/o:sco:unix:4.2 CVE-1999-1303 1994-11-30T00:00:00.000-05:00 2011-03-07T21:01:55.033-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO 94:001 Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access. cpe:/o:sco:open_desktop:2.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:open_desktop_lite:3.0 cpe:/o:sco:openserver_enterprise_system:3.0 cpe:/o:sco:openserver_network_system:3.0 cpe:/o:sco:unix:3.2 cpe:/o:sco:unix:4.0 cpe:/o:sco:unix:4.1 cpe:/o:sco:unix:4.2 CVE-1999-1304 1994-11-30T00:00:00.000-05:00 2011-03-07T21:01:55.110-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO 94:001 Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access. cpe:/o:sco:open_desktop:2.0 cpe:/o:sco:open_desktop:3.0 cpe:/o:sco:open_desktop_lite:3.0 cpe:/o:sco:openserver_enterprise_system:3.0 cpe:/o:sco:openserver_network_system:3.0 cpe:/o:sco:unix:3.2 cpe:/o:sco:unix:4.0 cpe:/o:sco:unix:4.1 cpe:/o:sco:unix:4.2 CVE-1999-1305 1994-11-30T00:00:00.000-05:00 2011-03-07T21:01:55.187-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO 94:001 Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access. cpe:/o:cisco:ios:9.1 CVE-1999-1306 1992-12-10T00:00:00.000-05:00 2008-09-05T16:19:12.727-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-1992-20 Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters. cpe:/o:novell:unixware:1.1 CVE-1999-1307 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:12.867-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC F-06 BUGTRAQ 19941209 Novell security advisory on sadc, urestore and the suid_exec feature Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges. cpe:/o:hp:hp-ux:10.20 CVE-1999-1308 1997-07-31T00:00:00.000-04:00 2011-03-07T21:01:55.407-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CIAC H-09 CIAC H-91 XF hp-large-uid-gid(7594) Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges. cpe:/a:sendmail:sendmail:8.6.7 CVE-1999-1309 1996-08-30T00:00:00.000-04:00 2017-10-09T21:29:05.483-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1994-12 BUGTRAQ 19940314 sendmail -d problem (OLD yet still here) BUGTRAQ 19940315 anyone know details? BUGTRAQ 19940315 so... BUGTRAQ 19940315 Security problem in sendmail versions 8.x.x BUGTRAQ 19940327 sendmail exploit script - resend XF sendmail-debug-gain-root(7155) Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option. CVE-1999-1310 1994-11-04T00:00:00.000-05:00 2008-09-10T15:01:41.883-04:00 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1022. Reason: This candidate is a duplicate of CVE-1999-1022. Notes: All CVE users should reference CVE-1999-1022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 CVE-1999-1311 1997-01-07T00:00:00.000-05:00 2011-03-07T21:01:55.547-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CIAC H-21 Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges. cpe:/a:dec:dec_openvms_axp:1.0 cpe:/a:dec:dec_openvms_vax:5.5.2 CVE-1999-1312 1993-02-24T00:00:00.000-05:00 2017-12-18T21:29:07.660-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1993-05 XF openvms-local-privilege-elevation(7142) Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges. cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.2 CVE-1999-1313 1996-05-23T00:00:00.000-04:00 2017-12-18T21:29:07.737-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS FREEBSD FreeBSD-SA-96:11 CIAC G-24 XF bsd-man-command-sequence(7348) Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands. cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1:stable cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.2 cpe:/o:freebsd:freebsd:2.2:current CVE-1999-1314 1996-05-17T00:00:00.000-04:00 2008-09-10T15:01:42.147-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FREEBSD FreeBSD-SA-96:10 CIAC G-24 XF unionfs-mount-ordering(7429) Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands. cpe:/a:dec:dec_openvms:5.8 CVE-1999-1315 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:13.960-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC F-04 Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service. cpe:/o:microsoft:windows_nt:4.0:sp2:server CVE-1999-1316 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.547-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q247975 XF passfilt-fullname(7391) Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess. cpe:/o:microsoft:windows_nt:4.0:sp4 CVE-1999-1317 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.607-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990312 [ ALERT ] Case Sensitivity and Symbolic Links NTBUGTRAQ 19990314 AW: [ ALERT ] Case Sensitivity and Symbolic Links MSKB Q222159 XF nt-symlink-case(7398) Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device. cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c CVE-1999-1318 1993-09-17T00:00:00.000-04:00 2018-10-30T12:26:22.043-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUNBUG 1121935 XF sun-su-path(7480) /usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs. cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.1 CVE-1999-1319 1996-01-03T00:00:00.000-05:00 2008-09-10T15:01:42.493-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 19960101-01-PX XF irix-object-server(7430) Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations. cpe:/o:novell:netware:3.0 CVE-1999-1320 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:14.680-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC D-01 XF netware-packet-spoofing-privileges(7213) Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing. cpe:/a:mit:kerberos:v CVE-1999-1321 1998-11-05T00:00:00.000-05:00 2008-09-05T16:19:14.820-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19981105 security patch for ssh-1.2.26 kerberos code Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing. cpe:/a:ca:arcserve_backup cpe:/a:ca:inoculan cpe:/a:microsoft:exchange_server CVE-1999-1322 1998-11-12T00:00:00.000-05:00 2016-10-17T22:02:52.850-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS NTBUGTRAQ 19981112 exchverify.log NTBUGTRAQ 19981117 Re: exchverify.log - update #1 The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext. cpe:/a:symantec:norton_antivirus:1.0.1.7::internet_email_gateways cpe:/a:symantec:norton_antivirus:1.5::exchange CVE-1999-1323 1999-04-09T00:00:00.000-04:00 2016-10-17T22:02:54.100-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS NTBUGTRAQ 19990409 NAV for MS Exchange & Internet Email Gateways Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE. cpe:/a:dec:dec_openvms_vax:5.3 cpe:/a:dec:dec_openvms_vax:5.5.2 CVE-1999-1324 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.653-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CIAC D-06 XF openvms-sysgen-enabled(7225) VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing. cpe:/a:vax_vms:sas_system:5.18 CVE-1999-1325 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.717-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CIAC C-19 XF vaxvms-sas-gain-privileges(7261) SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges. cpe:/a:washington_university:wu-ftpd:2.4 CVE-1999-1326 1997-07-04T00:00:00.000-04:00 2017-10-09T21:29:05.797-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19970104 serious security bug in wu-ftpd v2.4 BUGTRAQ 19970105 BoS: serious security bug in wu-ftpd v2.4 -- PATCH XF wuftpd-abor-gain-privileges(7169) wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files. cpe:/o:redhat:linux:5.1 CVE-1999-1327 1999-12-31T00:00:00.000-05:00 2016-10-17T22:02:56.427-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980601 Re: SECURITY: Red Hat Linux 5.1 linuxconf bug (fwd) XF linuxconf-lang-bo(7239) CONFIRM http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable. cpe:/o:redhat:linux:5.1 CVE-1999-1328 1999-12-31T00:00:00.000-05:00 2016-10-17T22:02:57.727-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980823 Security concerns in linuxconf shipped w/RedHat 5.1 XF linuxconf-symlink-gain-privileges(7232) CONFIRM http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack. cpe:/o:redhat:linux:5.1 CVE-1999-1329 1999-12-31T00:00:00.000-05:00 2008-09-10T15:01:43.993-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS XF sysvinit-root-bo(7250) CONFIRM http://www.redhat.com/support/errata/rh50-errata-general.html#SysVinit Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges. cpe:/o:debian:debian_linux:4.0 cpe:/o:redhat:linux:4.2 CVE-1999-1330 1999-12-31T00:00:00.000-05:00 2016-10-17T22:02:59.320-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CONFIRM http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html BUGTRAQ 19970709 [linux-security] so-called snprintf() in db-1.85.4 (fwd) XF linux-libdb-snprintf-bo(7244) CONFIRM http://www.redhat.com/support/errata/rh42-errata-general.html#db The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf. cpe:/o:redhat:linux:4.2 CVE-1999-1331 1999-12-31T00:00:00.000-05:00 2008-09-10T15:01:44.337-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 XF netcfg-ethernet-dos(7245) CONFIRM http://www.redhat.com/support/errata/rh42-errata-general.html#netcfg netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface. cpe:/o:redhat:linux:5.0 CVE-1999-1332 1999-12-31T00:00:00.000-05:00 2016-10-17T22:03:00.600-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19980128 GZEXE - the big problem DEBIAN DSA-308 XF gzip-gzexe-tmp-symlink(7241) CONFIRM http://www.redhat.com/support/errata/rh50-errata-general.html#gzip BID 7845 gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. cpe:/o:redhat:linux:5.0 CVE-1999-1333 1999-12-31T00:00:00.000-05:00 2016-10-17T22:03:01.773-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980319 ncftp 2.4.2 MkDirs bug XF ncftp-autodownload-command-execution(7240) CONFIRM http://www.redhat.com/support/errata/rh50-errata-general.html#ncftp automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded. cpe:/a:elm_development_group:elm:2.4 CVE-1999-1334 1999-12-31T00:00:00.000-05:00 2016-10-17T22:03:02.993-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980129 KSR[T] Advisory #7: filter CONFIRM http://www.redhat.com/support/errata/rh50-errata-general.html#elm Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument. cpe:/o:redhat:linux:4.0 CVE-1999-1335 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:05.857-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov CONFIRM http://www.redhat.com/support/errata/rh40-errata-general.html#cmu-snmp XF cmusnmp-read-write(7251) snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information. cpe:/h:3com:hiperarc:4.2.29 CVE-1999-1336 1999-08-12T00:00:00.000-04:00 2016-10-17T22:03:04.180-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990812 3com hiperarch flaw [hiperbomb.c] BUGTRAQ 19990816 Re: 3com hiperarch flaw [hiperbomb.c] 3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port. cpe:/a:midnight_commander:midnight_commander:4.5.11 CVE-1999-1337 1999-08-01T00:00:00.000-04:00 2016-10-17T22:03:05.367-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990801 midnight commander vulnerability(?) (fwd) XF midnight-commander-data-disclosure(9873) FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges. cpe:/a:delegate:delegate:5.9.3 CVE-1999-1338 1999-07-21T00:00:00.000-04:00 2016-10-17T22:03:06.557-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19990721 Delegate creates directories writable for anyone Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions. cpe:/o:freebsd:freebsd:3.2 cpe:/o:linux:linux_kernel:2.2.10 CVE-1999-1339 1999-12-31T00:00:00.000-05:00 2016-10-17T22:03:07.960-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990722 Linux +ipchains+ ping -R BUGTRAQ 19990722 Re: ping -R causes kernel panic on a forwarding machine ( 2.2.5 a nd 2 .2.10) XF ipchains-ping-route-dos(7257) CONFIRM http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command. cpe:/a:hylafax:hylafax:4.0.2 CVE-1999-1340 1999-11-04T00:00:00.000-05:00 2016-10-17T22:03:09.117-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991104 hylafax-4.0.2 local exploit BID 765 Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument. cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.4:rc1 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.13:pre15 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.1 cpe:/o:linux:linux_kernel:2.3.2 cpe:/o:linux:linux_kernel:2.3.3 cpe:/o:linux:linux_kernel:2.3.4 cpe:/o:linux:linux_kernel:2.3.5 cpe:/o:linux:linux_kernel:2.3.6 cpe:/o:linux:linux_kernel:2.3.7 cpe:/o:linux:linux_kernel:2.3.8 cpe:/o:linux:linux_kernel:2.3.9 cpe:/o:linux:linux_kernel:2.3.10 cpe:/o:linux:linux_kernel:2.3.11 cpe:/o:linux:linux_kernel:2.3.12 cpe:/o:linux:linux_kernel:2.3.13 cpe:/o:linux:linux_kernel:2.3.14 cpe:/o:linux:linux_kernel:2.3.15 cpe:/o:linux:linux_kernel:2.3.16 cpe:/o:linux:linux_kernel:2.3.17 CVE-1999-1341 1999-10-22T00:00:00.000-04:00 2018-09-11T10:32:55.857-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2018-09-11T10:13:42.453-04:00 ALLOWS_OTHER_ACCESS BUGTRAQ 19991022 Local user can send forged packets XF linux-tiocsetd-forge-packets(7858) Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices. cpe:/a:icq:activelist_server CVE-1999-1342 1999-10-17T00:00:00.000-04:00 2016-10-17T22:03:11.603-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19991017 ICQ ActiveList Server Exploit... ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port. cpe:/h:xerox:docucolor_4lp CVE-1999-1343 1999-10-13T00:00:00.000-04:00 2016-10-17T22:03:12.790-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991013 Xerox DocuColor 4 LP D.O.S HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters. cpe:/a:auto_ftp:auto_ftp:0.2 CVE-1999-1344 1999-10-05T00:00:00.000-04:00 2016-10-17T22:03:14.290-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991005 Auto_FTP v0.02 Advisory Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file. cpe:/a:auto_ftp:auto_ftp:0.2 CVE-1999-1345 1999-10-05T00:00:00.000-04:00 2016-10-17T22:03:15.637-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991005 Auto_FTP v0.02 Advisory Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred. cpe:/o:redhat:linux:6.1 CVE-1999-1346 1999-10-07T00:00:00.000-04:00 2016-10-17T22:03:16.947-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991007 Problems with redhat 6 Xsession and pam.d/rlogin. PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file. cpe:/o:redhat:linux:6.1 CVE-1999-1347 1999-10-07T00:00:00.000-04:00 2016-10-17T22:03:18.040-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19991007 Problems with redhat 6 Xsession and pam.d/rlogin. Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm. cpe:/o:redhat:linux:6.0 CVE-1999-1348 1999-06-30T00:00:00.000-04:00 2016-10-17T22:03:19.337-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990630 linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service. cpe:/a:xlink_technology:omni-nfs_x_enterprise:6.1 CVE-1999-1349 1999-10-06T00:00:00.000-04:00 2016-10-17T22:03:20.400-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991006 Omni-NFS/X Enterprise (nfsd.exe) DOS NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag set, to port 111. cpe:/a:arcad_systemhaus:arcad:0.078_5 CVE-1999-1350 1999-09-29T00:00:00.000-04:00 2016-10-17T22:03:21.527-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990929 Multiple Vendor ARCAD permission problems ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse. cpe:/a:kvirc:irc_client:0.9.0 CVE-1999-1351 1999-09-24T00:00:00.000-04:00 2016-10-17T22:03:22.980-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990924 Kvirc bug XF kvirc-dot-directory-traversal(7761) Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request. cpe:/o:linux:linux_kernel:2.2.0 CVE-1999-1352 1999-09-28T00:00:00.000-04:00 2016-10-17T22:03:24.073-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990928 Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges. cpe:/a:nosque:msgcore:2.14 CVE-1999-1353 1999-09-07T00:00:00.000-04:00 2017-04-28T21:59:00.193-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990907 MsgCore mailserver stores passwords in clear text Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges. cpe:/a:softarc:firstclass_internet_server:5.506 CVE-1999-1354 1999-08-30T00:00:00.000-04:00 2016-10-17T22:03:26.590-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS NTBUGTRAQ 19990830 SoftArc's FirstClass E-mail Client NTBUGTRAQ 19990909 SoftArc's FirstClass E-mail Client E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled. cpe:/a:compaq:insight_management_agent:4.20 cpe:/a:compaq:management_agents_for_servers:4.40 CVE-1999-1355 1999-12-31T00:00:00.000-05:00 2017-12-18T21:29:07.800-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990817 Compaq PFCUser account NTBUGTRAQ 19990905 Case ID SSRT0620 - PFCUser account communication NTBUGTRAQ 19990915 (I) UPDATE - PFCUser Account, NTBUGTRAQ 19991105 UPDATE: SSRT0620 Compaq Foundation Agents v4.40B PFCUser issues CONFIRM http://www.compaq.com/products/servers/management/advisory.html XF management-pfcuser(3231) BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges. cpe:/a:compaq:smartstart:4.50 CVE-1999-1356 1999-09-02T00:00:00.000-04:00 2016-10-17T22:03:29.323-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990902 Compaq CIM UG Overwrites Legal Notice NTBUGTRAQ 19990902 Compaq CIM UG Overwrites Legal Notice NTBUGTRAQ 19990917 Re: Compaq CIM UG Overwrites Legal Notice XF compaq-smartstart-legal-notice(7763) Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (LegalNoticeCaption) and text (LegalNoticeText) in Windows NT, which could produce a legal notice that is in violation of the security policy. cpe:/a:netscape:communicator:4.04 cpe:/a:netscape:communicator:4.7 cpe:/a:netscape:communicator:4.51 CVE-1999-1357 1999-10-05T00:00:00.000-04:00 2016-10-17T22:03:30.560-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991005 Time to update those CGIs again Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt CVE-1999-1358 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:19.993-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS MSKB Q157673 XF nt-user-policy-update(7400) When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only. cpe:/o:microsoft:windows_nt CVE-1999-1359 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:20.133-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MSKB Q163875 XF nt-group-policy-longname(7401) When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1360 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:20.273-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MSKB Q160650 XF nt-kernel-handle-dos(7402) Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle. cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1361 1998-05-09T00:00:00.000-04:00 2016-10-17T22:03:31.887-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980509 coke.c Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1362 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:20.540-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MSKB Q160601 XF nt-win32k-dos(7403) Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters. cpe:/o:microsoft:windows_nt:3.5.1 cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1363 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:20.680-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MSKB Q163143 XF nt-nonpagedpool-dos(7405) Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1364 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:20.820-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MSKB Q142653 XF nt-threadcontext-dos(7421) Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext. cpe:/o:microsoft:windows_nt CVE-1999-1365 1999-06-28T00:00:00.000-04:00 2017-10-25T21:29:00.267-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 19990628 NT runs Explorer.exe, Taskmgr.exe etc. from wrong location NTBUGTRAQ 19990630 Update: NT runs explorer.exe, etc... BID 515 XF nt-login-default-folder(2336) Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default. cpe:/a:david_harris:pegasus_mail:3.0 CVE-1999-1366 1999-05-15T00:00:00.000-04:00 2016-10-17T22:03:34.340-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19990515 Pegasus Mail weak encryption Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail. cpe:/a:microsoft:ie:5.0 CVE-1999-1367 1999-05-06T00:00:00.000-04:00 2008-09-05T16:19:21.243-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS MISC http://www.pcworld.com/news/article/0,aid,10842,00.asp Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users. cpe:/a:ca:inoculateit:4.53 CVE-1999-1368 1999-05-12T00:00:00.000-04:00 2016-10-17T22:03:35.653-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990512 InoculateIT 4.53 Real-Time Exchange Scanner Flawed NTBUGTRAQ 20001116 InoculateIT AV Option for MS Exchange Server AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox. cpe:/a:realnetworks:realserver:6.0.3.353 CVE-1999-1369 1999-04-14T00:00:00.000-04:00 2016-10-17T22:03:37.263-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990414 Real Media Server stores passwords in plain text Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges. cpe:/a:microsoft:ie:5.0 CVE-1999-1370 1999-03-23T00:00:00.000-05:00 2016-10-17T22:03:38.483-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 19990323 MSIE 5 installer disables screen saver The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs. cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-1999-1371 1999-03-08T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990308 Solaris "/usr/bin/write" bug MISC http://www.securiteam.com/exploits/5ZP0O1P35O.html XF solaris-write-bo(7546) Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument. cpe:/a:triactive:remote_management CVE-1999-1372 1999-02-19T00:00:00.000-05:00 2016-10-17T22:03:40.873-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19990219 Plaintext Password in Tractive's Remote Manager Software Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges. cpe:/a:fore:powerhub_software:5.0.0 CVE-1999-1373 2005-01-05T00:00:00.000-05:00 2016-10-17T22:03:42.140-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990105 Re: Network Scan Vulnerability [SUMMARY] FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via nmap. cpe:/a:arpanet:perlshop CVE-1999-1374 2005-05-02T00:00:00.000-04:00 2016-10-17T22:03:43.420-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990427 Re: Shopping Carts exposing CC data perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1375 1999-02-11T00:00:00.000-05:00 2016-10-17T22:03:44.907-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 19990211 Using FSO in ASP to view just about anything BID 230 FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1376 1999-01-14T00:00:00.000-05:00 2016-10-17T22:03:46.017-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990114 MS IIS 4.0 Security Advisory NTBUGTRAQ 19990114 MS IIS 4.0 Security Advisory Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. cpe:/a:matt_wright:download.cgi:1.0 CVE-1999-1377 1999-09-09T00:00:00.000-04:00 2008-09-05T16:19:22.617-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://pulhas.org/phrack/55/P55-07.html Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. cpe:/a:dbmlparser.exe:dbmlparser.exe CVE-1999-1378 1999-07-19T00:00:00.000-04:00 2016-10-17T22:03:47.140-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990917 improper chroot in dbmlparser.exe dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files. cpe:/a:dnstools_software:dnstools CVE-1999-1379 1999-12-31T00:00:00.000-05:00 2016-10-17T22:03:48.343-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov AUSCERT AL-1999.004 CIAC J-063 BUGTRAQ 19990730 Possible Denial Of Service using DNS BUGTRAQ 19990810 Possible Denial Of Service using DNS XF dns-udp-query-dos(7238) DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker. cpe:/a:symantec:norton_utilities:2.0 CVE-1999-1380 1997-05-04T00:00:00.000-04:00 2008-09-05T16:19:23.037-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS MISC http://mlarchive.ima.com/win95/1997/May/0342.html MISC http://news.zdnet.co.uk/story/0,,s2065518,00.html XF nu-tuneocx-activex-control(7188) MISC http://www.net-security.sk/bugs/NT/nu20.html Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0. cpe:/a:dbadmin:dbadmin:1.0.1 CVE-1999-1381 1998-10-08T00:00:00.000-04:00 2016-10-17T22:03:49.577-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19981008 buffer overflow in dbadmin Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands. cpe:/o:novell:netware CVE-1999-1382 1999-12-31T00:00:00.000-05:00 2016-10-17T22:03:50.750-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980108 NetWare NFS BUGTRAQ 19980812 Re: Netware NFS (fwd) CONFIRM http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551 XF netware-nfs-file-ownership(7246) NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program. cpe:/a:gnu:bash:1.14.0 cpe:/a:gnu:bash:1.14.1 cpe:/a:gnu:bash:1.14.2 cpe:/a:gnu:bash:1.14.3 cpe:/a:gnu:bash:1.14.4 cpe:/a:gnu:bash:1.14.5 cpe:/a:gnu:bash:1.14.6 cpe:/a:tcsh:tcsh:6.05 CVE-1999-1383 1996-09-13T00:00:00.000-04:00 2016-10-17T22:03:52.327-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19960913 tee see shell problems BUGTRAQ 19960919 Vulnerability in expansion of PS1 in bash & tcsh (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable. cpe:/o:sgi:irix:5 cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 CVE-1999-1384 1996-10-30T00:00:00.000-05:00 2016-10-17T22:03:53.500-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS AUSCERT AA-96.08 SGI 19961101-01-I BUGTRAQ 19961030 (Another) vulnerability in new SGIs XF irix-systour(7456) BID 470 Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program. cpe:/o:freebsd:freebsd:1.0 cpe:/o:freebsd:freebsd:1.1 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.6.1 CVE-1999-1385 1996-12-19T00:00:00.000-05:00 2016-10-17T22:03:54.673-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-96:20 BUGTRAQ 19961219 Exploit for ppp bug (FreeBSD 2.1.0). XF ppp-bo(7465) Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable. cpe:/a:larry_wall:perl:5.4.4 CVE-1999-1386 1999-12-31T00:00:00.000-05:00 2016-10-17T22:03:55.923-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19980308 another /tmp race: `perl -e' opens temp file not safely XF perl-e-tmp-symlink(7243) CONFIRM http://www.redhat.com/support/errata/rh50-errata-general.html#perl Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file. cpe:/o:microsoft:windows_nt:4.0:sp2 CVE-1999-1387 1997-04-02T00:00:00.000-05:00 2016-10-17T22:03:57.250-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19970402 Fatal bug in NT 4.0 server BUGTRAQ 19970403 Fatal bug in NT 4.0 server (more comments) BUGTRAQ 19970407 DUMP of NT system crash Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25. cpe:/o:sun:sunos:4.1 CVE-1999-1388 1994-05-13T00:00:00.000-04:00 2008-09-05T16:19:24.197-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19941218 Sun Patch Id #102060-01 BUGTRAQ 19940513 [8lgm]-Advisory-7.UNIX.passwd.11-May-1994 BUGTRAQ 19940514 [8lgm]-Advisory-7.UNIX.passwd.11-May-1994.NEWFIX passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. cpe:/h:3com:total_control_netserver_card:3.7.24 CVE-1999-1389 1998-05-11T00:00:00.000-04:00 2016-10-17T22:03:58.360-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19980511 3Com/USR Total Control Chassis dialup port access filters BID 99 US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt. cpe:/o:debian:debian_linux:2.0 CVE-1999-1390 1998-04-28T00:00:00.000-04:00 2008-09-05T16:19:24.460-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19980428 [Debian 2.0] /usr/bin/suidexec gives root access BID 94 suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line. cpe:/a:next:next:1.0 cpe:/a:next:next:1.0a CVE-1999-1391 1990-10-03T00:00:00.000-04:00 2008-09-05T16:19:24.600-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC B-01 CERT CA-1990-06 XF nextstep-npd-root-access(7143) BID 10 Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions. cpe:/a:next:nex:1.0a cpe:/a:next:next:1.0 CVE-1999-1392 1990-10-03T00:00:00.000-04:00 2008-09-05T16:19:24.740-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CIAC B-01 CERT CA-1990-06 XF nextstep-restore09-root-access(7144) BID 9 Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges. cpe:/o:apple:mac_os:8.5 cpe:/o:apple:mac_os:8.6 CVE-1999-1393 1999-05-21T00:00:00.000-04:00 2008-09-05T16:19:24.883-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html BID 532 Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible. cpe:/o:bsd:bsd:4.4 CVE-1999-1394 1999-07-02T00:00:00.000-04:00 2016-10-17T22:03:59.847-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19990702 BSD-fileflags BID 510 BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device. cpe:/a:dec:dec_openvms:5.0 cpe:/a:dec:dec_openvms:5.0.1 cpe:/a:dec:dec_openvms:5.0.2 cpe:/a:dec:dec_openvms:5.1 cpe:/a:dec:dec_openvms:5.1.1 cpe:/a:dec:dec_openvms:5.1.2 cpe:/a:dec:dec_openvms:5.1b cpe:/a:dec:dec_openvms:5.2 cpe:/a:dec:dec_openvms:5.2.1 cpe:/a:dec:dec_openvms:5.3 cpe:/a:dec:dec_openvms:5.3.1 cpe:/a:dec:dec_openvms:5.3.2 cpe:/a:dec:dec_openvms:5.4 cpe:/a:dec:dec_openvms:5.4.1 cpe:/a:dec:dec_openvms:5.4.2 CVE-1999-1395 1992-11-17T00:00:00.000-05:00 2009-10-31T00:02:35.750-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1992-18 CERT CA-92.16 XF vms-monitor-gain-privileges(7136) BID 51 Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges. cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 CVE-1999-1396 1992-07-21T00:00:00.000-04:00 2008-09-05T16:19:25.337-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CERT CA-1992-15 XF sun-integer-multiplication-access(7150) BID 49 Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash). cpe:/a:microsoft:index_server:2.0 CVE-1999-1397 1999-03-23T00:00:00.000-05:00 2016-10-17T22:04:01.173-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990323 Index Server 2.0 and the Registry NTBUGTRAQ 19990323 Index Server 2.0 and the Registry XF iis-indexserver-reveal-path(7559) BID 476 Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed. cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 CVE-1999-1398 1997-05-07T00:00:00.000-04:00 2016-10-17T22:04:02.470-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970507 Irix: misc MISC http://www.insecure.org/sploits/irix.xfsdump.html BID 472 Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. cpe:/o:sgi:irix:6.2 CVE-1999-1399 1997-08-20T00:00:00.000-04:00 2016-10-17T22:04:03.563-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19970820 SpaceWare 7.3 v1.0 BID 471 spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed. cpe:/a:the_economist:the_economist_1999_screen_saver CVE-1999-1400 1999-06-03T00:00:00.000-04:00 2016-10-17T22:04:04.610-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 19990603 Huge Exploit in NT 4.0 SP5 Screensaver with Password Protection Enabled NTBUGTRAQ 19990603 Re: Huge Exploit in NT 4.0 SP5 Screensaver with Password Protecti on Enabled. NTBUGTRAQ 19990604 Official response from The Economist re: 1999 Screen Saver BID 466 The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked. cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 CVE-1999-1401 1996-12-05T00:00:00.000-05:00 2008-09-05T16:19:26.070-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS SGI 19961201-01-PX XF irix-searchbook-permissions(7575) BID 463 Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.0 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-1402 1997-05-17T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19970517 UNIX domain socket (Solarisx86 2.5) BUGTRAQ 19971003 Solaris 2.6 and sockets XF sun-domain-socket-permissions(7172) BID 456 The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket. cpe:/a:ibm:tivoli_opc_tracker_agent:1.0x cpe:/a:ibm:tivoli_opc_tracker_agent:2.0x cpe:/a:ibm:tivoli_opc_tracker_agent:3.0x CVE-1999-1403 1998-10-02T00:00:00.000-04:00 2008-09-10T15:01:52.743-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19981002 Several potential security problems in IBM/Tivoli OPC Tracker Age nt BID 382 IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files. cpe:/a:ibm:tivoli_opc_tracker_agent:1.0x cpe:/a:ibm:tivoli_opc_tracker_agent:2.0x cpe:/a:ibm:tivoli_opc_tracker_agent:3.0x CVE-1999-1404 1998-10-02T00:00:00.000-04:00 2008-09-10T15:01:52.853-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19981002 Several potential security problems in IBM/Tivoli OPC Tracker Age nt BID 382 IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtracker client port (5011), which prevents the connection from being closed properly. cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 CVE-1999-1405 1999-02-17T00:00:00.000-05:00 2016-10-17T22:04:07.487-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990217 snap utility for AIX. BUGTRAQ 19990220 Re: snap utility for AIX. BID 375 snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a. cpe:/o:redhat:linux:5.1 CVE-1999-1406 1998-07-29T00:00:00.000-04:00 2016-10-17T22:04:08.613-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980729 Crash a redhat 5.1 linux box BUGTRAQ 19980730 FD's 0..2 and suid/sgid procs (Was: Crash a redhat 5.1 linux box) BID 372 dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel. cpe:/o:redhat:linux:5.0 CVE-1999-1407 1998-03-09T00:00:00.000-05:00 2016-10-17T22:04:09.660-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19980309 *sigh* another RH5 /tmp problem XF initscripts-ifdhcpdone-dhcplog-symlink(7294) CONFIRM http://www.redhat.com/support/errata/rh50-errata-general.html#initscripts BID 368 ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file. cpe:/o:hp:hp-ux:9.05 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.20 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 CVE-1999-1408 1997-03-05T00:00:00.000-05:00 2016-10-17T22:04:10.783-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19970305 Bug in connect() for aix 4.1.4 ? BID 352 Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost. cpe:/o:netbsd:netbsd:1.0 cpe:/o:netbsd:netbsd:1.1 cpe:/o:netbsd:netbsd:1.2 cpe:/o:netbsd:netbsd:1.2.1 cpe:/o:netbsd:netbsd:1.3 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:netbsd:netbsd:1.3.2 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 cpe:/o:sgi:irix:6.5.1 CVE-1999-1409 1998-07-03T00:00:00.000-04:00 2016-10-17T22:04:12.050-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NETBSD NetBSD-SA1998-004 BUGTRAQ 19980805 irix-6.2 "at -f" vulnerability XF at-f-read-files(7577) BID 331 BUGTRAQ 19980703 more about 'at' The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail. cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 CVE-1999-1410 1997-05-09T00:00:00.000-04:00 2016-10-17T22:04:13.177-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX BUGTRAQ 19970509 Re: Irix: misc BID 330 addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file. cpe:/o:debian:debian_linux:2.0 CVE-1999-1411 1998-11-26T00:00:00.000-05:00 2016-10-17T22:04:14.630-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS DEBIAN 19981126 new version of fsp fixes security flaw BUGTRAQ 19981128 Debian: Security flaw in FSP BUGTRAQ 19981130 Debian: Security flaw in FSP BUGTRAQ 19990217 Debian GNU/Linux 2.0r5 released (fwd) XF fsp-anon-ftp-access(7574) BID 316 The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp. cpe:/a:apache:http_server cpe:/o:apple:mac_os_x:10.0 CVE-1999-1412 1999-06-03T00:00:00.000-04:00 2008-09-05T16:19:27.740-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990603 MacOS X system panic with CGI BID 306 A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:sunos:5.4 CVE-1999-1413 1996-08-03T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19960803 Exploiting Zolaris 2.4 ?? :) BID 296 Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg. cpe:/a:ibm:netfinity_remote_control CVE-1999-1414 1999-05-25T00:00:00.000-04:00 2016-10-17T22:04:16.833-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 19990525 Security Leak with IBM Netfinity Remote Control Software NTBUGTRAQ 19990609 IBM's response to "Security Leak with IBM Netfinity Remote Control Software BID 284 IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges. cpe:/o:digital:ultrix:4.2 CVE-1999-1415 1991-08-23T00:00:00.000-04:00 2008-09-05T16:19:28.163-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-91.13 BID 27 Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges. cpe:/a:inso:dwhttpd:3.1a4 CVE-1999-1416 1998-08-23T00:00:00.000-04:00 2008-09-10T15:01:54.383-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19980823 Solaris ab2 web server is junk BID 253 AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length. cpe:/a:inso:answerbook2 CVE-1999-1417 1998-08-23T00:00:00.000-04:00 2008-09-10T15:01:54.447-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19980823 Solaris ab2 web server is junk BID 253 Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged. cpe:/a:mirabilis:icq_web_front CVE-1999-1418 1999-05-01T00:00:00.000-04:00 2008-09-05T16:19:28.600-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990501 Update: security hole in the ICQ-Webserver BID 246 ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist ("404 not found"). cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 CVE-1999-1419 1997-07-30T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00148 XF sun-nisplus-bo(7535) BID 219 Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges. cpe:/h:n-base:nh2012:2.53 cpe:/h:n-base:nh2012r:2.53 cpe:/h:n-base:nh2015:2.51 cpe:/h:n-base:nh2048:1.33 cpe:/h:n-base:nh3012:2.1 CVE-1999-1420 1998-07-20T00:00:00.000-04:00 2016-10-17T22:04:18.083-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980720 N-Base Vulnerability Advisory BUGTRAQ 19980722 N-Base Vulnerability Advisory Followup BID 212 NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's configuration. cpe:/h:n-base:nh208 cpe:/h:n-base:nh215 CVE-1999-1421 1998-07-20T00:00:00.000-04:00 2016-10-17T22:04:19.550-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980720 N-Base Vulnerability Advisory BUGTRAQ 19980722 N-Base Vulnerability Advisory Followup BID 212 NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names. cpe:/o:slackware:slackware_linux:2.0.35 cpe:/o:slackware:slackware_linux:3.4 CVE-1999-1422 1999-01-02T00:00:00.000-05:00 2016-10-17T22:04:20.693-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990102 PATH variable in zip-slackware 2.0.35 The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-1423 1997-06-26T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19970626 Solaris Ping bug (DoS) BUGTRAQ 19970627 SUMMARY: Solaris Ping bug (DoS) BUGTRAQ 19971005 Solaris Ping Bug and other [bc] oddities BUGTRAQ 19970627 Solaris Ping bug(inetsvc) SUN 00146 XF ping-multicast-loopback-dos(7492) BID 209 ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i. cpe:/a:sun:solstice_adminsuite:2.1 cpe:/a:sun:solstice_adminsuite:2.1::x86 cpe:/a:sun:solstice_adminsuite:2.2 cpe:/a:sun:solstice_adminsuite:2.2::x86 CVE-1999-1424 1997-11-10T00:00:00.000-05:00 2008-09-05T16:19:29.477-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00145 BID 208 Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries. cpe:/a:sun:solstice_adminsuite:2.1 cpe:/a:sun:solstice_adminsuite:2.1::x86 cpe:/a:sun:solstice_adminsuite:2.2 cpe:/a:sun:solstice_adminsuite:2.2::x86 CVE-1999-1425 1997-11-10T00:00:00.000-05:00 2011-03-07T21:02:06.110-05:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00145 BID 208 Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd. cpe:/a:sun:solstice_adminsuite:2.1 cpe:/a:sun:solstice_adminsuite:2.1::x86 cpe:/a:sun:solstice_adminsuite:2.2 cpe:/a:sun:solstice_adminsuite:2.2::x86 CVE-1999-1426 1997-11-10T00:00:00.000-05:00 2008-09-05T16:19:29.773-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00145 BID 208 Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files. cpe:/a:sun:solstice_adminsuite:2.1 cpe:/a:sun:solstice_adminsuite:2.1::x86 cpe:/a:sun:solstice_adminsuite:2.2 cpe:/a:sun:solstice_adminsuite:2.2::x86 CVE-1999-1427 1997-11-10T00:00:00.000-05:00 2008-09-05T16:19:29.913-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00145 BID 208 Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges. cpe:/a:sun:solstice_adminsuite:2.1 cpe:/a:sun:solstice_adminsuite:2.1::x86 cpe:/a:sun:solstice_adminsuite:2.2 cpe:/a:sun:solstice_adminsuite:2.2::x86 CVE-1999-1428 1997-11-10T00:00:00.000-05:00 2008-09-05T16:19:30.070-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00145 BID 208 Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges. cpe:/a:dit:transferpro CVE-1999-1429 1998-01-05T00:00:00.000-05:00 2016-10-17T22:04:23.130-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19980105 Security flaw in either DIT TransferPro or Solaris BID 204 DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver. cpe:/a:royal:davinci:1.0 CVE-1999-1430 1999-01-01T00:00:00.000-05:00 2016-10-17T22:04:24.317-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990102 security problem with Royal daVinci BID 185 PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access. cpe:/a:microsoft:zero_administration_kit:1.0 CVE-1999-1431 2005-01-07T00:00:00.000-05:00 2016-10-17T22:04:25.600-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS NTBUGTRAQ 19990107 WinNT, ZAK and Office 97 NTBUGTRAQ 19990109 WinNT, ZAK and Office 97 BID 181 ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 CVE-1999-1432 1998-07-16T00:00:00.000-04:00 2018-10-30T12:26:22.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980716 Security risk with powermanagemnet on Solaris 2.6 BID 160 Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges. cpe:/a:hp:jetadmin:rev._d.01.09 CVE-1999-1433 1998-07-15T00:00:00.000-04:00 2016-10-17T22:04:28.083-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980715 JetAdmin software BUGTRAQ 19980722 Re: JetAdmin software BID 157 HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file. cpe:/o:slackware:slackware_linux:3.1 cpe:/o:slackware:slackware_linux:3.2 cpe:/o:slackware:slackware_linux:3.3 cpe:/o:slackware:slackware_linux:3.4 cpe:/o:slackware:slackware_linux:3.5 CVE-1999-1434 1998-07-13T00:00:00.000-04:00 2016-10-17T22:04:29.677-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980713 Slackware Shadow Insecurity BID 155 login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server. cpe:/a:nec:socks_5:1.0r5 CVE-1999-1435 1998-07-10T00:00:00.000-04:00 2016-10-17T22:04:30.773-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980710 socks5 1.0r5 buffer overflow.. BID 154 Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables. cpe:/a:ray_chan:www_authorization_gateway:0.1 CVE-1999-1436 1998-07-08T00:00:00.000-04:00 2016-10-17T22:04:31.943-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980708 WWW Authorization Gateway BID 152 Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter. cpe:/a:ralf_s._engelschall:eperl:2.2.12 CVE-1999-1437 1998-07-07T00:00:00.000-04:00 2016-10-17T22:04:33.053-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980707 ePerl: bad handling of ISINDEX queries BUGTRAQ 19980710 ePerl Security Update Available BID 151 ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml. cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 CVE-1999-1438 1991-02-22T00:00:00.000-05:00 2008-09-05T16:19:31.490-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUN 00105 CERT CA-1991-01 BID 15 Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments. cpe:/a:gcc:gcc:2.7.2 CVE-1999-1439 1998-01-02T00:00:00.000-05:00 2016-10-17T22:04:34.303-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19980102 Symlink bug with GCC 2.7.2 BUGTRAQ 19980115 GCC 2.7.? /tmp files BUGTRAQ 19980108 GCC Exploit BID 146 gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files. cpe:/a:mirabilis:icq_98a:1.30 CVE-1999-1440 1999-01-01T00:00:00.000-05:00 2016-10-17T22:04:35.553-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990101 Win32 ICQ 98a flaw BID 132 Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client. cpe:/o:linux:linux_kernel:2.0.34 CVE-1999-1441 1998-06-30T00:00:00.000-04:00 2016-10-17T22:04:36.803-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980630 Serious Linux 2.0.34 security problem BID 111 Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it. cpe:/o:linux:linux_kernel:2.0.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1.0 cpe:/o:linux:linux_kernel:2.1.1 cpe:/o:linux:linux_kernel:2.1.2 cpe:/o:linux:linux_kernel:2.1.3 cpe:/o:linux:linux_kernel:2.1.4 cpe:/o:linux:linux_kernel:2.1.5 cpe:/o:linux:linux_kernel:2.1.6 cpe:/o:linux:linux_kernel:2.1.7 cpe:/o:linux:linux_kernel:2.1.8 cpe:/o:linux:linux_kernel:2.1.9 cpe:/o:linux:linux_kernel:2.1.10 cpe:/o:linux:linux_kernel:2.1.11 cpe:/o:linux:linux_kernel:2.1.12 cpe:/o:linux:linux_kernel:2.1.13 cpe:/o:linux:linux_kernel:2.1.14 cpe:/o:linux:linux_kernel:2.1.15 cpe:/o:linux:linux_kernel:2.1.16 cpe:/o:linux:linux_kernel:2.1.17 cpe:/o:linux:linux_kernel:2.1.18 cpe:/o:linux:linux_kernel:2.1.19 cpe:/o:linux:linux_kernel:2.1.20 cpe:/o:linux:linux_kernel:2.1.21 cpe:/o:linux:linux_kernel:2.1.22 cpe:/o:linux:linux_kernel:2.1.23 cpe:/o:linux:linux_kernel:2.1.24 cpe:/o:linux:linux_kernel:2.1.25 cpe:/o:linux:linux_kernel:2.1.26 cpe:/o:linux:linux_kernel:2.1.27 cpe:/o:linux:linux_kernel:2.1.28 cpe:/o:linux:linux_kernel:2.1.29 cpe:/o:linux:linux_kernel:2.1.30 cpe:/o:linux:linux_kernel:2.1.31 cpe:/o:linux:linux_kernel:2.1.32 cpe:/o:linux:linux_kernel:2.1.33 cpe:/o:linux:linux_kernel:2.1.34 cpe:/o:linux:linux_kernel:2.1.35 cpe:/o:linux:linux_kernel:2.1.36 cpe:/o:linux:linux_kernel:2.1.37 cpe:/o:linux:linux_kernel:2.1.38 cpe:/o:linux:linux_kernel:2.1.39 cpe:/o:linux:linux_kernel:2.1.40 cpe:/o:linux:linux_kernel:2.1.41 cpe:/o:linux:linux_kernel:2.1.42 cpe:/o:linux:linux_kernel:2.1.43 cpe:/o:linux:linux_kernel:2.1.44 cpe:/o:linux:linux_kernel:2.1.45 cpe:/o:linux:linux_kernel:2.1.46 cpe:/o:linux:linux_kernel:2.1.47 cpe:/o:linux:linux_kernel:2.1.48 cpe:/o:linux:linux_kernel:2.1.49 cpe:/o:linux:linux_kernel:2.1.50 cpe:/o:linux:linux_kernel:2.1.51 cpe:/o:linux:linux_kernel:2.1.52 cpe:/o:linux:linux_kernel:2.1.53 cpe:/o:linux:linux_kernel:2.1.54 cpe:/o:linux:linux_kernel:2.1.55 cpe:/o:linux:linux_kernel:2.1.56 cpe:/o:linux:linux_kernel:2.1.57 cpe:/o:linux:linux_kernel:2.1.58 cpe:/o:linux:linux_kernel:2.1.59 cpe:/o:linux:linux_kernel:2.1.60 cpe:/o:linux:linux_kernel:2.1.61 cpe:/o:linux:linux_kernel:2.1.62 cpe:/o:linux:linux_kernel:2.1.63 cpe:/o:linux:linux_kernel:2.1.64 cpe:/o:linux:linux_kernel:2.1.65 cpe:/o:linux:linux_kernel:2.1.66 cpe:/o:linux:linux_kernel:2.1.67 cpe:/o:linux:linux_kernel:2.1.68 cpe:/o:linux:linux_kernel:2.1.69 cpe:/o:linux:linux_kernel:2.1.70 cpe:/o:linux:linux_kernel:2.1.71 cpe:/o:linux:linux_kernel:2.1.72 cpe:/o:linux:linux_kernel:2.1.73 cpe:/o:linux:linux_kernel:2.1.74 cpe:/o:linux:linux_kernel:2.1.75 cpe:/o:linux:linux_kernel:2.1.76 cpe:/o:linux:linux_kernel:2.1.77 cpe:/o:linux:linux_kernel:2.1.78 cpe:/o:linux:linux_kernel:2.1.79 cpe:/o:linux:linux_kernel:2.1.80 cpe:/o:linux:linux_kernel:2.1.81 cpe:/o:linux:linux_kernel:2.1.82 cpe:/o:linux:linux_kernel:2.1.83 cpe:/o:linux:linux_kernel:2.1.84 cpe:/o:linux:linux_kernel:2.1.85 cpe:/o:linux:linux_kernel:2.1.86 cpe:/o:linux:linux_kernel:2.1.87 cpe:/o:linux:linux_kernel:2.1.88 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.1.90 cpe:/o:linux:linux_kernel:2.1.91 cpe:/o:linux:linux_kernel:2.1.92 cpe:/o:linux:linux_kernel:2.1.93 cpe:/o:linux:linux_kernel:2.1.94 cpe:/o:linux:linux_kernel:2.1.95 cpe:/o:linux:linux_kernel:2.1.96 cpe:/o:linux:linux_kernel:2.1.97 cpe:/o:linux:linux_kernel:2.1.98 cpe:/o:linux:linux_kernel:2.1.99 cpe:/o:linux:linux_kernel:2.1.100 cpe:/o:linux:linux_kernel:2.1.101 cpe:/o:linux:linux_kernel:2.1.102 cpe:/o:linux:linux_kernel:2.1.103 cpe:/o:linux:linux_kernel:2.1.104 cpe:/o:linux:linux_kernel:2.1.105 cpe:/o:linux:linux_kernel:2.1.106 cpe:/o:linux:linux_kernel:2.1.107 cpe:/o:linux:linux_kernel:2.1.108 cpe:/o:linux:linux_kernel:2.1.109 cpe:/o:linux:linux_kernel:2.1.110 cpe:/o:linux:linux_kernel:2.1.111 cpe:/o:linux:linux_kernel:2.1.112 cpe:/o:linux:linux_kernel:2.1.113 cpe:/o:linux:linux_kernel:2.1.114 cpe:/o:linux:linux_kernel:2.1.115 cpe:/o:linux:linux_kernel:2.1.116 cpe:/o:linux:linux_kernel:2.1.117 cpe:/o:linux:linux_kernel:2.1.118 cpe:/o:linux:linux_kernel:2.1.119 cpe:/o:linux:linux_kernel:2.1.120 cpe:/o:linux:linux_kernel:2.1.121 cpe:/o:linux:linux_kernel:2.1.122 cpe:/o:linux:linux_kernel:2.1.123 cpe:/o:linux:linux_kernel:2.1.124 cpe:/o:linux:linux_kernel:2.1.125 cpe:/o:linux:linux_kernel:2.1.126 cpe:/o:linux:linux_kernel:2.1.127 cpe:/o:linux:linux_kernel:2.1.128 cpe:/o:linux:linux_kernel:2.1.129 cpe:/o:linux:linux_kernel:2.1.130 cpe:/o:linux:linux_kernel:2.1.131 cpe:/o:linux:linux_kernel:2.1.132 CVE-1999-1442 1998-06-22T00:00:00.000-04:00 2018-09-11T14:41:31.247-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2018-09-11T10:51:48.853-04:00 MISC http://uwsg.iu.edu/hypermail/linux/kernel/9805.3/0855.html MISC http://www.cs.helsinki.fi/linux/linux-kernel/Year-1998/1998-25/0816.html BID 105 Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments. cpe:/a:micah_software:full_armor CVE-1999-1443 1998-06-02T00:00:00.000-04:00 2016-10-17T22:04:38.307-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980609 Full Armor BUGTRAQ 19980602 Full Armor.... Fool Proof etc... bugs BID 103 Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CTRL><ALT><DEL> and kill the process using the task manager, (2) booting the system from a separate disk, or (3) interrupting certain processes that execute while the system is booting. cpe:/a:computer_software_manufaktur:alibaba:2.0 CVE-1999-1444 1999-12-31T00:00:00.000-05:00 2008-09-10T15:01:57.353-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://catless.ncl.ac.uk/Risks/20.41.html#subj4 genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext. cpe:/o:slackware:slackware_linux:3.3 cpe:/o:slackware:slackware_linux:3.4 CVE-1999-1445 1998-02-02T00:00:00.000-05:00 2016-10-17T22:04:39.557-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19980202 imapd/ipop3d coredump in slackware 3.4 Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords. cpe:/a:microsoft:ie:3.0 CVE-1999-1446 1997-08-05T00:00:00.000-04:00 2016-10-17T22:04:40.867-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 19970805 Re: Strange behavior regarding directory NTBUGTRAQ 19970806 Re: Strange behavior regarding directory Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays. cpe:/a:microsoft:ie:4.0 CVE-1999-1447 1998-07-28T00:00:00.000-04:00 2016-10-17T22:04:41.977-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980728 Object tag crashes Internet Explorer 4.0 BUGTRAQ 19980730 Re: Object tag crashes Internet Explorer 4.0 Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. cpe:/a:qualcomm:eudora:3.05 cpe:/a:qualcomm:eudora_light:3.05 CVE-1999-1448 1998-07-29T00:00:00.000-04:00 2016-10-17T22:04:43.180-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980729 Eudora exploit (was Microsoft Security Bulletin (MS98-008)) Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are 100 years after the current date, which causes a segmentation fault. cpe:/o:sun:sunos:4.1.4 CVE-1999-1449 1997-05-19T00:00:00.000-04:00 2008-09-05T16:19:33.037-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19970519 /dev/tcx0 crashes SunOS 4.1.4 on Sparc 20's MISC http://www.insecure.org/sploits/sunos.dev.tcx0.write.wierd.shit.to.device.bug.html SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device. cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 cpe:/o:sco:openserver:5.0.4 cpe:/o:sco:openserver:5.0.5 cpe:/o:sco:unixware:2.1.3 cpe:/o:sco:unixware:7.0.1 CVE-1999-1450 1999-01-27T00:00:00.000-05:00 2008-09-10T15:01:58.007-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS SCO SB-99.03b SCO SB-99.06b SCO SSE020 Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges. cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:site_server:3.0 CVE-1999-1451 1999-12-31T00:00:00.000-05:00 2018-10-12T17:29:23.793-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q231368 MS MS99-013 XF iis-samples-winmsdp(3271) The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1452 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:06.013-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990129 ole objects in a "secured" environment? NTBUGTRAQ 19990129 ole objects in a "secured" environment? NTBUGTRAQ 19990205 Alert: MS releases GINA-fix for SP3, SP4, and TS MSKB Q214802 BID 198 XF nt-gina-clipboard(1975) GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt. cpe:/a:microsoft:ie:4.0 CVE-1999-1453 1999-02-02T00:00:00.000-05:00 2016-10-17T22:04:45.917-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 19990222 New IE4 vulnerability : the clipboard again. BID 215 Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object. cpe:/a:macromedia:matrix_screen_saver CVE-1999-1454 1999-10-04T00:00:00.000-04:00 2016-10-17T22:04:47.180-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991004 Weakness In "The Matrix" Screensaver For Windows Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1455 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:06.060-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov MSKB Q158320 XF nt-rshsvc-ale-bypass(7422) RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host. cpe:/a:thttpd:thttpd_http_server:2.03 CVE-1999-1456 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:06.123-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov CONFIRM http://www.acme.com/software/thttpd/thttpd.html#releasenotes BUGTRAQ 19980819 thttpd 2.04 released (fwd) XF thttpd-file-read(1809) thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename. cpe:/a:thttpd:thttpd_http_server:1.90a cpe:/a:thttpd:thttpd_http_server:2.04 cpe:/a:thttpd:thttpd_http_server:2.04.31 CVE-1999-1457 1999-11-16T00:00:00.000-05:00 2008-09-10T15:01:58.587-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS SUSE 19991116 thttpd Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function. cpe:/o:digital:unix:4.0 cpe:/o:digital:unix:4.0a cpe:/o:digital:unix:4.0b cpe:/o:digital:unix:4.0c cpe:/o:digital:unix:4.0d cpe:/o:digital:unix:4.0e CVE-1999-1458 1999-01-25T00:00:00.000-05:00 2017-12-18T21:29:07.957-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO SSRT0583U BUGTRAQ 19990125 Digital Unix 4.0 exploitable buffer overflows XF du-at(3138) Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument. cpe:/a:bmc:patrol_agent:3.2 cpe:/a:bmc:patrol_agent:3.2.3 CVE-1999-1459 1998-11-02T00:00:00.000-05:00 2017-12-18T21:29:08.050-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BID 534 ISS 19981102 BMC PATROL File Creation Vulnerability XF bmc-patrol-file-create(1388) BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file. cpe:/a:bmc:patrol_agent:3.2 cpe:/a:bmc:patrol_agent:3.2.3 cpe:/a:bmc:patrol_agent:3.2.5 cpe:/a:bmc:patrol_agent:3.2.7 CVE-1999-1460 1999-07-13T00:00:00.000-04:00 2016-10-17T22:04:48.463-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990713 Root Perms Gained with Patrol SNMP Agent 3.2 (all others?) BUGTRAQ 19990801 Re: Root Perms Gained with Patrol SNMP Agent 3.2 (all others?) BID 525 BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program. cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5.10 CVE-1999-1461 1997-05-07T00:00:00.000-04:00 2016-10-17T22:04:49.697-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 20001101-01-I BUGTRAQ 19970507 Irix: misc BID 381 inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program. cpe:/a:bb4:big_brother:1.09b cpe:/a:bb4:big_brother:1.09c CVE-1999-1462 1999-12-31T00:00:00.000-05:00 2018-11-29T10:44:57.647-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2018-11-19T08:05:08.160-05:00 BUGTRAQ 19990426 FW: Security Notice: Big Brother 1.09b/c BID 142 XF http-cgi-bigbrother-bbhist(3755) Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files. cpe:/o:microsoft:windows_nt:4.0:sp3 CVE-1999-1463 1997-07-10T00:00:00.000-04:00 2017-12-18T21:29:08.207-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19970710 A New Fragmentation Attack XF nt-frag(528) Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session. cpe:/o:cisco:ios:11.1cc cpe:/o:cisco:ios:11.1ct CVE-1999-1464 1999-12-31T00:00:00.000-05:00 2017-12-18T21:29:08.267-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CIAC J-016 CISCO 19981105 Cisco IOS DFS Access List Leakage XF cisco-acl-leakage(1401) Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564. cpe:/o:cisco:ios:11.3 CVE-1999-1465 1999-12-31T00:00:00.000-05:00 2017-12-18T21:29:08.330-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CIAC J-016 CISCO 19981105 Cisco IOS DFS Access List Leakage XF cisco-acl-leakage(1401) Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862. cpe:/o:cisco:ios:8.2 cpe:/o:cisco:ios:8.3 cpe:/o:cisco:ios:9.0 cpe:/o:cisco:ios:9.1 CVE-1999-1466 1992-12-10T00:00:00.000-05:00 2008-09-05T16:19:35.477-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-1992-20 BID 53 Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword. cpe:/o:sun:sunos:4.0 cpe:/o:sun:sunos:4.0.1 cpe:/o:sun:sunos:4.0.2 cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.0.3c CVE-1999-1467 1989-10-26T00:00:00.000-04:00 2017-12-18T21:29:08.393-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1989-07 BID 5 XF sun-rcp(3165) Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user. cpe:/a:next:next:2.0 cpe:/a:next:next:2.1 cpe:/o:cray:unicos:6.0 cpe:/o:cray:unicos:6.0e cpe:/o:cray:unicos:6.1 cpe:/o:sgi:irix:3.3 cpe:/o:sgi:irix:3.3.1 cpe:/o:sgi:irix:3.3.2 cpe:/o:sgi:irix:3.3.3 cpe:/o:sgi:irix:4.0 cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.0.3c cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1psr_a CVE-1999-1468 1991-10-22T00:00:00.000-04:00 2008-09-10T15:01:59.960-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS MISC http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html CERT CA-91.20 XF rdist-popen-gain-privileges(7160) BID 31 rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable. cpe:/a:hughes_technologies:w3-auth CVE-1999-1469 1999-09-30T00:00:00.000-04:00 2016-10-17T22:04:50.947-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990930 mini-sql Buffer Overflow Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header. cpe:/a:eastman_software:work_management:3.2.1 CVE-1999-1470 1999-06-24T00:00:00.000-04:00 2017-12-18T21:29:08.457-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990624 Eastman Software Work Management 3.21 BID 485 XF eastman-cleartext-passwords(2303) Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges. cpe:/o:bsd:bsd:4.2 cpe:/o:bsd:bsd:4.3 CVE-1999-1471 1989-01-01T00:00:00.000-05:00 2008-09-05T16:19:36.257-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CERT CA-1989-01 XF bsd-passwd-bo(7152) BID 4 Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field. cpe:/a:microsoft:ie:4.0 CVE-1999-1472 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:06.170-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19971017 Security Hole in Explorer 4.0 MSKB Q176697 MSKB Q176794 MISC http://www.insecure.org/sploits/Internet_explorer_4.0.hack.html CONFIRM http://www.microsoft.com/Windows/ie/security/freiburg.asp XF http-ie-spy(587) Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue. cpe:/a:microsoft:ie:3.0.2 cpe:/a:microsoft:ie:4.0 CVE-1999-1473 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:36.537-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MSKB Q176697 XF ie-page-redirect(7426) When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue." cpe:/a:microsoft:powerpoint:95 cpe:/a:microsoft:powerpoint:97 CVE-1999-1474 1999-12-31T00:00:00.000-05:00 2017-12-18T21:29:08.517-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CONFIRM http://www.microsoft.com/windows/ie/security/powerpoint.asp XF nt-ppt-patch(179) PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer. cpe:/a:proftpd_project:proftpd:1.2 CVE-1999-1475 1999-11-19T00:00:00.000-05:00 2008-09-05T16:19:36.820-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19991119 ProFTPd - mod_sqlpw.c BID 812 ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command. cpe:/h:intel:pentium:::mmx cpe:/h:intel:pentuim:::overdrive CVE-1999-1476 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:06.233-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q163852 XF pentium-crash(704) A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem. cpe:/a:gnome:gnome_libs:1.0.8 cpe:/o:mandrakesoft:mandrake_linux:6.0 CVE-1999-1477 1999-09-23T00:00:00.000-04:00 2017-12-18T21:29:08.597-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990923 Linux GNOME exploit BID 663 XF gnome-espeaker-local-bo(3349) Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1478 1999-07-06T00:00:00.000-04:00 2017-10-09T21:29:06.280-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990706 Bug in SUN's Hotspot VM NTBUGTRAQ 19990716 FW: (Review ID: 85125) Hotspot crashes bringing down webserver BID 522 XF sun-hotspot-vm(2348) The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character. cpe:/a:matt_wright:textcounter:1.2 CVE-1999-1479 1998-06-24T00:00:00.000-04:00 2017-12-18T21:29:08.690-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980624 textcounter.pl SECURITY HOLE BID 2265 XF http-cgi-textcounter(2052) The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters. cpe:/o:ibm:aix:4.3 CVE-1999-1480 1998-06-11T00:00:00.000-04:00 2008-09-05T16:19:37.537-04:00 1.2 LOCAL HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 429 (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. cpe:/a:national_science_foundation:squid_web_proxy:1.0 cpe:/a:national_science_foundation:squid_web_proxy:1.0novm cpe:/a:national_science_foundation:squid_web_proxy:1.1 cpe:/a:national_science_foundation:squid_web_proxy:2.1 cpe:/a:national_science_foundation:squid_web_proxy:2.2 CVE-1999-1481 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:06.343-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991103 [squid]exploit for external authentication problem BID 741 CONFIRM http://www.squid-cache.org/Versions/v2/2.2/bugs/ XF squid-proxy-auth-access(3433) Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair. cpe:/a:svgalib:zgv:3.0.7 CVE-1999-1482 1999-02-19T00:00:00.000-05:00 2008-09-05T16:19:37.820-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19990219 Security hole: "zgv" SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes. cpe:/a:svgalib:svgalib:1.2.10 CVE-1999-1483 1997-06-19T00:00:00.000-04:00 2008-09-05T16:19:37.960-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 19970619 svgalib/zgv Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable. cpe:/a:microsoft:msn_setup_bulletin_board_services:4.71.0.10 CVE-1999-1484 1999-09-24T00:00:00.000-04:00 2017-12-18T21:29:08.753-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990924 Several ActiveX Buffer Overruns BID 668 XF msn-setup-bbs-activex-bo(3310) Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured. cpe:/o:sgi:irix:6.5 cpe:/o:sgi:irix:6.5.1 cpe:/o:sgi:irix:6.5.2 CVE-1999-1485 1999-05-31T00:00:00.000-04:00 2017-12-18T21:29:08.830-05:00 6.4 NETWORK LOW NONE PARTIAL NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990531 IRIX 6.5 nsd virtual filesystem vulnerability BID 412 XF sgi-nsd-view(2246) XF sgi-nsd-create(2247) nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 CVE-1999-1486 1998-02-25T00:00:00.000-05:00 2017-10-09T21:29:06.403-04:00 1.2 LOCAL HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov CONFIRM http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info BID 408 AIXAPAR IX75554 AIXAPAR IX76330 AIXAPAR IX76853 XF aix-sadc-timex(7675) sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack. cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 CVE-1999-1487 1998-01-21T00:00:00.000-05:00 2008-09-05T16:19:38.553-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS XF aix-digest(7477) BID 405 AIXAPAR IX74599 Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system. cpe:/a:ibm:system_data_repository:sp_2.0 CVE-1999-1488 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:38.710-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC I-079A XF ibm-sdr-read-files(7217) BID 371 sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. cpe:/o:slackware:slackware_linux:3.1 CVE-1999-1489 1997-03-04T00:00:00.000-05:00 2008-09-05T16:19:38.850-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19970304 Linux SuperProbe exploit BID 364 Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument. cpe:/o:redhat:linux:5.1 CVE-1999-1490 1998-05-28T00:00:00.000-04:00 2016-10-17T22:04:57.683-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980528 ALERT: Tiresome security hole in "xosview", RedHat5.1? BUGTRAQ 19980529 Re: Tiresome security hole in "xosview" (xosexp.c) XF linux-xosview-bo(8787) BID 362 xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable. cpe:/o:redhat:linux:2.1 CVE-1999-1491 1996-02-02T00:00:00.000-05:00 2016-10-17T22:04:58.870-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19960202 abuse Red Hat 2.1 security hole BID 354 abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program. cpe:/o:sgi:irix:6.4 CVE-1999-1492 1998-05-27T00:00:00.000-04:00 2017-12-18T21:29:08.910-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 19980502-01-P3030 BID 348 XF sgi-diskperf(2103) XF sgi-diskalign(2104) Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges. cpe:/o:hp:apollo_domain_os:sr10.3 CVE-1999-1493 1991-12-18T00:00:00.000-05:00 2017-12-18T21:29:08.970-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1991-23 BID 34 XF apollo-crp-root-access(7158) Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk(). cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 CVE-1999-1494 1994-08-09T00:00:00.000-04:00 2017-10-09T21:29:06.467-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov SGI 19950209-00-P BUGTRAQ 19940809 Re: IRIX 5.2 Security Advisory BID 336 BUGTRAQ 19950307 sigh. another Irix 5.2 hole. XF sgi-colorview(2112) colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument. cpe:/o:suse:suse_linux:6.0 CVE-1999-1495 1999-02-18T00:00:00.000-05:00 2017-12-18T21:29:09.033-05:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990218 xtvscreen and suse 6 BID 325 XF xtvscreen-overwrite(1792) xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file. cpe:/a:todd_miller:sudo:1.5 cpe:/o:debian:debian_linux:2.1 cpe:/o:redhat:linux:6.0 CVE-1999-1496 1999-06-08T00:00:00.000-04:00 2017-12-18T21:29:09.097-05:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990608 unneeded information in sudo BID 321 XF sudo-file-exists(2277) Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist. cpe:/a:ipswitch:imail:5.0 cpe:/a:ipswitch:imail:5.0.5 cpe:/a:ipswitch:imail:5.0.6 cpe:/a:ipswitch:imail:5.0.7 cpe:/a:ipswitch:imail:5.0.8 cpe:/a:ipswitch:imail:6.0 CVE-1999-1497 1999-12-21T00:00:00.000-05:00 2008-09-05T16:19:39.990-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19991221 [w00giving '99 #11] IMail's password encryption scheme BID 880 Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts. cpe:/o:slackware:slackware_linux:3.4 CVE-1999-1498 1998-04-06T00:00:00.000-04:00 2008-09-05T16:19:40.147-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 82 Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file. cpe:/a:isc:bind:4.9 cpe:/a:isc:bind:8.1 CVE-1999-1499 1998-04-10T00:00:00.000-04:00 2008-09-05T16:19:40.287-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19980410 BIND 4.9.7 named follows symlinks, clobbers anything BID 80 named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used. cpe:/a:true_north:internet_anywhere_mail_server:2.3 CVE-1999-1500 1999-10-01T00:00:00.000-04:00 2016-10-17T22:05:00.043-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19991001 Vulnerabilities in the Internet Anywhere Mail Server BID 733 Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments. cpe:/o:sgi:irix:6.3 CVE-1999-1501 1998-04-08T00:00:00.000-04:00 2016-10-17T22:05:02.120-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980408 SGI O2 ipx security issue BID 70 BID 71 (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands. cpe:/a:id_software:quake:1.9 CVE-1999-1502 1998-04-08T00:00:00.000-04:00 2016-10-17T22:05:03.637-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980408 QuakeI client: serious holes. BID 68 BID 69 Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command. cpe:/a:nfr:nfr:1.5 cpe:/a:nfr:nfr:1.6 CVE-1999-1503 1998-04-08T00:00:00.000-04:00 2008-09-05T16:19:40.850-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 63 Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field. cpe:/a:stalker:stalker_internet_mail_server:1.6 CVE-1999-1504 1998-04-08T00:00:00.000-04:00 2008-09-05T16:19:40.990-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19980408 Re: AppleShare IP Mail Server BID 62 Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command. cpe:/a:id_software:quakeworld:2.10 CVE-1999-1505 1998-04-07T00:00:00.000-04:00 2016-10-17T22:05:05.027-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19980407 QW vulnerability BID 60 Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet. cpe:/o:sun:sunos:3.5 cpe:/o:sun:sunos:4.0 cpe:/o:sun:sunos:4.0.1 cpe:/o:sun:sunos:4.0.2 cpe:/o:sun:sunos:4.0.3 cpe:/o:sun:sunos:4.0.3c CVE-1999-1506 1990-01-29T00:00:00.000-05:00 2008-09-05T16:19:41.257-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-1990-01 BID 6 Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin. cpe:/o:sun:sunos:4.1 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1psr_a CVE-1999-1507 1993-02-03T00:00:00.000-05:00 2017-10-09T21:29:06.547-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-1993-03 BID 59 XF sun-dir(521) Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash. cpe:/h:tek:phaser_network_printer_740 cpe:/h:tek:phaser_network_printer_750 cpe:/h:tek:phaser_network_printer_750dp cpe:/h:tek:phaser_network_printer_840 cpe:/h:tek:phaser_network_printer_930 CVE-1999-1508 1999-11-16T00:00:00.000-05:00 2016-10-17T22:05:06.310-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991116 [Fwd: Printer Vulnerability: Tektronix PhaserLink Webserver gives Administrator Password] BID 806 Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html. cpe:/a:etype:eserv:2.50 CVE-1999-1509 1999-11-04T00:00:00.000-05:00 2016-10-17T22:05:07.560-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991104 Eserv 2.50 Web interface Server Directory Traversal Vulnerability NTBUGTRAQ 19991104 Eserv 2.50 Web interface Server Directory Traversal Vulnerability BID 773 Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL. cpe:/a:bisonware:bisonware_ftp_server:4.1 CVE-1999-1510 1999-05-17T00:00:00.000-04:00 2017-12-18T21:29:09.160-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990517 Vulnerabilities in BisonWare FTP Server 3.5 XF bisonware-command-bo(3234) Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands. cpe:/a:artisoft:xtramail:1.11 CVE-1999-1511 1999-11-10T00:00:00.000-05:00 2017-12-18T21:29:09.253-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991110 Multiples Remotes DoS Attacks in Artisoft XtraMail v1.11 Vulnerability BID 791 XF xtramail-pass-dos(3488) Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service. cpe:/a:amavis:virus_scanner:0.2_pre4 CVE-1999-1512 1999-12-31T00:00:00.000-05:00 2017-10-09T21:29:06.607-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990716 AMaViS virus scanner for Linux - root exploit CONFIRM http://www.amavis.org/ChangeLog.txt BID 527 XF amavis-command-execute(2349) The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field. cpe:/h:3com:superstack_ii_hub:2.10 CVE-1999-1513 1999-08-30T00:00:00.000-04:00 2016-10-17T22:05:12.593-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990830 One more 3Com SNMP vulnerability Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities. cpe:/a:celtech_software:expressfs:2.6 CVE-1999-1514 2001-11-28T00:00:00.000-05:00 2017-12-18T21:29:09.317-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990729 ExpressFS 2.x FTPServer remotely exploitable buffer overflow vulnerability NTBUGTRAQ 19990729 ExpressFS 2.x FTPServer remotely exploitable buffer overflow vulnerability BID 749 XF expressfs-command-bo(3401) Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command. cpe:/a:tenfour:tfs_gateway:4.0 CVE-1999-1515 1999-08-31T00:00:00.000-04:00 2017-12-18T21:29:09.377-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 613 XF tfs-gateway-dos(3290) A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds. cpe:/a:tenfour:tfs_gateway_smtp:3.2 CVE-1999-1516 1999-09-02T00:00:00.000-04:00 2016-10-17T22:05:15.187-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990902 [SECURITY] TenFour TFS SMTP 3.2 Buffer Overflow A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string. cpe:/o:freebsd:freebsd:3.3 CVE-1999-1517 1999-11-01T00:00:00.000-05:00 2016-10-17T22:05:16.357-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991101 Amanda multiple vendor local root compromises BID 750 runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar. cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:netbsd:netbsd:1.3.1 cpe:/o:netbsd:netbsd:1.3.2 cpe:/o:netbsd:netbsd:1.3.3 cpe:/o:netbsd:netbsd:1.4::x86 CVE-1999-1518 1999-07-15T00:00:00.000-04:00 2017-12-18T21:29:09.440-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990715 Shared memory DoS's BID 526 XF bsd-shared-memory-dos(2351) Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults. cpe:/a:gene6:g6_ftp_server:2.0 CVE-1999-1519 1999-11-17T00:00:00.000-05:00 2017-12-18T21:29:09.517-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991117 Remote D.o.S Attack in G6 FTP Server v2.0 (beta 4/5) Vulnerability BID 805 XF g6ftp-username-dos(3513) Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password. cpe:/a:microsoft:site_server:3.0 CVE-1999-1520 1999-05-11T00:00:00.000-04:00 2017-10-09T21:29:06.670-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990511 [ALERT] Site Server 3.0 May Expose SQL IDs and PSWs BID 256 XF siteserver-site-csc(2270) A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information. cpe:/a:computalynx:cmail:2.3sp2 cpe:/a:computalynx:cmail:2.4 CVE-1999-1521 1999-09-12T00:00:00.000-04:00 2017-12-18T21:29:09.580-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990912 Many kind of POP3/SMTP server softwares for Windows have buffer overflow bug BUGTRAQ 19990729 Vulnerability in CMail SMTP Server Version 2.4: Remotely exploitable buffer BID 633 XF cmail-command-bo(2240) Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server. cpe:/a:roxen:roxen_web_server:1.3.11 CVE-1999-1522 1999-10-07T00:00:00.000-04:00 2016-10-17T22:05:22.953-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991007 Roxen security alert Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML. cpe:/a:sambar:sambar_server cpe:/a:sambar:sambar_server:4.2.1 CVE-1999-1523 1999-10-04T00:00:00.000-04:00 2017-12-18T21:29:09.627-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991004 BUGTRAQ 19991006 Re: Sample DOS against the Sambar HTTP-Server XF sambar-logging-bo(1672) Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request. cpe:/h:flowpoint:flowpoint_dsl_router:3.0.8 CVE-1999-1524 1999-08-07T00:00:00.000-04:00 2016-10-17T22:05:25.297-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990807 Re: FlowPoint DSL router vulnerability FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port. cpe:/a:macromedia:shockwave_flash_plugin:6.0 CVE-1999-1525 1997-03-14T00:00:00.000-05:00 2017-12-18T21:29:09.720-05:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19970314 Shockwave Security Alert XF shockwave-internal-access(1585) XF shockwave-file-read-vuln(1586) XF http-ns-shockwave(460) Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie. cpe:/a:macromedia:shockwave_flash_plugin:7.0 CVE-1999-1526 1999-03-11T00:00:00.000-05:00 2017-12-18T21:29:09.783-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990311 [Fwd: Shockwave 7 Security Hole] XF shockwave-updater(1931) Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia. cpe:/a:sun:forte:community_1.0_beta cpe:/a:sun:netbeans_developer:3.0_beta CVE-1999-1527 1999-11-23T00:00:00.000-05:00 2016-10-17T22:05:28.110-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991123 NetBeans/ Forte' Java IDE HTTP vulnerability BID 816 Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server. cpe:/a:prosoft_engineering:netware_client:5.12 CVE-1999-1528 1999-11-14T00:00:00.000-05:00 2016-10-17T22:05:29.220-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991114 MacOS 9 and the MacOS Netware Client BID 794 ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session. cpe:/a:trend_micro:interscan_viruswall:3.3 cpe:/a:trend_micro:interscan_viruswall:3.23 CVE-1999-1529 1999-11-07T00:00:00.000-05:00 2017-12-18T21:29:09.863-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991107 Interscan VirusWall NT 3.23/3.3 buffer overflow BUGTRAQ 19991108 Patch for VirusWall 3.23. BUGTRAQ 19991108 Re: Interscan VirusWall NT 3.23/3.3 buffer overflow. NTBUGTRAQ 19991107 Interscan VirusWall NT 3.23/3.3 buffer overflow. NTBUGTRAQ 19991108 Patch for VirusWall 3.23. BUGTRAQ 20000417 New DOS on Interscan NT/3.32 BID 787 XF viruswall-helo-bo(3465) A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code. cpe:/h:sun:cobalt_raq_2 cpe:/h:sun:cobalt_raq_3i CVE-1999-1530 1999-11-08T00:00:00.000-05:00 2016-10-17T22:05:31.580-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19991108 Security flaw in Cobalt RaQ2 cgiwrap BUGTRAQ 19991109 [Cobalt] Security Advisory - cgiwrap XF cobalt-cgiwrap-incorrect-permissions(7764) BID 777 cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system. cpe:/a:ibm:homepageprint:1.0.7 CVE-1999-1531 1999-11-02T00:00:00.000-05:00 2016-10-17T22:05:33.063-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991102 Some holes for Win/UNIX softwares XF ibm-homepageprint-bo(7767) BID 763 Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag. cpe:/a:netscape:messaging_server:3.6 cpe:/a:netscape:messaging_server:3.54 cpe:/a:netscape:messaging_server:3.55 CVE-1999-1532 1999-10-29T00:00:00.000-04:00 2016-10-17T22:05:34.267-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991029 message:Netscape Messaging Server RCPT TO vul. BID 748 Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands. cpe:/a:trend_micro:interscan_viruswall:3.2.3 cpe:/a:trend_micro:interscan_viruswall:3.3 CVE-1999-1533 1999-11-07T00:00:00.000-05:00 2017-12-18T21:29:09.927-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19990926 DoS Exploit in Eicon Diehl LAN ISDN Modem BID 665 XF diva-lan-isdn-dos(3317) Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service. cpe:/a:knox_software:arkeia:4.0 CVE-1999-1534 1999-09-23T00:00:00.000-04:00 2016-10-17T22:05:36.627-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990923 Multiple vendor Knox Arkiea local root/remote DoS BID 661 Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable. cpe:/a:persits:aspupload:1.4.0.2 CVE-1999-1535 1999-07-20T00:00:00.000-04:00 2017-10-09T21:29:06.717-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 19990720 Buffer overflow in AspUpload 1.4 NTBUGTRAQ 19990818 AspUpload Buffer Overflow Fixed BID 592 XF http-aspupload-bo(3291) Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request. cpe:/a:acushop:salesbuilder:2.6 CVE-1999-1536 1999-07-30T00:00:00.000-04:00 2016-10-17T22:05:39.190-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990730 World writable root owned script in SalesBuilder (RedHat 6.0) BID 560 .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1537 1999-07-07T00:00:00.000-04:00 2017-10-09T21:29:06.780-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 19990707 SSL and IIS. BID 521 XF ssl-iis-dos(2352) IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL. cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1538 1999-01-14T00:00:00.000-05:00 2016-10-17T22:05:41.660-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990114 MS IIS 4.0 Security Advisory NTBUGTRAQ 19990114 MS IIS 4.0 Security Advisory BID 189 When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password. cpe:/a:qpc_software:qvt_net:4.3 cpe:/a:qpc_software:qvt_term_plus:4.2d cpe:/a:qpc_software:qvt_term_plus:4.3 CVE-1999-1539 1999-11-10T00:00:00.000-05:00 2017-12-18T21:29:09.987-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 19991110 Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability NTBUGTRAQ 19991110 Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability BID 796 XF qvtterm-login-dos(3491) Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password. cpe:/a:cactus_software:shell-lock CVE-1999-1540 1999-10-04T00:00:00.000-04:00 2017-12-18T21:29:10.067-05:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991005 Cactus Software's shell-lock L0PHT 19991004 XF cactus-shell-lock-retrieve-shell-code(3356) shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code. cpe:/a:cactus_software:shell-lock CVE-1999-1541 1999-10-04T00:00:00.000-04:00 2017-12-18T21:29:10.127-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991005 Cactus Software's shell-lock L0PHT 19991004 XF cactus-shell-lock-root-privs(3358) shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file. cpe:/o:redhat:linux:6.0 CVE-1999-1542 1999-10-04T00:00:00.000-04:00 2017-10-09T21:29:06.827-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991004 RH6.0 local/remote command execution BUGTRAQ 19991006 Fwd: [Re: RH6.0 local/remote command execution] XF linux-rh-rpmmail(3353) RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command. cpe:/o:apple:mac_os:7.5.3 cpe:/o:apple:mac_os:7.6 cpe:/o:apple:mac_os:7.6.1 cpe:/o:apple:mac_os:8.0 cpe:/o:apple:mac_os:8.1 cpe:/o:apple:mac_os:8.5 cpe:/o:apple:mac_os:8.6 CVE-1999-1543 1999-07-10T00:00:00.000-04:00 2016-10-17T22:05:48.487-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 19990710 MacOS system encryption algorithm BUGTRAQ 19990914 MacOS system encryption algorithm 3 BID 519 MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-1999-1544 1999-01-24T00:00:00.000-05:00 2016-10-17T22:05:49.660-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990124 Advisory: IIS FTP Exploit/DoS Attack Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. cpe:/a:joes_own_editor:joe:2.8 CVE-1999-1545 1999-07-14T00:00:00.000-04:00 2016-10-17T22:05:50.833-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990714 BUGTRAQ 19990717 joe 2.8 makes world-readable DEADJOE Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users. cpe:/a:ibm:navio_nc_browser:1.1.0.1 CVE-1999-1546 1999-01-29T00:00:00.000-05:00 2017-12-18T21:29:10.177-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19990129 TROJAN: netstation.navio-comm.rte 1.1.0.1 XF navionc-config-script(1724) netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable. cpe:/a:oracle:web_listener:2.1 CVE-1999-1547 1999-11-25T00:00:00.000-05:00 2016-10-17T22:05:52.050-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19991125 Oracle Web Listener NTBUGTRAQ 19991125 Oracle Web Listener BID 841 Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent. cpe:/h:cabletron:smartswitch_router_8000_firmware:2.0 CVE-1999-1548 1999-11-24T00:00:00.000-05:00 2017-02-15T21:59:00.213-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BINDVIEW 19991124 Cabletron SmartSwitch Router 8000 Firmware v2.x BID 821 Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit. cpe:/a:university_of_kansas:lynx:2.7 cpe:/a:university_of_kansas:lynx:2.8 CVE-1999-1549 1999-11-16T00:00:00.000-05:00 2016-10-17T22:05:53.427-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991116 lynx 2.8.x - 'special URLs' anti-spoofing protection is weak BID 804 Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands. cpe:/o:f5:tmos:2.0 CVE-1999-1550 1999-11-08T00:00:00.000-05:00 2018-10-30T12:25:33.730-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991108 BigIP - bigconf.cgi holes BUGTRAQ 19991109 Re: BigIP - bigconf.cgi holes BUGTRAQ 19991109 XF bigip-bigconf-view-files(7771) BID 778 bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter. cpe:/a:ipswitch:imail:5.0 cpe:/a:ipswitch:imail:6.0 CVE-1999-1551 1999-03-02T00:00:00.000-05:00 2017-12-18T21:29:10.300-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990302 Multiple IMail Vulnerabilites BID 505 XF imail-websvc-overflow(1898) Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL. cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 CVE-1999-1552 1994-07-20T00:00:00.000-04:00 2008-09-10T15:02:10.163-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19940720 xnews and XDM BID 358 dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges. cpe:/a:xcmail:xcmail:0.99.6 CVE-1999-1553 1999-05-01T00:00:00.000-04:00 2017-12-18T21:29:10.363-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990301 [0z0n3] XCmail remotely exploitable vulnerability BID 311 XF xcmail-reply-overflow(1859) Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line. cpe:/o:sgi:irix:3.3 cpe:/o:sgi:irix:3.3.1 CVE-1999-1554 1990-10-31T00:00:00.000-05:00 2008-09-05T16:19:48.163-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-1990-08 XF sgi-irix-reset(3164) BID 13 /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users. cpe:/a:cheyenne:inoculan_anti-virus_server:4.0 CVE-1999-1555 1998-06-11T00:00:00.000-04:00 2017-12-18T21:29:10.427-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19980611 Cheyenne Inoculan vulnerability on NT BID 106 XF inoculan-bad-permissions(1536) Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll. cpe:/a:microsoft:sql_server:6.5 CVE-1999-1556 1998-06-29T00:00:00.000-04:00 2017-10-09T21:29:06.890-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 19980629 MS SQL Server 6.5 stores password in unprotected registry keys BID 109 XF mssql-sqlexecutivecmdexec-password(7354) Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value. cpe:/a:ipswitch:imail:5.0 CVE-1999-1557 2005-05-02T00:00:00.000-04:00 2017-12-18T21:29:10.487-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990301 Multiple IMail Vulnerabilites XF imail-imap-overflow(1895) Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password. cpe:/a:digital:digital_openvms:7.1 cpe:/a:digital:digital_openvms_axp:7.1 CVE-1999-1558 1998-07-16T00:00:00.000-04:00 2008-09-05T16:19:48.723-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CIAC I-071A XF openvms-loginout-unauth-access(7151) BID 161 Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled. cpe:/h:alcatel:omniswitch:3.2.4 CVE-1999-1559 1999-03-31T00:00:00.000-05:00 2017-12-18T21:29:10.580-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990331 Xylan OmniSwitch "features" XF xylan-omniswitch-login(2064) Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time. cpe:/a:tamu:tiger CVE-1999-1560 1999-07-20T00:00:00.000-04:00 2017-12-18T21:29:10.643-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990720 tiger vulnerability XF tiger-script-execute(2369) Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root. cpe:/a:nullsoft:shoutcast_server:1.9.7::win32 CVE-1999-1561 1999-08-20T00:00:00.000-04:00 2008-09-05T16:19:49.163-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19990820 Winamp SHOUTcast server: Gain Administrator Password Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server. cpe:/a:gftp:ftp_client:1.13 cpe:/a:gftp:ftp_client:2.0.0 CVE-1999-1562 1999-09-05T00:00:00.000-04:00 2008-09-05T16:19:49.303-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS DEBIAN DSA-084 BUGTRAQ 19990905 gftp BID 3446 gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file. cpe:/h:nachuatec:d435 cpe:/h:nachuatec:d445 CVE-1999-1563 2000-10-14T00:00:00.000-04:00 2008-09-05T16:19:49.443-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19991014 NEUROCOM: Nashuatec printer, 3 vulnerabilities found BUGTRAQ 19991116 NEUROCOM: Nashuatec D445/435 vulnerabilities updated Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm. cpe:/o:freebsd:freebsd:3.2 CVE-1999-1564 1999-09-02T00:00:00.000-04:00 2008-09-05T16:19:49.583-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990902 [ Kernel panic with FreeBSD-3.2-19990830-STABLE ] FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes. cpe:/a:earl_hood:man2html:2.1 cpe:/o:debian:debian_linux:4.0 CVE-1999-1565 1999-08-20T00:00:00.000-04:00 2008-09-05T16:19:49.723-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990820 [SECURITY] New versions of man2html fixes postinst glitch Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. cpe:/a:intel:iparty:1.2 CVE-1999-1566 1999-05-08T00:00:00.000-04:00 2008-09-05T16:19:49.880-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 19990508 iParty Daemon Vulnerability w/ Exploit Code (worse than thought?) Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters. cpe:/a:seapine_software:testtrack CVE-1999-1567 1999-03-08T00:00:00.000-05:00 2017-12-18T21:29:10.720-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov XF testtrack-dos(1948) Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data. cpe:/a:ncftpd:ncftpd_ftp_server:2.4.0 CVE-1999-1568 1999-01-01T00:00:00.000-05:00 2017-10-09T21:29:06.937-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19990223 NcFTPd remote buffer overflow BUGTRAQ 19990223 Comments on NcFTPd "theoretical root compromise" XF ncftpd-port-bo(1833) Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command. cpe:/a:id_software:quake:1.9 CVE-1999-1569 2001-07-17T00:00:00.000-04:00 2017-12-18T21:29:10.783-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19980502 NetQuake Protocol problem resulting in smurf like effect. BUGTRAQ 19981101 Quake problem? BUGTRAQ 20010716 Quake client and server denial-of-service BID 3051 XF quake-spoofed-client-dos(6871) Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit. cpe:/a:caldera:openserver:5.0.5 CVE-1999-1570 2002-05-01T00:00:00.000-04:00 2016-10-17T22:06:04.880-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CALDERA CSSA-2002-SCO.17 VULN-DEV 20020509 Sar -o exploitation process info. BUGTRAQ 19990909 19 SCO 5.0.5+Skunware98 buffer overflows XF openserver-sar-bo(8989) BID 4089 Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter. cpe:/o:sco:openserver:5.0.0 cpe:/o:sco:openserver:5.0.5 CVE-1999-1571 1999-11-04T00:00:00.000-05:00 2016-10-17T22:06:06.193-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO SB-99.17c CONFIRM ftp://stage.caldera.com/pub/security/sse/sse037c/sse037c.ltr BUGTRAQ 19990917 Re: recent SCO 5.0.x vulnerabilities BUGTRAQ 19991020 Re: recent SCO 5.0.x vulnerabilities BUGTRAQ 19991105 SCO Security Bulletin 99.17 VULN-DEV 20020509 Sar -o exploitation process info. MISC http://online.securityfocus.com/advisories/1843 BUGTRAQ 19990909 19 SCO 5.0.5+Skunware98 buffer overflows XF openserver-sar-bo(8989) BID 643 Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570. cpe:/o:debian:debian_linux:3.0 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:cs2.1 cpe:/o:mandrakesoft:mandrake_linux:cs3.0 cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation cpe:/o:redhat:enterprise_linux_desktop:4.0 cpe:/o:ubuntu:ubuntu_linux:4.10 CVE-1999-1572 1996-07-16T00:00:00.000-04:00 2017-10-18T21:29:00.470-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20050204 [USN-75-1] cpio vulnerability CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2005-212.pdf DEBIAN DSA-664 MISC http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/1391 MANDRAKE MDKSA-2005:032 REDHAT RHSA-2005:073 REDHAT RHSA-2005:080 REDHAT RHSA-2005:806 TRUSTIX 2005-0003 XF cpio-o-archive-insecure-permissions(19167) cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files. cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:11.00 CVE-1999-1573 1999-12-28T00:00:00.000-05:00 2017-10-18T21:29:00.533-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS AUSCERT ESB-98.186 CIAC J-022 CERT-VN VU#13217 HP HPSBUX9812-090 XF hp-rcmnds-gain-privileges(7860) Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files. cpe:/o:ibm:aix:4.3.0 CVE-1999-1574 1998-07-06T00:00:00.000-04:00 2017-07-10T21:29:01.447-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CERT-VN VU#182777 AIXAPAR IX79909 XF aix-nslookup-lex-bo(7867) Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings." cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 CVE-1999-1575 1999-09-10T00:00:00.000-04:00 2018-10-12T17:29:24.123-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CERT-VN VU#23412 CERT-VN VU#24839 CERT-VN VU#26924 CERT-VN VU#41408 CERT-VN VU#9162 BUGTRAQ 19990924 Several ActiveX Buffer Overruns MS MS99-037 XF wang-kodak-activex-control(7097) The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands. cpe:/a:adobe:acrobat_reader:4.0 CVE-1999-1576 1999-09-27T00:00:00.000-04:00 2017-07-10T21:29:01.587-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CERT-VN VU#25919 BUGTRAQ 19990924 Several ActiveX Buffer Overruns BID 666 XF adobe-acrobat-pdf-bo(3318) Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method. cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 CVE-1999-1577 1999-10-31T00:00:00.000-04:00 2017-07-10T21:29:01.633-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CERT-VN VU#29795 BUGTRAQ 19990924 Several ActiveX Buffer Overruns BID 669 XF ie-hhopen-bo(3314) Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method. cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 CVE-1999-1578 1999-09-24T00:00:00.000-04:00 2017-07-10T21:29:01.697-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov CERT-VN VU#37556 BUGTRAQ 19990924 Several ActiveX Buffer Overruns BID 671 XF ie-registration-wiz-bo(3311) Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands. cpe:/o:microsoft:windows_nt:4.0 CVE-1999-1579 2000-12-14T00:00:00.000-05:00 2018-08-13T17:47:06.103-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q242366 CERT-VN VU#3062 BID 6827 XF winnt-xenroll-dos(7107) The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine. cpe:/a:sendmail:sendmail:5.59 cpe:/a:sendmail:sendmail:5.61 cpe:/a:sendmail:sendmail:5.65 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c cpe:/o:sun:sunos:4.1.3u1 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:4.1.4jl CVE-1999-1580 1995-08-23T00:00:00.000-04:00 2008-09-05T16:19:51.897-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS MISC http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html AUSCERT AA-95.09 CERT CA-1995-11 CERT-VN VU#3278 BID 7829 SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 CVE-1999-1581 1997-12-23T00:00:00.000-05:00 2017-07-10T21:29:01.807-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q178381 CERT-VN VU#4923 XF winnt-snmp-oid-memory-leak(8231) Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded. cpe:/a:cisco:pix_firewall CVE-1999-1582 1998-07-15T00:00:00.000-04:00 2017-07-10T21:29:01.867-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CISCO 19980715 PIX Firewall "established" Command CERT-VN VU#6733 XF cisco-pix-established-bypass(8052) By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality. cpe:/o:ibm:aix:4.3 CVE-1999-1583 1999-09-30T00:00:00.000-04:00 2017-07-10T21:29:01.913-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT-VN VU#872443 AIXAPAR IY02120 XF aix-nslookup-hostname-bo(8031) Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. cpe:/a:sun:openwindows:3.0 cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c CVE-1999-1584 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:52.490-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2005-10-04T08:47:00.000-04:00 ALLOWS_ADMIN_ACCESS SUN 00124 CERT CA-93.18 Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586. cpe:/o:sun:sunos:5.0 CVE-1999-1585 1999-12-31T00:00:00.000-05:00 2018-10-30T12:25:12.013-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2005-10-04T08:57:00.000-04:00 ALLOWS_ADMIN_ACCESS SUN 00124 The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges. cpe:/o:sun:sunos:4.1.1 cpe:/o:sun:sunos:4.1.2 cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.3c CVE-1999-1586 1999-12-31T00:00:00.000-05:00 2017-07-10T21:29:01.993-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CERT CA-95.12 CIAC G-02 XF sun-loadmodule(498) loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584. cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:sunos:5.8 CVE-1999-1587 1999-12-31T00:00:00.000-05:00 2018-10-30T12:25:37.090-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov SECTRACK 1015833 SUNALERT 102215 BID 19662 MISC http://www.sunmanagers.org/archives/1996/1383.html VUPEN ADV-2006-1123 XF solaris-ps-information-disclosure(25460) /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::x86 CVE-1999-1588 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:53.067-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2006-05-01T16:40:00.000-04:00 ALLOWS_ADMIN_ACCESS MISC http://lsd-pl.net/files/get?SOLARIS/solx86_nlps_server MISC http://security-protocols.com/sploits/unsorted_exploits/nlps_server.c BID 2319 MISC http://www.securityfocus.com/data/vulnerabilities/exploits/nlps_server.c Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766. cpe:/o:ibm:aix:1.2.1 cpe:/o:ibm:aix:1.3 cpe:/o:ibm:aix:2.2.1 cpe:/o:ibm:aix:3.1 cpe:/o:ibm:aix:3.2 CVE-1999-1589 1999-12-31T00:00:00.000-05:00 2008-09-05T00:00:00.000-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2006-06-15T16:27:00.000-04:00 ALLOWS_ADMIN_ACCESS CERT CA-1992-10 BID 357 Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors. cpe:/a:wwwcount:wwwcount:2.3 CVE-1999-1590 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:53.367-04:00 3.5 NETWORK MEDIUM SINGLE_INSTANCE PARTIAL NONE NONE http://nvd.nist.gov 2006-12-06T16:23:00.000-05:00 BUGTRAQ 19971010 Security flaw in Count.cgi (wwwcount) Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021. cpe:/a:microsoft:internet_information_server:4.0:sp4 cpe:/a:microsoft:visual_interdev:6.0 CVE-1999-1591 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:53.507-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2007-08-01T10:10:00.000-04:00 NTBUGTRAQ 19990118 IIS4.0 and Visual Interdev NTBUGTRAQ 19990119 Re: IIS4.0 and Visual Interdev BID 190 Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0. cpe:/a:sendmail:sendmail:5 CVE-1999-1592 1999-12-31T00:00:00.000-05:00 2008-09-05T16:19:53.647-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2007-08-01T10:20:00.000-04:00 SUN 00159 BID 243 Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129. CVE-1999-1593 2009-01-14T20:30:00.407-05:00 2009-01-15T00:00:00.000-05:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2009-01-15T11:54:00.000-05:00 ALLOWS_ADMIN_ACCESS NTBUGTRAQ 19990302 NT Domain DoS and Security Exploit with SAMBA Server BUGTRAQ 20010117 Invalid WINS entries BUGTRAQ 20010117 Re: Invalid WINS entries BUGTRAQ 20010118 Re: Invalid WINS entries BUGTRAQ 20010117 Re: Invalid WINS entries BUGTRAQ 20010117 Re: Invalid WINS entries BUGTRAQ 20010118 Re: Invalid WINS entries BUGTRAQ 20010119 Re: Invalid WINS entries BID 2221 MISC https://www2.sans.org/reading_room/whitepapers/win2k/185.php Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable. cpe:/a:realnetworks:realserver:5.0 CVE-2000-0001 1999-12-23T00:00:00.000-05:00 2008-09-10T00:00:00.000-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 888 RealMedia server allows remote attackers to cause a denial of service via a long ramgen request. cpe:/a:zbsoft:zbserver:1.5 CVE-2000-0002 1999-12-22T00:00:00.000-05:00 2016-10-17T22:06:08.820-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991223 Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT NTBUGTRAQ 19991223 Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT BID 889 BUGTRAQ 20000128 ZBServer 1.50-r1x exploit (WinNT) Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request. cpe:/o:sco:unixware CVE-2000-0003 1999-12-30T00:00:00.000-05:00 2016-10-17T22:06:10.023-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 20000127 New SCO patches... Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable. cpe:/a:zbsoft:zbserver:1.5 CVE-2000-0004 1999-12-01T00:00:00.000-05:00 2016-10-17T22:06:11.210-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 19991223 Re: Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT NTBUGTRAQ 19991223 Local / Remote GET Buffer Overflow Vulnerability in ZBServer 1.5 Pro Edition for Win98/NT ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL. cpe:/a:hp:aserver cpe:/h:hp:9000:7_800 cpe:/o:hp:hp-ux:7.00 cpe:/o:hp:hp-ux:7.02 cpe:/o:hp:hp-ux:7.04 cpe:/o:hp:hp-ux:7.06 cpe:/o:hp:hp-ux:7.08 cpe:/o:hp:hp-ux:8.00 cpe:/o:hp:hp-ux:8.01 cpe:/o:hp:hp-ux:8.02 cpe:/o:hp:hp-ux:8.04 cpe:/o:hp:hp-ux:8.05 cpe:/o:hp:hp-ux:8.06 cpe:/o:hp:hp-ux:8.07 cpe:/o:hp:hp-ux:8.08 cpe:/o:hp:hp-ux:8.09 cpe:/o:hp:hp-ux:9.00 cpe:/o:hp:hp-ux:9.01 cpe:/o:hp:hp-ux:9.03 cpe:/o:hp:hp-ux:9.04 cpe:/o:hp:hp-ux:9.05 cpe:/o:hp:hp-ux:9.06 cpe:/o:hp:hp-ux:9.07 cpe:/o:hp:hp-ux:9.08 cpe:/o:hp:hp-ux:9.09 cpe:/o:hp:hp-ux:9.10 cpe:/o:hp:hp-ux:10.00 cpe:/o:hp:hp-ux:10.01 cpe:/o:hp:hp-ux:10.08 cpe:/o:hp:hp-ux:10.09 cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.16 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:10.24 cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:10.34 cpe:/o:hp:hp-ux:11.00 CVE-2000-0005 1999-01-02T00:00:00.000-05:00 2018-05-02T21:29:05.757-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS HP-UX aserver program allows local users to gain privileges via a symlink attack. cpe:/a:paul_kranenburg:strace cpe:/o:linux:linux_kernel:2.3.20 CVE-2000-0006 1999-12-25T00:00:00.000-05:00 2017-10-09T21:29:06.997-04:00 2.6 LOCAL HIGH NONE PARTIAL PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19991225 strace can lie XF linux-strace(4554) strace allows local users to read arbitrary files via memory mapped file names. cpe:/a:trend_micro:pc-cillin:6.0 CVE-2000-0007 1999-12-29T00:00:00.000-05:00 2018-05-02T21:29:05.943-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1740 XF pccillin-proxy-remote-dos(4491) Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service. cpe:/a:1st_choice_software:ftppro:7.5 CVE-2000-0008 1999-12-26T00:00:00.000-05:00 2008-09-10T15:02:18.147-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FTPPro allows local users to read sensitive information, which is stored in plain text. cpe:/a:nortel:optivity_net_architect:2.0 CVE-2000-0009 1999-12-29T00:00:00.000-05:00 2008-09-10T15:02:18.227-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 907 The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands. cpe:/a:tony_greenwood:webwho%2b:1.1 CVE-2000-0010 1999-12-26T00:00:00.000-05:00 2008-09-10T15:02:18.290-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter. cpe:/a:analogx:simpleserver_www:1.0.1 CVE-2000-0011 1999-12-31T00:00:00.000-05:00 2008-09-10T15:02:18.807-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS MISC http://www.analogx.com/contents/download/network/sswww.htm BID 906 Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request. cpe:/a:hughes:msql:2.0.11 CVE-2000-0012 1999-12-27T00:00:00.000-05:00 2008-09-10T15:02:18.883-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 898 Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands. cpe:/o:sgi:irix:6.2 CVE-2000-0013 1999-12-31T00:00:00.000-05:00 2008-09-10T15:02:18.947-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 909 IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program. cpe:/a:michael_lamont:savant_webserver:2.0 CVE-2000-0014 1999-12-28T00:00:00.000-05:00 2008-09-10T15:02:19.007-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 897 Denial of service in Savant web server via a null character in the requested URL. cpe:/a:ascend:cascadeview_ux:1.0 CVE-2000-0015 1999-12-31T00:00:00.000-05:00 2008-09-10T15:02:19.087-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 910 CascadeView TFTP server allows local users to gain privileges via a symlink attack. cpe:/a:true_north:internet_anywhere_mail_server:2.3 cpe:/a:true_north:internet_anywhere_mail_server:2.3.1 CVE-2000-0016 1999-10-01T00:00:00.000-04:00 2008-09-10T15:02:19.147-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 730 Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username. cpe:/o:redhat:linux CVE-2000-0017 1999-12-21T00:00:00.000-05:00 2008-09-10T15:02:19.227-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter. cpe:/a:windowmaker:wmmon:1.0b2 CVE-2000-0018 1999-12-22T00:00:00.000-05:00 2008-09-10T15:02:19.307-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 885 wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file. cpe:/a:ipswitch:imail:2006 CVE-2000-0019 1999-03-04T00:00:00.000-05:00 2008-09-10T15:02:19.367-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IMail POP3 daemon uses weak encryption, which allows local users to read files. cpe:/a:man_and_mice:dns_pro:5.7 CVE-2000-0020 1999-12-20T00:00:00.000-05:00 2008-09-10T15:02:19.447-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 DNS PRO allows remote attackers to conduct a denial of service via a large number of connections. cpe:/a:lotus:domino_server:4.6 CVE-2000-0021 1999-12-01T00:00:00.000-05:00 2008-09-10T15:02:19.507-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 881 Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin. cpe:/a:lotus:domino_server:4.6 cpe:/a:lotus:domino_server:4.6.x CVE-2000-0022 1999-12-21T00:00:00.000-05:00 2008-09-10T15:02:19.587-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 881 Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory. cpe:/a:lotus:domino_server:4.6 cpe:/a:lotus:domino_server:4.6.x CVE-2000-0023 1999-12-21T00:00:00.000-05:00 2008-09-10T15:02:19.647-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 881 Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL. cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:site_server:3.0 cpe:/a:microsoft:site_server_commerce:3.0 CVE-2000-0024 1999-12-21T00:00:00.000-05:00 2018-10-12T17:29:24.810-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov MSKB Q246401 MISC http://www.acrossecurity.com/aspr/ASPR-1999-11-10-1-PUB.txt MS MS99-061 IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability. cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:site_server:3.0 cpe:/a:microsoft:site_server_commerce:3.0 CVE-2000-0025 1999-12-21T00:00:00.000-05:00 2018-10-12T17:29:25.137-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q238606 MS MS99-058 IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability. cpe:/a:windowmaker:wmmon:1.0b2 cpe:/o:sco:unixware:7.1 CVE-2000-0026 1999-12-21T00:00:00.000-05:00 2016-10-17T22:06:12.820-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991223 FYI, SCO Security patches available. BID 876 Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string. cpe:/a:ibm:network_station_manager:2.0r1 CVE-2000-0027 1999-12-27T00:00:00.000-05:00 2008-09-10T15:02:20.773-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS XF ibm-netstat-race-condition(5381) BUGTRAQ 19991227 IBM NetStation/UnixWare local root exploit BID 900 IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. cpe:/a:microsoft:ie:3.0 cpe:/a:microsoft:ie:3.0.2 cpe:/a:microsoft:ie:3.1 cpe:/a:microsoft:ie:3.2 cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0:a_mac_os cpe:/a:microsoft:ie:4.0.1:sp2 cpe:/a:microsoft:ie:4.1 cpe:/a:microsoft:ie:4.5 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.1 CVE-2000-0028 1999-12-23T00:00:00.000-05:00 2008-09-10T15:02:20.853-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function. cpe:/o:sco:unixware:7.1 CVE-2000-0029 1999-12-27T00:00:00.000-05:00 2016-10-17T22:06:13.930-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000113 Info on some security holes reported against SCO Unixware. BID 901 UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-2000-0030 1999-12-22T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 878 Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database. cpe:/o:redhat:linux:6.0 cpe:/o:redhat:linux:6.1 CVE-2000-0031 2000-10-20T00:00:00.000-04:00 2008-09-10T15:02:23.697-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack. cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-2000-0032 1999-12-22T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 878 Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database. cpe:/a:trend_micro:interscan_viruswall:3.0.1 CVE-2000-0033 1999-12-27T00:00:00.000-05:00 2008-09-10T15:02:23.867-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 899 InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments. cpe:/a:netscape:communicator:4.7 CVE-2000-0034 1999-12-22T00:00:00.000-05:00 2008-09-10T15:02:23.960-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords." cpe:/a:great_circle_associates:majordomo:1.94.4 CVE-2000-0035 1999-12-28T00:00:00.000-05:00 2016-10-17T22:06:15.163-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000113 Info on some security holes reported against SCO Unixware. BID 902 resend command in Majordomo allows local users to gain privileges via shell metacharacters. cpe:/a:microsoft:ie:4.5::macintosh cpe:/a:microsoft:outlook_express:5.0::macos CVE-2000-0036 1999-12-22T00:00:00.000-05:00 2018-10-12T17:29:25.450-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov MSKB Q249082 MS MS99-060 Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. cpe:/a:great_circle_associates:majordomo:1.94.4 cpe:/a:great_circle_associates:majordomo:1.94.5 CVE-2000-0037 1999-12-28T00:00:00.000-05:00 2016-10-17T22:06:16.337-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 20000113 Info on some security holes reported against SCO Unixware. REDHAT RHSA-2000:005 BID 903 Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file. cpe:/a:glftpd:glftpd:1.17.2 CVE-2000-0038 1999-12-23T00:00:00.000-05:00 2008-09-10T15:02:24.570-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS glFtpD includes a default glftpd user account with a default password and a UID of 0. cpe:/a:altavista:search_intranet:2.0b cpe:/a:altavista:search_intranet:2.3a CVE-2000-0039 1999-12-29T00:00:00.000-05:00 2008-09-10T15:02:24.647-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 896 AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program. cpe:/a:glftpd:glftpd:1.17.2 CVE-2000-0040 1999-12-23T00:00:00.000-05:00 2008-09-10T15:02:24.743-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command. cpe:/o:apple:mac_os:9.0 CVE-2000-0041 1999-12-28T00:00:00.000-05:00 2008-09-10T15:02:24.820-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 890 Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack. cpe:/a:csm:mail_server:1999-07b cpe:/a:csm:mail_server:1999-07f cpe:/a:csm:mail_server:1999-07g cpe:/a:csm:mail_server:1999-07h cpe:/a:csm:mail_server:1999-07i cpe:/a:csm:mail_server:1999-07m cpe:/a:csm:mail_server:2000-01a cpe:/a:csm:mail_server:2000.8.a CVE-2000-0042 1999-12-29T00:00:00.000-05:00 2008-09-10T15:02:24.883-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 895 Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command. cpe:/a:camshot:webcam_http_server:2.5 CVE-2000-0043 1999-12-30T00:00:00.000-05:00 2008-09-10T15:02:24.960-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 905 Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request. cpe:/a:jgaa:warftpd:1.67b2 cpe:/a:jgaa:warftpd:1.70b CVE-2000-0044 2000-01-06T00:00:00.000-05:00 2008-09-10T15:02:25.023-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 919 Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands. cpe:/a:oracle:mysql:3.22.27 cpe:/a:oracle:mysql:3.22.29 cpe:/a:oracle:mysql:3.23.8 CVE-2000-0045 2000-01-11T00:00:00.000-05:00 2019-10-07T12:38:58.470-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 926 MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege. cpe:/a:mirabilis:icq:0.99b_1.1.1.1 CVE-2000-0046 2000-01-10T00:00:00.000-05:00 2008-09-10T15:02:25.163-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 929 Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message. cpe:/a:yahoo:pager:733 CVE-2000-0047 1999-10-01T00:00:00.000-04:00 2008-09-10T15:02:25.227-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message. cpe:/o:corel:linux:1.0 CVE-2000-0048 2000-01-12T00:00:00.000-05:00 2008-09-10T15:02:25.807-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CONFIRM http://linux.corel.com/support/clos_patch1.htm BID 928 get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program. cpe:/a:nullsoft:winamp:2.0 cpe:/a:nullsoft:winamp:2.10 CVE-2000-0049 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:25.867-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 925 Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. cpe:/a:allaire:spectra:1.0 CVE-2000-0050 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:26.133-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS ALLAIRE ASB00-01 BID 915 The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs. cpe:/a:allaire:spectra:1.0 CVE-2000-0051 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:26.210-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLAIRE ASB00-02 BID 916 The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. cpe:/o:mandrakesoft:mandrake_linux:6.0 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.1::i386 cpe:/o:turbolinux:turbolinux:3.5b2 cpe:/o:turbolinux:turbolinux:4.2 cpe:/o:turbolinux:turbolinux:4.4 cpe:/o:turbolinux:turbolinux:6.0.2 CVE-2000-0052 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:40.897-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS L0PHT 20000104 PamSlam REDHAT RHSA-2000:001 BID 913 XF linux-pam-userhelper Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack. cpe:/a:microsoft:commercial_internet_system:2.0 cpe:/a:microsoft:commercial_internet_system:2.5 CVE-2000-0053 2000-01-04T00:00:00.000-05:00 2018-10-12T17:29:25.717-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q246731 BID 912 MS MS00-001 Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request. cpe:/a:solution_scripts:home_free:1.0 CVE-2000-0054 1999-01-03T00:00:00.000-05:00 2008-09-10T15:02:41.147-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 921 search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack. cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.7 CVE-2000-0055 2000-01-06T00:00:00.000-05:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 918 Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option. cpe:/a:ipswitch:imail:5.0.8 cpe:/a:ipswitch:imail:6.0 cpe:/a:ipswitch:imail:6.1 CVE-2000-0056 2000-01-05T00:00:00.000-05:00 2008-09-10T15:02:41.290-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 914 IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi. cpe:/a:allaire:coldfusion_server:4.0 cpe:/a:allaire:coldfusion_server:4.0.1 CVE-2000-0057 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:41.353-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS ALLAIRE ASB00-03 BID 917 Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information. cpe:/a:handspring:visor_network_hotsync:1.0 CVE-2000-0058 2000-01-05T00:00:00.000-05:00 2008-09-10T15:02:41.430-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000105 Handspring Visor Network HotSync Security Hole BID 920 Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files. cpe:/a:php:php:3.0 cpe:/a:php:php:3.0.1 cpe:/a:php:php:3.0.2 cpe:/a:php:php:3.0.3 cpe:/a:php:php:3.0.4 cpe:/a:php:php:3.0.5 cpe:/a:php:php:3.0.6 cpe:/a:php:php:3.0.7 cpe:/a:php:php:3.0.8 cpe:/a:php:php:3.0.9 cpe:/a:php:php:3.0.10 cpe:/a:php:php:3.0.11 cpe:/a:php:php:3.0.12 cpe:/a:php:php:3.0.13 CVE-2000-0059 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:41.507-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 911 PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands. cpe:/a:avirt:rover:1.1 CVE-2000-0060 1999-12-27T00:00:00.000-05:00 2016-10-17T22:06:17.820-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 19991227 Local / Remote Remote DoS Attack in Rover POP3 Server V1.1 NT From aVirt NTBUGTRAQ 19991227 Local / Remote Remote DoS Attack in Rover POP3 Server V1.1 NT From aVirt XF avirt-rover-pop3-dos(3765) BID 894 Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5:preview CVE-2000-0061 2000-01-07T00:00:00.000-05:00 2008-09-10T15:02:41.773-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 923 Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading. cpe:/a:zope:zope:1.10.3 cpe:/a:zope:zope:2.1.1 CVE-2000-0062 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:41.853-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 922 BUGTRAQ 20000104 [petrilli@digicool.com: [Zope] SECURITY ALERT] The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities. cpe:/h:nortel:contivity:1.0 CVE-2000-0063 2000-01-17T00:00:00.000-05:00 2008-09-10T15:02:41.913-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 938 cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script. cpe:/h:nortel:contivity:1.0 CVE-2000-0064 2000-01-17T00:00:00.000-05:00 2008-09-10T15:02:41.993-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 938 cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters. cpe:/a:avtronics:inetserv:3.0 CVE-2000-0065 2000-01-17T00:00:00.000-05:00 2008-09-10T15:02:42.057-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request. cpe:/a:oreilly:website_professional:2.3.18 cpe:/a:oreilly:website_professional:2.4.9 CVE-2000-0066 2000-01-13T00:00:00.000-05:00 2008-09-10T15:02:42.133-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request. cpe:/a:cybercash:merchant_connection_kit:3.2.0.4 CVE-2000-0067 2000-01-11T00:00:00.000-05:00 2008-09-10T15:02:42.197-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack. cpe:/a:intel:inbusiness_email_station:1.04 CVE-2000-0068 1999-12-14T00:00:00.000-05:00 2016-10-17T22:06:18.917-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 20000104 [rootshell] Security Bulletin #27 daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail. cpe:/a:sun:solstice_backup:5.1 CVE-2000-0069 2000-01-01T00:00:00.000-05:00 2008-09-10T15:02:42.337-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The recover program in Solstice Backup allows local users to restore sensitive files. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 cpe:/o:microsoft:windows_nt:4.0:sp6 CVE-2000-0070 2000-01-12T00:00:00.000-05:00 2018-10-12T17:29:26.043-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q247869 BINDVIEW 20000113 Local Promotion Vulnerability in Windows NT 4 BID 934 XF nt-spoofed-lpc-port MS MS00-003 NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request." cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0071 2000-01-11T00:00:00.000-05:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000111 IIS still revealing paths for web directories BUGTRAQ 20000113 SV: IIS still revealing paths for web directories IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. cpe:/a:computer_power_solutions:visual_casel:3.0 cpe:/a:computer_power_solutions:visual_casel:3.5 CVE-2000-0072 2000-01-17T00:00:00.000-05:00 2016-10-17T22:06:21.290-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 20000118 Warning: VCasel security hole. XF vcasel-filename-trusting(3867) BID 937 Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0073 1999-11-17T00:00:00.000-05:00 2018-10-12T17:29:26.543-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q249973 XF win-malformed-rtf-control-word MS MS00-005 Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word. cpe:/a:powerscripts:plusmail CVE-2000-0074 2000-01-11T00:00:00.000-05:00 2008-09-10T15:02:42.913-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions. cpe:/a:nosque:msgcore:1.9 CVE-2000-0075 2000-01-13T00:00:00.000-05:00 2008-09-10T15:02:42.993-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 930 Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session. cpe:/o:berkeley:nvi:1.7x cpe:/o:debian:debian_linux:2.1 CVE-2000-0076 1999-12-30T00:00:00.000-05:00 2016-10-17T22:06:22.790-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 19991230 vibackup.sh BID 1439 nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover. cpe:/o:hp:hp-ux:10 cpe:/o:hp:hp-ux:11 CVE-2000-0077 2000-01-02T00:00:00.000-05:00 2018-05-02T21:29:06.067-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands. cpe:/o:hp:hp-ux:10 cpe:/o:hp:hp-ux:11 CVE-2000-0078 2000-01-02T00:00:00.000-05:00 2018-05-02T21:29:06.147-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command. cpe:/a:w3c:cern_httpd:3.0 CVE-2000-0079 2000-01-18T00:00:00.000-05:00 2008-09-10T15:02:51.430-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 936 The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL. cpe:/o:ibm:aix:4.3.2 CVE-2000-0080 2000-01-10T00:00:00.000-05:00 2016-10-17T22:06:23.977-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000110 2nd attempt: AIX techlibss follows links BID 931 AIX techlibss allows local users to overwrite files via a symlink attack. cpe:/a:microsoft:hotmail CVE-2000-0081 2000-01-10T00:00:00.000-05:00 2008-09-05T16:20:05.707-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. j&#x41;vascript. cpe:/a:microsoft:webtv CVE-2000-0082 2000-01-02T00:00:00.000-05:00 2008-09-05T16:20:05.847-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://net4tv.com/voice/story.cfm?StoryID=1823 MISC http://www.wired.com/news/technology/0,1282,33420,00.html WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML. cpe:/o:hp:hp-ux:10 cpe:/o:hp:hp-ux:11 CVE-2000-0083 2000-04-18T00:00:00.000-04:00 2008-09-10T15:02:52.897-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS HP HPSBUX0001-109 HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges. cpe:/a:globalscape:cuteftp:2.x CVE-2000-0084 2000-01-06T00:00:00.000-05:00 2008-09-10T15:02:52.960-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CuteFTP uses weak encryption to store password information in its tree.dat file. cpe:/a:microsoft:hotmail CVE-2000-0085 2000-01-04T00:00:00.000-05:00 2008-09-10T15:02:53.070-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag. cpe:/a:netopia:timbuktu_pro:2.0 cpe:/a:netopia:timbuktu_pro:3.0 CVE-2000-0086 2000-01-18T00:00:00.000-05:00 2008-09-10T15:02:53.133-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 935 Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing. cpe:/a:netscape:communicator:4.7 cpe:/a:netscape:navigator CVE-2000-0087 2000-01-12T00:00:00.000-05:00 2016-10-17T22:06:25.167-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000113 Misleading sense of security in Netscape XF netscape-mail-notify-plaintext(4385) Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext. cpe:/a:microsoft:office:97:::ja cpe:/a:microsoft:office:97:::ko cpe:/a:microsoft:office:97:::zh cpe:/a:microsoft:office:2000:::ja cpe:/a:microsoft:office:2000:::ko cpe:/a:microsoft:office:2000:::zh cpe:/a:microsoft:office_converter_pack:2000.0 cpe:/a:microsoft:powerpoint:97:::ja cpe:/a:microsoft:powerpoint:97:::ko cpe:/a:microsoft:powerpoint:97:::zh cpe:/a:microsoft:powerpoint:2000:::ja cpe:/a:microsoft:powerpoint:2000:::ko cpe:/a:microsoft:powerpoint:2000:::zh cpe:/a:microsoft:word:97:::ja cpe:/a:microsoft:word:97:::ko cpe:/a:microsoft:word:97:::zh cpe:/a:microsoft:word:98:::ja cpe:/a:microsoft:word:98:::ko cpe:/a:microsoft:word:98:::zh cpe:/a:microsoft:word:2000:::ja cpe:/a:microsoft:word:2000:::ko cpe:/a:microsoft:word:2000:::zh CVE-2000-0088 2000-01-20T00:00:00.000-05:00 2018-10-12T17:29:26.857-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BID 946 MS MS00-002 Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise CVE-2000-0089 2000-02-04T00:00:00.000-05:00 2018-10-12T17:29:27.060-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q249108 BID 947 MS MS00-004 The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability. cpe:/a:vmware:workstation:1.0.1 cpe:/a:vmware:workstation:1.0.2 cpe:/a:vmware:workstation:1.1 cpe:/a:vmware:workstation:1.1.1 cpe:/a:vmware:workstation:1.1.2 CVE-2000-0090 2000-01-17T00:00:00.000-05:00 2008-09-10T15:02:53.447-04:00 3.6 LOCAL LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 943 VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. cpe:/a:inter7:vpopmail:vchkpw_3.4.1 cpe:/a:inter7:vpopmail:vchkpw_3.4.2 cpe:/a:inter7:vpopmail:vchkpw_3.4.3 cpe:/a:inter7:vpopmail:vchkpw_3.4.4 cpe:/a:inter7:vpopmail:vchkpw_3.4.5 cpe:/a:inter7:vpopmail:vchkpw_3.4.6 cpe:/a:inter7:vpopmail:vchkpw_3.4.7 cpe:/a:inter7:vpopmail:vchkpw_3.4.8 cpe:/a:inter7:vpopmail:vchkpw_3.4.9 cpe:/a:inter7:vpopmail:vchkpw_3.4.11 CVE-2000-0091 2000-01-21T00:00:00.000-05:00 2008-09-10T15:02:53.897-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS MISC http://www.inter7.com/vpopmail/ MISC http://www.inter7.com/vpopmail/ChangeLog BID 942 Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password. cpe:/o:freebsd:freebsd:3.4 cpe:/o:netbsd:netbsd:1.4.1::x86 cpe:/o:openbsd:openbsd:2.6 CVE-2000-0092 2000-01-19T00:00:00.000-05:00 2011-03-07T21:02:37.860-05:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:01 BID 939 The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. cpe:/o:redhat:linux:6.1 CVE-2000-0093 2000-01-21T00:00:00.000-05:00 2008-09-10T15:02:54.040-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5. cpe:/o:netbsd:netbsd:1.4.1 CVE-2000-0094 2000-02-16T00:00:00.000-05:00 2018-05-02T21:29:06.240-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NETBSD NetBSD-SA2000-001 BID 940 XF netbsd-procfs(3995) procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr. cpe:/o:hp:hp-ux:10.30 cpe:/o:hp:hp-ux:11.00 CVE-2000-0095 2000-01-24T00:00:00.000-05:00 2008-09-10T15:02:54.180-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 944 HP HPSBUX0001-110 The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier. cpe:/a:qualcomm:qpopper:3.0 cpe:/a:qualcomm:qpopper:3.0beta1 cpe:/a:qualcomm:qpopper:3.0beta2 cpe:/a:qualcomm:qpopper:3.0beta3 cpe:/a:qualcomm:qpopper:3.0beta4 cpe:/a:qualcomm:qpopper:3.0beta5 cpe:/a:qualcomm:qpopper:3.0beta6 cpe:/a:qualcomm:qpopper:3.0beta7 cpe:/a:qualcomm:qpopper:3.0beta8 cpe:/a:qualcomm:qpopper:3.0beta9 cpe:/a:qualcomm:qpopper:3.0beta10 cpe:/a:qualcomm:qpopper:3.0beta11 cpe:/a:qualcomm:qpopper:3.0beta12 cpe:/a:qualcomm:qpopper:3.0beta13 cpe:/a:qualcomm:qpopper:3.0beta14 cpe:/a:qualcomm:qpopper:3.0beta15 cpe:/a:qualcomm:qpopper:3.0beta16 cpe:/a:qualcomm:qpopper:3.0beta17 cpe:/a:qualcomm:qpopper:3.0beta18 cpe:/a:qualcomm:qpopper:3.0beta19 cpe:/a:qualcomm:qpopper:3.0beta20 cpe:/a:qualcomm:qpopper:3.0beta21 cpe:/a:qualcomm:qpopper:3.0beta22 cpe:/a:qualcomm:qpopper:3.0beta23 cpe:/a:qualcomm:qpopper:3.0beta24 cpe:/a:qualcomm:qpopper:3.0beta25 cpe:/a:qualcomm:qpopper:3.0beta26 cpe:/a:qualcomm:qpopper:3.0beta27 cpe:/a:qualcomm:qpopper:3.0beta28 cpe:/a:qualcomm:qpopper:3.0beta29 CVE-2000-0096 2000-01-26T00:00:00.000-05:00 2008-09-10T15:02:54.243-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 948 Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command. cpe:/a:microsoft:index_server:2.0 CVE-2000-0097 2000-01-26T00:00:00.000-05:00 2018-10-12T17:29:27.373-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 950 MS MS00-006 The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. cpe:/a:microsoft:index_server:2.0 CVE-2000-0098 2000-01-26T00:00:00.000-05:00 2018-10-12T17:29:27.623-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MS MS00-006 Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. cpe:/o:sco:unixware:7.0.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1.0 CVE-2000-0099 2000-01-18T00:00:00.000-05:00 2016-10-17T22:06:26.387-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000119 Unixware ppptalk Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument. cpe:/a:microsoft:systems_management_server:2.0 CVE-2000-0100 1999-12-29T00:00:00.000-05:00 2018-10-12T17:29:27.747-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 20000115 Security Vulnerability with SMS 2.0 Remote Control MS MS00-012 The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program. cpe:/a:make-a-store:orderpage CVE-2000-0101 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:54.603-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:salescart:salescart CVE-2000-0102 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:54.663-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:netsmart:smartcart CVE-2000-0103 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:54.743-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:web_express:shoptron:1.2 CVE-2000-0104 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:54.807-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:microsoft:outlook_express:5.0 CVE-2000-0105 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:54.883-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 962 Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client. cpe:/a:easycart:easycart CVE-2000-0106 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:54.947-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/o:debian:debian_linux:2.1 CVE-2000-0107 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:55.007-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS DEBIAN 20000201 BID 958 Linux apcd program allows local attackers to modify arbitrary files via a symlink attack. cpe:/a:intelligent_vending_systems:intellivend CVE-2000-0108 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:55.087-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:comstock:multicsp:4.2 CVE-2000-0109 2000-01-31T00:00:00.000-05:00 2008-09-10T15:02:55.147-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords. cpe:/a:baron_consulting_group:websitetool CVE-2000-0110 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:55.227-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:avt:rightfax:5.2 CVE-2000-0111 2000-01-29T00:00:00.000-05:00 2008-09-10T15:02:55.290-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 953 The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions. cpe:/o:debian:debian_linux:2.0 cpe:/o:debian:debian_linux:2.0:r5 cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.2::pre_potato CVE-2000-0112 2000-02-02T00:00:00.000-05:00 2016-10-17T22:06:27.760-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000202 vulnerability in Linux Debian default boot configuration BID 960 The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation. cpe:/a:sybergen:sygate:2.0 cpe:/a:sybergen:sygate:3.11 CVE-2000-0113 2000-01-27T00:00:00.000-05:00 2016-10-17T22:06:28.963-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000128 SyGate 3.11 Port 7323 / Remote Admin hole BUGTRAQ 20000202 SV: SyGate 3.11 Port 7323 / Remote Admin hole BUGTRAQ 20000203 UPDATE: Sygate 3.11 Port 7323 Telnet Hole BID 952 CONFIRM http://www.sybergen.com/support/fix.htm The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-2000-0114 2000-02-02T00:00:00.000-05:00 2008-09-10T15:02:56.023-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory. cpe:/a:microsoft:internet_information_server CVE-2000-0115 2000-01-21T00:00:00.000-05:00 2008-09-10T15:02:56.087-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page. cpe:/a:checkpoint:firewall-1:3.0 CVE-2000-0116 2000-01-29T00:00:00.000-05:00 2008-09-10T15:02:56.163-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 954 Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag. cpe:/a:sun:cobalt_raq:1.0 cpe:/h:sun:cobalt_raq_2 cpe:/h:sun:cobalt_raq_3i CVE-2000-0117 2000-01-30T00:00:00.000-05:00 2008-09-10T15:02:56.227-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 951 The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root). cpe:/o:redhat:linux:2.0 cpe:/o:redhat:linux:2.1 cpe:/o:redhat:linux:3.0.3 cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::alpha cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:5.2::sparc cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:sun:solaris:::x86 cpe:/o:sun:solaris:1.1.3:u1 cpe:/o:sun:solaris:1.1.4::jl cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 CVE-2000-0118 1999-06-09T00:00:00.000-04:00 2018-10-30T12:26:22.170-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000130 RedHat 6.1 /and others/ PAM The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing. cpe:/a:mcafee:virusscan cpe:/a:symantec:norton_antivirus CVE-2000-0119 1999-12-22T00:00:00.000-05:00 2016-10-17T22:06:31.247-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000130 Bypass Virus Checking The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection. cpe:/a:allaire:spectra:1.0 CVE-2000-0120 2000-01-01T00:00:00.000-05:00 2018-05-02T21:29:06.350-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 955 XF allaire-spectra-ras-access(4025) The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 cpe:/o:microsoft:windows_nt:4.0:sp6 CVE-2000-0121 2000-02-01T00:00:00.000-05:00 2018-10-12T17:29:27.937-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov MSKB Q248399 BID 963 MS MS00-007 The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability. cpe:/a:microsoft:frontpage:98 cpe:/a:microsoft:frontpage:2000 CVE-2000-0122 2000-02-03T00:00:00.000-05:00 2018-10-19T11:29:01.020-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20070603 CERN &#304;mage Map Dispatcher BID 964 XF frontpage-cern-information-disclosure(34719) Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program. cpe:/a:filemaker:filemaker:::pro CVE-2000-0123 2000-02-01T00:00:00.000-05:00 2008-09-10T15:02:56.647-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:surfcontrol:superscout:2.6.1.6 CVE-2000-0124 2000-02-03T00:00:00.000-05:00 2008-09-10T15:02:56.710-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 965 surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions. cpe:/a:wired_community_software:wwwthreads CVE-2000-0125 2000-02-03T00:00:00.000-05:00 2008-09-10T15:02:56.790-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 967 BUGTRAQ 20000203 RFP2K01 - "How I hacked Packetstorm" (wwwthreads advisory) wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 CVE-2000-0126 2000-01-26T00:00:00.000-05:00 2008-09-10T15:02:56.853-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. cpe:/a:progress:webspeed:3.0 CVE-2000-0127 2000-02-03T00:00:00.000-05:00 2008-09-10T15:02:57.727-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS CONFIRM http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412&keywords=security%20Webspeed BID 969 The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll. cpe:/a:daniel_beckham:the_finger_server:0.80_beta cpe:/a:daniel_beckham:the_finger_server:0.81_beta cpe:/a:daniel_beckham:the_finger_server:0.82_beta cpe:/a:daniel_beckham:the_finger_server:0.83_beta CVE-2000-0128 2000-02-04T00:00:00.000-05:00 2008-09-10T15:02:58.023-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CONFIRM http://www.glazed.org/finger/changelog.txt The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0129 2000-02-04T00:00:00.000-05:00 2008-09-10T15:03:04.977-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 CVE-2000-0130 2000-01-27T00:00:00.000-05:00 2016-10-17T22:06:32.793-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SCO SB-00.02a BUGTRAQ 20000127 New SCO patches... Buffer overflow in SCO scohelp program allows remote attackers to execute commands. cpe:/a:jgaa:warftpd:1.66x4s cpe:/a:jgaa:warftpd:1.67.3 CVE-2000-0131 2000-02-01T00:00:00.000-05:00 2016-10-17T22:06:33.950-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000201 war-ftpd 1.6x DoS BID 966 Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. cpe:/a:microsoft:virtual_machine:2000 cpe:/a:microsoft:virtual_machine:3000 CVE-2000-0132 2000-01-31T00:00:00.000-05:00 2008-09-10T15:03:05.290-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 957 Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. cpe:/a:h._nomura:tiny_ftpdaemon:0.52 CVE-2000-0133 2000-02-01T00:00:00.000-05:00 2008-09-10T15:03:05.413-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 961 Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands. cpe:/a:adgrafix_corporation:check_it_out CVE-2000-0134 2000-02-01T00:00:00.000-05:00 2008-09-10T15:03:05.507-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:atretail:atretail CVE-2000-0135 2000-02-01T00:00:00.000-05:00 2008-09-10T15:03:05.570-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:mcmurtrey_whitaker_and_associates:cart32 CVE-2000-0136 2000-02-01T00:00:00.000-05:00 2008-09-10T15:03:05.663-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. cpe:/a:cartit:cartit CVE-2000-0137 2000-02-01T00:00:00.000-05:00 2008-09-10T15:03:05.727-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. CVE-2000-0138 2000-05-02T00:00:00.000-04:00 2016-10-17T22:06:35.107-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000429 Source code to mstream, a DDoS tool BUGTRAQ 20000501 Re: Source code to mstream, a DDoS tool ISS 20000502 "mstream" Distributed Denial of Service Tool A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft. cpe:/a:true_north:internet_anywhere_mail_server:3.1.3 CVE-2000-0139 1999-12-03T00:00:00.000-05:00 2016-10-17T22:06:36.277-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000210 remote DoS on Internet Anywhere Mail Server Ver.3.1.3 BID 982 Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. cpe:/a:true_north:internet_anywhere_mail_server:3.1.3 CVE-2000-0140 2000-02-10T00:00:00.000-05:00 2016-10-17T22:06:37.637-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000210 remote DoS on Internet Anywhere Mail Server Ver.3.1.3 BID 980 Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections. cpe:/a:infopop:ultimate_bulletin_board:5.43 CVE-2000-0141 2000-02-11T00:00:00.000-05:00 2008-09-10T15:03:06.007-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 991 BUGTRAQ 20000225 FW: Important UBB News For Licensed Users BUGTRAQ 20000211 perl-cgi hole in UltimateBB by Infopop Corp. MISC http://www.ultimatebb.com/home/versions.shtml Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field. cpe:/a:netopia:timbuktu_pro:2.0 cpe:/a:netopia:timbuktu_pro:5.2.1 CVE-2000-0142 2000-02-11T00:00:00.000-05:00 2008-09-10T15:03:06.087-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417. cpe:/a:openbsd:openssh:1.2 cpe:/a:openbsd:openssh:1.2.1 cpe:/a:ssh:ssh:1.2.0 cpe:/a:ssh:ssh:1.2.1 cpe:/a:ssh:ssh:1.2.2 cpe:/a:ssh:ssh:1.2.3 cpe:/a:ssh:ssh:1.2.4 cpe:/a:ssh:ssh:1.2.5 cpe:/a:ssh:ssh:1.2.6 cpe:/a:ssh:ssh:1.2.7 cpe:/a:ssh:ssh:1.2.8 cpe:/a:ssh:ssh:1.2.9 cpe:/a:ssh:ssh:1.2.10 cpe:/a:ssh:ssh:1.2.11 cpe:/a:ssh:ssh:1.2.12 cpe:/a:ssh:ssh:1.2.13 cpe:/a:ssh:ssh:1.2.14 cpe:/a:ssh:ssh:1.2.15 cpe:/a:ssh:ssh:1.2.16 cpe:/a:ssh:ssh:1.2.17 cpe:/a:ssh:ssh:1.2.18 cpe:/a:ssh:ssh:1.2.19 cpe:/a:ssh:ssh:1.2.20 cpe:/a:ssh:ssh:1.2.21 cpe:/a:ssh:ssh:1.2.22 cpe:/a:ssh:ssh:1.2.23 cpe:/a:ssh:ssh:1.2.24 cpe:/a:ssh:ssh:1.2.25 cpe:/a:ssh:ssh:1.2.26 cpe:/a:ssh:ssh:1.2.27 CVE-2000-0143 2000-02-11T00:00:00.000-05:00 2008-09-10T15:03:06.147-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP. cpe:/h:axis:700_network_document_server:1.0 cpe:/h:axis:700_network_document_server:1.10 cpe:/h:axis:700_network_document_server:1.11 cpe:/h:axis:700_network_document_server:1.12 cpe:/h:axis:700_network_document_server:1.13 cpe:/h:axis:700_network_document_server:1.14 CVE-2000-0144 2000-02-07T00:00:00.000-05:00 2008-09-10T15:03:06.273-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000207 Infosec.20000207.axis700.a BID 971 Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack. cpe:/o:debian:debian_linux:4.0 CVE-2000-0145 2000-02-05T00:00:00.000-05:00 2008-09-10T15:03:06.383-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions. cpe:/a:novell:groupwise:5.5::enhancement_pack CVE-2000-0146 2000-02-07T00:00:00.000-05:00 2008-09-10T15:03:06.493-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000207 Novell GroupWise 5.5 Enhancement Pack Web Access Denial of Servic e BID 972 The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet. cpe:/o:sco:openserver:5.0.5 CVE-2000-0147 2000-02-08T00:00:00.000-05:00 2008-09-05T16:20:15.737-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SCO SB-00.04a NAI 20000207 SNMPD default writable community string BID 973 snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. cpe:/a:oracle:mysql:3.22.26 cpe:/a:oracle:mysql:3.22.27 cpe:/a:oracle:mysql:3.22.29 cpe:/a:oracle:mysql:3.22.30 cpe:/a:oracle:mysql:3.23.8 cpe:/a:oracle:mysql:3.23.9 cpe:/a:oracle:mysql:3.23.10 CVE-2000-0148 2000-02-08T00:00:00.000-05:00 2019-10-07T12:39:03.520-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000208 Remote access vulnerability in all MySQL server versions BID 975 MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string. cpe:/a:zeus_technologies:zeus_web_server:3.1.1 cpe:/a:zeus_technologies:zeus_web_server:3.1.2 cpe:/a:zeus_technologies:zeus_web_server:3.1.3 cpe:/a:zeus_technologies:zeus_web_server:3.1.4 cpe:/a:zeus_technologies:zeus_web_server:3.1.5 cpe:/a:zeus_technologies:zeus_web_server:3.1.6 cpe:/a:zeus_technologies:zeus_web_server:3.1.7 cpe:/a:zeus_technologies:zeus_web_server:3.1.8 cpe:/a:zeus_technologies:zeus_web_server:3.1.9 cpe:/a:zeus_technologies:zeus_web_server:3.3 cpe:/a:zeus_technologies:zeus_web_server:3.3.1 cpe:/a:zeus_technologies:zeus_web_server:3.3.2 cpe:/a:zeus_technologies:zeus_web_server:3.3.3 cpe:/a:zeus_technologies:zeus_web_server:3.3.4 cpe:/a:zeus_technologies:zeus_web_server:3.3.5 CVE-2000-0149 2000-02-08T00:00:00.000-05:00 2018-05-02T21:29:06.443-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000208 Zeus Web Server: Null Terminated Strings BID 977 XF zeus-server-null-string(3982) Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL. cpe:/a:checkpoint:firewall-1:3.0 cpe:/a:checkpoint:firewall-1:4.0 cpe:/o:cisco:pix_firewall_software:4.1%286%29 cpe:/o:cisco:pix_firewall_software:4.1%286b%29 cpe:/o:cisco:pix_firewall_software:4.2%281%29 cpe:/o:cisco:pix_firewall_software:4.2%282%29 cpe:/o:cisco:pix_firewall_software:4.3 cpe:/o:cisco:pix_firewall_software:4.4%284%29 cpe:/o:cisco:pix_firewall_software:5.0 CVE-2000-0150 2000-02-12T00:00:00.000-05:00 2018-10-30T12:26:17.700-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS CERT-VN VU#328867 BID 979 Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt. cpe:/a:gnu:make:3.77.44 CVE-2000-0151 2000-02-01T00:00:00.000-05:00 2008-09-10T15:03:07.007-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 981 GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. cpe:/a:novell:bordermanager:3.0 cpe:/a:novell:bordermanager:3.5 CVE-2000-0152 2000-03-30T00:00:00.000-05:00 2008-09-10T15:03:07.087-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 976 Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. cpe:/a:microsoft:frontpage cpe:/a:microsoft:personal_web_server:4.0 CVE-2000-0153 1999-03-26T00:00:00.000-05:00 2008-09-10T15:03:07.163-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 989 BUGTRAQ 20000216 Doubledot bug in FrontPage FrontPage Personal Web Server. FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack. cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-2000-0154 2000-02-16T00:00:00.000-05:00 2008-09-10T15:03:07.397-04:00 1.2 LOCAL HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://www.sco.com/security/ BID 988 NAI 20000215 ARCserve symlink vulnerability The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0155 2000-02-18T00:00:00.000-05:00 2008-09-10T00:00:00.000-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 993 BUGTRAQ 20000218 AUTORUN.INF Vulnerability Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 CVE-2000-0156 2000-02-16T00:00:00.000-05:00 2018-10-12T17:29:28.247-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS MS MS00-009 XF ie-image-source-redirect(3996) Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability. cpe:/o:netbsd:netbsd:1.4.1 CVE-2000-0157 2000-02-01T00:00:00.000-05:00 2008-09-10T15:03:07.633-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS NETBSD 1999-012 BID 992 NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. cpe:/o:sco:openserver:5.0 cpe:/o:sco:openserver:5.0.2 cpe:/o:sco:openserver:5.0.4 cpe:/o:sco:openserver:5.0.5 CVE-2000-0158 2000-02-16T00:00:00.000-05:00 2008-09-10T15:03:07.697-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SCO SB-00.06a BID 997 NAI 20000215 Remote Vulnerability in the MMDF SMTP Daemon BUGTRAQ 20000218 MMDF Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. cpe:/o:hp:hp-ux:11.00 CVE-2000-0159 2000-02-17T00:00:00.000-05:00 2008-09-10T15:03:07.773-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS HP HPSBUX0002-111 HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges. cpe:/a:microsoft:ie:4.x cpe:/a:microsoft:ie:5 cpe:/a:microsoft:outlook CVE-2000-0160 2000-02-21T00:00:00.000-05:00 2008-09-10T15:03:07.867-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000221 Microsoft signed software can be install software without prompting users The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft. cpe:/a:microsoft:site_server:3.0 CVE-2000-0161 2000-02-18T00:00:00.000-05:00 2018-10-12T17:29:28.577-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BID 994 MS MS00-010 Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0::windows_98 cpe:/a:microsoft:ie:4.0::windows_nt cpe:/a:microsoft:ie:4.1::windows_95 cpe:/a:microsoft:ie:4.1::windows_nt_4.0 cpe:/a:microsoft:ie:5::windows_nt_4.0 cpe:/a:microsoft:ie:5.0::windows_95 cpe:/a:microsoft:ie:5.0::windows_98 cpe:/a:microsoft:visual_studio:6.0 CVE-2000-0162 2000-02-18T00:00:00.000-05:00 2018-10-12T17:29:28.763-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS MS MS00-011 The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 CVE-2000-0163 2000-02-21T00:00:00.000-05:00 2008-09-10T15:03:08.197-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 996 FREEBSD FreeBSD-SA-00:03 asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. cpe:/a:sun:solaris_isp_server:2.0 CVE-2000-0164 2000-02-20T00:00:00.000-05:00 2008-09-10T15:03:08.257-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1004 BUGTRAQ 20000220 Sun Internet Mail Server The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords. cpe:/a:etl:delegate:5.9 cpe:/a:etl:delegate:6.0 CVE-2000-0165 1999-11-13T00:00:00.000-05:00 2018-05-02T21:29:06.520-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS CIAC K-023 FREEBSD FreeBSD-SA-00:04 XF delegate-proxy-bo(4105) The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands. cpe:/a:interaccess:interaccess_telnetd_server:4.0 CVE-2000-0166 2000-02-21T00:00:00.000-05:00 2016-11-18T21:59:01.947-05:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000223 Pragma Systems response to USSRLabs report BID 995 BUGTRAQ 20000221 Local / Remote Exploiteable Buffer Overflow Vulnerability in InterAccess TelnetD Server 4.0 for Windows NT Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name. cpe:/a:microsoft:internet_information_server:4.0 CVE-2000-0167 2000-02-15T00:00:00.000-05:00 2008-09-10T15:03:08.477-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000215 Crashing Inetinfo.exe by using a longfilename in the \mailroot\pickup directory IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se CVE-2000-0168 2000-03-04T00:00:00.000-05:00 2008-09-10T15:03:08.557-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1043 MS MS00-017 BUGTRAQ 20000306 con\con is a old thing (anyway is cool) Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability. cpe:/a:oracle:application_server:4.0 CVE-2000-0169 2000-03-15T00:00:00.000-05:00 2008-09-10T15:03:08.633-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS NTBUGTRAQ 20000314 Oracle Web Listener 4.0.x BID 1053 Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. cpe:/o:redhat:linux:4.0 cpe:/o:redhat:linux:4.1 cpe:/o:redhat:linux:4.2 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2 cpe:/o:redhat:linux:6.0 cpe:/o:redhat:linux:6.2 cpe:/o:turbolinux:turbolinux:3.5b2 cpe:/o:turbolinux:turbolinux:4.2 cpe:/o:turbolinux:turbolinux:4.4 CVE-2000-0170 2000-02-26T00:00:00.000-05:00 2008-09-10T15:03:08.697-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1011 Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. cpe:/a:at_computing:atsar_linux:1.4 CVE-2000-0171 2000-03-11T00:00:00.000-05:00 2008-09-10T15:03:08.757-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000311 TESO advisory -- atsadc BID 1048 atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges. cpe:/a:matt_kimball_and_roger_wolff:mtr:0.28 cpe:/a:matt_kimball_and_roger_wolff:mtr:0.41 cpe:/o:turbolinux:turbolinux:3.5b2 cpe:/o:turbolinux:turbolinux:4.2 cpe:/o:turbolinux:turbolinux:4.4 cpe:/o:turbolinux:turbolinux:6.0.2 CVE-2000-0172 2000-03-03T00:00:00.000-05:00 2008-09-10T15:03:08.837-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1038 The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-2000-0173 2000-03-10T00:00:00.000-05:00 2008-09-10T15:03:08.897-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SCO SB-00.08a Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. cpe:/a:sun:staroffice:5.1 CVE-2000-0174 2000-03-09T00:00:00.000-05:00 2008-09-10T15:03:09.007-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000308 [SAFER 000309.EXP.1.4] StarScheduler (StarOffice) vulnerabilities BID 1040 StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:sun:staroffice:5.1 CVE-2000-0175 2000-03-09T00:00:00.000-05:00 2008-09-10T15:03:09.087-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000308 [SAFER 000309.EXP.1.4] StarScheduler (StarOffice) vulnerabilities BID 1039 Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. cpe:/a:cat_soft:serv-u:2.4 cpe:/a:cat_soft:serv-u:2.5 cpe:/a:cat_soft:serv-u:2.5a cpe:/a:cat_soft:serv-u:2.5b cpe:/a:cat_soft:serv-u:2.5c cpe:/a:cat_soft:serv-u:2.5d CVE-2000-0176 2000-02-29T00:00:00.000-05:00 2008-09-10T15:03:09.180-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000228 Serv-U FTP-Server v2.4a showing real path BID 1016 The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist. cpe:/a:dnstools_software:dnstools:1.0.8 CVE-2000-0177 2000-03-02T00:00:00.000-05:00 2008-09-10T15:03:09.257-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000302 DNSTools v1.08 has no input validation BID 1028 DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters. cpe:/a:foundrynet:serveriron:5.1.10t12 cpe:/a:foundrynet:serveriron:6.0 CVE-2000-0178 2000-02-28T00:00:00.000-05:00 2008-09-10T15:03:09.633-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS MISC http://www.foundrynet.com/bugTraq.html BID 1017 ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions. cpe:/a:hp:openview_omniback_ii:2.55 cpe:/a:hp:openview_omniback_ii:3.0 cpe:/a:hp:openview_omniback_ii:3.1 CVE-2000-0179 2000-02-28T00:00:00.000-05:00 2008-09-10T15:03:14.960-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000228 HP Omniback remote DoS BID 1015 HP HPSBUX0006-115 HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555. cpe:/a:generation_terrorists_designs_and_concepts:sojourn:2.0 CVE-2000-0180 2000-03-14T00:00:00.000-05:00 2017-10-09T21:29:07.107-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 20000313 SOJOURN Search engine exposes files BID 1052 XF sojourn-file-read(4197) Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:checkpoint:firewall-1:3.0 cpe:/a:checkpoint:firewall-1:4.0 cpe:/a:checkpoint:firewall-1:4.1 CVE-2000-0181 2000-03-11T00:00:00.000-05:00 2008-09-10T15:03:15.103-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000311 Our old friend Firewall-1 BID 1054 Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection. cpe:/a:iplanet:iplanet_web_server:4.1_enterprise CVE-2000-0182 2000-02-23T00:00:00.000-05:00 2008-09-10T15:03:15.163-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic. cpe:/a:michael_sandrof:ircii:4.4.7 CVE-2000-0183 2000-03-10T00:00:00.000-05:00 2008-09-10T15:03:15.570-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000310 Fwd: ircii-4.4 buffer overflow REDHAT RHSA-2000:008 BID 1046 Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability. cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::i386 CVE-2000-0184 2000-03-09T00:00:00.000-05:00 2008-09-10T15:03:15.647-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000309 BID 1037 Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. cpe:/a:realnetworks:realserver:5.0 cpe:/a:realnetworks:realserver:7.0 cpe:/a:realnetworks:realserver_g2:1.0 CVE-2000-0185 2000-03-08T00:00:00.000-05:00 2008-09-10T15:03:15.743-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000308 RealServer exposes internal IP addresses BID 1049 RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private. cpe:/o:freebsd:freebsd:3.4 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.2::i386 cpe:/o:turbolinux:turbolinux:4.2 cpe:/o:turbolinux:turbolinux:4.4 cpe:/o:turbolinux:turbolinux:6.0.2 CVE-2000-0186 2000-02-28T00:00:00.000-05:00 2008-09-10T15:03:15.820-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS REDHAT RHSA-2000:100 BID 1020 Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. cpe:/a:alex_heiphetz_group:ezshopper:3.0 CVE-2000-0187 2000-02-27T00:00:00.000-05:00 2008-09-10T15:03:15.883-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000227 EZ Shopper 3.0 shopping cart CGI remote command execution BID 1014 EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters. cpe:/a:alex_heiphetz_group:ezshopper:3.0 CVE-2000-0188 2000-02-27T00:00:00.000-05:00 2008-09-10T15:03:15.977-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000227 EZ Shopper 3.0 shopping cart CGI remote command execution BID 1014 EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters. cpe:/a:allaire:coldfusion_server:4.0 cpe:/a:allaire:coldfusion_server:4.0.1 cpe:/a:allaire:coldfusion_server:4.5 CVE-2000-0189 2000-03-01T00:00:00.000-05:00 2008-09-10T15:03:16.103-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1021 ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files. cpe:/a:aol:instant_messenger:3.5 CVE-2000-0190 2000-03-02T00:00:00.000-05:00 2008-09-10T15:03:16.197-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000303 Aol Instant Messenger DoS vulnerability AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value. cpe:/h:axis:storpoint_cd CVE-2000-0191 2000-02-29T00:00:00.000-05:00 2008-09-10T15:03:16.290-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1025 BUGTRAQ 20000229 Infosec.20000229.axisstorpointcd.a Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack. cpe:/o:caldera:openlinux:2.3 CVE-2000-0192 2000-03-05T00:00:00.000-05:00 2008-09-10T15:03:16.383-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000304 OpenLinux 2.3: rpm_query BID 1036 The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system. cpe:/o:corel:linux:1.0 CVE-2000-0193 2000-03-02T00:00:00.000-05:00 2008-09-10T15:03:16.460-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1030 BUGTRAQ 20000302 Corel Linux 1.0 dosemu default configuration: Local root vuln The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges. cpe:/o:corel:linux:1.0 CVE-2000-0194 2000-02-24T00:00:00.000-05:00 2008-09-10T15:03:16.557-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000224 Corel Linux 1.0 local root compromise BID 1007 buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. cpe:/o:corel:linux:1.0 CVE-2000-0195 2000-02-24T00:00:00.000-05:00 2008-09-10T15:03:16.663-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000224 Corel Linux 1.0 local root compromise BID 1008 setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. cpe:/a:nmh:nmh:1.0.2 cpe:/o:redhat:linux:5.2::alpha cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:5.2::sparc cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:turbolinux:turbolinux:3.5b2 cpe:/o:turbolinux:turbolinux:4.2 cpe:/o:turbolinux:turbolinux:4.4 cpe:/o:turbolinux:turbolinux:6.0.2 CVE-2000-0196 2000-02-28T00:00:00.000-05:00 2008-09-10T15:03:16.743-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS REDHAT RHSA-2000:006 BID 1018 Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0197 2000-02-14T00:00:00.000-05:00 2008-09-10T15:03:16.820-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS NTBUGTRAQ 20000313 AT Jobs - Denial of serice/Privilege Elevation BID 1050 The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file. cpe:/a:atrium_software:mercur_imap4_server:3.20.01 cpe:/a:atrium_software:mercur_mailserver:3.2 cpe:/a:atrium_software:mercur_pop3_server:3.20.01 CVE-2000-0198 2000-03-15T00:00:00.000-05:00 2008-09-10T15:03:16.897-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000314 Local / Remote Multiples Remote DoS Attacks in MERCUR v3.2* for Windows 98/NT Vulnerability NTBUGTRAQ 20000314 Local / Remote Multiples Remote DoS Attacks in MERCUR v3.2* for Windows 98/NT Vulnerability BID 1051 Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service. cpe:/a:microsoft:sql_server:7.0 CVE-2000-0199 2000-03-14T00:00:00.000-05:00 2008-09-10T15:03:16.960-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1055 When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password. cpe:/a:microsoft:clip_art:1.0 cpe:/a:microsoft:greetings:2000 cpe:/a:microsoft:home_publishing:2000 CVE-2000-0200 2000-03-06T00:00:00.000-05:00 2018-10-12T17:29:28.903-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1034 MS MS00-015 Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" vulnerability. cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 CVE-2000-0201 2000-03-01T00:00:00.000-05:00 2008-09-10T15:03:17.117-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 1033 The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking. cpe:/a:microsoft:data_engine:1.0 cpe:/a:microsoft:sql_server:7.0 CVE-2000-0202 2000-03-08T00:00:00.000-05:00 2018-10-12T17:29:29.107-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1041 MS MS00-014 Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. cpe:/a:trend_micro:officescan:3.5 CVE-2000-0203 2000-02-28T00:00:00.000-05:00 2008-09-10T15:03:17.617-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://www.antivirus.com/download/ofce_patch_35.htm BID 1013 BUGTRAQ 20000228 Re: TrendMicro OfficeScan tmlisten.exe DoS BUGTRAQ 20000315 Trend Micro release patch for "OfficeScan DoS & Message Replay" V ulnerabilies The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345. cpe:/a:trend_micro:officescan:3.5 CVE-2000-0204 2000-02-28T00:00:00.000-05:00 2008-09-10T15:03:17.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000226 DOS in Trendmicro OfficeScan MISC http://www.antivirus.com/download/ofce_patch_35.htm BID 1013 BUGTRAQ 20000315 Trend Micro release patch for "OfficeScan DoS & Message Replay" V ulnerabilies The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%. cpe:/a:trend_micro:officescan:3.5 CVE-2000-0205 2000-03-03T00:00:00.000-05:00 2008-09-10T15:03:17.757-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000303 TrendMicro OfficeScan, numerous security holes, remote files modification. MISC http://www.antivirus.com/download/ofce_patch_35.htm BID 1013 BUGTRAQ 20000315 Trend Micro release patch for "OfficeScan DoS & Message Replay" V ulnerabilies Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients. cpe:/a:oracle:oracle8i:8.1.5 CVE-2000-0206 2000-03-05T00:00:00.000-05:00 2008-09-10T15:03:18.117-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000305 Oracle installer problem BID 1035 The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges. cpe:/a:sgi:infosearch:1.0 cpe:/o:sgi:irix:6.5 cpe:/o:sgi:irix:6.5.1 cpe:/o:sgi:irix:6.5.2m cpe:/o:sgi:irix:6.5.3 cpe:/o:sgi:irix:6.5.3f cpe:/o:sgi:irix:6.5.3m cpe:/o:sgi:irix:6.5.4 cpe:/o:sgi:irix:6.5.6 cpe:/o:sgi:irix:6.5.7 CVE-2000-0207 2000-03-01T00:00:00.000-05:00 2008-09-10T15:03:18.633-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 20000501-01-P BID 1031 SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters. cpe:/a:htdig:htdig:3.1.1 cpe:/a:htdig:htdig:3.1.2 cpe:/a:htdig:htdig:3.1.3 cpe:/a:htdig:htdig:3.1.4 cpe:/a:htdig:htdig:3.2.0b1 CVE-2000-0208 2000-02-29T00:00:00.000-05:00 2008-09-10T15:03:18.710-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1026 The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch. cpe:/a:university_of_kansas:lynx:2.7 cpe:/a:university_of_kansas:lynx:2.8 cpe:/a:university_of_kansas:lynx:2.8.3_dev22 CVE-2000-0209 2000-02-27T00:00:00.000-05:00 2008-09-10T15:03:18.790-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1012 Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page. cpe:/a:sun:workshop:5.0 CVE-2000-0210 2000-02-21T00:00:00.000-05:00 2008-09-10T15:03:18.853-04:00 1.2 LOCAL HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 998 The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. cpe:/a:microsoft:windows_media_services:4.0 cpe:/a:microsoft:windows_media_services:4.1 CVE-2000-0211 2000-02-23T00:00:00.000-05:00 2018-10-12T17:29:29.293-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1000 MS MS00-013 The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability. cpe:/a:pragma_systems:interaccess_telnetd_server:4.0 CVE-2000-0212 2000-02-24T00:00:00.000-05:00 2018-05-02T21:29:06.617-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1001 XF interaccess-telnet-dos(4033) InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information. cpe:/a:sambar:sambar_server:4.2:beta7 CVE-2000-0213 2000-02-23T00:00:00.000-05:00 2008-09-10T15:03:19.477-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://www.sambar.com/session/highlight?url=/syshelp/history.htm&words=security+&color=red BID 1002 BUGTRAQ 20000223 Sambar Server alert! The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters. cpe:/a:ftpx:ftp_explorer:1.00.10 CVE-2000-0214 2000-02-24T00:00:00.000-05:00 2008-09-10T15:03:19.557-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 1003 BUGTRAQ 20000224 How the password could be recover using FTP Explorer's registry! FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites. cpe:/o:sco:unixware:7.0 cpe:/o:sco:unixware:7.0.1 cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-2000-0215 2000-02-08T00:00:00.000-05:00 2008-09-10T15:03:19.617-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1019 Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges. cpe:/a:microsoft:exchange_server cpe:/a:microsoft:outlook cpe:/a:microsoft:windows_messaging CVE-2000-0216 2000-02-29T00:00:00.000-05:00 2008-09-10T15:03:19.710-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000229 mailbombing DoS easily exploitable against mail systems using MS mail clients. Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list. cpe:/a:openbsd:openssh:1.2 cpe:/a:ssh:ssh:1.2.0 cpe:/a:ssh:ssh:1.2.1 cpe:/a:ssh:ssh:1.2.2 cpe:/a:ssh:ssh:1.2.3 cpe:/a:ssh:ssh:1.2.4 cpe:/a:ssh:ssh:1.2.5 cpe:/a:ssh:ssh:1.2.6 cpe:/a:ssh:ssh:1.2.7 cpe:/a:ssh:ssh:1.2.8 cpe:/a:ssh:ssh:1.2.9 cpe:/a:ssh:ssh:1.2.10 cpe:/a:ssh:ssh:1.2.11 cpe:/a:ssh:ssh:1.2.12 cpe:/a:ssh:ssh:1.2.13 cpe:/a:ssh:ssh:1.2.14 cpe:/a:ssh:ssh:1.2.15 cpe:/a:ssh:ssh:1.2.16 cpe:/a:ssh:ssh:1.2.17 cpe:/a:ssh:ssh:1.2.18 cpe:/a:ssh:ssh:1.2.19 cpe:/a:ssh:ssh:1.2.20 cpe:/a:ssh:ssh:1.2.21 cpe:/a:ssh:ssh:1.2.22 cpe:/a:ssh:ssh:1.2.23 cpe:/a:ssh:ssh:1.2.24 cpe:/a:ssh:ssh:1.2.25 cpe:/a:ssh:ssh:1.2.26 cpe:/a:ssh:ssh:1.2.27 cpe:/a:ssh:ssh:1.2.28 cpe:/a:ssh:ssh:1.2.29 cpe:/a:ssh:ssh:1.2.30 cpe:/a:ssh:ssh:1.2.31 cpe:/a:ssh:ssh2:2.0 cpe:/a:ssh:ssh2:2.0.1 cpe:/a:ssh:ssh2:2.0.2 cpe:/a:ssh:ssh2:2.0.3 cpe:/a:ssh:ssh2:2.0.4 cpe:/a:ssh:ssh2:2.0.5 cpe:/a:ssh:ssh2:2.0.6 cpe:/a:ssh:ssh2:2.0.7 cpe:/a:ssh:ssh2:2.0.8 cpe:/a:ssh:ssh2:2.0.9 cpe:/a:ssh:ssh2:2.0.10 cpe:/a:ssh:ssh2:2.0.11 cpe:/a:ssh:ssh2:2.0.12 CVE-2000-0217 2000-02-24T00:00:00.000-05:00 2008-09-10T15:03:19.790-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 1006 The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. cpe:/o:caldera:openlinux:2.3 cpe:/o:suse:suse_linux CVE-2000-0218 2000-02-03T00:00:00.000-05:00 2008-09-10T15:03:19.853-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-2000-002.0 Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname. cpe:/o:redhat:linux:6.0::i386 CVE-2000-0219 2000-02-23T00:00:00.000-05:00 2015-11-04T12:31:57.590-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2015-11-04T11:30:15.107-05:00 ALLOWS_ADMIN_ACCESS BID 1005 BUGTRAQ 20000223 redhat 6.0: single user boot security hole CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10053 Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt. cpe:/a:zonelabs:zonealarm:2.0.26 CVE-2000-0220 2000-02-24T00:00:00.000-05:00 2008-09-10T15:03:20.023-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event. cpe:/h:nortel:nautica_marlin CVE-2000-0221 2000-02-25T00:00:00.000-05:00 2008-09-10T15:03:20.087-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1009 The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port. cpe:/o:microsoft:windows_2000 CVE-2000-0222 2000-02-15T00:00:00.000-05:00 2019-04-30T10:27:13.473-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 990 BUGTRAQ 20000215 Windows 2000 installation process weakness The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs. cpe:/a:sam_hawker:wmcdplay:1.0_beta2 CVE-2000-0223 2000-03-10T00:00:00.000-05:00 2008-09-10T15:03:20.243-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000311 TESO advisory -- wmcdplay BID 1047 Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter. cpe:/o:sco:unixware:7.1 cpe:/o:sco:unixware:7.1.1 CVE-2000-0224 2000-02-15T00:00:00.000-05:00 2008-09-10T15:03:20.307-04:00 1.2 LOCAL HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NAI 20000215 ARCserve symlink vulnerability ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. cpe:/a:deti_fliegl:poc32:2.05 CVE-2000-0225 2000-03-07T00:00:00.000-05:00 2008-09-10T15:03:20.383-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1032 BUGTRAQ 20000303 Pocsag remote access to client can't be disabled. The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled. cpe:/a:microsoft:internet_information_server:4.0 CVE-2000-0226 2000-03-20T00:00:00.000-05:00 2018-10-12T17:29:29.497-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1066 MS MS00-018 IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability." cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.3.99:pre2 CVE-2000-0227 2000-03-23T00:00:00.000-05:00 2017-12-19T21:29:00.317-05:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000323 Local Denial-of-Service attack against Linux BUGTRAQ 20000328 Re: Local Denial-of-Service attack against Linux BID 1072 XF linux-domain-socket-dos(4186) The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets. cpe:/a:microsoft:windows_media_rights_manager:4.0 cpe:/a:microsoft:windows_media_rights_manager:4.1 CVE-2000-0228 2000-03-17T00:00:00.000-05:00 2018-10-12T17:29:29.687-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1058 MS MS00-016 Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" Vulnerability. cpe:/o:alessandro_rubini:gpm:1.18.1 cpe:/o:alessandro_rubini:gpm:1.19 cpe:/o:debian:debian_linux:2.0 cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.2::pre_potato cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.2::i386 cpe:/o:suse:suse_linux:5.3 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 CVE-2000-0229 2000-03-22T00:00:00.000-05:00 2008-09-10T15:03:40.663-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000322 gpm-root SUSE 20000405 Security hole in gpm < 1.18.1 REDHAT RHSA-2000:009 REDHAT RHSA-2000:045 BID 1069 gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root. cpe:/o:halloween:halloween_linux:4.0 cpe:/o:redhat:linux:6.1 cpe:/o:redhat:linux:6.2 CVE-2000-0230 2000-03-13T00:00:00.000-05:00 2008-09-10T15:03:40.757-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000316 TESO & C-Skills development advisory -- imwheel REDHAT RHSA-2000:016 BID 1060 Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. cpe:/o:halloween:halloween_linux:4.0 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 CVE-2000-0231 2000-03-16T00:00:00.000-05:00 2008-09-10T15:03:40.837-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000316 "TESO & C-Skills development advisory -- kreatecd" at: BID 1061 Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges. cpe:/a:microsoft:terminal_server cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0232 2000-03-30T00:00:00.000-05:00 2018-10-12T17:29:29.887-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000330 Remote DoS Attack in Windows 2000/NT 4.0 TCP/IP Print Request Server Vulnerability BID 1082 MS MS00-021 Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. cpe:/a:suse:suse_linux_imap_server:1.0 CVE-2000-0233 2000-03-15T00:00:00.000-05:00 2008-09-10T15:03:40.977-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUSE 20000327 Security hole in SuSE Linux IMAP Server SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges. cpe:/h:sun:cobalt_raq_2 cpe:/h:sun:cobalt_raq_3i CVE-2000-0234 2000-03-31T00:00:00.000-05:00 2008-09-10T15:03:41.057-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1083 CONFIRM http://www.securityfocus.com/templates/advisory.html?id=2150 BUGTRAQ 20000330 Cobalt apache configuration exposes .htaccess The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 CVE-2000-0235 2000-03-27T00:00:00.000-05:00 2011-03-07T21:02:49.423-05:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:10 BID 1070 Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. cpe:/a:netscape:enterprise_server:3.0 cpe:/a:netscape:enterprise_server:3.5.1 cpe:/a:netscape:enterprise_server:3.6 CVE-2000-0236 2000-03-17T00:00:00.000-05:00 2008-09-10T15:03:41.197-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1063 BUGTRAQ 20000317 [SAFER 000317.EXP.1.5] Netscape Enterprise Server and '?wp' tags Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump. cpe:/a:netscape:enterprise_server:3.5 cpe:/a:netscape:enterprise_server:3.6 CVE-2000-0237 2000-03-11T00:00:00.000-05:00 2008-09-10T15:03:41.647-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1075 MISC http://zsh.stupidphat.com/advisory.cgi?000311-1 Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories. cpe:/a:symantec:norton_antivirus:1.0::internet_email_gateways CVE-2000-0238 2000-03-17T00:00:00.000-05:00 2008-09-10T15:03:42.913-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1064 BUGTRAQ 20000317 DoS with NAVIEG Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL. cpe:/a:atrium_software:mercur_imap4_server:3.20.01 cpe:/a:atrium_software:mercur_mailserver:3.2 cpe:/a:atrium_software:mercur_pop3_server:3.20.01 CVE-2000-0239 2000-03-15T00:00:00.000-05:00 2016-10-17T22:06:39.763-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000315 Local / Remote DoS Attack in MERCUR WebView WebMail-Client 1.0 BID 1056 BUGTRAQ 20000315 Local / Remote DoS Attack in MERCUR WebView WebMail-Client 1.0 Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request. cpe:/a:vqsoft:vqserver:1.9.9 CVE-2000-0240 2000-03-21T00:00:00.000-05:00 2008-09-10T15:03:43.617-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1067 BUGTRAQ 20000321 vqserver /........../ CONFIRM http://www.vqsoft.com/vq/server/faqs/dotdotbug.html vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack. cpe:/a:vqsoft:vqserver:1.9.9 CVE-2000-0241 2000-03-21T00:00:00.000-05:00 2008-09-10T15:03:43.697-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1068 BUGTRAQ 20000321 vqserver /........../ vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges. cpe:/a:geocel:windmail:3.0 CVE-2000-0242 2000-03-25T00:00:00.000-05:00 2008-09-10T15:03:43.757-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1073 BUGTRAQ 20000325 Windmail allow web user get any file WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters. cpe:/a:analogx:simpleserver_www:1.0.3 CVE-2000-0243 2000-03-25T00:00:00.000-05:00 2017-10-09T21:29:07.187-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MISC http://www.analogx.com/contents/download/network/sswww.htm BID 1076 BUGTRAQ 20000324 AnalogX SimpleServer 1.03 Remote Crash" at: XF simpleserver-exception-dos(4189) AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin. cpe:/a:citrix:metaframe:1.0::unix cpe:/a:citrix:metaframe:1.8::windows_2000 cpe:/a:citrix:metaframe:1.8::windows_nt_4.0_tse cpe:/a:citrix:winframe:3.5_1.8_for_windows_nt CVE-2000-0244 2000-03-29T00:00:00.000-05:00 2008-09-10T15:03:44.710-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1077 BUGTRAQ 20000328 Citrix ICA Basic Encryption The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication. cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 CVE-2000-0245 2000-03-27T00:00:00.000-05:00 2017-10-09T21:29:07.247-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 20000303-01-PX CIAC K-030 BID 1079 BUGTRAQ 20000328 Objectserver vulnerability XF irix-objectserver-create-accounts(4206) Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts. cpe:/a:microsoft:commercial_internet_system:2.0 cpe:/a:microsoft:commercial_internet_system:2.5 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 cpe:/a:microsoft:proxy_server:2.0 cpe:/a:microsoft:site_server:3.0 cpe:/a:microsoft:site_server_commerce:3.0 CVE-2000-0246 2000-03-30T00:00:00.000-05:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q249599 BID 1081 MS MS00-019 IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. cpe:/a:gnqs:gnqs:3.50.6 cpe:/a:gnqs:gnqs:3.50.7 CVE-2000-0247 2000-03-22T00:00:00.000-05:00 2017-10-09T21:29:07.327-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:13 BUGTRAQ 20000322 Local root compromise in GNQS 3.50.6 and 3.50.7 MISC http://ftp.gnqs.org/pub/gnqs/source/by-version-number/v3.50/Generic-NQS-3.50.8-ChangeLog.txt BID 1842 XF generic-nqs-local-root(4306) Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges. cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0248 2000-04-24T00:00:00.000-04:00 2008-09-10T15:03:45.853-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS ISS 20000424 Backdoor Password in Red Hat Linux Virtual Server Package The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands. cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.1 cpe:/o:ibm:aix:4.3.2 CVE-2000-0249 2000-04-26T00:00:00.000-04:00 2008-09-10T15:03:45.930-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1152 ISS 20000426 Insecure file handling in IBM AIX frcactrl program The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. cpe:/a:qnx:qnx:4.25a CVE-2000-0250 2000-04-14T00:00:00.000-04:00 2008-09-10T15:03:45.993-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000414 qnx crypt comprimised BID 1114 The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. cpe:/o:hp:hp-ux:11.4 cpe:/o:hp:vvos:3.50 CVE-2000-0251 2000-04-06T00:00:00.000-04:00 2008-09-10T15:03:46.070-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX0004-112 BID 1090 HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. cpe:/a:craig_dansie:dansie_shopping_cart:3.0.4 CVE-2000-0252 2000-04-11T00:00:00.000-04:00 2017-10-09T21:29:07.390-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000411 Back Door in Commercial Shopping Cart BID 1115 XF dansie-shell-metacharacters(4975) The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable. cpe:/a:craig_dansie:dansie_shopping_cart:3.0.4 CVE-2000-0253 2000-04-11T00:00:00.000-04:00 2018-05-02T21:29:06.707-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BID 1115 XF shopping-cart-form-tampering(4621) The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields. cpe:/a:craig_dansie:dansie_shopping_cart:3.0.4 CVE-2000-0254 2000-04-14T00:00:00.000-04:00 2018-05-02T21:29:06.803-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1115 XF dansie-form-variables(4954) The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables. cpe:/h:nbase-xyplex:edgeblaster:1.0 CVE-2000-0255 2000-04-05T00:00:00.000-04:00 2008-09-10T15:03:46.337-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000405 SilverBack Security Advisory: Nbase-Xyplex DoS BID 1091 The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program. cpe:/a:microsoft:frontpage cpe:/a:microsoft:personal_web_server:2.0 cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0256 2000-04-19T00:00:00.000-04:00 2018-10-19T11:29:01.270-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 20070603 CERN &#304;mage Map Dispatcher BID 1117 MS MS00-028 XF frontpage-cern-bo(34720) Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability. cpe:/o:novell:netware:5.1 CVE-2000-0257 2000-04-19T00:00:00.000-04:00 2008-09-10T15:03:46.493-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 1118 BUGTRAQ 20000418 Novell Netware 5.1 (server 5.00h, Dec 11, 1999)... Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL. cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0258 2000-04-12T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1101 MS MS00-023 IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability. cpe:/a:microsoft:terminal_server cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0259 2000-04-12T00:00:00.000-04:00 2018-10-12T17:29:31.060-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BID 1105 MS MS00-024 The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users. cpe:/a:microsoft:frontpage cpe:/a:microsoft:visual_interdev:1.0 CVE-2000-0260 2000-04-14T00:00:00.000-04:00 2018-10-12T17:29:31.247-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1109 MS MS00-025 Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability. cpe:/a:avm:ken:1.3.10 cpe:/a:avm:ken:1.4.30 CVE-2000-0261 2000-04-12T00:00:00.000-04:00 2008-09-10T15:03:46.853-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000415 (no subject) BID 1103 BUGTRAQ 20000418 AVM's Statement The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:avm:ken:1.3.10 cpe:/a:avm:ken:1.4.30 CVE-2000-0262 2000-04-12T00:00:00.000-04:00 2008-09-10T15:03:46.930-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000415 (no subject) BID 1103 BUGTRAQ 20000418 AVM's Statement The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0263 2000-04-16T00:00:00.000-04:00 2008-09-10T15:03:47.007-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000416 xfs BID 1111 The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. cpe:/a:panda:panda_security:3.0 CVE-2000-0264 2000-04-17T00:00:00.000-04:00 2008-09-10T15:03:47.587-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip BID 1119 BUGTRAQ 20000417 bugs in Panda Security 3.0 Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods. cpe:/a:panda:panda_security:3.0 CVE-2000-0265 2000-04-17T00:00:00.000-04:00 2008-09-10T15:03:47.663-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS CONFIRM http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip BID 1119 BUGTRAQ 20000417 bugs in Panda Security 3.0 Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet. cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 CVE-2000-0266 2000-04-18T00:00:00.000-04:00 2008-09-10T15:03:47.727-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1121 BUGTRAQ 20000418 IE 5 security vulnerablity - circumventing Cross-frame security policy using Java/JavaScript (and disabling Active Scripting is not that easy) Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL. cpe:/o:cisco:catos:5.4%281%29 CVE-2000-0267 2000-04-20T00:00:00.000-04:00 2008-09-10T15:03:47.807-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS CISCO 20000419 Cisco Catalyst Enable Password Bypass Vulnerability BID 1122 Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. cpe:/a:cisco:accesspath:ls-3 cpe:/a:cisco:accesspath:ts-3 cpe:/a:cisco:accesspath:vs-3 cpe:/a:cisco:as5200 cpe:/a:cisco:as5300 cpe:/a:cisco:as5800 cpe:/a:cisco:system_controller_3640 cpe:/h:cisco:3660_router cpe:/h:cisco:7100_router cpe:/h:cisco:7200_router cpe:/h:cisco:7500_router cpe:/h:cisco:ubr7200 cpe:/h:cisco:voice_gateway_as5800 cpe:/o:cisco:ios:11.3aa cpe:/o:cisco:ios:12.0%282%29 cpe:/o:cisco:ios:12.0%282%29xc cpe:/o:cisco:ios:12.0%282%29xd cpe:/o:cisco:ios:12.0%282%29xf cpe:/o:cisco:ios:12.0%282%29xg cpe:/o:cisco:ios:12.0%283%29t2 cpe:/o:cisco:ios:12.0%284%29 cpe:/o:cisco:ios:12.0%284%29s cpe:/o:cisco:ios:12.0%284%29t cpe:/o:cisco:ios:12.0%285%29 cpe:/o:cisco:ios:12.0%286%29 cpe:/o:cisco:ios:12.0%287%29t CVE-2000-0268 2000-04-20T00:00:00.000-04:00 2008-09-10T15:03:47.867-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CISCO 20000420 Cisco IOS Software TELNET Option Handling Vulnerability BID 1123 Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot. cpe:/a:gnu:emacs:20.0 cpe:/a:gnu:emacs:20.1 cpe:/a:gnu:emacs:20.2 cpe:/a:gnu:emacs:20.3 cpe:/a:gnu:emacs:20.4 cpe:/a:gnu:emacs:20.5 cpe:/a:gnu:emacs:20.6 CVE-2000-0269 2000-04-18T00:00:00.000-04:00 2008-09-10T15:03:47.930-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1125 BUGTRAQ 20000418 RUS-CERT Advisory 200004-01: GNU Emacs 20 Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess. cpe:/a:gnu:emacs:20.0 cpe:/a:gnu:emacs:20.1 cpe:/a:gnu:emacs:20.2 cpe:/a:gnu:emacs:20.3 cpe:/a:gnu:emacs:20.4 cpe:/a:gnu:emacs:20.5 cpe:/a:gnu:emacs:20.6 CVE-2000-0270 2000-04-18T00:00:00.000-04:00 2008-09-10T15:03:48.007-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1125 BUGTRAQ 20000418 RUS-CERT Advisory 200004-01: GNU Emacs 20 The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. cpe:/a:gnu:emacs:20.0 cpe:/a:gnu:emacs:20.1 cpe:/a:gnu:emacs:20.2 cpe:/a:gnu:emacs:20.3 cpe:/a:gnu:emacs:20.4 cpe:/a:gnu:emacs:20.5 cpe:/a:gnu:emacs:20.6 CVE-2000-0271 2000-04-18T00:00:00.000-04:00 2008-09-10T15:03:48.070-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 1125 BUGTRAQ 20000418 RUS-CERT Advisory 200004-01: GNU Emacs 20 read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords. cpe:/a:realnetworks:realserver:7.0 cpe:/a:realnetworks:realserver:basic cpe:/a:realnetworks:realserver:g2_1.0 cpe:/a:realnetworks:realserver:intranet cpe:/a:realnetworks:realserver:plus cpe:/a:realnetworks:realserver:pro CVE-2000-0272 2000-04-20T00:00:00.000-04:00 2016-10-17T22:06:40.967-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov BUGTRAQ 20000420 Remote DoS attack in Real Networks Real Server Vulnerability CONFIRM http://service.real.com/help/faq/servg270.html BID 1128 RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070. cpe:/a:symantec:pcanywhere:8.0 cpe:/a:symantec:pcanywhere:9.0 CVE-2000-0273 2000-04-09T00:00:00.000-04:00 2008-09-10T15:03:48.210-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000409 A funny way to DOS pcANYWHERE8.0 and 9.0 BID 1095 PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt. cpe:/o:bray_systems:linux_trustees:1.5 CVE-2000-0274 2000-04-10T00:00:00.000-04:00 2008-09-10T15:03:48.477-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000410 linux trustees 1.5 long path name vulnerability CONFIRM http://www.braysystems.com/linux/trustees.html BID 1096 The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. cpe:/a:cryptocard:cryptoadmin:4.1 CVE-2000-0275 2000-04-10T00:00:00.000-04:00 2008-09-10T15:03:54.663-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000410 CRYPTOAdmin 4.1 server with PalmPilot PT-1 token 1.04 PIN Extract ion L0PHT 20000410 CRYPTOCard PalmToken PIN Extraction BID 1097 CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. cpe:/o:be:beos:4.5 cpe:/o:be:beos:5.0 CVE-2000-0276 2000-04-10T00:00:00.000-04:00 2008-09-10T15:03:54.727-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1098 BUGTRAQ 20000410 BeOS syscall bug BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37. cpe:/a:microsoft:excel:97 cpe:/a:microsoft:excel:2000 CVE-2000-0277 2000-04-03T00:00:00.000-04:00 2018-10-12T17:29:31.513-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS OSVDB 1272 BID 1087 MS MS00-022 Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability. cpe:/a:saleslogix:corporation_eviewer:1.0 CVE-2000-0278 2000-08-03T00:00:00.000-04:00 2008-09-10T15:03:54.867-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000331 SalesLogix Eviewer Web App Bug: URL request crashes eviewer web application BID 1089 The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user. cpe:/o:be:beos:4.0 cpe:/o:be:beos:4.5 cpe:/o:be:beos:5.0 CVE-2000-0279 2000-04-07T00:00:00.000-04:00 2008-09-10T15:03:59.133-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000407 BeOS Networking DOS MISC http://bebugs.be.com/devbugs/detail.php3?oid=2505312 BID 1100 BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers. cpe:/a:realnetworks:realplayer:6.0::win cpe:/a:realnetworks:realplayer:7.0::win CVE-2000-0280 2000-04-03T00:00:00.000-04:00 2008-09-05T16:20:36.033-04:00 2.6 NETWORK HIGH NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000403 Win32 RealPlayer 6/7 Buffer Overflow BID 1088 Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL. cpe:/a:napster:napster_client:beta_5 CVE-2000-0281 2000-03-26T00:00:00.000-05:00 2008-09-05T16:20:36.177-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000326 neat little napster bug BUGTRAQ 20000330 Napster, Inc. response to Colten Edwards Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message. cpe:/a:talentsoft:web%2b:4 CVE-2000-0282 2000-04-12T00:00:00.000-04:00 2008-09-10T15:03:59.993-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM ftp://ftp.talentsoft.com/Download/Webplus/Unix/Patches/Webplus46p%20Read%20me.html BUGTRAQ 20000412 TalentSoft Web+ Input Validation Bug Vulnerability BID 1102 TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program. cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5.3 cpe:/o:sgi:irix:6.5.3f cpe:/o:sgi:irix:6.5.3m cpe:/o:sgi:irix:6.5.4 cpe:/o:sgi:irix:6.5.6 CVE-2000-0283 2000-04-12T00:00:00.000-04:00 2008-09-10T15:04:00.087-04:00 6.4 NETWORK LOW NONE PARTIAL NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000412 Performance Copilot for IRIX 6.5 BID 1106 The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon. cpe:/a:university_of_washington:imap:12.264 CVE-2000-0284 2000-04-16T00:00:00.000-04:00 2008-09-10T15:04:00.163-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000416 imapd4r1 v12.264 BUGTRAQ 20000416 imapd4r1 v12.264 BID 1110 Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. cpe:/a:xfree86_project:x11r6:3.3.6 cpe:/a:xfree86_project:x11r6:4.0 CVE-2000-0285 2000-04-16T00:00:00.000-04:00 2008-09-10T15:04:00.243-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000416 XFree86 server overflow BID 1306 Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter. cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0286 2000-04-16T00:00:00.000-04:00 2008-09-10T15:04:00.320-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000416 xfs BID 1111 X fontserver xfs allows local users to cause a denial of service via malformed input to the server. cpe:/a:cnc:technology_bizdb:1.0 CVE-2000-0287 2000-04-12T00:00:00.000-04:00 2008-09-10T15:04:00.383-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000412 BizDB Search Script Enables Shell Command Execution at the Server BID 1104 The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter. CVE-2000-0288 2000-04-12T00:00:00.000-04:00 2008-09-10T15:04:00.460-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000412 Infonautic's getdoc.cgi may allow unauthorized access to documents Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable. cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.2::pre_potato cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::i386 CVE-2000-0289 2000-03-27T00:00:00.000-05:00 2008-09-10T15:04:00.557-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000327 Security Problems with Linux 2.2.x IP Masquerading SUSE 20000520 Security hole in kernel < 2.2.15 BID 1078 IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection. cpe:/a:4d:webstar_http_server:4.0 CVE-2000-0290 2000-03-31T00:00:00.000-05:00 2017-10-09T21:29:07.450-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000331 Webstar 4.0 Buffer overflow vulnerability BID 1822 XF macos-webstar-get-bo(4792) Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request. cpe:/a:sun:staroffice:5.1 CVE-2000-0291 2000-04-16T00:00:00.000-04:00 2008-09-10T15:04:00.697-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000416 StarOffice 5.1 BID 1112 Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. cpe:/h:adtran:mx2800:m13 CVE-2000-0292 2000-04-19T00:00:00.000-04:00 2008-09-10T15:04:00.757-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1129 BUGTRAQ 20000418 Adtran DoS The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash. cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.1:alpha cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 CVE-2000-0293 2000-05-02T00:00:00.000-04:00 2008-09-10T15:04:00.837-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1130 aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory. cpe:/a:jim_housley:healthd:0.1 cpe:/a:jim_housley:healthd:0.2 cpe:/a:jim_housley:healthd:0.3 CVE-2000-0294 2000-04-10T00:00:00.000-04:00 2008-09-10T15:04:00.897-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1107 FREEBSD FreeBSD-SA-00:12 Buffer overflow in healthd for FreeBSD allows local users to gain root privileges. cpe:/a:lcdproc:lcdproc:0.4 CVE-2000-0295 2000-04-21T00:00:00.000-04:00 2018-10-19T11:29:01.613-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS GENTOO GLSA-200301-07 BID 1131 BUGTRAQ 20000420 Remote vulnerability in LCDproc 0.4 XF lcdproc-remote-overflow(4315) Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command. cpe:/a:michael_a._gumienny:fcheck:2.7.45 CVE-2000-0296 2000-03-31T00:00:00.000-05:00 2008-09-10T15:04:01.040-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000331 fcheck v.2.7.45 and insecure use of Perl's system() BID 1086 fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck. cpe:/a:allaire:forums:2.0.5 CVE-2000-0297 2000-04-03T00:00:00.000-04:00 2008-09-10T15:04:02.557-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1085 ALLAIRE ASB00-06 Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables. cpe:/o:microsoft:windows_2000 CVE-2000-0298 2000-04-07T00:00:00.000-04:00 2017-10-09T21:29:07.513-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 20000407 All Users startup folder left open if unattended install and OEMP reinstall=1 BID 1758 XF win2k-unattended-install(4278) The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories. cpe:/a:apple:webobjects:4.5 CVE-2000-0299 2000-04-04T00:00:00.000-04:00 2008-09-10T15:04:02.710-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000404 WebObjects DoS Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept. cpe:/a:symantec:pcanywhere:9.0 CVE-2000-0300 2000-04-06T00:00:00.000-04:00 2008-09-10T15:04:02.773-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1093 BUGTRAQ 20000405 PcAnywhere weak password encryption The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. cpe:/a:ipswitch:imail:5.0 cpe:/a:ipswitch:imail:5.0.5 cpe:/a:ipswitch:imail:5.0.6 cpe:/a:ipswitch:imail:5.0.7 cpe:/a:ipswitch:imail:5.0.8 cpe:/a:ipswitch:imail:6.0 cpe:/a:ipswitch:imail:6.1 cpe:/a:ipswitch:imail:6.2 CVE-2000-0301 2000-04-06T00:00:00.000-04:00 2016-10-17T22:06:42.277-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000405 Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm) CONFIRM http://support.ipswitch.com/kb/IM-20000208-DM02.htm BID 1094 Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command. cpe:/a:microsoft:index_server:2.0 CVE-2000-0302 2000-03-31T00:00:00.000-05:00 2018-10-12T17:29:31.780-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000331 Alert: MS Index Server (CISADV000330) BID 1084 MS MS00-006 Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL. cpe:/a:id_software:quake_3_arena:1.16n CVE-2000-0303 2000-05-03T00:00:00.000-04:00 2008-09-10T15:04:03.257-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://www.quake3arena.com/news/index.html BID 1169 ISS 20000503 Vulnerability in Quake3Arena Auto-Download Feature Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack. cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0304 2000-05-10T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1191 ISS 20000511 Microsoft IIS Remote Denial of Service Attack MS MS00-031 Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability. cpe:/a:microsoft:terminal_server cpe:/o:be:beos:5.0 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0305 2000-05-19T00:00:00.000-04:00 2018-10-12T17:29:32.420-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov BID 1236 BINDVIEW 20000519 jolt2 - Remote DoS against NT, W2K, 9x MS MS00-029 Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. cpe:/o:sco:openserver:5.04 CVE-2000-0306 2001-03-12T00:00:00.000-05:00 2008-09-05T16:20:40.017-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SCO SB-99.02 BUGTRAQ 19981229 Local/remote exploit for SCO UNIX. Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message. cpe:/o:sco:open_desktop cpe:/o:sco:openserver:5.05 cpe:/o:sco:unixware:2.1.3 CVE-2000-0307 2001-03-12T00:00:00.000-05:00 2008-09-05T16:20:40.160-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SCO SB-99.07 Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024. cpe:/a:netscape:enterprise_server:2.0 cpe:/a:netscape:fasttrack_server:2.0 cpe:/a:netscape:fasttrack_server:2.01 cpe:/a:netscape:proxy_server:2.5 cpe:/o:sco:unixware:2.1.3 cpe:/o:sco:unixware:7.0 CVE-2000-0308 2001-03-12T00:00:00.000-05:00 2008-09-05T16:20:40.317-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SCO SB-99.08 Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges. cpe:/o:openbsd:openbsd:2.4 CVE-2000-0309 2001-03-12T00:00:00.000-05:00 2008-09-10T15:04:03.757-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 OPENBSD 19990212 i386 trace-trap handling when DDB was configured could cause a system crash. The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service. cpe:/o:openbsd:openbsd:2.4 CVE-2000-0310 2001-03-12T00:00:00.000-05:00 2008-09-10T15:04:03.820-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 OPENBSD 19990217 IP fragment assembly can bog the machine excessively and cause problems. IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets. cpe:/o:microsoft:windows_2000 CVE-2000-0311 2000-04-20T00:00:00.000-04:00 2018-10-12T17:29:32.687-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BID 1145 MS MS00-026 The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability. cpe:/o:openbsd:openbsd:2.5 CVE-2000-0312 2001-03-12T00:00:00.000-05:00 2008-09-05T16:20:40.910-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS OPENBSD 19990830 In cron(8), make sure argv[] is NULL terminated in the fake popen() and run sendmail as the user, not as root. cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function. cpe:/o:openbsd:openbsd:2.6 CVE-2000-0313 2001-03-12T00:00:00.000-05:00 2008-09-10T15:04:04.040-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS OPENBSD 19991109 Any user can change interface media configurations. Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations. cpe:/o:debian:debian_linux:2.0.34 cpe:/o:digital:unix:4.0 cpe:/o:netbsd:netbsd:1.3.3 cpe:/o:redhat:linux:2.0.34 cpe:/o:slackware:slackware_linux:2.0.34 CVE-2000-0314 2001-03-12T00:00:00.000-05:00 2016-10-17T22:06:44.810-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NETBSD NetBSD-SA1999-004 BUGTRAQ 19990213 traceroute as a flooder traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero. cpe:/o:debian:debian_linux:2.0.34 cpe:/o:digital:unix:4.0 cpe:/o:netbsd:netbsd:1.3.3 cpe:/o:redhat:linux:2.0.34 cpe:/o:slackware:slackware_linux:2.0.34 CVE-2000-0315 2001-03-12T00:00:00.000-05:00 2016-10-17T22:06:46.170-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov NETBSD NetBSD-SA1999-004 BUGTRAQ 19990213 traceroute as a flooder traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks. cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:5.7 CVE-2000-0316 2000-04-24T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000424 Solaris 7 x86 lp exploit BID 1143 Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.7 CVE-2000-0317 2000-04-24T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000424 Solaris 7 x86 lpset exploit. BUGTRAQ 20000424 Solaris 7 x86 lpset exploit. BUGTRAQ 20000427 Re: Solaris/SPARC 2.7 lpset exploit (well not likely !) BID 1138 Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option. cpe:/a:atrium_software:mercur_mailserver:3.2 CVE-2000-0318 2000-04-21T00:00:00.000-04:00 2008-09-10T15:04:04.383-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000413 Security problems with Atrium Mercur Mailserver 3.20 BID 1144 Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack. cpe:/a:eric_allman:sendmail:5.58 cpe:/a:eric_allman:sendmail:5.59 cpe:/a:eric_allman:sendmail:8.6.x cpe:/a:eric_allman:sendmail:8.7.1 cpe:/a:eric_allman:sendmail:8.7.2 cpe:/a:eric_allman:sendmail:8.7.3 cpe:/a:eric_allman:sendmail:8.7.4 cpe:/a:eric_allman:sendmail:8.7.5 cpe:/a:eric_allman:sendmail:8.7.6 cpe:/a:eric_allman:sendmail:8.7.x cpe:/a:eric_allman:sendmail:8.8 cpe:/a:eric_allman:sendmail:8.8.1 cpe:/a:eric_allman:sendmail:8.8.2 cpe:/a:eric_allman:sendmail:8.8.3 cpe:/a:eric_allman:sendmail:8.8.4 cpe:/a:eric_allman:sendmail:8.8.5 cpe:/a:eric_allman:sendmail:8.8.x cpe:/a:eric_allman:sendmail:8.9.1 cpe:/a:eric_allman:sendmail:8.9.3 CVE-2000-0319 2000-04-23T00:00:00.000-04:00 2008-09-10T15:04:04.447-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1146 BUGTRAQ 20000424 unsafe fgets() in sendmail's mail.local mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n. cpe:/a:qualcomm:qpopper:2.53 cpe:/a:qualcomm:qpopper:3.0 cpe:/h:sun:cobalt_raq_2 cpe:/h:sun:cobalt_raq_3i CVE-2000-0320 2000-04-21T00:00:00.000-04:00 2008-09-10T15:04:04.523-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1133 BUGTRAQ 20000421 unsafe fgets() in qpopper Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n. cpe:/a:icradius:icradius:0.14 CVE-2000-0321 2000-04-24T00:00:00.000-04:00 2008-09-10T15:04:04.587-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000424 Buffer Overflow in version .14 BID 1147 Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name. cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0322 2000-04-24T00:00:00.000-04:00 2016-09-16T21:59:03.683-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS REDHAT RHSA-2000:014 BID 1149 BUGTRAQ 20000424 piranha default password/exploit The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. cpe:/a:microsoft:jet:3.5 cpe:/a:microsoft:jet:3.51 cpe:/a:microsoft:jet:4.0 CVE-2000-0323 1999-07-28T00:00:00.000-04:00 2018-10-15T14:29:01.527-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19990728 Alert : MS Office 97 Vulnerability MS MS99-030 XF jet-text-isam BID 595 The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability. cpe:/a:symantec:pcanywhere:8.0.1 cpe:/a:symantec:pcanywhere:8.0.2 cpe:/a:symantec:pcanywhere:9.0 cpe:/a:symantec:pcanywhere:9.2 CVE-2000-0324 2000-04-25T00:00:00.000-04:00 2008-09-10T15:04:05.023-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20010211 Symantec pcAnywhere 9.0 DoS / Buffer Overflow BUGTRAQ 20010212 Re: Symantec pcAnywhere 9.0 DoS / Buffer Overflow XF pcanywhere-tcpsyn-dos(4347) BID 1150 BUGTRAQ 20000425 Denial of Service Against pcAnywhere. pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap. cpe:/a:microsoft:jet:3.5 cpe:/a:microsoft:jet:3.5.1 CVE-2000-0325 1999-08-20T00:00:00.000-04:00 2018-10-12T17:29:33.137-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BID 548 MS MS99-030 XF jet-vba-shell(3155) The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability. cpe:/a:on_technology:meeting_maker:1.0 cpe:/a:on_technology:meeting_maker:2.0 cpe:/a:on_technology:meeting_maker:3.0 cpe:/a:on_technology:meeting_maker:4.0 cpe:/a:on_technology:meeting_maker:5.0 cpe:/a:on_technology:meeting_maker:6.0 CVE-2000-0326 2000-04-25T00:00:00.000-04:00 2008-09-10T15:04:07.710-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument BID 1151 Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts. cpe:/a:microsoft:virtual_machine:2000 cpe:/a:microsoft:virtual_machine:3000 CVE-2000-0327 1999-10-21T00:00:00.000-04:00 2018-10-12T17:29:33.483-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 19991014 Another Microsoft Java Flaw Disovered MS MS99-045 Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability. cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp5 CVE-2000-0328 1999-08-24T00:00:00.000-04:00 2018-10-12T17:29:33.733-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 604 BUGTRAQ 19990824 NT Predictable Initial TCP Sequence numbers - changes observed with SP4 MS MS99-046 Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0::windows_98 cpe:/a:microsoft:ie:4.0::windows_nt cpe:/a:microsoft:ie:4.0.1::windows_95 cpe:/a:microsoft:ie:4.0.1::windows_98 cpe:/a:microsoft:ie:4.0.1::windows_nt cpe:/a:microsoft:ie:4.1::windows_95 cpe:/a:microsoft:ie:4.1::windows_98 cpe:/a:microsoft:ie:4.1::windows_nt_4.0 cpe:/a:microsoft:ie:5::windows_nt_4.0 cpe:/a:microsoft:ie:5.0::windows_2000 cpe:/a:microsoft:ie:5.0::windows_95 cpe:/a:microsoft:ie:5.0::windows_98 cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook:2000 cpe:/a:microsoft:outlook_express:4.27.3110.1 cpe:/a:microsoft:outlook_express:4.72.2106.4 cpe:/a:microsoft:outlook_express:4.72.3120.0 cpe:/a:microsoft:outlook_express:4.72.3612.1700 cpe:/a:microsoft:outlook_express:5.0 CVE-2000-0329 1999-11-11T00:00:00.000-05:00 2018-10-12T17:29:33.983-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MS MS99-048 A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold CVE-2000-0330 1999-11-12T00:00:00.000-05:00 2018-10-12T17:29:34.123-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MS MS99-049 The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability. cpe:/a:microsoft:terminal_server cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0331 2000-04-20T00:00:00.000-04:00 2018-10-12T17:29:34.263-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000421 CMD.EXE overflow (CISADV000420) BID 1135 MS MS00-027 Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability. cpe:/a:ultrascripts:ultraboard:1.6 CVE-2000-0332 2000-05-03T00:00:00.000-04:00 2008-09-10T15:04:09.867-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1164 BUGTRAQ 20000502 Fun with UltraBoard V1.6X UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte. cpe:/a:ethereal_group:ethereal:0.8.4 cpe:/a:ethereal_group:ethereal:0.8.5 cpe:/a:ethereal_group:ethereal:0.8.6 cpe:/a:lbl:tcpdump:3.4 cpe:/a:lbl:tcpdump:3.5a CVE-2000-0333 1999-05-31T00:00:00.000-04:00 2008-09-10T15:04:09.930-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1165 BUGTRAQ 20000502 Denial of service attack against tcpdump tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet. cpe:/a:allaire:spectra:1.0 cpe:/a:allaire:spectra:1.0.1 CVE-2000-0334 2000-04-24T00:00:00.000-04:00 2008-09-10T15:04:09.993-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLAIRE ASB00-10 BID 1181 The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule. cpe:/a:gnu:glibc:2.0 cpe:/a:gnu:glibc:2.1 cpe:/a:gnu:glibc:2.1.1 cpe:/a:gnu:glibc:2.1.2 cpe:/a:gnu:glibc:2.1.3 cpe:/a:isc:bind:8.2 cpe:/a:isc:bind:8.2.1 cpe:/a:isc:bind:8.2.2 CVE-2000-0335 2000-05-03T00:00:00.000-04:00 2008-09-10T15:04:10.070-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 1166 The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. cpe:/a:openldap:openldap:1.2.7 cpe:/a:openldap:openldap:1.2.8 cpe:/a:openldap:openldap:1.2.9 cpe:/a:openldap:openldap:1.2.10 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc cpe:/o:turbolinux:turbolinux:4.2 cpe:/o:turbolinux:turbolinux:4.4 cpe:/o:turbolinux:turbolinux:6.0.2 CVE-2000-0336 2000-04-21T00:00:00.000-04:00 2008-09-10T15:04:10.133-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-2000-009.0 REDHAT RHSA-2000:012 BID 1232 TURBO TLSA2000010-1 Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8 CVE-2000-0337 2000-04-24T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000424 Solaris x86 Xsun overflow. BID 1140 Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter. cpe:/a:cvs:cvs:1.10.7 CVE-2000-0338 2000-04-23T00:00:00.000-04:00 2008-09-10T15:04:10.273-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1136 BUGTRAQ 20000423 CVS DoS Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user. cpe:/a:zonelabs:zonealarm:2.2.10 CVE-2000-0339 2000-04-24T00:00:00.000-04:00 2008-09-10T15:04:10.353-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1137 BUGTRAQ 20000420 ZoneAlarm ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules. cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.4 CVE-2000-0340 2000-04-29T00:00:00.000-04:00 2008-09-10T15:04:10.617-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1155 BUGTRAQ 20000428 SuSE 6.3 Gnomelib buffer overflow CONFIRM http://www.suse.com/us/support/download/updates/axp_63.html Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable. cpe:/a:atrium_software:cassandra_nntp_server:1.10 CVE-2000-0341 2000-05-01T00:00:00.000-04:00 2016-10-17T22:06:50.013-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000501 Remote DoS attack in CASSANDRA NNTPServer v1.10 from ATRIUM BID 1156 ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name. cpe:/a:qualcomm:eudora:4.2 cpe:/a:qualcomm:eudora:4.3 CVE-2000-0342 2000-04-28T00:00:00.000-04:00 2008-09-10T15:04:11.210-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077 MISC http://www.peacefire.org/security/stealthattach/explanation.html BID 1157 Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment." cpe:/a:brecht_claerhout:sniffit:0.3.6hip cpe:/a:brecht_claerhout:sniffit:0.3.7beta CVE-2000-0343 2000-05-02T00:00:00.000-04:00 2008-09-10T15:04:11.290-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1158 BUGTRAQ 20000502 spj-003-000 - S0ftPj Advisory Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header. cpe:/o:linux:linux_kernel:2.1 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.3.0 CVE-2000-0344 2000-05-01T00:00:00.000-04:00 2008-09-10T15:04:11.353-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1160 BUGTRAQ 20000501 Linux knfsd DoS issue The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value. cpe:/h:cisco:router_2500 cpe:/h:cisco:router_2600 cpe:/h:cisco:router_3600 cpe:/h:cisco:router_4000 cpe:/h:cisco:router_7200 cpe:/h:cisco:router_7500 cpe:/o:cisco:ios:9.14 cpe:/o:cisco:ios:11.1 cpe:/o:cisco:ios:11.1%2813%29 cpe:/o:cisco:ios:11.1%2813%29aa cpe:/o:cisco:ios:11.1%2813%29ca cpe:/o:cisco:ios:11.1%2813%29ia cpe:/o:cisco:ios:11.1%2815%29ca cpe:/o:cisco:ios:11.1%2816%29 cpe:/o:cisco:ios:11.1%2816%29aa cpe:/o:cisco:ios:11.1%2816%29ia cpe:/o:cisco:ios:11.1%2817%29cc cpe:/o:cisco:ios:11.1%2817%29ct cpe:/o:cisco:ios:11.2 cpe:/o:cisco:ios:11.2%284%29f1 cpe:/o:cisco:ios:11.2%288%29 cpe:/o:cisco:ios:11.2%288%29p cpe:/o:cisco:ios:11.2%288%29sa1 cpe:/o:cisco:ios:11.2%288%29sa3 cpe:/o:cisco:ios:11.2%288%29sa5 cpe:/o:cisco:ios:11.2%289%29p cpe:/o:cisco:ios:11.2%289%29xa cpe:/o:cisco:ios:11.2%2810%29 cpe:/o:cisco:ios:11.2%2810%29bc cpe:/o:cisco:ios:11.2%2817%29 cpe:/o:cisco:ios:11.2p cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0%281%29w cpe:/o:cisco:ios:12.0%281%29xa3 cpe:/o:cisco:ios:12.0%281%29xb cpe:/o:cisco:ios:12.0%281%29xe cpe:/o:cisco:ios:12.0%282%29 cpe:/o:cisco:ios:12.0%282%29xc cpe:/o:cisco:ios:12.0%282%29xd cpe:/o:cisco:ios:12.0%282%29xf cpe:/o:cisco:ios:12.0%282%29xg cpe:/o:cisco:ios:12.0%283%29t2 cpe:/o:cisco:ios:12.0%284%29 cpe:/o:cisco:ios:12.0%284%29s cpe:/o:cisco:ios:12.0%284%29t cpe:/o:cisco:ios:12.0%285%29 cpe:/o:cisco:ios:12.0%285%29t1 cpe:/o:cisco:ios:12.0%286%29 cpe:/o:cisco:ios:12.0%287%29t cpe:/o:cisco:ios:12.0%288%29 cpe:/o:cisco:ios:12.0%289%29s cpe:/o:cisco:ios:12.0db cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0t CVE-2000-0345 2000-05-03T00:00:00.000-04:00 2008-09-10T15:04:11.430-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1161 BUGTRAQ 20000502 Possible issue with Cisco on-line help? The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command. cpe:/a:apple:appleshare:6.1:::ja cpe:/a:apple:appleshare:6.2:::ja cpe:/a:apple:appleshare:6.3:::ja CVE-2000-0346 2000-05-02T00:00:00.000-04:00 2017-11-27T13:27:01.397-05:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2017-11-27T09:19:58.927-05:00 CONFIRM http://asu.info.apple.com/swupdates.nsf/artnum/n11670 BID 1162 BUGTRAQ 20000502 INFO:AppleShare IP 6.3.2 squashes security bug AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold CVE-2000-0347 2000-05-02T00:00:00.000-04:00 2016-10-17T22:06:51.093-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000501 el8.org advisory - Win 95/98 DoS (RFParalyze.c) BID 1163 Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. cpe:/o:sco:unixware:7.1.0 CVE-2000-0348 2001-03-12T00:00:00.000-05:00 2008-09-05T16:20:46.643-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SCO SB-99.10 A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges. cpe:/o:sco:unixware:7.1.0 CVE-2000-0349 2001-03-12T00:00:00.000-05:00 2008-09-05T16:20:46.783-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SCO SB-99.13 Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service. cpe:/a:networkice:icecap_manager:2.0.23 CVE-2000-0350 2000-05-17T00:00:00.000-04:00 2008-09-10T15:04:12.603-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://advice.networkice.com/advice/Support/KB/q000166/ BID 1216 MISC http://www.securityfocus.com/templates/advisory.html?id=2220 A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events. cpe:/o:sco:unixware:7.1.0 CVE-2000-0351 2001-03-12T00:00:00.000-05:00 2011-03-07T21:03:05.687-05:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS SCO SB-99.09 Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages. cpe:/a:university_of_washington:pine:4.20 cpe:/a:university_of_washington:pine:4.21 CVE-2000-0352 1999-11-18T00:00:00.000-05:00 2008-09-10T15:04:12.743-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-036.0 SUSE 19991227 Security hole in Pine < 4.21 BID 810 BUGTRAQ 19991117 Pine: expanding env vars in URLs (seems to be fixed as of 4.21) Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL. cpe:/a:university_of_washington:pine:3.98 cpe:/a:university_of_washington:pine:4.0 cpe:/a:university_of_washington:pine:4.2 cpe:/a:university_of_washington:pine:4.10 CVE-2000-0353 1999-06-28T00:00:00.000-04:00 2008-09-10T15:04:12.820-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUSE 19990911 Update for Pine (fixed IMAP support) SUSE 19990628 Execution of commands in Pine 4.x MISC http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html BID 1247 Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine. cpe:/a:lee_mcloughlin:mirror:2.9 CVE-2000-0354 2000-09-28T00:00:00.000-04:00 2008-09-10T15:04:12.883-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 DEBIAN 19991018 Incorrect directory name handling in mirror SUSE 19991001 Security hole in mirror BID 681 BUGTRAQ 19990928 mirror 2.9 hole mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory. cpe:/o:bent_bagger:pbpg:1.1 cpe:/o:redhat:linux:6.0 cpe:/o:suse:suse_linux:6.2 CVE-2000-0355 1999-08-21T00:00:00.000-04:00 2008-09-10T15:04:12.960-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS SUSE 19990920 Security hole in pbpg pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files. cpe:/o:redhat:linux:6.1::i386 CVE-2000-0356 1999-10-13T00:00:00.000-04:00 2008-09-10T15:04:13.023-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 697 REDHAT RHSA-1999:040 Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts. cpe:/o:redhat:linux:6.1 CVE-2000-0357 1999-12-03T00:00:00.000-05:00 2008-09-10T15:04:13.087-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS REDHAT RHSA-1999:058-01 ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys. cpe:/o:redhat:linux:6.1 CVE-2000-0358 1999-12-03T00:00:00.000-05:00 2008-09-10T15:04:13.163-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 REDHAT RHSA-1999:058-01 ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program. cpe:/a:acme_labs:thttpd:1.90a cpe:/a:acme_labs:thttpd:1.95 cpe:/a:acme_labs:thttpd:2.0 cpe:/a:acme_labs:thttpd:2.0.1 cpe:/a:acme_labs:thttpd:2.0.2 cpe:/a:acme_labs:thttpd:2.0.3 cpe:/a:acme_labs:thttpd:2.0.4 CVE-2000-0359 2000-10-20T00:00:00.000-04:00 2008-09-10T15:04:13.243-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 19991113 thttpd 2.04 stack overflow (VD#6) SUSE 19991116 Security hole in thttpd 1.90a - 2.04 BID 1248 Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header. cpe:/a:isc:inn:1.4sec cpe:/a:isc:inn:1.4sec2 cpe:/a:isc:inn:1.4unoff3 cpe:/a:isc:inn:1.4unoff4 cpe:/a:isc:inn:1.5 cpe:/a:isc:inn:1.5.1 cpe:/a:isc:inn:1.7 cpe:/a:isc:inn:1.7.2 cpe:/a:isc:inn:2.0 cpe:/a:isc:inn:2.1 cpe:/a:isc:inn:2.2 cpe:/a:isc:inn:2.2.1 CVE-2000-0360 2000-10-20T00:00:00.000-04:00 2008-09-10T15:04:13.307-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-038.0 SUSE 19991124 Security hole in inn <= 2.2.1 BID 1249 Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article. cpe:/o:suse:suse_linux CVE-2000-0361 1999-12-14T00:00:00.000-05:00 2008-09-10T15:04:13.367-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SUSE 19991214 Security hole in wvdial <= 1.4 The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information. cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.2 CVE-2000-0362 1999-10-22T00:00:00.000-04:00 2008-09-10T15:04:13.447-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUSE 19991019 Security hole in cdwtools < 093 BID 738 Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges. cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.2 CVE-2000-0363 1999-10-22T00:00:00.000-04:00 2008-09-10T15:04:13.507-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUSE 19991019 Security hole in cdwtools < 093 BID 738 Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory. cpe:/o:redhat:linux:6.0 CVE-2000-0364 1999-06-01T00:00:00.000-04:00 2016-10-17T22:06:52.657-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990606 RedHat 6.0, /dev/pts permissions bug when using xterm BUGTRAQ 19990606 RedHat 6.0, /dev/pts permissions bug when using xterm REDHAT RHSA1999014_01 BID 309 screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys. cpe:/o:redhat:linux:6.0 CVE-2000-0365 1999-06-01T00:00:00.000-04:00 2016-10-17T22:06:53.780-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 19990606 RedHat 6.0, /dev/pts permissions bug when using xterm BUGTRAQ 19990606 RedHat 6.0, /dev/pts permissions bug when using xterm REDHAT RHSA1999014_01 BID 308 Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices. cpe:/o:debian:debian_linux:2.1 CVE-2000-0366 1999-12-02T00:00:00.000-05:00 2008-09-10T15:04:13.727-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 DEBIAN 19991202 problem restoring symlinks BID 1442 dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files. cpe:/a:michael_jennings:eterm:0.8.8 CVE-2000-0367 1999-02-18T00:00:00.000-05:00 2008-09-10T15:04:13.790-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS DEBIAN 19990218 Root exploit in eterm Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges. cpe:/o:cisco:ios:9.1 CVE-2000-0368 2001-03-12T00:00:00.000-05:00 2016-09-21T09:06:36.300-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2016-09-20T20:18:50.727-04:00 CIAC J-009 CISCO 19981014 Cisco IOS Command History Release at Login Prompt Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data. cpe:/o:caldera:openlinux:2.3 CVE-2000-0369 1999-10-08T00:00:00.000-04:00 2008-09-10T15:04:13.930-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-029.1 BID 1266 The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service. cpe:/o:caldera:openlinux:1.0 cpe:/o:caldera:openlinux:1.1 cpe:/o:caldera:openlinux:1.2 cpe:/o:caldera:openlinux:1.3 CVE-2000-0370 1999-01-29T00:00:00.000-05:00 2008-09-10T15:04:14.007-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-001.0 BID 1268 The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command. cpe:/o:kde:kde:1.1 cpe:/o:kde:kde:1.1.1 CVE-2000-0371 1999-03-01T00:00:00.000-05:00 2008-09-10T15:04:14.070-04:00 1.2 LOCAL HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-1999-005.0 BID 1269 The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack. cpe:/o:caldera:openlinux CVE-2000-0372 2000-07-12T00:00:00.000-04:00 2017-10-09T21:29:07.593-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-014.0 XF linux-rmt(2268) Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges. cpe:/a:kde:kvt CVE-2000-0373 1999-06-01T00:00:00.000-04:00 2017-10-09T21:29:07.653-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-015.0 REDHAT RHSA-1999:015-01 XF kde-kvt(2266) Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges. cpe:/o:caldera:openlinux:2.2 cpe:/o:caldera:openlinux:2.3 CVE-2000-0374 1999-08-22T00:00:00.000-04:00 2017-10-09T21:29:07.700-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CALDERA CSSA-1999-021.0 MANDRAKE MDKSA-2002:025 BID 1446 XF xdmcp-kdm-default-configuration(4856) The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions. cpe:/o:freebsd:freebsd:3.2 CVE-2000-0375 2001-03-12T00:00:00.000-05:00 2008-09-10T15:04:14.507-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files. cpe:/a:i-drive:filo:1.01 CVE-2000-0376 2000-06-07T00:00:00.000-04:00 2008-09-10T15:04:14.570-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1324 Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request. cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0377 2000-06-08T00:00:00.000-04:00 2018-10-12T17:29:34.530-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q264684 BID 1331 MS MS00-040 The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability. cpe:/o:redhat:linux:6.0 cpe:/o:redhat:linux:6.1 cpe:/o:redhat:linux:6.2 CVE-2000-0378 2000-05-03T00:00:00.000-04:00 2008-09-10T15:04:14.710-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000502 pam_console bug BID 1176 The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in. cpe:/h:netopia:r-series_routers:4.6.2 CVE-2000-0379 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:16.837-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://www.netopia.com/equipment/purchase/fmw_update.html BID 1177 BUGTRAQ 20000507 Advisory: Netopia R9100 router vulnerability The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so. cpe:/o:cisco:ios:11.1 cpe:/o:cisco:ios:11.2 cpe:/o:cisco:ios:11.2%284%29f1 cpe:/o:cisco:ios:11.2%288%29 cpe:/o:cisco:ios:11.2%288%29p cpe:/o:cisco:ios:11.2%289%29p cpe:/o:cisco:ios:11.2%289%29xa cpe:/o:cisco:ios:11.2%2810%29 cpe:/o:cisco:ios:11.2%2810%29bc cpe:/o:cisco:ios:11.2%2817%29 cpe:/o:cisco:ios:11.2p cpe:/o:cisco:ios:11.3 cpe:/o:cisco:ios:11.3%281%29 cpe:/o:cisco:ios:11.3%281%29ed cpe:/o:cisco:ios:11.3%281%29t cpe:/o:cisco:ios:11.3t cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0%281%29w cpe:/o:cisco:ios:12.0%281%29xa3 cpe:/o:cisco:ios:12.0%281%29xb cpe:/o:cisco:ios:12.0%281%29xe cpe:/o:cisco:ios:12.0%282%29 cpe:/o:cisco:ios:12.0%282%29xc cpe:/o:cisco:ios:12.0%282%29xd cpe:/o:cisco:ios:12.0%282%29xf cpe:/o:cisco:ios:12.0%282%29xg cpe:/o:cisco:ios:12.0%283%29t2 cpe:/o:cisco:ios:12.0%284%29 cpe:/o:cisco:ios:12.0%284%29s cpe:/o:cisco:ios:12.0%284%29t cpe:/o:cisco:ios:12.0%285%29 cpe:/o:cisco:ios:12.0%285%29t1 cpe:/o:cisco:ios:12.0%286%29 cpe:/o:cisco:ios:12.0%287%29t cpe:/o:cisco:ios:12.0%288%29 cpe:/o:cisco:ios:12.0%289%29s cpe:/o:cisco:ios:12.0db cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0t CVE-2000-0380 2000-04-26T00:00:00.000-04:00 2008-09-10T00:00:00.000-04:00 7.1 NETWORK MEDIUM NONE NONE NONE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000426 Cisco HTTP possible bug: CISCO 20000514 Cisco IOS HTTP Server Vulnerability BID 1154 The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string. cpe:/a:gossamer_threads:dbman:2.0.4 CVE-2000-0381 2000-05-05T00:00:00.000-04:00 2008-09-10T15:04:18.647-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000505 Black Watch Labs Vulnerability Alert MISC http://www.perfectotech.com/blackwatchlabs/vul5_05.html BID 1178 The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter. cpe:/a:allaire:clustercats:1.0 CVE-2000-0382 2000-05-08T00:00:00.000-04:00 2008-09-10T15:04:18.757-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLAIRE ASB00-12 BID 1179 ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site. cpe:/a:aol:instant_messenger:4.0 CVE-2000-0383 2000-05-08T00:00:00.000-04:00 2008-09-10T15:04:18.837-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1180 BUGTRAQ 20000507 AOL Instant Messenger The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient. cpe:/h:intel:netstructure_7110 cpe:/h:intel:netstructure_7180 CVE-2000-0384 2000-05-08T00:00:00.000-04:00 2008-09-05T16:20:52.237-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CONFIRM http://216.188.41.136/ L0PHT 20000508 NetStructure 7110 console backdoor L0PHT 20000508 NetStructure 7180 remote backdoor vulnerability BID 1182 BID 1183 NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access. cpe:/a:filemaker:filemaker:5.0::pro CVE-2000-0385 2000-05-02T00:00:00.000-04:00 2008-09-10T15:04:33.710-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html CONFIRM http://www.filemaker.com/support/webcompanion.html FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities. cpe:/a:filemaker:filemaker:5.0::pro CVE-2000-0386 2000-05-02T00:00:00.000-04:00 2008-09-10T15:04:33.790-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS MISC http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html CONFIRM http://www.filemaker.com/support/webcompanion.html FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email. cpe:/a:alexander_siegel:golddig:2.0 CVE-2000-0387 2000-05-09T00:00:00.000-04:00 2008-09-10T15:04:33.853-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FREEBSD FreeBSD-SA-00:16 BID 1184 The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 CVE-2000-0388 1990-05-09T00:00:00.000-04:00 2008-09-10T15:04:33.930-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS FREEBSD FreeBSD-SA-00:17 BID 1185 Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable. cpe:/a:cygnus:cygnus_network_security:4.0 cpe:/a:cygnus:kerbnet:5.0 cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1.1 cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0389 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:34.103-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000516 BUFFER OVERRUN VULNERABILITIES IN KERBEROS FREEBSD FreeBSD-SA-00:20 CERT CA-2000-06 REDHAT RHSA-2000:025 BID 1220 Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. cpe:/a:cygnus:cygnus_network_security:4.0 cpe:/a:cygnus:kerbnet:5.0 cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1.1 cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0390 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:34.180-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000516 BUFFER OVERRUN VULNERABILITIES IN KERBEROS FREEBSD FreeBSD-SA-00:20 CERT CA-2000-06 REDHAT RHSA-2000:025 BID 1220 Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. cpe:/a:cygnus:cygnus_network_security:4.0 cpe:/a:cygnus:kerbnet:5.0 cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1.1 cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0391 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:34.243-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000516 BUFFER OVERRUN VULNERABILITIES IN KERBEROS FREEBSD FreeBSD-SA-00:20 CERT CA-2000-06 REDHAT RHSA-2000:025 BID 1220 Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. cpe:/a:cygnus:cygnus_network_security:4.0 cpe:/a:cygnus:kerbnet:5.0 cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1.1 cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0392 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:34.320-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000516 BUFFER OVERRUN VULNERABILITIES IN KERBEROS FREEBSD FreeBSD-SA-00:20 CERT CA-2000-06 REDHAT RHSA-2000:025 BID 1220 Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. cpe:/o:kde:kde:1.1 cpe:/o:kde:kde:1.1.1 cpe:/o:kde:kde:1.2 cpe:/o:kde:kde:2.0_beta CVE-2000-0393 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:34.383-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000516 kscd vulnerability SUSE 20000529 kmulti <= 1.1.2 BID 1206 The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute. cpe:/a:axent:netprowler:3.0 CVE-2000-0394 2000-05-18T00:00:00.000-04:00 2016-10-17T22:06:55.077-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000519 RFP2K05: NetProwler vs. RFProwler BID 1225 BUGTRAQ 20000522 RFP2K05 - NetProwler "Fragmentation" Issue NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature. cpe:/a:computalynx:cproxy_server:3.3sp2 CVE-2000-0395 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:34.523-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1213 BUGTRAQ 20000516 CProxy v3.3 SP 2 DoS Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. cpe:/a:pacific_software:carello:1.2.1 CVE-2000-0396 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:34.633-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000524 Alert: Carello File Creation flaw BID 1245 The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files. cpe:/a:seattle_lab_software:emurl:2.0 CVE-2000-0397 2000-05-15T00:00:00.000-04:00 2008-09-10T15:04:34.743-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000515 Vulnerability in EMURL-based e-mail providers BID 1203 The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account. cpe:/a:rockliffe:mailsite:4.2.10 CVE-2000-0398 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:34.853-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000524 Alert: Buffer overflow in Rockliffe's MailSite BID 1244 Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request. cpe:/a:alt-n:mdaemon:3.0.3 cpe:/a:alt-n:mdaemon:3.1_beta CVE-2000-0399 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:34.947-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000524 Deerfield Communications MDaemon Mail Server DoS BID 1250 Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name. cpe:/a:microsoft:internet_explorer:5 CVE-2000-0400 2000-05-13T00:00:00.000-04:00 2016-11-07T13:25:01.357-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2016-11-07T11:29:07.687-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000516 MICROSOFT SECURITY FLAW? BID 1221 The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post. cpe:/a:pdgsoft:pdg_shopping_cart:1.5 CVE-2000-0401 2000-05-01T00:00:00.000-04:00 2016-10-17T22:06:57.797-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000525 Alert: PDG Cart Overflows NTBUGTRAQ 20000525 Alert: PDG Cart Overflows CONFIRM http://www.pdgsoft.com/Security/security2.html BID 1256 Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string. cpe:/a:microsoft:sql_server:7.0 cpe:/a:microsoft:sql_server:7.0:sp1 cpe:/a:microsoft:sql_server:7.0:sp2 CVE-2000-0402 2000-05-30T00:00:00.000-04:00 2018-10-12T17:29:34.903-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov MSKB Q263968 BID 1281 MS MS00-035 The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability. cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0403 2000-05-25T00:00:00.000-04:00 2018-10-12T17:29:35.170-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q263307 BID 1261 MS MS00-036 The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability. cpe:/a:microsoft:terminal_server cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0404 2000-05-25T00:00:00.000-04:00 2018-10-12T17:29:35.450-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q262694 BID 1262 MS MS00-036 The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability. cpe:/a:atstake:antisniff:1.0::researchers cpe:/a:atstake:antisniff:1.0.1 CVE-2000-0405 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:35.633-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS L0PHT 20000515 AntiSniff version 1.01 and Researchers version 1 DNS overflow BID 1207 Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet. cpe:/a:netscape:communicator:4.0 cpe:/a:netscape:communicator:4.05 cpe:/a:netscape:communicator:4.5_beta cpe:/a:netscape:communicator:4.06 cpe:/a:netscape:communicator:4.07 cpe:/a:netscape:communicator:4.51 cpe:/a:netscape:communicator:4.61 cpe:/a:netscape:communicator:4.72 CVE-2000-0406 2000-05-10T00:00:00.000-04:00 2008-09-10T15:04:35.757-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 MISC http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt CERT CA-2000-05 REDHAT RHSA-2000:028 BID 1188 Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability. cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8 CVE-2000-0407 2000-05-12T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000512 New Solaris root exploit for /usr/lib/lp/bin/netpr BID 1200 Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option. cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0408 2000-05-11T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov MSKB Q260205 BID 1190 MISC http://www.ussrback.com/labs40.html MS MS00-030 IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. cpe:/a:netscape:communicator:4.5 cpe:/a:netscape:communicator:4.6 cpe:/a:netscape:communicator:4.7 cpe:/a:netscape:communicator:4.51 cpe:/a:netscape:communicator:4.61 cpe:/a:netscape:communicator:4.72 cpe:/a:netscape:communicator:4.73 CVE-2000-0409 2000-05-10T00:00:00.000-04:00 2008-09-10T15:04:35.960-04:00 3.7 LOCAL HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000510 Possible symlink problems with Netscape 4.73 BID 1201 Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. cpe:/a:allaire:coldfusion_server:4.5.1 CVE-2000-0410 2000-05-10T00:00:00.000-04:00 2008-09-10T15:04:36.040-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000510 Cold Fusion Server 4.5.1 DoS Vulnerability. BID 1192 ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory. cpe:/a:matt_wright:formmail:1.6 CVE-2000-0411 2000-05-10T00:00:00.000-04:00 2008-09-10T15:04:36.353-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000510 Black Watch Labs Vulnerability Alert MISC http://www.perfectotech.com/blackwatchlabs/vul5_10.html BID 1187 Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. cpe:/a:napster:knapster:napster CVE-2000-0412 1999-05-01T00:00:00.000-04:00 2008-09-10T15:04:36.430-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS FREEBSD FreeBSD-SA-00:18 BUGTRAQ 20000510 KNapster Vulnerability Compromises User-readable Files BUGTRAQ 20000510 Gnapster Vulnerability Compromises User-readable Files BID 1186 The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file. cpe:/a:microsoft:frontpage cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0413 2000-05-06T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000506 shtml.exe reveal local path of IIS web directory BID 1174 The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path. cpe:/o:hp:hp-ux:10.10 cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:vvos:10.24 cpe:/o:hp:vvos:11.04 CVE-2000-0414 2000-05-04T00:00:00.000-04:00 2008-09-10T15:04:36.570-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS HP HPSBUX0005-113 BID 1214 Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables. cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook_express:4.0 cpe:/a:microsoft:outlook_express:4.01 cpe:/a:microsoft:outlook_express:4.27.3110.1 cpe:/a:microsoft:outlook_express:4.72.2106.4 cpe:/a:microsoft:outlook_express:4.72.3120.0 cpe:/a:microsoft:outlook_express:4.72.3612.1700 CVE-2000-0415 2000-05-12T00:00:00.000-04:00 2008-09-05T16:20:57.050-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000512 Overflow in Outlook Express 4.* - too long filenames with graphic format extension BID 1195 Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name. cpe:/o:microsoft:windows_2000 CVE-2000-0416 2000-05-11T00:00:00.000-04:00 2008-09-10T15:04:36.820-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://www.gordano.com/support/archives/ntmail/2000-05/00001114.htm BID 1196 BUGTRAQ 20000511 NTMail Proxy Exploit NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server. cpe:/h:cayman:3220-h_dsl_router:1.0 cpe:/h:cayman:gatorsurf:5.3build_r1 cpe:/h:cayman:gatorsurf:5.3build_r2 cpe:/h:cayman:gatorsurf:5.5build_r0 CVE-2000-0417 2000-05-17T00:00:00.000-04:00 2008-09-10T15:04:36.897-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000505 Cayman 3220-H DSL Router DOS BUGTRAQ 20000523 Cayman 3220H DSL Router Software Update and New Bonus Attack BID 1219 The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password. cpe:/h:cayman:3220-h_dsl_router:1.0 cpe:/h:cayman:gatorsurf:5.3 cpe:/h:cayman:gatorsurf:5.3build_r1 cpe:/h:cayman:gatorsurf:5.3build_r2 cpe:/h:cayman:gatorsurf:5.5build_r0 cpe:/h:cayman:gatorsurf:5.5build_r1 CVE-2000-0418 2000-05-23T00:00:00.000-04:00 2008-09-10T15:04:36.960-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000523 Cayman 3220H DSL Router Software Update and New Bonus Attack BID 1240 The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. cpe:/a:microsoft:access:2000 cpe:/a:microsoft:excel:2000 cpe:/a:microsoft:frontpage:2000 cpe:/a:microsoft:office:2000 cpe:/a:microsoft:outlook:2000 cpe:/a:microsoft:photodraw_2000:1.0 cpe:/a:microsoft:powerpoint:2000 cpe:/a:microsoft:project:2000 cpe:/a:microsoft:word:2000 cpe:/a:microsoft:works:2000 CVE-2000-0419 2000-05-11T00:00:00.000-04:00 2018-10-12T17:29:36.047-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS CERT CA-2000-07 MSKB Q262767 BID 1197 MS MS00-034 The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability. cpe:/o:microsoft:windows_2000 CVE-2000-0420 2000-05-11T00:00:00.000-04:00 2008-09-10T15:04:37.103-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS NTBUGTRAQ 20000511 ISS SAVANT Advisory 00/26 BID 1198 The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data. cpe:/a:mozilla:bugzilla:2.8 CVE-2000-0421 2000-05-11T00:00:00.000-04:00 2008-09-10T15:04:37.163-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000510 Advisory: Unchecked system(blaat $var blaat) call in Bugzilla 2.8 BID 1199 The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters. cpe:/a:netwin:dmail:2.5d CVE-2000-0422 2000-05-04T00:00:00.000-04:00 2016-10-17T22:06:58.923-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000504 Alert: DMailWeb buffer overflow BID 1171 Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. cpe:/a:netwin:dnews:5.3 CVE-2000-0423 2000-05-05T00:00:00.000-04:00 2016-10-17T22:07:00.110-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000505 Alert: DNewsWeb buffer overflow BID 1172 Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag. cpe:/a:george_burgyan:cgi_counter:4.0.2 cpe:/a:george_burgyan:cgi_counter:4.0.7 CVE-2000-0424 2000-05-15T00:00:00.000-04:00 2008-09-10T15:04:37.383-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 1202 BUGTRAQ 20000514 Vulnerability in CGI counter 4.0.7 by George Burgyan The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters. cpe:/a:lsoft:listserv:1.8 CVE-2000-0425 2000-05-03T00:00:00.000-04:00 2008-09-10T15:04:37.477-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000505 Alert: Listserv Web Archives (wa) buffer overflow CONFIRM http://www.lsoft.com/news/default.asp?item=Advisory0 BID 1167 Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands. cpe:/a:ultrascripts:ultraboard:1.6 CVE-2000-0426 2000-05-05T00:00:00.000-04:00 2008-09-10T15:04:37.557-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000505 Re: Fun with UltraBoard V1.6X BID 1175 UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself. cpe:/a:aladdin_knowledge_systems:etoken:3.3.3 CVE-2000-0427 2000-05-04T00:00:00.000-04:00 2008-09-10T15:04:37.617-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 L0PHT 20000504 eToken Private Information Extraction and Physical Attack BID 1170 The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM. cpe:/a:trend_micro:interscan_viruswall:3.0.1 cpe:/a:trend_micro:interscan_viruswall:3.2.3 cpe:/a:trend_micro:interscan_viruswall:3.3 cpe:/a:trend_micro:interscan_viruswall:3.32 CVE-2000-0428 2000-05-04T00:00:00.000-04:00 2008-09-10T15:04:37.697-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS NAI 20000503 Trend Micro InterScan VirusWall Remote Overflow BID 1168 Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment. cpe:/a:mcmurtrey_whitaker_and_associates:cart32:2.6 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.0 CVE-2000-0429 2000-04-27T00:00:00.000-04:00 2016-10-17T22:07:01.267-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000427 Alert: Cart32 secret password backdoor (CISADV000427) CONFIRM http://www.cart32.com/kbshow.asp?article=c048 A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.0 CVE-2000-0430 2000-05-03T00:00:00.000-04:00 2016-10-17T22:07:02.830-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000503 Another interesting Cart32 command BID 1358 Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request. cpe:/h:sun:cobalt_raq_2 cpe:/h:sun:cobalt_raq_3i CVE-2000-0431 2000-05-22T00:00:00.000-04:00 2008-09-10T15:04:40.570-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS CONFIRM http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html BID 1238 BUGTRAQ 20000522 Problem with FrontPage on Cobalt RaQ2/RaQ3 Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files. cpe:/a:matt_kruse:calendar_script:2.2 CVE-2000-0432 2000-05-16T00:00:00.000-04:00 2008-09-10T15:04:40.633-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000516 Vuln in calender.pl (Matt Kruse calender script) BID 1215 The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.1:alpha cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 CVE-2000-0433 2000-05-02T00:00:00.000-04:00 2008-09-10T15:04:40.710-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS SUSE 20000502 aaabase < 2000.5.2 The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles. cpe:/a:matthew_redman:allmanage:2.6 CVE-2000-0434 2000-05-13T00:00:00.000-04:00 2008-09-10T15:04:40.820-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000516 Allmanage.pl Vulnerabilities BID 1217 The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers. cpe:/a:matthew_redman:allmanage:2.6 CVE-2000-0435 2000-05-13T00:00:00.000-04:00 2008-09-10T15:04:40.947-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000516 Allmanage.pl Vulnerabilities BID 1217 The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages. cpe:/a:metaproducts:offline_explorer:1.0 cpe:/a:metaproducts:offline_explorer:1.1 cpe:/a:metaproducts:offline_explorer:1.2 CVE-2000-0436 2000-05-19T00:00:00.000-04:00 2008-09-10T15:04:41.117-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000522 MetaProducts Offline Explorer Directory Traversal Vulnerability CONFIRM http://www.metaproducts.com/mpOE-HY.html BID 1231 MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. cpe:/a:network_associates:gauntlet_firewall:4.1 cpe:/a:network_associates:gauntlet_firewall:4.2 cpe:/a:network_associates:gauntlet_firewall:5.0 cpe:/a:network_associates:gauntlet_firewall:5.5 cpe:/a:network_associates:webshield:4.0::solaris cpe:/h:network_associates:webshield_e-ppliance:100.0 cpe:/h:network_associates:webshield_e-ppliance:300.0 CVE-2000-0437 2000-05-18T00:00:00.000-04:00 2008-09-10T15:04:41.540-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000522 Gauntlet CyberPatrol Buffer Overflow CONFIRM http://www.pgp.com/jump/gauntlet_advisory.asp BID 1234 CONFIRM http://www.tis.com/support/cyberadvisory.html Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. cpe:/o:caldera:openlinux:7.0 cpe:/o:slackware:slackware_linux:3.3 cpe:/o:slackware:slackware_linux:3.4 cpe:/o:slackware:slackware_linux:3.5 cpe:/o:slackware:slackware_linux:3.6 cpe:/o:slackware:slackware_linux:3.9 cpe:/o:slackware:slackware_linux:4.0 cpe:/o:suse:suse_linux:4.2 cpe:/o:suse:suse_linux:4.3 cpe:/o:suse:suse_linux:4.4 cpe:/o:suse:suse_linux:4.4.1 cpe:/o:suse:suse_linux:5.0 cpe:/o:suse:suse_linux:5.1 cpe:/o:suse:suse_linux:5.2 cpe:/o:suse:suse_linux:5.3 cpe:/o:suse:suse_linux:6.0 cpe:/o:suse:suse_linux:6.1 cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.4 cpe:/o:suse:suse_linux:7.0 cpe:/o:turbolinux:turbolinux:6.0 cpe:/o:turbolinux:turbolinux:6.0.1 cpe:/o:turbolinux:turbolinux:6.0.2 CVE-2000-0438 2000-05-22T00:00:00.000-04:00 2008-09-10T15:04:41.617-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000522 fdmount buffer overflow BID 1239 Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. cpe:/a:microsoft:ie:3.0 cpe:/a:microsoft:ie:3.2 cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:4.1 cpe:/a:microsoft:ie:5.0 CVE-2000-0439 2000-05-11T00:00:00.000-04:00 2018-10-12T17:29:36.390-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1194 BUGTRAQ 20000510 IE Domain Confusion Vulnerability BUGTRAQ 20000511 IE Domain Confusion Vulnerability is an Email problem also MS MS00-033 XF ie-cookie-disclosure(4447) Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability. cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:5.0 cpe:/o:netbsd:netbsd:1.4.1 cpe:/o:netbsd:netbsd:1.4.2 CVE-2000-0440 2000-05-01T00:00:00.000-04:00 2008-09-10T15:04:41.757-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NETBSD NetBSD-SA2000-002 BUGTRAQ 20000506 [NHC20000504a.0: NetBSD Panics when sent unaligned IP options] BID 1173 NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. cpe:/o:ibm:aix:3.2 cpe:/o:ibm:aix:3.2.4 cpe:/o:ibm:aix:3.2.5 cpe:/o:ibm:aix:4.1 cpe:/o:ibm:aix:4.1.1 cpe:/o:ibm:aix:4.1.2 cpe:/o:ibm:aix:4.1.3 cpe:/o:ibm:aix:4.1.4 cpe:/o:ibm:aix:4.1.5 cpe:/o:ibm:aix:4.2 cpe:/o:ibm:aix:4.2.1 cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.1 cpe:/o:ibm:aix:4.3.2 CVE-2000-0441 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:41.837-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 IBM ERS-OAR-E01-2000:087.1 BID 1241 Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. cpe:/a:qualcomm:qpopper:2.52 cpe:/a:qualcomm:qpopper:2.53 cpe:/h:sun:cobalt_raq_2 cpe:/h:sun:cobalt_raq_3i CVE-2000-0442 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:41.897-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000523 Qpopper 2.53 remote problem, user can gain gid=mail SUSE 20000608 pop <= 2000.3.4 BID 1242 Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. cpe:/a:hp:jetadmin:6.0 CVE-2000-0443 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:41.977-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000524 HP Web JetAdmin Version 5.6 Web interface Server Directory Traversal Vulnerability BID 1243 The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:hp:jetadmin:6.0 CVE-2000-0444 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:42.040-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000524 HP Web JetAdmin Version 6.0 Remote DoS attack Vulnerability BID 1246 HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. cpe:/a:pgp:pgp:5.0_linux cpe:/a:pgp:pgp:5.0i cpe:/a:pgp:pgp:6.5_linux CVE-2000-0445 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:42.147-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000523 Key Generation Security Flaw in PGP 5.0 CERT CA-2000-09 BID 1251 The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys. cpe:/a:marty_bochane:mdbms:0.9_xbx CVE-2000-0446 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:42.273-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000524 Remote xploit for MDBMS BID 1252 Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. cpe:/a:network_associates:webshield:4.5.44 CVE-2000-0447 2000-05-01T00:00:00.000-04:00 2008-09-10T15:04:42.367-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 1254 BUGTRAQ 20000525 DST2K0003 : Buffer Overrun in NAI WebShield SMTP v4.5.44 Managem ent Tool Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service. cpe:/a:network_associates:webshield:4.5.44 CVE-2000-0448 2000-05-01T00:00:00.000-04:00 2008-09-10T15:04:42.430-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1253 BUGTRAQ 20000525 DST2K0003 : Buffer Overrun in NAI WebShield SMTP v4.5.44 Managem ent Tool The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command. cpe:/a:omnis:studio:2.4 CVE-2000-0449 2000-05-01T00:00:00.000-04:00 2008-09-10T15:04:42.507-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000525 Omnis Weak Encryption - Many products affected BID 1255 Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields. cpe:/a:sean_macguire:big_brother:1.3b cpe:/a:sean_macguire:big_brother:1.4 cpe:/a:sean_macguire:big_brother:1.4g cpe:/a:sean_macguire:big_brother:1.4h1 CVE-2000-0450 2000-05-18T00:00:00.000-04:00 2008-09-10T15:04:42.603-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000518 FW: Security Notice: Big Brother System and Network Monitor BID 1257 Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands. cpe:/h:intel:express_8100 CVE-2000-0451 2000-05-19T00:00:00.000-04:00 2008-09-10T15:04:42.710-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000518 Remote Dos attack against Intel express 8100 router BID 1228 The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. cpe:/a:lotus:domino_enterprise_server:5.0.1 cpe:/a:lotus:domino_enterprise_server:5.0.2 cpe:/a:lotus:domino_enterprise_server:5.0.3 cpe:/a:lotus:domino_mail_server:5.0.1 cpe:/a:lotus:domino_mail_server:5.0.2 cpe:/a:lotus:domino_mail_server:5.0.3 CVE-2000-0452 2000-05-18T00:00:00.000-04:00 2008-09-10T15:04:42.807-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000518 Lotus ESMTP Service (Lotus Domino Release 5.0.1 (Intl)) BID 1229 Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command. cpe:/a:xfree86_project:x11r6:3.3.5 cpe:/a:xfree86_project:x11r6:3.3.6 cpe:/a:xfree86_project:x11r6:4.0 CVE-2000-0453 2000-05-18T00:00:00.000-04:00 2008-09-10T15:04:42.947-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-2000-012.0 BUGTRAQ 20000518 Nasty XFree Xserver DoS BID 1235 XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. cpe:/o:mandrakesoft:mandrake_linux:7.0 CVE-2000-0454 2000-05-29T00:00:00.000-04:00 2008-09-10T15:04:43.087-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000527 Mandrake 7.0: /usr/bin/cdrecord gid=80 (strike #2) BUGTRAQ 20000603 [Gael Duval ] [Security Announce] cdrecord BUGTRAQ 20000607 Conectiva Linux Security Announcement - cdrecord BID 1265 Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. cpe:/a:david_bagley:xlock:4.16 CVE-2000-0455 2000-05-29T00:00:00.000-04:00 2008-09-10T15:04:43.147-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NETBSD NetBSD-SA2000-003 TURBO TLSA2000012-1 NAI 20000529 Initialized Data Overflow in Xlock BID 1267 Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option. cpe:/o:netbsd:netbsd:1.4.1::alpha cpe:/o:netbsd:netbsd:1.4.1::arm32 cpe:/o:netbsd:netbsd:1.4.1::sparc cpe:/o:netbsd:netbsd:1.4.1::x86 cpe:/o:netbsd:netbsd:1.4.2::alpha cpe:/o:netbsd:netbsd:1.4.2::arm32 cpe:/o:netbsd:netbsd:1.4.2::sparc cpe:/o:netbsd:netbsd:1.4.2::x86 CVE-2000-0456 2000-05-28T00:00:00.000-04:00 2008-09-10T15:04:43.227-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NETBSD NetBSD-SA2000-005 BID 1272 NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog". cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0457 2000-05-11T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000511 Alert: IIS ism.dll exposes file contents BID 1193 MS MS00-031 XF iis-ism-file-access(4448) ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability. cpe:/a:imp:imp:2.0.9 cpe:/a:imp:imp:2.0.10 cpe:/a:imp:imp:2.0.11 cpe:/a:imp:imp:2.2_pre9 cpe:/a:imp:imp:2.2_pre10 CVE-2000-0458 2000-04-22T00:00:00.000-04:00 2016-10-17T22:07:05.330-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000424 Two Problems in IMP 2 BID 1360 The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information. cpe:/a:imp:imp:2.0.9 cpe:/a:imp:imp:2.0.10 cpe:/a:imp:imp:2.0.11 cpe:/a:imp:imp:2.2_pre9 cpe:/a:imp:imp:2.2_pre10 cpe:/a:imp:imp:2.2_pre11 cpe:/a:imp:imp:2.2_pre12 CVE-2000-0459 2000-04-22T00:00:00.000-04:00 2016-10-17T22:07:06.597-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000424 Two Problems in IMP 2 BID 1361 IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request. cpe:/o:kde:kde:1.1 cpe:/o:kde:kde:1.1.1 cpe:/o:kde:kde:1.1.2 cpe:/o:kde:kde:1.2 CVE-2000-0460 2000-05-27T00:00:00.000-04:00 2008-09-10T15:04:43.493-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000526 KDE: /usr/bin/kdesud, gid = 0 exploit BID 1274 Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. cpe:/o:freebsd:freebsd:1.1.5.1 cpe:/o:freebsd:freebsd:2.0 cpe:/o:freebsd:freebsd:2.0.5 cpe:/o:freebsd:freebsd:2.1.0 cpe:/o:freebsd:freebsd:2.1.5 cpe:/o:freebsd:freebsd:2.1.6 cpe:/o:freebsd:freebsd:2.1.6.1 cpe:/o:freebsd:freebsd:2.1.7.1 cpe:/o:freebsd:freebsd:2.2 cpe:/o:freebsd:freebsd:2.2.2 cpe:/o:freebsd:freebsd:2.2.3 cpe:/o:freebsd:freebsd:2.2.4 cpe:/o:freebsd:freebsd:2.2.5 cpe:/o:freebsd:freebsd:2.2.6 cpe:/o:freebsd:freebsd:2.2.8 cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:netbsd:netbsd:1.4.1::alpha cpe:/o:netbsd:netbsd:1.4.1::arm32 cpe:/o:netbsd:netbsd:1.4.1::sparc cpe:/o:netbsd:netbsd:1.4.2::alpha cpe:/o:netbsd:netbsd:1.4.2::arm32 cpe:/o:netbsd:netbsd:1.4.2::sparc cpe:/o:netbsd:netbsd:1.4.2::x86 CVE-2000-0461 2000-05-29T00:00:00.000-04:00 2008-09-10T15:04:43.587-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FREEBSD FreeBSD-SA-00:19 NETBSD NetBSD-SA2000-004 OPENBSD 20000526 BID 1270 The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call. cpe:/o:netbsd:netbsd:1.4.2::alpha cpe:/o:netbsd:netbsd:1.4.2::arm32 cpe:/o:netbsd:netbsd:1.4.2::sparc cpe:/o:netbsd:netbsd:1.4.2::x86 CVE-2000-0462 2000-05-28T00:00:00.000-04:00 2008-09-10T15:04:43.680-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NETBSD NetBSD-SA2000-006 BID 1273 ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory. cpe:/o:be:beos:5.0 CVE-2000-0463 2000-05-18T00:00:00.000-04:00 2008-09-10T15:04:43.820-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000517 AUX Security Advisory on Be/OS 5.0 (DoS) BID 1222 BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0.1 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 CVE-2000-0464 2000-05-17T00:00:00.000-04:00 2018-10-12T17:29:37.437-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MSKB Q261257 BID 1223 MS MS00-033 Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5:preview CVE-2000-0465 2000-05-17T00:00:00.000-04:00 2018-10-12T17:29:37.700-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q251108 MSKB Q255676 BID 1224 MS MS00-033 Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability. cpe:/o:ibm:aix:4.3 cpe:/o:ibm:aix:4.3.1 cpe:/o:ibm:aix:4.3.2 CVE-2000-0466 2000-06-20T00:00:00.000-04:00 2008-09-05T16:21:04.970-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1384 ISS 20000620 Insecure call of external program in AIX cdmount AIX cdmount allows local users to gain root privileges via shell metacharacters. cpe:/a:sam_lantinga:splitvt:1.6.3 CVE-2000-0467 2000-06-01T00:00:00.000-04:00 2008-09-10T15:04:44.210-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000614 Splitvt exploit BID 1346 Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function. cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 CVE-2000-0468 2000-06-02T00:00:00.000-04:00 2008-09-10T15:04:44.290-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1302 BUGTRAQ 20000601 HP Security vulnerability in the man command man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack. cpe:/a:selena_sol:webbanner:4.0 CVE-2000-0469 2000-02-02T00:00:00.000-05:00 2008-09-10T15:04:44.353-04:00 5.1 NETWORK HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1347 BUGTRAQ 20000613 CGI: Selena Sol's WebBanner ( Random Banner Generator ) Vulnerability BUGTRAQ 20000620 Re: CGI: Selena Sol's WebBanner ( Random Banner Generator ) Vulnerability Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:allegro:rom_pager:2.10 CVE-2000-0470 2000-06-01T00:00:00.000-04:00 2017-10-09T21:29:07.890-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov BUGTRAQ 20000601 Hardware Exploit - Gets network Down BID 1290 XF rompager-malformed-dos(4588) Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request. cpe:/o:sun:solaris:::x86 cpe:/o:sun:solaris:1.1.3:u1 cpe:/o:sun:solaris:1.1.4::jl cpe:/o:sun:solaris:2.4::x86 cpe:/o:sun:solaris:2.5::x86 cpe:/o:sun:solaris:2.5.1::ppc cpe:/o:sun:solaris:2.5.1::x86 cpe:/o:sun:solaris:2.6 cpe:/o:sun:solaris:5.4::x86 cpe:/o:sun:solaris:5.5::x86 cpe:/o:sun:solaris:5.5.1::x86 cpe:/o:sun:solaris:5.6::x86 cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:sunos:- cpe:/o:sun:sunos:4.1.3 cpe:/o:sun:sunos:4.1.4 cpe:/o:sun:sunos:5.0 cpe:/o:sun:sunos:5.1 cpe:/o:sun:sunos:5.2 cpe:/o:sun:sunos:5.3 cpe:/o:sun:sunos:5.4 cpe:/o:sun:sunos:5.5 cpe:/o:sun:sunos:5.5.1 cpe:/o:sun:sunos:5.6 cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8 CVE-2000-0471 2000-06-14T00:00:00.000-04:00 2018-10-30T12:26:22.763-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000614 Vulnerability in Solaris ufsrestore SUN 00210 CERT-VN VU#36866 BID 1348 XF sol-ufsrestore-bo(4711) Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname. cpe:/a:isc:inn:2.0 cpe:/a:isc:inn:2.1 cpe:/a:isc:inn:2.2 cpe:/a:isc:inn:2.2.1 cpe:/a:isc:inn:2.2.2 CVE-2000-0472 2000-02-06T00:00:00.000-05:00 2017-10-09T21:29:07.937-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov CALDERA CSSA-2000-016.0 BUGTRAQ 20000106 innd 2.2.2 remote buffer overflow BUGTRAQ 20000707 inn update BUGTRAQ 20000721 [ANNOUNCE] INN 2.2.3 available BUGTRAQ 20000722 MDKSA-2000:023 inn update BID 1316 XF innd-cancel-overflow(4615) Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. cpe:/a:analogx:simpleserver_www:1.01 cpe:/a:analogx:simpleserver_www:1.03 cpe:/a:analogx:simpleserver_www:1.04 cpe:/a:analogx:simpleserver_www:1.05 cpe:/a:analogx:simpleserver_www:1.06 CVE-2000-0473 2000-06-15T00:00:00.000-04:00 2008-09-10T15:04:44.633-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS MISC http://www.analogx.com/contents/download/network/sswww.htm BID 1349 Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory. cpe:/a:realnetworks:realserver:7.0 cpe:/a:realnetworks:realserver:7.0.1 cpe:/a:realnetworks:realserver:8.0_beta CVE-2000-0474 2000-06-01T00:00:00.000-04:00 2017-10-09T21:29:07.997-04:00 7.8 NETWORK LOW NONE NONE NONE COMPLETE http://nvd.nist.gov BUGTRAQ 20000601 Remote DoS attack in Real Networks Real Server (Strike #2) Vulnerability BUGTRAQ 20000601 Remote DoS attack in RealServer: USSR-2000043 BID 1288 XF realserver-malformed-remote-dos(4587) Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory. cpe:/o:microsoft:windows_2000 CVE-2000-0475 2000-06-15T00:00:00.000-04:00 2018-10-12T17:29:38.030-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BID 1350 MS MS00-020 XF win2k-desktop-separation(4714) Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability. cpe:/a:michael_jennings:eterm:0.8.10 cpe:/a:putty:putty:0.48 cpe:/a:rxvt:rxvt:2.6.1 cpe:/a:xfree86_project:x11r6:3.3.3 cpe:/a:xfree86_project:x11r6:4.0 CVE-2000-0476 2000-06-01T00:00:00.000-04:00 2008-09-10T15:04:44.960-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000601 [rootshell.com] Xterm DoS Attack BUGTRAQ 20000601 [rootshell.com] Xterm DoS Attack BID 1298 xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized. cpe:/a:symantec:norton_antivirus:1.5::ms_exchange cpe:/a:symantec:norton_antivirus:2.0::ms_exchange CVE-2000-0477 2000-06-14T00:00:00.000-04:00 2017-10-09T21:29:08.123-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000614 Vulnerabilities in Norton Antivirus for Exchange BID 1351 XF antivirus-nav-zip-bo(4710) Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names. cpe:/a:symantec:norton_antivirus:1.5::ms_exchange cpe:/a:symantec:norton_antivirus:2.0::ms_exchange CVE-2000-0478 2000-06-14T00:00:00.000-04:00 2017-10-09T21:29:08.170-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000614 Vulnerabilities in Norton Antivirus for Exchange BID 1351 XF antivirus-nav-fail-open(4709) In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server. cpe:/a:shadow_op_software:dragon_server:1.0 cpe:/a:shadow_op_software:dragon_server:2.0 CVE-2000-0479 2000-06-16T00:00:00.000-04:00 2016-10-17T22:07:08.110-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000616 Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 BID 1352 Dragon FTP server allows remote attackers to cause a denial of service via a long USER command. cpe:/a:shadow_op_software:dragon_server:1.0 cpe:/a:shadow_op_software:dragon_server:2.0 CVE-2000-0480 2000-06-16T00:00:00.000-04:00 2016-10-17T22:07:09.360-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000616 Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00 BID 1352 Dragon telnet server allows remote attackers to cause a denial of service via a long username. cpe:/a:kde:k-mail:1.0.23 cpe:/a:kde:k-mail:1.0.24 cpe:/a:kde:k-mail:1.0.25 cpe:/a:kde:k-mail:1.0.26 cpe:/a:kde:k-mail:1.0.27 cpe:/a:kde:k-mail:1.0.28 cpe:/a:kde:k-mail:1.0.29 cpe:/a:kde:k-mail:1.0.29.1 CVE-2000-0481 1999-06-01T00:00:00.000-04:00 2017-10-09T21:29:08.247-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov VULN-DEV 20000601 Kmail heap overflow BID 1380 XF kde-kmail-attachment-dos(4993) Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name. cpe:/a:checkpoint:firewall-1:4.0 cpe:/a:checkpoint:firewall-1:4.1 CVE-2000-0482 2000-06-06T00:00:00.000-04:00 2017-10-09T21:29:08.467-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000605 FW-1 IP Fragmentation Vulnerability CONFIRM http://www.checkpoint.com/techsupport/alerts/list_vun.html#IP_Fragmentation BID 1312 XF fw1-packet-fragment-dos(4609) Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets. cpe:/a:redhat:linux_powertools:6.1 cpe:/a:redhat:linux_powertools:6.2 cpe:/a:zope:zope:1.10.3 cpe:/a:zope:zope:2.1.1 cpe:/a:zope:zope:2.1.7 CVE-2000-0483 2000-06-15T00:00:00.000-04:00 2017-10-09T21:29:08.763-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS FREEBSD FreeBSD-SA-00:38 BUGTRAQ 20000615 [Brian@digicool.com: [Zope] Zope security alert and 2.1.7 update [*important*]] BUGTRAQ 20000728 MDKSA-2000:026 Zope update REDHAT RHSA-2000:038 BID 1354 BUGTRAQ 2000615 Conectiva Linux Security Announcement - ZOPE CONFIRM http://www.zope.org/Products/Zope/Hotfix_06_16_2000/security_alert XF zope-dtml-remote-modify(4716) The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. cpe:/a:max_feoktistov:small_http_server:1.212 CVE-2000-0484 2000-06-15T00:00:00.000-04:00 2017-10-09T21:29:08.827-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000616 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability NTBUGTRAQ 20000616 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability BID 1355 XF small-http-get-overflow-dos(4692) Buffer overflow in Small HTTP Server allows remote attackers to cause a denial of service via a long GET request. cpe:/a:microsoft:sql_server:6.5 cpe:/a:microsoft:sql_server:7.0 CVE-2000-0485 2000-05-30T00:00:00.000-04:00 2018-10-12T17:29:38.343-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000530 Fw: Steal Passwords Using SQL Server EM BID 1292 MS MS00-041 XF mssql-dts-reveal-passwords(4582) Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability. cpe:/a:cisco:tacacs%2b:f4.0.2alpha cpe:/a:cisco:tacacs%2b:f4.0.3alpha cpe:/o:cisco:ios CVE-2000-0486 2000-05-30T00:00:00.000-04:00 2017-10-09T21:29:08.950-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000530 An Analysis of the TACACS+ Protocol and its Implementations CONFIRM http://archives.neohapsis.com/archives/bugtraq/2000-05/0370.html BID 1293 XF tacacsplus-packet-length-dos(4985) Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field. cpe:/o:microsoft:windows_2000 CVE-2000-0487 2000-06-01T00:00:00.000-04:00 2018-10-12T17:29:38.717-04:00 3.6 LOCAL LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov BID 1295 MS MS00-032 The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability. cpe:/a:ithouse:ithouse_mail_server:1.0.4 CVE-2000-0488 2000-05-30T00:00:00.000-04:00 2017-10-09T21:29:09.030-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000601 DST2K0007: Buffer Overrun in ITHouse Mail Server v1.04 BID 1285 XF ithouse-rcpt-overflow(4580) Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:netbsd:netbsd:1.4::x86 cpe:/o:netbsd:netbsd:1.4.1::alpha cpe:/o:netbsd:netbsd:1.4.1::arm32 cpe:/o:netbsd:netbsd:1.4.1::sparc cpe:/o:netbsd:netbsd:1.4.1::x86 cpe:/o:netbsd:netbsd:1.4.2::alpha cpe:/o:netbsd:netbsd:1.4.2::arm32 cpe:/o:netbsd:netbsd:1.4.2::sparc cpe:/o:netbsd:netbsd:1.4.2::x86 cpe:/o:openbsd:openbsd:2.5 cpe:/o:openbsd:openbsd:2.6 cpe:/o:openbsd:openbsd:2.7 CVE-2000-0489 1999-09-05T00:00:00.000-04:00 2017-10-09T21:29:09.107-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 622 BUGTRAQ 20000601 Local FreeBSD, Openbsd, NetBSD, DoS Vulnerability - Mac OS X affected BUGTRAQ 19990826 Local DoS in FreeBSD XF bsd-setsockopt-dos(3298) FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers. cpe:/a:netwin:dmail:2.7 cpe:/a:netwin:dmail:2.7q cpe:/a:netwin:dmail:2.8e cpe:/a:netwin:dmail:2.8f cpe:/a:netwin:dmail:2.8g cpe:/a:netwin:dmail:2.8h CVE-2000-0490 2000-06-01T00:00:00.000-04:00 2017-10-09T21:29:09.187-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000601 Netwin's Dmail package CONFIRM http://netwinsite.com/dmail/security.htm BID 1297 XF dmail-etrn-dos(4579) Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request. cpe:/a:gnome:gdm:1.0 cpe:/o:caldera:openlinux cpe:/o:suse:suse_linux:6.2 cpe:/o:suse:suse_linux:6.4 CVE-2000-0491 2000-05-24T00:00:00.000-04:00 2008-09-10T15:04:48.663-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS CALDERA CSSA-2000-013.0 BUGTRAQ 20000521 "gdm" remote hole BUGTRAQ 20000607 Conectiva Linux Security Announcement - gdm SUSE 20000524 Security hole in gdm <= 2.0beta4-25 BID 1233 BID 1279 BID 1370 Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request. cpe:/a:passwd:passwd:1.2 CVE-2000-0492 2000-06-04T00:00:00.000-04:00 2008-09-10T15:04:48.743-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Insecure encryption in PassWD v1.2 BID 1300 PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords. cpe:/a:atrius_trivalie_sn:time_sync:1.0.1 CVE-2000-0493 2000-06-01T00:00:00.000-04:00 2017-10-09T21:29:09.247-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS VULN-DEV 20000601 Vulnerability in SNTS BID 1289 XF timesync-bo-execute(4602) Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string. cpe:/a:symantec_veritas:volume_manager:3.0.2 cpe:/a:symantec_veritas:volume_manager:3.0.3 cpe:/a:symantec_veritas:volume_manager:3.0.4 CVE-2000-0494 2000-06-16T00:00:00.000-04:00 2008-09-10T15:04:48.977-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000616 Veritas Volume Manager 3.0.x hole CONFIRM http://seer.support.veritas.com/tnotes/volumeman/230053.htm BID 1356 Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script. cpe:/a:microsoft:windows_media_services:4.0 cpe:/a:microsoft:windows_media_services:4.1 CVE-2000-0495 2000-05-30T00:00:00.000-04:00 2018-10-12T17:29:38.920-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1282 MS MS00-038 XF ms-malformed-media-dos(4585) Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. cpe:/a:ibm:websphere_application_server:3.0.21 CVE-2000-0497 2000-06-08T00:00:00.000-04:00 2008-09-10T15:04:49.257-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000612 IBM WebSphere JSP showcode vulnerability BID 1328 CONFIRM http://www-4.ibm.com/software/webservers/appserv/efix.html IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. cpe:/a:unify:ewave_servletexec:3.0 CVE-2000-0498 2000-06-08T00:00:00.000-04:00 2017-10-09T21:29:09.483-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 20000608 Potential vulnerability in Unify eWave ServletExec BID 1328 XF ewave-servletexec-jsp-source-read(4649) Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. cpe:/a:bea:weblogic_server:::express cpe:/a:bea:weblogic_server:3.1.8 cpe:/a:bea:weblogic_server:4.0.4 cpe:/a:bea:weblogic_server:4.5.1 CVE-2000-0499 2000-06-08T00:00:00.000-04:00 2017-10-09T21:29:09.547-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 20000612 BEA WebLogic JSP showcode vulnerability CONFIRM http://developer.bea.com/alerts/security_000612.html BID 1328 XF weblogic-jsp-source-read(4694) The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. cpe:/a:bea:weblogic_server:3.1.8 cpe:/a:bea:weblogic_server:3.1.8::express cpe:/a:bea:weblogic_server:4.0 cpe:/a:bea:weblogic_server:4.0::express cpe:/a:bea:weblogic_server:4.5 cpe:/a:bea:weblogic_server:4.5::express cpe:/a:bea:weblogic_server:5.1 cpe:/a:bea:weblogic_server:5.1::express CVE-2000-0500 2000-06-21T00:00:00.000-04:00 2017-10-09T21:29:09.607-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000621 BEA WebLogic /file/ showcode vulnerability BID 1378 CONFIRM http://www.weblogic.com/docs51/admindocs/http.html#file XF weblogic-file-source-read(4775) The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing. cpe:/a:alt-n:mdaemon:2.8.5.0 CVE-2000-0501 2000-06-16T00:00:00.000-04:00 2017-10-09T21:29:09.653-04:00 2.6 NETWORK HIGH NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000616 mdaemon 2.8.5.0 WinNT and Win9x remote DoS BID 1366 XF mdaemon-pass-dos(4745) Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. cpe:/a:mcafee:virusscan:4.0.3 CVE-2000-0502 2000-06-08T00:00:00.000-04:00 2017-10-09T21:29:09.717-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000607 Mcafee Alerting DOS vulnerability BID 1326 XF mcafee-alerting-dos(4641) Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5:preview CVE-2000-0503 2000-06-06T00:00:00.000-04:00 2008-09-10T15:04:50.663-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000606 IE 5 Cross-frame security vulnerability using IFRAME and WebBrowser control BID 1311 The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event. cpe:/a:gnome:gdm:1.0 cpe:/a:gnome:gdm:1.1 cpe:/a:open_group:x:11.0r5 cpe:/a:open_group:x:11.0r6 cpe:/a:open_group:x:11.0r6.1 cpe:/a:open_group:x:11.0r6.2 cpe:/a:open_group:x:11.0r6.3 cpe:/a:open_group:x:11.0r6.4 cpe:/a:xfree86_project:x11r6:3.3.3 cpe:/a:xfree86_project:x11r6:3.3.4 cpe:/a:xfree86_project:x11r6:3.3.5 cpe:/a:xfree86_project:x11r6:3.3.6 cpe:/a:xfree86_project:x11r6:4.0 CVE-2000-0504 2000-06-19T00:00:00.000-04:00 2008-09-10T15:04:50.930-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000619 XFree86: libICE DoS BID 1369 CONFIRM http://www.xfree86.org/security/ libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. cpe:/a:apache:http_server:1.3.6::win32 cpe:/a:apache:http_server:1.3.9::win32 cpe:/a:apache:http_server:1.3.11::win32 cpe:/a:apache:http_server:1.3.12::win32 cpe:/a:ibm:http_server:1.3.3::win32 cpe:/a:ibm:http_server:1.3.6.2::win32 CVE-2000-0505 2000-05-31T00:00:00.000-04:00 2017-10-09T21:29:09.763-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1284 BUGTRAQ 20000603 Re: IBM HTTP SERVER / APACHE XF ibm-http-file-retrieve(4575) The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters. cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.1 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre5 CVE-2000-0506 2000-06-09T00:00:00.000-04:00 2008-09-10T15:04:51.103-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 SGI 20000802-01-P BUGTRAQ 20000609 Trustix Security Advisory BUGTRAQ 20000608 CONECTIVA LINUX SECURITY ANNOUNCEMENT - kernel REDHAT RHSA-2000:037 BID 1322 BUGTRAQ 20000609 Sendmail & procmail local root exploits on Linux kernel up to 2.2.16pre5 The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability." cpe:/a:concatus:imate_webmail_server:2.5 CVE-2000-0507 2000-06-01T00:00:00.000-04:00 2017-10-09T21:29:09.827-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000601 DST2K0006: Denial of Service Possibility in Imate WebMail Server BID 1286 XF nt-webmail-dos(4586) Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command. cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:mandrakesoft:mandrake_linux:6.0 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:redhat:linux:6.0 cpe:/o:redhat:linux:6.1 cpe:/o:redhat:linux:6.2 CVE-2000-0508 1994-12-19T00:00:00.000-05:00 2017-10-09T21:29:09.873-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000608 Remote DOS in linux rpc.lockd BID 1372 XF linux-lockd-remote-dos(5050) rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request. cpe:/a:sambar:sambar_server:4.3:beta9 CVE-2000-0509 2000-06-01T00:00:00.000-04:00 2016-10-17T22:07:14.410-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000601 DST2K0008: Buffer Overrun in Sambar Server 4.3 BID 1287 Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname. cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.3 CVE-2000-0510 2000-06-21T00:00:00.000-04:00 2017-10-09T21:29:09.937-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov CONFIRM ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch BUGTRAQ 20000620 CUPS DoS Bugs BID 1373 XF debian-cups-malformed-ipp(4846) CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request. cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.3 CVE-2000-0511 2000-06-21T00:00:00.000-04:00 2017-10-09T21:29:09.983-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov CONFIRM ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch BUGTRAQ 20000620 CUPS DoS Bugs BID 1373 XF debian-cups-posts(4846) CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request. cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.3 CVE-2000-0512 2000-06-16T00:00:00.000-04:00 2017-10-09T21:29:10.047-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov CONFIRM ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch BUGTRAQ 20000620 CUPS DoS Bugs BID 1373 XF debian-cups-posts(4846) CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service. cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.3 CVE-2000-0513 2000-06-21T00:00:00.000-04:00 2017-10-09T21:29:10.107-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov CONFIRM ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch BUGTRAQ 20000620 CUPS DoS Bugs BID 1373 XF debian-cups-posts(4846) CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password. cpe:/a:mit:kerberos:5_1.1 cpe:/a:mit:kerberos:5_1.1.1 CVE-2000-0514 2000-06-14T00:00:00.000-04:00 2017-10-09T21:29:10.153-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CONFIRM http://web.mit.edu/kerberos/www/advisories/ftp.txt BID 1374 BUGTRAQ 20000614 Security Advisory: REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON XF kerberos-gssftpd-dos(4734) GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges. cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 CVE-2000-0515 2000-06-07T00:00:00.000-04:00 2017-10-09T21:29:10.200-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BID 1327 BUGTRAQ 20000607 [ Hackerslab bug_paper ] HP-UX SNMP daemon vulnerability BUGTRAQ 20000608 Re: HP-UX SNMP daemon vulnerability XF hpux-snmp-daemon(4643) The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges. cpe:/a:intel:shiva_access_manager:5.0::solaris CVE-2000-0516 2000-06-06T00:00:00.000-04:00 2017-10-09T21:29:10.263-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000606 Shiva Access Manager 5.0.0 Plaintext LDAP root password. BID 1329 XF shiva-plaintext-ldap-password(4612) When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server. cpe:/a:netscape:communicator:4.0 cpe:/a:netscape:communicator:4.5 cpe:/a:netscape:communicator:4.6 cpe:/a:netscape:communicator:4.7 cpe:/a:netscape:communicator:4.51 cpe:/a:netscape:communicator:4.61 cpe:/a:netscape:communicator:4.72 cpe:/a:netscape:communicator:4.73 CVE-2000-0517 2000-05-26T00:00:00.000-04:00 2017-10-09T21:29:10.310-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov CERT CA-2000-08 BID 1260 XF netscape-ssl-certificate(4550) Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0::windows_98 cpe:/a:microsoft:ie:4.0::windows_nt cpe:/a:microsoft:ie:4.0.1::windows_95 cpe:/a:microsoft:ie:4.0.1::windows_98 cpe:/a:microsoft:ie:4.0.1::windows_nt cpe:/a:microsoft:ie:5::windows_nt_4.0 cpe:/a:microsoft:ie:5.0::windows_2000 cpe:/a:microsoft:ie:5.0::windows_95 cpe:/a:microsoft:ie:5.0::windows_98 cpe:/a:microsoft:ie:5.0.1::windows_2000 cpe:/a:microsoft:ie:5.0.1::windows_95 cpe:/a:microsoft:ie:5.0.1::windows_98 cpe:/a:microsoft:ie:5.0.1::windows_nt_4.0 CVE-2000-0518 2000-06-05T00:00:00.000-04:00 2018-10-12T17:29:39.247-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MISC http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt CERT CA-2000-10 BID 1309 MS MS00-039 XF ie-invalid-frame-image-certificate(4624) Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities. cpe:/a:microsoft:ie:4.0 cpe:/a:microsoft:ie:4.0::windows_98 cpe:/a:microsoft:ie:4.0::windows_nt cpe:/a:microsoft:ie:4.0.1::windows_95 cpe:/a:microsoft:ie:4.0.1::windows_98 cpe:/a:microsoft:ie:4.0.1::windows_nt cpe:/a:microsoft:ie:5.0::windows_2000 cpe:/a:microsoft:ie:5.0::windows_95 cpe:/a:microsoft:ie:5.0::windows_98 cpe:/a:microsoft:ie:5.0::windows_nt_4.0 cpe:/a:microsoft:ie:5.0.1::windows_2000 cpe:/a:microsoft:ie:5.0.1::windows_95 cpe:/a:microsoft:ie:5.0.1::windows_98 cpe:/a:microsoft:ie:5.0.1::windows_nt_4.0 CVE-2000-0519 2000-06-05T00:00:00.000-04:00 2018-10-12T17:29:39.733-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov MISC http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt CERT CA-2000-10 BID 1309 MS MS00-039 XF ie-revalidate-certificate(4627) Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities. cpe:/a:stelian:pop_dump:0.4b9.0 cpe:/a:stelian:pop_dump:0.4b9.9 cpe:/a:stelian:pop_dump:0.4b15.1 cpe:/a:stelian:pop_dump:0.4b15.30 cpe:/a:stelian:pop_dump:0.4b16.0 cpe:/a:stelian:pop_dump:0.4b17.0 CVE-2000-0520 2000-06-07T00:00:00.000-04:00 2016-10-17T22:07:15.660-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS MISC http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=11880 BUGTRAQ 20000630 CONECTIVA LINUX SECURITY ANNOUNCEMENT - dump BID 1330 Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. cpe:/a:michael_lamont:savant_webserver:2.1 CVE-2000-0521 2000-06-05T00:00:00.000-04:00 2017-10-09T21:29:10.547-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000605 MDMA Advisory #5: Reading of CGI Scripts under Savant Webserver BID 1313 XF savant-source-read(4616) Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number. cpe:/a:rsa:ace_server:3.1 cpe:/a:rsa:ace_server:3.3 cpe:/a:rsa:ace_server:3.3.1 cpe:/a:rsa:ace_server:4.0 cpe:/a:rsa:ace_server:4.1 CVE-2000-0522 2000-06-08T00:00:00.000-04:00 2017-10-09T21:29:10.593-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov CONFIRM ftp://ftp.securid.com/support/outgoing/dos/readme.txt BUGTRAQ 20000714 Re: RSA Aceserver UDP Flood Vulnerability BID 1332 BUGTRAQ 20000608 Potential DoS Attack on RSA's ACE/Server XF aceserver-udp-packet-dos(5053) RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash. cpe:/a:etype:eserv:2.9.2 CVE-2000-0523 2000-06-06T00:00:00.000-04:00 2017-10-09T21:29:10.653-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000606 MDMA Advisory #6: EServ Logging Heap Overflow Vulnerability BID 1315 XF eserv-logging-overflow(4614) Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command. cpe:/a:microsoft:exchange_server:4.0 cpe:/a:microsoft:exchange_server:5.0 cpe:/a:microsoft:outlook:97 CVE-2000-0524 2000-06-05T00:00:00.000-04:00 2008-09-10T15:04:55.133-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000604 Microsoft Outlook (Express) bug.. BID 1333 Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From. cpe:/a:openbsd:openssh:1.2 cpe:/a:openbsd:openssh:1.2.3 cpe:/a:openbsd:openssh:2.1 CVE-2000-0525 2000-06-08T00:00:00.000-04:00 2017-10-09T21:29:10.717-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000609 OpenSSH's UseLogin option allows remote access with root privilege. OPENBSD 20000606 The non-default UseLogin feature in /etc/sshd_config is broken and should not be used. BID 1334 XF openssh-uselogin-remote-exec(4646) OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon. cpe:/a:3r_soft:mailstudio_2000:2.0 CVE-2000-0526 2000-06-09T00:00:00.000-04:00 2008-09-10T15:04:55.273-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Mailstudio2000 CGI Vulnerabilities [S0ftPj.4] BID 1335 mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:3r_soft:mailstudio_2000:2.0 CVE-2000-0527 2000-06-09T00:00:00.000-04:00 2008-09-10T15:04:55.367-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000609 Mailstudio2000 CGI Vulnerabilities [S0ftPj.4] BID 1335 userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. cpe:/a:network_associates:net_tools_pki_server:1.0 CVE-2000-0528 2000-06-19T00:00:00.000-04:00 2017-10-09T21:29:10.780-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov CONFIRM ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt BUGTRAQ 20000619 Net Tools PKI server exploits BID 1364 XF nettools-pki-unauthenticated-access(4743) Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files. cpe:/a:network_associates:net_tools_pki_server:1.0 CVE-2000-0529 2000-06-19T00:00:00.000-04:00 2017-10-09T21:29:10.827-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov CONFIRM ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt BUGTRAQ 20000619 Net Tools PKI server exploits BID 1363 XF nettools-pki-http-bo(4744) Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request. cpe:/o:caldera:openlinux:2.4 cpe:/o:kde:kde:1.1.2 CVE-2000-0530 2000-05-31T00:00:00.000-04:00 2017-10-09T21:29:10.903-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CALDERA CSSA-2000-015.0 BUGTRAQ 20000531 KDE::KApplication feature? REDHAT RHSA-2000:032 BID 1291 XF kde-configuration-file-creation(4583) The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. cpe:/o:caldera:openlinux:2.3 cpe:/o:caldera:openlinux:2.4 cpe:/o:caldera:openlinux_eserver:2.3 cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.1::i386 CVE-2000-0531 1999-11-23T00:00:00.000-05:00 2017-12-18T21:29:11.050-05:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000728 MDKSA:2000-025 gpm update REDHAT RHSA-2000:045 BID 1377 BUGTRAQ 20000620 Bug in gpm XF linux-gpm-gpmctl-dos(5010) Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. cpe:/o:freebsd:freebsd:4.0 CVE-2000-0532 2000-06-07T00:00:00.000-04:00 2017-10-09T21:29:10.983-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS FREEBSD FreeBSD-SA-00:21 BID 1323 XF freebsd-ssh-ports(4638) A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered. cpe:/a:sgi:workshop_debugger_and_performance_tools:2.6 CVE-2000-0533 2000-06-20T00:00:00.000-04:00 2017-10-09T21:29:11.047-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 20000601-01-P BID 1379 XF irix-workshop-cvconnect-overwrite(4725) Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files. cpe:/o:aps_filter_development_team:apsfilter:5.4 CVE-2000-0534 2000-06-07T00:00:00.000-04:00 2018-05-02T21:29:07.117-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BID 1325 XF apsfilter-elevate-privileges(4617) The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user. cpe:/a:openssl:openssl:0.9.4 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:5.0:alpha CVE-2000-0535 2000-06-12T00:00:00.000-04:00 2008-09-10T15:05:00.477-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FREEBSD FreeBSD-SA-00:25 BID 1340 OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken. cpe:/a:xinetd:xinetd:2.1.87 cpe:/a:xinetd:xinetd:2.1.88 cpe:/a:xinetd:xinetd:2.1.88_pre1 cpe:/a:xinetd:xinetd:2.1.88_pre2 cpe:/a:xinetd:xinetd:2.1.89_pre1 cpe:/a:xinetd:xinetd:2.1.89_pre2 cpe:/a:xinetd:xinetd:2.1.89_pre3 cpe:/a:xinetd:xinetd:2.1.89_pre4 cpe:/a:xinetd:xinetd:2.1.89_pre5 CVE-2000-0536 2000-06-04T00:00:00.000-04:00 2017-10-09T21:29:11.107-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS DEBIAN 20000619 xinetd: bug in access control mechanism BID 1381 CONFIRM http://www.synack.net/xinetd/ XF xinetd-improper-restrictions(4986) xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry. cpe:/a:tolis_group:bru:15.1 cpe:/a:tolis_group:bru:16.0 CVE-2000-0537 2000-06-05T00:00:00.000-04:00 2017-10-09T21:29:11.153-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000606 BRU Vulnerability CALDERA CSSA-2000-018.0 BID 1321 XF bru-execlog-env-variable(4644) BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable. cpe:/a:allaire:coldfusion_server:2.0 cpe:/a:allaire:coldfusion_server:3.0 cpe:/a:allaire:coldfusion_server:3.01 cpe:/a:allaire:coldfusion_server:3.11 cpe:/a:allaire:coldfusion_server:3.12 cpe:/a:allaire:coldfusion_server:4.0 cpe:/a:allaire:coldfusion_server:4.0.1 cpe:/a:allaire:coldfusion_server:4.5 cpe:/a:allaire:coldfusion_server:4.5.1 CVE-2000-0538 2000-06-07T00:00:00.000-04:00 2017-10-09T21:29:11.217-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000607 New Allaire ColdFusion DoS ALLAIRE ASB00-14 BID 1314 XF coldfusion-parse-dos(4611) ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. cpe:/a:macromedia:jrun:2.3 CVE-2000-0539 2000-06-22T00:00:00.000-04:00 2017-10-09T21:29:11.280-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov ALLAIRE ASB00-015 BID 1386 XF jrun-read-sample-files(4774) Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet. cpe:/a:macromedia:jrun:2.3 CVE-2000-0540 2000-06-22T00:00:00.000-04:00 2017-10-09T21:29:11.327-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov ALLAIRE ASB00-015 BID 1386 XF jrun-read-sample-files(4774) JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information. cpe:/a:panda:panda_antivirus:2.0::netware CVE-2000-0541 2000-06-17T00:00:00.000-04:00 2017-10-09T21:29:11.373-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000617 Infosec.20000617.panda.a BID 1359 XF panda-antivirus-remote-admin(4707) The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command. cpe:/a:ericsson:axc_tigris_multiservice_access_platform:623.0 cpe:/a:ericsson:axc_tigris_multiservice_access_platform:627.0 cpe:/a:ericsson:axc_tigris_multiservice_access_platform:711.0 CVE-2000-0542 2000-06-13T00:00:00.000-04:00 2017-10-09T21:29:11.437-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000612 ACC/Ericsson Tigris Accounting Failure BID 1345 XF tigris-radius-login-failure(4705) Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds. cpe:/a:pgp:certificate_server:2.5 cpe:/a:pgp:certificate_server:2.5.1 CVE-2000-0543 2000-06-14T00:00:00.000-04:00 2017-12-18T21:29:11.127-05:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000614 Remote DoS attack in Networks Associates PGP Certificate Server Version 2.5 Vulnerability BID 1343 XF pgp-cert-server-dos(4695) The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0544 2000-06-05T00:00:00.000-04:00 2008-09-10T15:05:01.307-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000604 anonymous SMBwriteX DoS BID 1304 Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length. cpe:/a:sgi:mailx:3 cpe:/a:sgi:mailx:4 cpe:/a:sgi:mailx:5 cpe:/a:sgi:mailx:6.0.1 cpe:/a:sgi:mailx:6.1 cpe:/a:sgi:mailx:6.2 cpe:/a:sgi:mailx:6.3 cpe:/a:sgi:mailx:6.4 cpe:/a:sgi:mailx:6.5 CVE-2000-0545 2000-08-08T00:00:00.000-04:00 2008-09-10T15:05:01.367-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000602 /usr/bin/Mail exploit for Slackware 7.0 (mail-slack.c) DEBIAN 20000605 mailx: mail group exploit in mailx BID 1305 Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter. cpe:/a:cygnus:cygnus_network_security cpe:/a:cygnus:kerbnet cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1 cpe:/a:mit:kerberos:5_1.1.1 CVE-2000-0546 2000-06-09T00:00:00.000-04:00 2008-09-10T15:05:01.477-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC CIAC K-051 CONFIRM http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt CERT CA-2000-11 BID 1338 Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function. cpe:/a:cygnus:cygnus_network_security cpe:/a:cygnus:kerbnet cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1 cpe:/a:mit:kerberos:5_1.1.1 CVE-2000-0547 2000-06-09T00:00:00.000-04:00 2008-09-10T15:05:01.557-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC CIAC K-051 CONFIRM http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt CERT CA-2000-11 BID 1338 Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function. cpe:/a:cygnus:cygnus_network_security cpe:/a:cygnus:kerbnet cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1 cpe:/a:mit:kerberos:5_1.1.1 CVE-2000-0548 2000-06-09T00:00:00.000-04:00 2008-09-10T15:05:01.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC CIAC K-051 CONFIRM http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt CERT CA-2000-11 REDHAT RHSA-2000:031 Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function. cpe:/a:cygnus:cygnus_network_security:4.0 cpe:/a:cygnus:kerbnet:5.0 cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5-1.1 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1.1 CVE-2000-0549 2000-06-09T00:00:00.000-04:00 2008-09-10T15:05:01.743-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC CIAC K-051 CONFIRM http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt CERT CA-2000-11 REDHAT RHSA-2000:031 Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request. cpe:/a:cygnus:cygnus_network_security:4.0 cpe:/a:cygnus:kerbnet:5.0 cpe:/a:mit:kerberos:4.0 cpe:/a:mit:kerberos:5-1.1 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.1.1 CVE-2000-0550 2000-06-09T00:00:00.000-04:00 2008-09-10T15:05:01.837-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC CIAC K-051 CONFIRM http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt CERT CA-2000-11 REDHAT RHSA-2000:031 BID 1465 Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service. cpe:/a:danware_data:netop:6.0 cpe:/a:danware_data:netop:6.50 CVE-2000-0551 2000-05-23T00:00:00.000-04:00 2017-10-09T21:29:11.483-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000523 I think BID 1263 XF danware-netop-bypass-security(4569) The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files. cpe:/a:mirabilis:icq:2000.0a CVE-2000-0552 2000-06-06T00:00:00.000-04:00 2017-10-09T21:29:11.530-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 20000606 ICQ2000A ICQmail temparary internet link vulnearbility BID 1307 XF icq-temp-link(4607) ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. cpe:/a:darren_reed:ipfilter:3.3.15 cpe:/a:darren_reed:ipfilter:3.4.3 CVE-2000-0553 2000-05-26T00:00:00.000-04:00 2017-10-09T21:29:11.577-04:00 2.6 NETWORK HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000525 Security Vulnerability in IPFilter 3.3.15 and 3.4.3 BID 1308 XF ipfilter-firewall-race-condition(4994) Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions. cpe:/a:lilikoi:ceilidh:2.60 CVE-2000-0554 2000-06-08T00:00:00.000-04:00 2008-09-10T15:05:02.117-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000608 DST2K0010: DoS & Path Revealing Vulnerability in Ceilidh v2.60a BID 1320 Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field. cpe:/a:lilikoi:ceilidh:2.60 CVE-2000-0555 2000-06-09T00:00:00.000-04:00 2017-10-09T21:29:11.640-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000608 DST2K0010: DoS & Path Revealing Vulnerability in Ceilidh v2.60a BID 1320 XF ceilidh-post-dos(4622) Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests. cpe:/a:computalynx:cmail:2.4.7 CVE-2000-0556 2000-06-05T00:00:00.000-04:00 2017-10-09T21:29:11.687-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000608 DST2K0011: DoS & BufferOverrun in CMail v2.4.7 WebMail CONFIRM http://www.computalynx.net/news/Jun2000/news0806200001.html BID 1319 XF cmail-long-username-dos(4625) Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to the user dialog running on port 8002. cpe:/a:computalynx:cmail:2.4.7 CVE-2000-0557 2000-06-05T00:00:00.000-04:00 2017-10-09T21:29:11.747-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS NTBUGTRAQ 20000608 DST2K0011: DoS & BufferOverrun in CMail v2.4.7 WebMail BID 1318 XF cmail-get-overflow-execute(4626) Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request. cpe:/a:hp:openview_network_node_manager:6.1 CVE-2000-0558 2000-06-06T00:00:00.000-04:00 2008-09-10T15:05:02.557-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS NTBUGTRAQ 20000608 DST2K0012: BufferOverrun in HP Openview Network Node Manager v6.1 BID 1317 Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345. cpe:/a:ca:etrust_intrusion_detection:1.4.1.13 CVE-2000-0559 2000-06-07T00:00:00.000-04:00 2008-09-10T15:05:02.633-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1341 BUGTRAQ 20000607 SessionWall-3 Paper + (links to) code eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords. cpe:/a:international_telecommunications:international_telecommunications_webbbs:1.1.5 cpe:/a:international_telecommunications:international_telecommunications_webbbs:1.17 CVE-2000-0561 2000-06-19T00:00:00.000-04:00 2017-10-09T21:29:11.797-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000620 DST2K0018: Multiple BufferOverruns in WebBBS HTTP Server v1.15 BID 1365 XF webbbs-get-request-overflow(4742) Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request. cpe:/a:iss:blackice_agent:2.0.23 cpe:/a:iss:blackice_defender:2.1 CVE-2000-0562 2000-06-22T00:00:00.000-04:00 2008-09-10T15:05:02.820-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000620 BlackICE by Network ICE Corp vulnerability against Back Orifice 1.2 BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower. cpe:/a:apple:mac_os_runtime_for_java:2.1::java CVE-2000-0563 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:19.593-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000609 Security Holes Found in URLConnection of MRJ and IE of Mac OS (was Re: Reappearance of an old IE security bug) BID 1336 BUGTRAQ 20000513 Re: Reappearance of an old IE security bug The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model. cpe:/a:mirabilis:icq:0.99b_1.1.1.1 cpe:/a:mirabilis:icq:0.99b_v.3.19 cpe:/a:mirabilis:icq:98.0a cpe:/a:mirabilis:icq:99a_2.15build1701 cpe:/a:mirabilis:icq:99a_2.21build1800 cpe:/a:mirabilis:icq:2000.0a CVE-2000-0564 2000-05-29T00:00:00.000-04:00 2008-09-10T15:05:03.040-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000529 ICQ Web Front Remote DoS Attack Vulnerability The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter. cpe:/a:mindstorm:smartftp_daemon:0.2 CVE-2000-0565 2000-06-13T00:00:00.000-04:00 2017-10-09T21:29:11.857-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000613 SmartFTP Daemon v0.2 Beta Build 9 - Remote Exploit BID 1344 XF smartftp-directory-traversal(4706) SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack. cpe:/o:caldera:openlinux:2.3 cpe:/o:caldera:openlinux:2.4 cpe:/o:mandrakesoft:mandrake_linux:6.0 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:mandrakesoft:mandrake_linux:7.1 cpe:/o:redhat:linux:5.2::alpha cpe:/o:redhat:linux:5.2::i386 cpe:/o:redhat:linux:5.2::sparc cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0566 2000-07-03T00:00:00.000-04:00 2018-05-02T21:29:07.207-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CALDERA CSSA-2000-021.0 BUGTRAQ 20000727 CONECTIVA LINUX SECURITY ANNOUNCEMENT - MAN MANDRAKE MDKSA-2000:015 REDHAT RHSA-2000:041 BID 1434 XF linux-man-makewhatis-tmp(4900) makewhatis in Linux man package allows local users to overwrite files via a symlink attack. cpe:/a:microsoft:outlook:97 cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook:2000 cpe:/a:microsoft:outlook_express:4.0 cpe:/a:microsoft:outlook_express:4.01 cpe:/a:microsoft:outlook_express:5.0 CVE-2000-0567 2000-07-18T00:00:00.000-04:00 2018-10-12T17:29:40.217-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BID 1481 MS MS00-043 XF outlook-date-overflow(4953) Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability. cpe:/a:sybergen:secure_desktop:2.1 CVE-2000-0568 2000-06-30T00:00:00.000-04:00 2008-09-10T15:05:03.307-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1417 BUGTRAQ 20000630 Multiple vulnerabilities in Sybergen Secure Desktop Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes. cpe:/a:sybergen:sygate:2.0 cpe:/a:sybergen:sygate:3.11 CVE-2000-0569 2000-06-30T00:00:00.000-04:00 2017-10-09T21:29:11.903-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov WIN2KSEC 20000630 Any LAN user can crash Sygate BID 1420 XF sygate-udp-packet-dos(5049) Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. cpe:/a:centrinity:firstclass_intranet_server:5.770 CVE-2000-0570 2000-06-27T00:00:00.000-04:00 2017-10-09T21:29:11.967-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000627 DoS in FirstClass Internet Services 5.770 BID 1421 XF firstclass-large-bcc-dos(4843) FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. cpe:/a:west_street_software:localweb_http_server:1.2 CVE-2000-0571 2000-07-05T00:00:00.000-04:00 2017-10-09T21:29:12.030-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov BID 1423 BUGTRAQ 20000703 Remote DoS Attack in LocalWEB HTTP Server 1.2.0 Vulnerability XF localweb-get-bo(4896) LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request. cpe:/a:visible_systems:razor:4.1 CVE-2000-0572 2000-07-05T00:00:00.000-04:00 2008-09-10T15:05:03.663-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 1424 BUGTRAQ 20000704 Recovering Passwords in Visible Systems' Razor The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges. cpe:/o:hp:hp-ux:11.00 CVE-2000-0573 2000-07-07T00:00:00.000-04:00 2018-05-02T21:29:07.443-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS AUSCERT AA-2000.02 FREEBSD FreeBSD-SA-00:29 NETBSD NetBSD-SA2000-009 BUGTRAQ 20000723 CONECTIVA LINUX SECURITY ANNOUNCEMENT - WU-FTPD (re-release) BUGTRAQ 20000702 [Security Announce] wu-ftpd update BUGTRAQ 20000622 WuFTPD: Providing *remote* root since at least1994 BUGTRAQ 20000623 WUFTPD 2.6.0 remote root exploit BUGTRAQ 20000707 New Released Version of the WuFTPD Sploit CALDERA CSSA-2000-020.0 CERT CA-2000-13 REDHAT RHSA-2000:039 BID 1387 BUGTRAQ 20000623 ftpd: the advisory version XF wuftp-format-string-stack-overwrite(4773) The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command. cpe:/a:openbsd:ftpd:5.51 cpe:/a:openbsd:ftpd:5.60 cpe:/a:washington_university:wu-ftpd:2.4.2_beta1::academ cpe:/a:washington_university:wu-ftpd:2.4.2_beta18::academ cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr4 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr5 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr6 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr7 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr8 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr9 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr10 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr11 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr12 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr13 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr14 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr15 cpe:/a:washington_university:wu-ftpd:2.4.2_vr16 cpe:/a:washington_university:wu-ftpd:2.4.2_vr17 cpe:/a:washington_university:wu-ftpd:2.5 cpe:/a:washington_university:wu-ftpd:2.6 CVE-2000-0574 2000-07-07T00:00:00.000-04:00 2008-09-10T15:05:03.807-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NETBSD NetBSD-SA2000-009 BUGTRAQ 20000705 proftp advisory BUGTRAQ 20000706 ftpd and setproctitle() BUGTRAQ 20000710 opieftpd setproctitle() patches CERT CA-2000-13 BID 1425 BID 1438 FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands. cpe:/a:ssh:ssh:1.2.27 CVE-2000-0575 2000-07-05T00:00:00.000-04:00 2017-10-09T21:29:12.077-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000630 Kerberos security vulnerability in SSH-1.2.27 BID 1426 XF ssh-kerberos-tickets-disclosure(4903) SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS. cpe:/a:oracle:web_listener:4.0.7::aix cpe:/a:oracle:web_listener:4.0.8::aix CVE-2000-0576 2000-07-05T00:00:00.000-04:00 2008-09-10T15:05:03.947-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000704 Oracle Web Listener for AIX DoS BID 1427 Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL. cpe:/a:netscape:professional_services_ftpserver:1.3.6 CVE-2000-0577 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:04.007-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000629 (forw) Re: Netscape ftp Server (fwd) BID 1411 BUGTRAQ 20000621 Netscape FTP Server - "Professional" as hell :> Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:sgi:mipspro_compilers:7.1 cpe:/a:sgi:mipspro_compilers:7.2.1 CVE-2000-0578 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:04.087-04:00 3.7 LOCAL HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000621 Predictability Problems in IRIX Cron and Compilers BID 1412 SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user. cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.5 CVE-2000-0579 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:04.147-04:00 3.7 LOCAL HIGH NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000621 Predictability Problems in IRIX Cron and Compilers BID 1413 IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000:2000.0.2195 cpe:/o:microsoft:windows_2000:2000.2072 CVE-2000-0580 2000-06-30T00:00:00.000-04:00 2008-09-10T15:05:04.227-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1415 BUGTRAQ 20000630 SecureXpert Advisory [SX-20000620-2] Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000:2000.0.2195 cpe:/o:microsoft:windows_2000:2000.2031 cpe:/o:microsoft:windows_2000:2000.2072 CVE-2000-0581 2000-06-30T00:00:00.000-04:00 2008-09-10T15:05:05.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1414 BUGTRAQ 20000630 SecureXpert Advisory [SX-20000620-1] Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash. cpe:/a:checkpoint:firewall-1:4.0 cpe:/a:checkpoint:firewall-1:4.1 CVE-2000-0582 2000-06-30T00:00:00.000-04:00 2008-09-10T15:05:06.947-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://www.checkpoint.com/techsupport/alerts/list_vun.html#SMTP_Security BID 1416 BUGTRAQ 20000630 SecureXpert Advisory [SX-20000620-3] Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy. cpe:/a:inter7:vpopmail_vchkpw:4.5 cpe:/a:inter7:vpopmail_vchkpw:4.7 CVE-2000-0583 2000-06-30T00:00:00.000-04:00 2008-09-10T15:05:09.337-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1418 BUGTRAQ 20000626 vpopmail-3.4.11 problems CONFIRM http://www.vpopmail.cx/vpopmail-ChangeLog vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives. cpe:/o:debian:debian_linux:2.1 cpe:/o:freebsd:freebsd:3.5 CVE-2000-0584 2000-07-02T00:00:00.000-04:00 2018-05-02T21:29:07.537-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:31 MISC http://shadowpenguin.backsection.net/advisories/advisory038.html BID 1445 XF canna-bin-execute-bo(4912) Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. cpe:/a:isc:dhcp_client:2.0 cpe:/a:isc:dhcp_client:3.0b1 CVE-2000-0585 2000-06-24T00:00:00.000-04:00 2018-05-02T21:29:07.660-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:34 NETBSD NetBSD-SA2000-008 BUGTRAQ 20000624 Possible root exploit in ISC DHCP client. BUGTRAQ 20000702 [Security Announce] dhcp update DEBIAN 20000628 dhcp client: remote root exploit in dhcp client SUSE 20000711 Security Hole in dhclient < 2.0 BID 1388 XF openbsd-isc-dhcp(4772) ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters. cpe:/a:dalnet:ircd:4.6.5 CVE-2000-0586 2000-06-29T00:00:00.000-04:00 2008-09-10T15:05:09.790-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS VULN-DEV 20000628 dalnet 4.6.5 remote vulnerability BID 1404 Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command. cpe:/a:glftpd:glftpd:1.18 cpe:/a:glftpd:glftpd:1.19 cpe:/a:glftpd:glftpd:1.20 cpe:/a:glftpd:glftpd:1.21b1 cpe:/a:glftpd:glftpd:1.21b2 cpe:/a:glftpd:glftpd:1.21b3 cpe:/a:glftpd:glftpd:1.21b4 cpe:/a:glftpd:glftpd:1.21b5 cpe:/a:glftpd:glftpd:1.21b6 cpe:/a:glftpd:glftpd:1.21b7 cpe:/a:glftpd:glftpd:1.21b8 CVE-2000-0587 2000-06-26T00:00:00.000-04:00 2008-09-10T15:05:09.883-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000627 Re: Glftpd privpath bugs... +fix BID 1401 BUGTRAQ 20000626 Glftpd privpath bugs... +fix The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability. cpe:/a:sawmill:sawmill:5.0.21 CVE-2000-0588 2000-06-26T00:00:00.000-04:00 2013-07-30T00:00:00.000-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000626 sawmill5.0.21 old path bug & weak hash algorithm BUGTRAQ 20000706 Patch for Flowerfire Sawmill Vulnerabilities Available BID 1402 SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands. cpe:/a:sawmill:sawmill:5.0.21 CVE-2000-0589 2000-06-26T00:00:00.000-04:00 2013-07-30T00:00:00.000-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000626 sawmill5.0.21 old path bug & weak hash algorithm BUGTRAQ 20000706 Patch for Flowerfire Sawmill Vulnerabilities Available BID 1403 SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration. cpe:/a:cgi-world:poll_it:2.0 CVE-2000-0590 2000-07-04T00:00:00.000-04:00 2017-10-09T21:29:12.123-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000706 Vulnerability in Poll_It cgi v2.0 BID 1431 XF http-cgi-pollit-variable-overwrite(4878) Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter. cpe:/a:novell:bordermanager:3.0 cpe:/a:novell:bordermanager:3.5 CVE-2000-0591 2000-07-05T00:00:00.000-04:00 2008-09-10T15:05:10.197-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000705 Novell BorderManager 3.0 EE - Encoded URL rule bypass BID 1432 Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL. cpe:/a:sapporoworks:sapporoworks_winproxy:2.0 cpe:/a:sapporoworks:sapporoworks_winproxy:2.0.1 CVE-2000-0592 2000-06-27T00:00:00.000-04:00 2008-09-10T15:05:10.273-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 1400 BUGTRAQ 20000627 [SPSadvisory #37]WinProxy 2.0.0/2.0.1 DoS and Exploitable Buffer Overflow Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands. cpe:/a:sapporoworks:sapporoworks_winproxy:2.0 cpe:/a:sapporoworks:sapporoworks_winproxy:2.0.1 CVE-2000-0593 2000-06-27T00:00:00.000-04:00 2017-10-09T21:29:12.187-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1400 BUGTRAQ 20000627 [SPSadvisory #37]WinProxy 2.0.0/2.0.1 DoS and Exploitable Buffer Overflow XF winproxy-get-dos(4831) WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number. cpe:/a:caldera:openlinux_desktop:2.3 cpe:/a:caldera:openlinux_ebuilder:2.3 cpe:/o:caldera:openlinux_edesktop:2.4 cpe:/o:caldera:openlinux_eserver:2.3 cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:4.0 cpe:/o:mandrakesoft:mandrake_linux:2007 CVE-2000-0594 2000-07-04T00:00:00.000-04:00 2017-10-09T21:29:12.233-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000704 BitchX exploit possibly waiting to happen, certain DoS BUGTRAQ 20000707 CONECTIVA LINUX SECURITY ANNOUNCEMENT - BitchX BUGTRAQ 20000707 BitchX update FREEBSD FreeBSD-SA-00:32 VULN-DEV 20000704 BitchX /ignore bug CALDERA CSSA-2000-022.0 REDHAT RHSA-2000:042 BID 1436 XF irc-bitchx-invite-dos(4897) BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:4.0 CVE-2000-0595 2000-07-05T00:00:00.000-04:00 2008-09-10T15:05:10.523-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS FREEBSD FreeBSD-SA-00:24 BID 1437 libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory. cpe:/a:microsoft:ie:4.0.1:sp2 cpe:/a:microsoft:ie:5 CVE-2000-0596 2000-06-27T00:00:00.000-04:00 2018-10-12T17:29:40.560-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CERT CA-2000-16 BID 1398 BUGTRAQ 20000627 FW: IE 5 and Access 2000 vulnerability - executing programs BUGTRAQ 20000627 IE 5 and Access 2000 vulnerability - executing programs MS MS00-049 Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability. cpe:/a:microsoft:excel:2000 cpe:/a:microsoft:powerpoint:97 cpe:/a:microsoft:powerpoint:2000 CVE-2000-0597 2000-06-27T00:00:00.000-04:00 2018-10-12T17:29:40.967-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1399 BUGTRAQ 20000627 IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs MS MS00-049 Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the "Office HTML Script" vulnerability. cpe:/a:fortech:proxy%2b:2.40 CVE-2000-0598 2000-06-26T00:00:00.000-04:00 2008-09-10T15:05:11.180-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000626 Proxy+ Telnet Gateway Problems MISC http://www.proxyplus.cz/faq/articles/EN/art01002.htm BID 1395 Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy. cpe:/a:imesh.com:imesh:1.02 CVE-2000-0599 2000-06-29T00:00:00.000-04:00 2008-09-10T15:05:11.413-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000629 iMesh 1.02 vulnerability MISC http://www.imesh.com/download/download.html BID 1407 Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port. cpe:/a:netscape:enterprise_server:4.1.1::netware cpe:/a:netscape:enterprise_server:5.0::netware cpe:/o:novell:netware:5.0 cpe:/o:novell:netware:5.1 CVE-2000-0600 2000-06-26T00:00:00.000-04:00 2017-10-09T21:29:12.297-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 20000626 Netscape Enterprise Server for NetWare Virtual Directory Vulnerab ility BID 1393 XF netscape-virtual-directory-bo(4780) Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL. cpe:/a:leafdigital:leafchat:1.7 CVE-2000-0601 2000-06-25T00:00:00.000-04:00 2008-09-10T15:05:11.680-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM http://www.leafdigital.com/Software/leafChat/history.html BID 1396 BUGTRAQ 20000625 LeafChat Denial of Service LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. cpe:/a:kevin_lindsay:secure_locate:2.0 cpe:/a:kevin_lindsay:secure_locate:2.1 CVE-2000-0602 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:11.743-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BID 1385 BUGTRAQ 20000621 rh 6.2 - gid compromises, etc Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environmental variable. cpe:/a:microsoft:sql_server:7.0 CVE-2000-0603 2000-07-07T00:00:00.000-04:00 2018-10-12T17:29:41.217-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1444 MS MS00-048 XF mssql-procedure-perms(4921) Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability. cpe:/o:redhat:linux:6.2 CVE-2000-0604 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:11.883-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BID 1383 BUGTRAQ 20000621 rh 6.2 - gid compromises, etc gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp. cpe:/a:blackboard:courseinfo:4.0 CVE-2000-0605 2000-07-10T00:00:00.000-04:00 2008-09-10T15:05:11.947-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000710 Two issues: Blackboard CourseInfo 4.0 stores admin password in clear text; strange settings on the winreg key. BID 1460 Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords. cpe:/o:debian:debian_linux:2.0 cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.3 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:mandrakesoft:mandrake_linux:7.1 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2 cpe:/o:redhat:linux:6.1 cpe:/o:redhat:linux:6.2 CVE-2000-0606 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:12.023-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1371 BUGTRAQ 20000619 Problems with "kon2" package Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter. cpe:/o:debian:debian_linux:2.0 cpe:/o:debian:debian_linux:2.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.3 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:mandrakesoft:mandrake_linux:7.1 cpe:/o:redhat:linux:5.0 cpe:/o:redhat:linux:5.1 cpe:/o:redhat:linux:5.2 cpe:/o:redhat:linux:6.1 cpe:/o:redhat:linux:6.2 CVE-2000-0607 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:12.087-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1371 BUGTRAQ 20000619 Problems with "kon2" package Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings. cpe:/a:netwin:cwmail:2.5e cpe:/a:netwin:cwmail:2.6g cpe:/a:netwin:cwmail:2.6i cpe:/a:netwin:cwmail:2.6j cpe:/a:netwin:dmailweb:2.5e cpe:/a:netwin:dmailweb:2.6g cpe:/a:netwin:dmailweb:2.6i cpe:/a:netwin:dmailweb:2.6j CVE-2000-0608 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:12.197-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1376 BUGTRAQ 20000620 NetWin dMailWeb Denial of Service NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost). cpe:/a:netwin:cwmail:2.5e cpe:/a:netwin:cwmail:2.6g cpe:/a:netwin:cwmail:2.6i cpe:/a:netwin:cwmail:2.6j cpe:/a:netwin:dmailweb:2.5e cpe:/a:netwin:dmailweb:2.6g cpe:/a:netwin:dmailweb:2.6i cpe:/a:netwin:dmailweb:2.6j CVE-2000-0609 2000-06-21T00:00:00.000-04:00 2008-09-10T15:05:12.257-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1376 BUGTRAQ 20000620 NetWin dMailWeb Denial of Service NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter. cpe:/a:netwin:cwmail:2.6g cpe:/a:netwin:dmailweb:2.6g CVE-2000-0610 2000-06-23T00:00:00.000-04:00 2017-10-09T21:29:12.450-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000623 NetWin dMailWeb Unrestricted Mail Relay BID 1390 XF netwin-dmailweb-newline(4770) NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return. cpe:/a:netwin:cwmail:2.6g cpe:/a:netwin:dmailweb:2.6g CVE-2000-0611 2000-06-23T00:00:00.000-04:00 2017-10-09T21:29:12.513-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000623 NetWin dMailWeb Unrestricted Mail Relay BID 1391 XF netwin-dmailweb-auth(4771) The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold CVE-2000-0612 2000-06-29T00:00:00.000-04:00 2008-09-10T15:05:12.493-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1406 BUGTRAQ 20000629 Buggy ARP handling in Windoze Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table. cpe:/a:cisco:pix_firewall CVE-2000-0613 2000-03-20T00:00:00.000-05:00 2017-10-09T21:29:12.560-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov CISCO 20000711 Cisco Secure PIX Firewall TCP Reset Vulnerability BID 1454 BUGTRAQ 20000320 PIX DMZ Denial of Service - TCP Resets XF cisco-pix-firewall-tcp(4928) Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections. cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 CVE-2000-0614 2000-07-10T00:00:00.000-04:00 2008-09-10T15:05:12.680-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SUSE 20000710 Security Hole in tnef < 0-124 BID 1450 Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output. cpe:/o:astart_technologies:lprng:3.6.1 cpe:/o:astart_technologies:lprng:3.6.2 cpe:/o:astart_technologies:lprng:3.6.3 cpe:/o:astart_technologies:lprng:3.6.4 cpe:/o:astart_technologies:lprng:3.6.5 cpe:/o:astart_technologies:lprng:3.6.6 cpe:/o:astart_technologies:lprng:3.6.7 cpe:/o:astart_technologies:lprng:3.6.8 cpe:/o:astart_technologies:lprng:3.6.9 cpe:/o:astart_technologies:lprng:3.6.10 cpe:/o:astart_technologies:lprng:3.6.11 cpe:/o:astart_technologies:lprng:3.6.12 cpe:/o:astart_technologies:lprng:3.6.13 cpe:/o:astart_technologies:lprng:3.6.14 cpe:/o:astart_technologies:lprng:3.6.15 CVE-2000-0615 2000-07-19T00:00:00.000-04:00 2017-10-09T21:29:12.623-04:00 2.1 LOCAL LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000709 LPRng lpd should not be SETUID root BID 1447 XF lpd-suid-root(7361) LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files. cpe:/o:hp:mpe_ix:4.5 cpe:/o:hp:mpe_ix:5.0 cpe:/o:hp:mpe_ix:5.5 cpe:/o:hp:mpe_ix:6.0 cpe:/o:hp:mpe_ix:6.5 CVE-2000-0616 2000-06-26T00:00:00.000-04:00 2008-09-10T15:05:12.837-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS HP HPSBMP0006-007 BID 1405 Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS. cpe:/a:stanley_t._shebs:xconq:7.2.2 CVE-2000-0617 2000-06-22T00:00:00.000-04:00 2008-09-10T15:05:12.960-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000622 RHL 6.2 xconq package - overflows yield gid games Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable. cpe:/a:stanley_t._shebs:xconq:7.2.2 CVE-2000-0618 2000-06-22T00:00:00.000-04:00 2008-09-10T15:05:13.023-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS BUGTRAQ 20000622 RHL 6.2 xconq package - overflows yield gid games Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable. cpe:/h:toplayer:appswitch:2500.0 CVE-2000-0619 2000-07-19T00:00:00.000-04:00 2017-10-09T21:29:12.670-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov VULN-DEV 20000520 TopLayer layer 7 switch Advisory VULN-DEV 20000614 Update on TopLayer Advisory BID 1258 XF toplayer-icmp-dos(7364) Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets. cpe:/a:open_group:x:11.0r6 cpe:/a:open_group:x:11.0r6.1 cpe:/a:open_group:x:11.0r6.2 cpe:/a:open_group:x:11.0r6.3 cpe:/a:open_group:x:11.0r6.4 cpe:/a:xfree86_project:x11r6:3.3.3 cpe:/a:xfree86_project:x11r6:3.3.4 cpe:/a:xfree86_project:x11r6:3.3.5 cpe:/a:xfree86_project:x11r6:3.3.6 cpe:/a:xfree86_project:x11r6:4.0 CVE-2000-0620 2000-06-19T00:00:00.000-04:00 2017-10-09T21:29:12.733-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000619 XFree86: Various nasty libX11 holes BID 1409 XF libx11-infinite-loop-dos(4996) libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop. cpe:/a:microsoft:outlook:97 cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook:2000 cpe:/a:microsoft:outlook_express:4.0 cpe:/a:microsoft:outlook_express:4.01 cpe:/a:microsoft:outlook_express:5.0 cpe:/a:microsoft:outlook_express:5.0.1 CVE-2000-0621 2000-07-20T00:00:00.000-04:00 2018-10-12T17:29:41.547-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS CERT CA-2000-14 BID 1501 MS MS00-046 XF outlook-cache-bypass(5013) Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability. cpe:/a:oreilly:website_professional:2.3.18 cpe:/a:oreilly:website_professional:2.4 cpe:/a:oreilly:website_professional:2.4.9 CVE-2000-0622 2000-07-19T00:00:00.000-04:00 2017-10-09T21:29:12.857-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CONFIRM http://website.oreilly.com/support/software/wspro25_releasenotes.txt NAI 20000719 O'Reilly WebSite Professional Overflow BID 1487 XF website-webfind-bo(4962) Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long "keywords" parameter. cpe:/a:oreilly:website_professional:2.3.18 cpe:/a:oreilly:website_professional:2.4 cpe:/a:oreilly:website_professional:2.4.9 CVE-2000-0623 2000-07-17T00:00:00.000-04:00 2008-09-10T15:05:13.663-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS NTBUGTRAQ 20000719 Alert: Buffer Overrun is O'Reilly WebsitePro httpd32.exe (CISADV000717) BID 1492 Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header. cpe:/a:nullsoft:winamp:2.64 CVE-2000-0624 2000-07-20T00:00:00.000-04:00 2017-10-09T21:29:12.903-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000720 Winamp M3U playlist parser buffer overflow security vulnerability BID 1496 CONFIRM http://www.winamp.com/getwinamp/newfeatures.jhtml XF winamp-playlist-parser-bo(4956) Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. cpe:/a:netzero:zeroport:3.0 CVE-2000-0625 2000-07-18T00:00:00.000-04:00 2008-09-10T15:05:28.210-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_USER_ACCESS L0PHT 20000718 NetZero Password Encryption Algorithm BID 1483 NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password. cpe:/a:computer_software_manufaktur:alibaba:2.0 CVE-2000-0626 2000-07-18T00:00:00.000-04:00 2008-09-10T15:05:28.273-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000718 Multiple bugs in Alibaba 2.0 BID 1482 Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request. cpe:/a:blackboard:courseinfo:4.0 cpe:/a:blackboard:courseinfo:unix CVE-2000-0627 2000-07-18T00:00:00.000-04:00 2017-10-09T21:29:12.967-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000718 Blackboard Courseinfo v4.0 User Authentication BID 1486 BUGTRAQ 20000719 Security Fix for Blackboard CourseInfo 4.0 XF blackboard-courseinfo-dbase-modification(4946) BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl. cpe:/a:joshua_chamas:apache_asp:0.16 cpe:/a:joshua_chamas:apache_asp:0.17 cpe:/a:joshua_chamas:apache_asp:0.18 cpe:/a:joshua_chamas:apache_asp:1.93 CVE-2000-0628 2000-07-11T00:00:00.000-04:00 2017-10-09T21:29:13.047-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 20000710 ANNOUNCE Apache::ASP v1.95 - Security Hole Fixed CONFIRM http://www.nodeworks.com/asp/changes.html BID 1457 XF apache-source-asp-file-write(4931) The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files. cpe:/a:sun:java_system_web_server:1.1.3 cpe:/a:sun:java_system_web_server:2.0 CVE-2000-0629 2000-07-12T00:00:00.000-04:00 2008-09-10T15:05:28.807-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000711 Sun's Java Web Server remote command execution vulnerability BID 1459 MISC http://www.sun.com/software/jwebserver/faq/jwsca-2000-02.html The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet. cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0630 2000-07-17T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1488 MS MS00-044 XF iis-htr-obtain-code(5104) IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0631 2000-07-14T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000718 ISBASE Security Advisory(SA2000-02) BID 1476 MS MS00-044 XF iis-absent-directory-dos(4951) An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability. cpe:/a:lsoft:listserv:1.8c cpe:/a:lsoft:listserv:1.8d CVE-2000-0632 2000-07-17T00:00:00.000-04:00 2017-10-09T21:29:13.200-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS CONFIRM http://www.lsoft.com/news/default.asp?item=Advisory1 NAI 20000717 [COVERT-2000-07] LISTSERV Web Archive Remote Overflow BID 1490 XF lsoft-listserv-querystring-bo(4952) Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string. cpe:/o:conectiva:linux:4.0 cpe:/o:conectiva:linux:4.0es cpe:/o:conectiva:linux:4.1 cpe:/o:conectiva:linux:4.2 cpe:/o:conectiva:linux:5.0 cpe:/o:conectiva:linux:5.1 cpe:/o:mandrakesoft:mandrake_linux:7.1 cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc cpe:/o:redhat:linux:6.2e::alpha cpe:/o:redhat:linux:6.2e::i386 cpe:/o:redhat:linux:6.2e::sparc CVE-2000-0633 2000-07-18T00:00:00.000-04:00 2017-10-09T21:29:13.263-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000718 MDKSA-2000:020 usermode update BUGTRAQ 20000812 Conectiva Linux security announcement - usermode REDHAT RHSA-2000:053 BID 1489 XF linux-usermode-dos(4944) Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. cpe:/a:stalker:communigate_pro:3.2.4 CVE-2000-0634 2000-04-03T00:00:00.000-04:00 2017-10-09T21:29:13.310-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000717 S21SEC-003: Vulnerabilities in CommuniGate Pro v3.2.4 BID 1493 XF communigate-pro-file-read(5105) The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:akopia:minivend:3.0 cpe:/a:akopia:minivend:4.0 cpe:/a:akopia:minivend:4.0.4 CVE-2000-0635 2000-07-10T00:00:00.000-04:00 2017-10-09T21:29:13.530-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 20000711 Akopia MiniVend Piped Command Execution Vulnerability BID 1449 CONFIRM http://www.zdnet.com/zdnn/stories/news/0,4586,2600258,00.html XF minivend-viewpage-sample(4880) The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters. cpe:/h:hp:jetdirect:j3111a_rev._a.08.06 cpe:/h:hp:jetdirect:j3111a_rev._g.05.35 cpe:/h:hp:jetdirect:j3111a_rev._g.07.02 cpe:/h:hp:jetdirect:j3111a_rev._g.07.03 cpe:/h:hp:jetdirect:j3111a_rev._g.07.17 cpe:/h:hp:jetdirect:j3111a_rev._g.08.03 cpe:/h:hp:jetdirect:rev._g.08.04 cpe:/h:hp:jetdirect:rev._g.08.20 cpe:/h:hp:jetdirect:rev._h.08.05 cpe:/h:hp:jetdirect:rev._h.08.20 CVE-2000-0636 2000-07-19T00:00:00.000-04:00 2017-10-09T21:29:13.797-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000719 HP Jetdirect - Invalid FTP Command DoS BID 1491 XF hp-jetdirect-quote-dos(4947) HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command. cpe:/a:microsoft:excel:97 cpe:/a:microsoft:excel:2000 CVE-2000-0637 2000-07-26T00:00:00.000-04:00 2018-10-12T17:29:42.717-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1451 BUGTRAQ 20000711 Excel 2000 vulnerability - executing programs MS MS00-051 XF excel-register-function(5016) Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability. cpe:/a:sean_macguire:big_brother:1.0 cpe:/a:sean_macguire:big_brother:1.1 cpe:/a:sean_macguire:big_brother:1.2 cpe:/a:sean_macguire:big_brother:1.3 cpe:/a:sean_macguire:big_brother:1.3b cpe:/a:sean_macguire:big_brother:1.4 cpe:/a:sean_macguire:big_brother:1.4g cpe:/a:sean_macguire:big_brother:1.4h cpe:/a:sean_macguire:big_brother:1.4h1 cpe:/a:sean_macguire:big_brother:1.09b cpe:/a:sean_macguire:big_brother:1.09c cpe:/a:sean_macguire:big_brother:1.09d CVE-2000-0638 2000-07-11T00:00:00.000-04:00 2017-10-09T21:29:13.967-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 20000711 BIG BROTHER EXPLOIT BUGTRAQ 20000711 REMOTE EXPLOIT IN ALL CURRENT VERSIONS OF BIG BROTHER CONFIRM http://bb4.com/README.CHANGES BID 1455 XF http-cgi-bigbrother-bbhostsvc(4879) bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter. cpe:/a:sean_macguire:big_brother:1.0 cpe:/a:sean_macguire:big_brother:1.1 cpe:/a:sean_macguire:big_brother:1.2 cpe:/a:sean_macguire:big_brother:1.3 cpe:/a:sean_macguire:big_brother:1.3b cpe:/a:sean_macguire:big_brother:1.4 cpe:/a:sean_macguire:big_brother:1.4g cpe:/a:sean_macguire:big_brother:1.4h cpe:/a:sean_macguire:big_brother:1.4h1 cpe:/a:sean_macguire:big_brother:1.09b cpe:/a:sean_macguire:big_brother:1.09c cpe:/a:sean_macguire:big_brother:1.09d CVE-2000-0639 2000-06-11T00:00:00.000-04:00 2017-10-09T21:29:14.013-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000711 Big Brother filename extension vulnerability BID 1494 XF big-brother-filename-extension(5103) The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server. cpe:/a:steve_poulsen:guildftpd:0.9.7 CVE-2000-0640 2000-07-08T00:00:00.000-04:00 2017-10-09T21:29:14.140-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BUGTRAQ 20000708 gnu-pop3d (FTGate problem), Savant Webserver, Guild FTPd BID 1452 XF guild-ftpd-disclosure(4922) Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not. cpe:/a:michael_lamont:savant_webserver:2.1 CVE-2000-0641 2000-07-08T00:00:00.000-04:00 2017-10-09T21:29:14.187-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000708 gnu-pop3d (FTGate problem), Savant Webserver, Guild FTPd BID 1453 XF savant-get-bo(4901) Savant web server allows remote attackers to execute arbitrary commands via a long GET request. cpe:/a:itafrica:webactive:1.0 CVE-2000-0642 2000-07-12T00:00:00.000-04:00 2017-10-09T21:29:14.247-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1497 BUGTRAQ 20000711 Lame DoS in WEBactive win65/NT server XF webactive-active-log(5184) The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page. cpe:/a:itafrica:webactive:1.0 CVE-2000-0643 2000-07-12T00:00:00.000-04:00 2017-10-09T21:29:14.310-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1470 BUGTRAQ 20000711 Lame DoS in WEBactive win65/NT server XF webactive-long-get-dos(4949) Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL. cpe:/a:texas_imperial_software:wftpd:2.4.1 cpe:/a:texas_imperial_software:wftpd:2.4.1_rc11 cpe:/a:texas_imperial_software:wftpd:2.34 cpe:/a:texas_imperial_software:wftpd:2.40 CVE-2000-0644 2000-07-21T00:00:00.000-04:00 2017-10-09T21:29:14.403-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000721 WFTPD/WFTPD Pro 2.41 RC11 vulnerabilities. BID 1506 XF wftpd-stat-dos(5003) WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing. cpe:/a:texas_imperial_software:wftpd:2.4.1 cpe:/a:texas_imperial_software:wftpd:2.4.1_rc11 cpe:/a:texas_imperial_software:wftpd:2.34 cpe:/a:texas_imperial_software:wftpd:2.40 CVE-2000-0645 2000-07-21T00:00:00.000-04:00 2008-09-10T15:05:31.837-04:00 6.4 NETWORK LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000721 WFTPD/WFTPD Pro 2.41 RC11 vulnerabilities. BID 1506 WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). cpe:/a:texas_imperial_software:wftpd:2.4.1 cpe:/a:texas_imperial_software:wftpd:2.4.1_rc11 cpe:/a:texas_imperial_software:wftpd:2.34 cpe:/a:texas_imperial_software:wftpd:2.40 CVE-2000-0646 2000-07-21T00:00:00.000-04:00 2008-09-10T15:05:31.930-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000721 WFTPD/WFTPD Pro 2.41 RC11 vulnerabilities. BID 1506 WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred. cpe:/a:texas_imperial_software:wftpd:2.4.1 cpe:/a:texas_imperial_software:wftpd:2.4.1_rc11 cpe:/a:texas_imperial_software:wftpd:2.34 cpe:/a:texas_imperial_software:wftpd:2.40 CVE-2000-0647 2000-07-21T00:00:00.000-04:00 2008-09-10T15:05:32.007-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000721 WFTPD/WFTPD Pro 2.41 RC11 vulnerabilities. BID 1506 WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. cpe:/a:texas_imperial_software:wftpd:2.4.1 CVE-2000-0648 2000-07-11T00:00:00.000-04:00 2008-09-10T15:05:32.087-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1456 BUGTRAQ 20000711 WFTPD/WFTPD Pro 2.41 RC10 denial-of-service WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command. cpe:/a:microsoft:internet_information_server:2.0 cpe:/a:microsoft:internet_information_server:3.0 cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0649 2000-07-13T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000713 IIS4 Basic authentication realm issue BID 1499 IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. cpe:/a:network_associates:netshield:4.5 cpe:/a:network_associates:virusscan:4.5::windows_nt CVE-2000-0650 2000-07-11T00:00:00.000-04:00 2017-10-09T21:29:14.467-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov NTBUGTRAQ 20000711 Potential Vulnerability in McAfee Netshield and VirusScan 4.5 BID 1458 XF nai-virusscan-netshield-autoupgrade(5177) The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse. cpe:/a:novell:bordermanager:3.0 cpe:/a:novell:bordermanager:3.5 CVE-2000-0651 2000-07-07T00:00:00.000-04:00 2017-10-09T21:29:14.530-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS BID 1440 BUGTRAQ 20000707 Novell Border Manger - Anyone can pose as an authenticated user XF novell-bordermanager-verification(5186) The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine. cpe:/a:ibm:websphere_application_server:2.0 cpe:/a:ibm:websphere_application_server:3.0 cpe:/a:ibm:websphere_application_server:3.0.21 CVE-2000-0652 2000-07-24T00:00:00.000-04:00 2017-10-09T21:29:14.593-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000723 IBM WebSphere default servlet handler showcode vulnerability BID 1500 XF websphere-showcode(5012) IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string. cpe:/a:microsoft:outlook_express:4.0 cpe:/a:microsoft:outlook_express:4.01 cpe:/a:microsoft:outlook_express:5.0 cpe:/a:microsoft:outlook_express:5.0.1 CVE-2000-0653 2000-07-20T00:00:00.000-04:00 2018-10-12T17:29:43.123-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1502 MS MS00-045 Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability. cpe:/a:microsoft:sql_server:7.0 CVE-2000-0654 2000-07-11T00:00:00.000-04:00 2018-10-12T17:29:43.310-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BID 1466 MS MS00-041 XF mssql-dts-reveal-passwords(4582) Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vulnerability. cpe:/a:mozilla:mozilla:m15 cpe:/a:netscape:communicator:4.0 cpe:/a:netscape:communicator:4.05 cpe:/a:netscape:communicator:4.5_beta cpe:/a:netscape:communicator:4.06 cpe:/a:netscape:communicator:4.07 cpe:/a:netscape:communicator:4.08 cpe:/a:netscape:communicator:4.51 cpe:/a:netscape:communicator:4.61 cpe:/a:netscape:communicator:4.72 cpe:/a:netscape:communicator:4.73 CVE-2000-0655 2000-07-25T00:00:00.000-04:00 2008-09-10T15:05:32.727-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FREEBSD FreeBSD-SA-00:39 NETBSD NetBSD-SA2000-011 BUGTRAQ 20000801 MDKSA-2000:027-1 netscape update BUGTRAQ 20000810 Conectiva Linux Security Announcement - netscape SUSE 20000823 Security Hole in Netscape, Versions 4.x, possibly others REDHAT RHSA-2000:046 BID 1503 BUGTRAQ 20000724 JPEG COM Marker Processing Vulnerability in Netscape Browsers TURBO TLSA2000017-1 Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1. cpe:/a:analogx:proxy:4.4 CVE-2000-0656 2000-07-25T00:00:00.000-04:00 2008-09-10T15:05:32.807-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000724 AnalogX Proxy DoS CONFIRM http://www.analogx.com/contents/download/network/proxy.htm BID 1504 Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol. cpe:/a:analogx:proxy:4.4 CVE-2000-0657 2000-07-25T00:00:00.000-04:00 2008-09-05T16:21:33.877-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000724 AnalogX Proxy DoS CONFIRM http://www.analogx.com/contents/download/network/proxy.htm BID 1504 Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol. cpe:/a:analogx:proxy:4.4 CVE-2000-0658 2000-07-25T00:00:00.000-04:00 2008-09-10T15:05:32.947-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000724 AnalogX Proxy DoS CONFIRM http://www.analogx.com/contents/download/network/proxy.htm BID 1504 Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol. cpe:/a:analogx:proxy:4.4 CVE-2000-0659 2000-07-25T00:00:00.000-04:00 2008-09-10T15:05:33.007-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000724 AnalogX Proxy DoS BID 1504 Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. cpe:/a:alt-n:worldclient:2.1::standard CVE-2000-0660 2000-07-12T00:00:00.000-04:00 2017-10-09T21:29:14.733-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000712 Infosec.20000712.worldclient.2.1 CONFIRM http://www.altn.com/Downloads/WorldClient/Release/RelNotes.txt BID 1462 XF worldclient-dir-traverse(4913) The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:wircsrv:irc_server:5.0.7s CVE-2000-0661 2000-07-10T00:00:00.000-04:00 2017-10-09T21:29:14.780-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000710 Remote DoS Attack in WircSrv Irc Server v5.07s Vulnerability BID 1448 XF wircsrv-character-flood-dos(4914) WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port. cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 CVE-2000-0662 2000-07-14T00:00:00.000-04:00 2017-10-09T21:29:14.843-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1474 BUGTRAQ 20000714 IE 5.5 and 5.01 vulnerability - reading at least local and from any host text and parsed html files XF ie-dhtmled-file-read(5107) Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED). cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:4.0 CVE-2000-0663 2000-07-25T00:00:00.000-04:00 2018-10-12T17:29:43.640-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_USER_ACCESS MSKB Q269049 BID 1507 MS MS00-052 XF explorer-relative-path-name(5040) The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability. cpe:/a:analogx:simpleserver_www:1.0.6 CVE-2000-0664 2000-07-26T00:00:00.000-04:00 2017-10-09T21:29:14.967-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000726 AnalogX "SimpleServer:WWW" dot dot bug CONFIRM http://www.analogx.com/contents/download/network/sswww.htm BID 1508 XF analogx-simpleserver-directory-path(4999) AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots. cpe:/a:gamsoft:telsrv:1.4 cpe:/a:gamsoft:telsrv:1.5 CVE-2000-0665 2000-07-17T00:00:00.000-04:00 2017-10-09T21:29:15.030-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000717 DoS in Gamsoft TelSrv telnet server for MS Windows 95/98/NT/2k. NTBUGTRAQ 20000729 TelSrv Reveals Usernames & Passwords After DoS Attack BID 1478 XF gamsoft-telsrv-dos(4945) GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. cpe:/o:conectiva:linux:4.0 cpe:/o:conectiva:linux:4.0es cpe:/o:conectiva:linux:4.1 cpe:/o:conectiva:linux:4.2 cpe:/o:conectiva:linux:5.0 cpe:/o:conectiva:linux:5.1 cpe:/o:debian:debian_linux:2.2 cpe:/o:debian:debian_linux:2.2::alpha cpe:/o:debian:debian_linux:2.2::powerpc cpe:/o:debian:debian_linux:2.2::sparc cpe:/o:debian:debian_linux:2.3 cpe:/o:debian:debian_linux:2.3::alpha cpe:/o:debian:debian_linux:2.3::powerpc cpe:/o:debian:debian_linux:2.3::sparc cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc cpe:/o:suse:suse_linux:6.3 cpe:/o:suse:suse_linux:6.3::ppc cpe:/o:suse:suse_linux:6.3:alpha cpe:/o:suse:suse_linux:6.4 cpe:/o:suse:suse_linux:6.4::ppc cpe:/o:suse:suse_linux:6.4:alpha cpe:/o:suse:suse_linux:7.0 cpe:/o:trustix:secure_linux:1.0 cpe:/o:trustix:secure_linux:1.1 CVE-2000-0666 2000-07-16T00:00:00.000-04:00 2018-05-02T21:29:07.787-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000716 Lots and lots of fun with rpc.statd BUGTRAQ 20000717 CONECTIVA LINUX SECURITY ANNOUNCEMENT - nfs-utils BUGTRAQ 20000718 Trustix Security Advisory - nfs-utils BUGTRAQ 20000718 [Security Announce] MDKSA-2000:021 nfs-utils update CALDERA CSSA-2000-025.0 CERT CA-2000-17 REDHAT RHSA-2000:043 BID 1480 XF linux-rpcstatd-format-overwrite(4939) rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. cpe:/o:conectiva:linux:4.0 cpe:/o:conectiva:linux:4.0es cpe:/o:conectiva:linux:4.1 cpe:/o:conectiva:linux:4.2 cpe:/o:conectiva:linux:5.0 cpe:/o:conectiva:linux:5.1 CVE-2000-0667 2000-07-27T00:00:00.000-04:00 2008-09-10T15:05:33.883-04:00 3.6 LOCAL LOW NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CALDERA CSSA-2000-024.0 BID 1512 Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. cpe:/a:michael_k._johnson:pam_console:0.66 cpe:/a:michael_k._johnson:pam_console:0.72_unpatched cpe:/o:conectiva:linux:4.0 cpe:/o:conectiva:linux:4.0es cpe:/o:conectiva:linux:4.1 cpe:/o:conectiva:linux:4.2 cpe:/o:conectiva:linux:5.0 cpe:/o:conectiva:linux:5.1 cpe:/o:redhat:linux:6.0::alpha cpe:/o:redhat:linux:6.0::i386 cpe:/o:redhat:linux:6.0::sparc cpe:/o:redhat:linux:6.1::alpha cpe:/o:redhat:linux:6.1::i386 cpe:/o:redhat:linux:6.1::sparc cpe:/o:redhat:linux:6.2::alpha cpe:/o:redhat:linux:6.2::i386 cpe:/o:redhat:linux:6.2::sparc CVE-2000-0668 2000-07-27T00:00:00.000-04:00 2017-10-09T21:29:15.093-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000727 CONECTIVA LINUX SECURITY ANNOUNCEMENT - PAM BUGTRAQ 20000801 MDKSA-2000:029 pam update REDHAT RHSA-2000:044 BID 1513 XF linux-pam-console(5001) pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled. cpe:/o:novell:netware:5.0:sp5 CVE-2000-0669 2000-07-11T00:00:00.000-04:00 2008-09-10T15:05:34.117-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1467 BUGTRAQ 20000711 Remote Denial Of Service -- NetWare 5.0 with SP 5 Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. cpe:/a:cvsweb_developer:cvsweb:1.80 CVE-2000-0670 2000-07-12T00:00:00.000-04:00 2018-05-02T21:29:07.897-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:37 BUGTRAQ 20000712 cvsweb: remote shell for cvs committers BUGTRAQ 20000714 MDKSA-2000:019 cvsweb update BID 1469 TURBO TLSA2000016-1 XF cvsweb-shell-access(4925) The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters. cpe:/a:roxen:webserver:2.0.x CVE-2000-0671 2000-07-21T00:00:00.000-04:00 2017-10-09T21:29:15.140-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000721 Roxen Web Server Vulnerability BUGTRAQ 20000721 Roxen security alert: Problems with URLs containing null characters. BID 1510 XF roxen-null-char-url(4965) Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL. cpe:/a:apache:http_server:3.1 cpe:/a:apache:tomcat:3.0 cpe:/a:apache:tomcat:3.1 CVE-2000-0672 2000-07-20T00:00:00.000-04:00 2017-10-09T21:29:15.200-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000721 Jakarta-tomcat.../admin BID 1548 XF jakarta-tomcat-admin(5160) The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory. cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:terminal_server CVE-2000-0673 2000-07-27T00:00:00.000-04:00 2018-10-12T17:29:44.030-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NAI 20000727 Windows NetBIOS Name Conflicts BID 1514 BID 1515 MS MS00-047 XF netbios-name-server-spoofing(5035) The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability. cpe:/a:virtual_vision:ftp_browser:1.0 CVE-2000-0674 2000-07-12T00:00:00.000-04:00 2017-10-09T21:29:15.310-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000712 ftp.pl vulnerability BID 1471 XF virtualvision-ftp-browser(5187) ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack. cpe:/a:infopulse:gatekeeper:3.5 CVE-2000-0675 2000-07-13T00:00:00.000-04:00 2017-10-09T21:29:15.420-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BID 1477 BUGTRAQ 20000713 The MDMA Crew's GateKeeper Exploit XF gatekeeper-long-string-bo(4948) Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. cpe:/a:netscape:communicator:4.0 cpe:/a:netscape:communicator:4.04 cpe:/a:netscape:communicator:4.05 cpe:/a:netscape:communicator:4.5_beta cpe:/a:netscape:communicator:4.06 cpe:/a:netscape:communicator:4.07 cpe:/a:netscape:communicator:4.08 cpe:/a:netscape:communicator:4.51 cpe:/a:netscape:communicator:4.61 cpe:/a:netscape:communicator:4.72 cpe:/a:netscape:communicator:4.73 cpe:/a:netscape:communicator:4.74 CVE-2000-0676 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:34.743-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 FREEBSD FreeBSD-SA-00:39 BUGTRAQ 20000804 Dangerous Java/Netscape Security Hole BUGTRAQ 20000810 MDKSA-2000:033 Netscape Java vulnerability BUGTRAQ 20000818 Conectiva Linux Security Announcement - netscape BUGTRAQ 20000821 MDKSA-2000:036 - netscape update CALDERA CSSA-2000-027.1 CERT CA-2000-15 SUSE 20000823 Security Hole in Netscape, Versions 4.x, possibly others REDHAT RHSA-2000:054 BID 1546 Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice. cpe:/a:ibm:net.data CVE-2000-0677 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.483-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS ISS 20000907 Buffer Overflow in IBM Net.Data db2www CGI program. XF ibm-netdata-db2www-bo(4976) Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. cpe:/a:pgp:pgp:5.5.3i cpe:/a:pgp:pgp:6.5.1i cpe:/a:pgp:pgp:6.5.3i CVE-2000-0678 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:34.883-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CERT CA-2000-18 BID 1606 PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate. cpe:/a:cvs:cvs:1.10.8 CVE-2000-0679 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:37.233-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1523 BUGTRAQ 20000728 cvs security problem The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files. cpe:/a:cvs:cvs:1.10.8 CVE-2000-0680 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:37.373-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BID 1524 BUGTRAQ 20000728 cvs security problem The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action. cpe:/a:bea:weblogic_server:4.5.2:sp2 CVE-2000-0681 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:37.517-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000815 BEA Weblogic server proxy library vulnerabilities BID 1570 Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. cpe:/a:bea:weblogic_server:5.1 cpe:/a:bea:weblogic_server:5.1::enterprise cpe:/a:bea:weblogic_server:5.1::express cpe:/a:bea:weblogic_server:5.1:sp1:express cpe:/a:bea:weblogic_server:5.1:sp10:express cpe:/a:bea:weblogic_server:5.1:sp11:express cpe:/a:bea:weblogic_server:5.1:sp12:express cpe:/a:bea:weblogic_server:5.1:sp2:express cpe:/a:bea:weblogic_server:5.1:sp3:express cpe:/a:bea:weblogic_server:5.1:sp4:express cpe:/a:bea:weblogic_server:5.1:sp5:express cpe:/a:bea:weblogic_server:5.1:sp6:express cpe:/a:bea:weblogic_server:5.1:sp7:express cpe:/a:bea:weblogic_server:5.1:sp8:express cpe:/a:bea:weblogic_server:5.1:sp9:express CVE-2000-0682 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:37.670-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000728 BEA's WebLogic force handlers show code vulnerability CONFIRM http://developer.bea.com/alerts/security_000731.html BID 1518 BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet. cpe:/a:bea:weblogic_server:5.1 cpe:/a:bea:weblogic_server:5.1::enterprise cpe:/a:bea:weblogic_server:5.1::express cpe:/a:bea:weblogic_server:5.1:sp1:express cpe:/a:bea:weblogic_server:5.1:sp10:express cpe:/a:bea:weblogic_server:5.1:sp11:express cpe:/a:bea:weblogic_server:5.1:sp12:express cpe:/a:bea:weblogic_server:5.1:sp2:express cpe:/a:bea:weblogic_server:5.1:sp3:express cpe:/a:bea:weblogic_server:5.1:sp4:express cpe:/a:bea:weblogic_server:5.1:sp5:express cpe:/a:bea:weblogic_server:5.1:sp6:express cpe:/a:bea:weblogic_server:5.1:sp7:express cpe:/a:bea:weblogic_server:5.1:sp8:express cpe:/a:bea:weblogic_server:5.1:sp9:express CVE-2000-0683 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:37.843-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000728 BEA's WebLogic force handlers show code vulnerability CONFIRM http://developer.bea.com/alerts/security_000728.html BID 1517 BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet. cpe:/a:bea:weblogic_server:3.1.8 cpe:/a:bea:weblogic_server:4.0.4 cpe:/a:bea:weblogic_server:4.5.1 CVE-2000-0684 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:37.103-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000731 BEA's WebLogic *.jsp/*.jhtml remote command execution CONFIRM http://developer.bea.com/alerts/security_000731.html BID 1525 BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file. cpe:/a:bea:weblogic_server:3.1.8 cpe:/a:bea:weblogic_server:4.0.4 cpe:/a:bea:weblogic_server:4.5.1 CVE-2000-0685 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:37.180-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000731 BEA's WebLogic *.jsp/*.jhtml remote command execution CONFIRM http://developer.bea.com/alerts/security_000731.html BID 1525 BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file. cpe:/a:cgi_script_center:auction_weaver:1.02 CVE-2000-0686 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:38.313-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000823 Auction WeaverT LITE 1.0 BID 1630 Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter. cpe:/a:cgi_script_center:auction_weaver:1.02 CVE-2000-0687 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:38.453-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000823 Auction WeaverT LITE 1.0 BID 1630 Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter. cpe:/a:cgi_script_center:subscribe_me_lite:2.0 CVE-2000-0688 2000-10-20T00:00:00.000-04:00 2016-10-17T22:07:23.410-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000823 Subscribe Me Vulnerability BUGTRAQ 20000823 Re: Subscribe Me CGI Vulnerability CONFIRM http://www.cgiscriptcenter.com/subscribe/ BID 1607 Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter. cpe:/a:cgi_script_center:account_manager:lite_1.0 cpe:/a:cgi_script_center:account_manager:pro_1.0 CVE-2000-0689 2000-10-20T00:00:00.000-04:00 2017-07-10T21:29:02.227-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BUGTRAQ 20000823 Account Manager CGI Vulnerability CONFIRM http://www.cgiscriptcenter.com/acctlite/ BID 1604 XF account-manager-overwrite-password(5125) Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter. cpe:/a:cgi_script_center:auction_weaver:1.0 cpe:/a:cgi_script_center:auction_weaver:1.02 CVE-2000-0690 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:38.697-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000830 More problems with Auction Weaver & CGI Script Center. BUGTRAQ 20000830 More problems with Auction Weaver & CGI Script Center. Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter. cpe:/a:gert_doering:mgetty:1.1.19 cpe:/a:gert_doering:mgetty:1.1.20 cpe:/a:gert_doering:mgetty:1.1.21 CVE-2000-0691 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:39.030-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000826 Advisory: mgetty local compromise CONFIRM http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html CALDERA CSSA-2000-029.0 BID 1612 The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file. cpe:/a:iss:realsecure:3.2.1 cpe:/a:iss:realsecure:3.2.2 CVE-2000-0692 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:39.170-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000822 DOS on RealSecure 3.2 BID 1597 ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set. cpe:/a:tech-source:raptor_gfx_pgx32:2.3.1 CVE-2000-0693 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:39.327-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000802 Local root compromise in PGX Config Sun Sparc Solaris BID 1563 pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program. cpe:/a:tech-source:raptor_gfx_pgx32:2.3.1 CVE-2000-0694 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:39.467-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000802 Local root compromise in PGX Config Sun Sparc Solaris pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack. cpe:/a:tech-source:raptor_gfx_pgx32:2.3.1 CVE-2000-0695 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:39.610-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000802 Local root compromise in PGX Config Sun Sparc Solaris Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. cpe:/a:sun:solaris_answerbook2:1.3 cpe:/a:sun:solaris_answerbook2:1.4 cpe:/a:sun:solaris_answerbook2:1.4.1 cpe:/a:sun:solaris_answerbook2:1.4.2 CVE-2000-0696 2000-10-20T00:00:00.000-04:00 2017-12-18T21:29:11.207-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS SUN 00196 BUGTRAQ 20000807 Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server MISC http://www.s21sec.com/en/avisos/s21sec-004-en.txt BID 1554 XF solaris-answerbook2-admin-interface(5069) The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script. cpe:/a:sun:solaris_answerbook2:1.3 cpe:/a:sun:solaris_answerbook2:1.4 cpe:/a:sun:solaris_answerbook2:1.4.1 cpe:/a:sun:solaris_answerbook2:1.4.2 CVE-2000-0697 2000-10-20T00:00:00.000-04:00 2008-09-24T00:07:12.407-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SUN 00196 BUGTRAQ 20000807 Vulnerabilities in Sun Solaris AnswerBook2 dwhttpd server XF solaris-answerbook2-remote-execution(5058) MISC http://www.s21sec.com/en/avisos/s21sec-004-en.txt BID 1556 The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. cpe:/a:minicom:minicom:1.82.0 cpe:/a:minicom:minicom:1.82.1 cpe:/a:minicom:minicom:1.83.0 cpe:/a:minicom:minicom:1.83.1 CVE-2000-0698 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.530-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000819 RH 6.1 / 6.2 minicom vulnerability BID 1599 XF minicom-capture-groupown(5151) Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack. cpe:/o:hp:hp-ux:10.20 cpe:/o:hp:hp-ux:11.00 CVE-2000-0699 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:40.203-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000806 HPUX FTPd vulnerability BID 1560 Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command. cpe:/h:cisco:gigabit_switch_router_12008 cpe:/h:cisco:gigabit_switch_router_12012 cpe:/h:cisco:gigabit_switch_router_12016 cpe:/o:cisco:ios:11.2 cpe:/o:cisco:ios:11.2%288%29 cpe:/o:cisco:ios:11.2%2810%29 cpe:/o:cisco:ios:11.2p cpe:/o:cisco:ios:11.3 cpe:/o:cisco:ios:11.3%281%29 cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0%281%29 cpe:/o:cisco:ios:12.0%282%29 cpe:/o:cisco:ios:12.0%283%29 cpe:/o:cisco:ios:12.0%284%29 cpe:/o:cisco:ios:12.0%285%29 cpe:/o:cisco:ios:12.0%286%29 cpe:/o:cisco:ios:12.0%287%29t cpe:/o:cisco:ios:12.1 CVE-2000-0700 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:40.360-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CISCO 20000803 Possible Access Control Bypass and Denial of Service in Gigabit Switch Routers Using Gigabit Ethernet or Fast Ethernet Cards BID 1541 Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets. cpe:/a:gnu:mailman:2.0:beta3 cpe:/a:gnu:mailman:2.0:beta4 cpe:/o:conectiva:linux:4.1 cpe:/o:conectiva:linux:4.2 cpe:/o:conectiva:linux:5.0 cpe:/o:conectiva:linux:5.1 cpe:/o:redhat:linux CVE-2000-0701 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:39.663-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000802 CONECTIVA LINUX SECURITY ANNOUNCEMENT - mailman BUGTRAQ 20000802 MDKSA-2000:030 - Linux-Mandrake not affected by mailman problem REDHAT RHSA-2000:030 BUGTRAQ 20000801 Advisory: mailman local compromise BID 1539 CONFIRM http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000802105050.A11733@rak.isternet.sk The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. cpe:/o:hp:hp-ux:11.00 CVE-2000-0702 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.593-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000821 [HackersLab bugpaper] HP-UX net.init rc script BID 1602 XF hp-netinit-symlink(5131) The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file. cpe:/a:larry_wall:perl:5.4.5 cpe:/a:larry_wall:perl:5.5 cpe:/a:larry_wall:perl:5.5.3 cpe:/a:larry_wall:perl:5.6 CVE-2000-0703 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:39.807-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000805 sperl 5.00503 (and newer ;) exploit BUGTRAQ 20000808 MDKSA-2000:031 perl update BUGTRAQ 20000810 Conectiva Linux security announcemente - PERL BUGTRAQ 20000814 Trustix Security Advisory - perl and mailx CALDERA CSSA-2000-026.0 SUSE 20000810 Security Hole in perl, all versions REDHAT RHSA-2000:048 BID 1547 TURBO TLSA2000018-1 suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence. cpe:/a:freewnn:freewnn:1.0 cpe:/a:freewnn:freewnn:1.1 cpe:/a:freewnn:freewnn:1.1.1_axxx cpe:/a:omron:worldview:6.5 cpe:/a:wnn:wnn4:4.2.2tl cpe:/a:wnn:wnn4:4.2.5tl cpe:/a:wnn:wnn4:4.2.8 CVE-2000-0704 2000-10-20T00:00:00.000-04:00 2017-07-10T21:29:02.320-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS SGI 20000803-01-A BID 1603 XF irix-worldview-wnn-bo(5163) Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands. cpe:/a:luca_deri:ntop:1.2a7_9 CVE-2000-0705 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:39.960-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000802 [ Hackerslab bug_paper ] ntop web mode vulnerabliity REDHAT RHSA-2000:049 BID 1550 ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:luca_deri:ntop:1.2a7_9 cpe:/a:luca_deri:ntop:1.3.1 CVE-2000-0706 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:40.057-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:36 DEBIAN 20000830 ntop: Still remotely exploitable using buffer overflows BID 1576 Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. cpe:/a:pccs-linux:mysqldatabase_admin_tool:1.2.3 cpe:/a:pccs-linux:mysqldatabase_admin_tool:1.2.4 CVE-2000-0707 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:41.483-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000804 PCCS MySQL DB Admin Tool v1.2.3- Advisory CONFIRM http://pccs-linux.com/public/view.php3?bn=agora_pccslinux&key=965951324 BID 1557 PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password. cpe:/a:pragma_systems:telnetserver:2000 CVE-2000-0708 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:41.623-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 NTBUGTRAQ 20000824 Remote DoS Attack in Pragma TelnetServer 2000 (Remote Execute Daemon) Vulnerability CONFIRM http://www.pragmasys.com/TelnetServer/ BID 1605 Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port. cpe:/a:microsoft:frontpage CVE-2000-0709 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:41.767-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000823 Xato Advisory: FrontPage DOS Device DoS CONFIRM http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp BID 1608 The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name. cpe:/a:microsoft:frontpage CVE-2000-0710 2000-10-20T00:00:00.000-04:00 2017-07-11T21:29:00.207-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov BUGTRAQ 20000823 Xato Advisory: FrontPage DOS Device DoS CONFIRM http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp BID 1608 The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name. cpe:/a:microsoft:virtual_machine:2000 cpe:/a:microsoft:virtual_machine:3100 cpe:/a:microsoft:virtual_machine:3200 cpe:/a:microsoft:virtual_machine:3300 cpe:/a:netscape:communicator:4.0 cpe:/a:netscape:communicator:4.04 cpe:/a:netscape:communicator:4.05 cpe:/a:netscape:communicator:4.06 cpe:/a:netscape:communicator:4.07 cpe:/a:netscape:communicator:4.08 cpe:/a:netscape:communicator:4.51 cpe:/a:netscape:communicator:4.61 cpe:/a:netscape:communicator:4.72 cpe:/a:netscape:communicator:4.73 cpe:/a:netscape:communicator:4.74 CVE-2000-0711 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:42.047-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS CERT CA-2000-15 BID 1545 BUGTRAQ 20000805 Dangerous Java/Netscape Security Hole BUGTRAQ 20000816 JDK 1.1.x Listening Socket Vulnerability (was Re: BrownOrifice can break firewalls!) Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice. cpe:/a:lids:lids:0.9.7 CVE-2000-0712 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:42.233-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 2000803 LIDS severe bug MISC http://www.egroups.com/message/lids/1038 CONFIRM http://www.lids.org/changelog.html BID 1549 Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. cpe:/a:adobe:acrobat:3.0 cpe:/a:adobe:acrobat:4.0 cpe:/a:adobe:acrobat:4.0.5 cpe:/a:adobe:acrobat_business_tools:4.0 cpe:/a:adobe:acrobat_business_tools:4.05 cpe:/a:adobe:acrobat_reader:3.0 cpe:/a:adobe:acrobat_reader:4.0 cpe:/a:adobe:acrobat_reader:4.0.5 CVE-2000-0713 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:42.373-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000726 [SPSadvisory#39]Adobe Acrobat Series PDF File Buffer Overflow CONFIRM http://www.adobe.com/misc/pdfsecurity.html BID 1509 Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier. cpe:/a:university_of_massachusetts:scheme:3.2.11 CVE-2000-0714 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:41.447-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS REDHAT RHSA-2000:047 BID 1551 umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. cpe:/a:kirk_bauer:diskcheck:3.1.1 cpe:/o:conectiva:linux:5.0 cpe:/o:conectiva:linux:5.1 CVE-2000-0715 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:41.557-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000805 Diskcheck 3.1.1 Symlink Vulnerability BUGTRAQ 20000807 Re: Diskcheck 3.1.1 Symlink Vulnerability BUGTRAQ 20000622 Re: rh 6.2 - gid compromises, etc [+ MORE!!!] BID 1552 DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. cpe:/a:alt-n:mdaemon:2.8 CVE-2000-0716 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.653-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 20000809 Session hijacking in Alt-N's MDaemon 2.8 BID 1553 XF mdaemon-session-id-hijack(5070) WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email. cpe:/a:goodtech:ftp_server_95_98:3.0 cpe:/a:goodtech:ftp_server_95_98:3.0.1 cpe:/a:goodtech:ftp_server_nt_2000:3.0 CVE-2000-0717 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.700-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1619 BUGTRAQ 20000830 [EXPL] GoodTech's FTP Server vulnerable to a DoS (RNTO) XF ftp-goodtech-rnto-dos(5166) GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands. cpe:/o:mandrakesoft:mandrake_linux:6.0 cpe:/o:mandrakesoft:mandrake_linux:6.1 cpe:/o:mandrakesoft:mandrake_linux:7.0 cpe:/o:mandrakesoft:mandrake_linux:7.1 CVE-2000-0718 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:43.107-04:00 1.2 LOCAL HIGH NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000812 MDKSA-2000:034 MandrakeUpdate update BID 1567 A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed. cpe:/a:varicad:varicad:7.0 CVE-2000-0719 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:43.250-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000810 VariCAD 7.0 premission vulnerability VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program. cpe:/a:gwscripts:gwscripts_news_publisher:1.05 cpe:/a:gwscripts:gwscripts_news_publisher:1.05a cpe:/a:gwscripts:gwscripts_news_publisher:1.05b cpe:/a:gwscripts:gwscripts_news_publisher:1.06 CVE-2000-0720 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.780-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BID 1621 BUGTRAQ 20000829 News Publisher CGI Vulnerability XF news-publisher-add-author(5169) news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program. cpe:/a:multisoft:flagship:4.4 CVE-2000-0721 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:43.547-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000810 FlagShip v4.48.7449 premission vulnerability BID 1586 The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses. cpe:/a:helix_code:gnome_updater:0.1 cpe:/a:helix_code:gnome_updater:0.2 cpe:/a:helix_code:gnome_updater:0.3 cpe:/a:helix_code:gnome_updater:0.4 cpe:/a:helix_code:gnome_updater:0.5 CVE-2000-0722 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:43.687-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000820 Helix Code Security Advisory - Helix GNOME Update BUGTRAQ 20000820 [Helix Beta] Helix Code Security Advisory - Helix GNOME Installer BID 1593 BUGTRAQ 20000819 Multiple Local Vulnerabilities in Helix Gnome Installer Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages. cpe:/a:helix_code:gnome_installer:0.2 CVE-2000-0723 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:43.843-04:00 1.2 LOCAL HIGH NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000820 [Helix Beta] Helix Code Security Advisory - Helix GNOME Installer BID 1596 BUGTRAQ 20000819 Multiple Local Vulnerabilities in Helix Gnome Installer Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config. cpe:/a:helix_code:go-gnome_pre-installer:1.5 CVE-2000-0724 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:43.983-04:00 6.2 LOCAL HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000829 More Helix Code installation problems (go-gnome) BUGTRAQ 20000829 Helix Code Security Advisory - go-gnome pre-installer BID 1622 The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files. cpe:/a:zope:zope:1.10.3 cpe:/a:zope:zope:2.1.1 cpe:/a:zope:zope:2.1.7 cpe:/a:zope:zope:2.2_beta1 CVE-2000-0725 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:42.353-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000816 MDKSA-2000:035 Zope update BUGTRAQ 20000821 Conectiva Linux Security Announcement - Zope DEBIAN 20000821 zope: unauthorized escalation of privilege (update) REDHAT RHSA-2000:052 BID 1577 CONFIRM http://www.zope.org/Products/Zope/Hotfix_08_09_2000/security_alert Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request. cpe:/a:stalkerlab:mailers:1.1.2 CVE-2000-0726 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.857-04:00 2.6 NETWORK HIGH NONE PARTIAL NONE NONE http://nvd.nist.gov BID 1623 BUGTRAQ 20000829 Stalker's CGImail Gives Read Access to All Server Files XF mailers-cgimail-spoof(5165) CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable. cpe:/a:xpdf:xpdf:0.90 CVE-2000-0727 2000-10-20T00:00:00.000-04:00 2016-10-17T22:07:24.677-04:00 7.6 NETWORK HIGH NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000829 MDKSA-2000:041 - xpdf update BUGTRAQ 20000913 Conectiva Linux Security Announcement - xpdf CALDERA CSSA-2000-031.0 DEBIAN 20000910 xpdf: local exploit REDHAT RHSA-2000:060 BID 1624 xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters. cpe:/a:xpdf:xpdf:0.90 CVE-2000-0728 2000-10-20T00:00:00.000-04:00 2016-10-17T22:07:25.927-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS BUGTRAQ 20000829 MDKSA-2000:041 - xpdf update BUGTRAQ 20000913 Conectiva Linux Security Announcement - xpdf CALDERA CSSA-2000-031.0 REDHAT RHSA-2000:060 BID 1624 xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha CVE-2000-0729 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.920-04:00 2.1 LOCAL LOW NONE NONE NONE PARTIAL http://nvd.nist.gov FREEBSD FreeBSD-SA-00:41 BID 1625 XF freebsd-elf-dos(5967) FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header. cpe:/o:hp:hp-ux:11.00 CVE-2000-0730 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:44.857-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS HP HPSBUX0008-118 BID 1580 Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges. cpe:/a:jeremy_arnold:worm_webserver:1.0 CVE-2000-0731 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:15.983-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov NTBUGTRAQ 20000825 DST2K0023: Directory Traversal Possible & Denial of Service in Wo rm HTTP Server BID 1626 XF wormhttp-dir-traverse(5148) Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack. cpe:/a:jeremy_arnold:worm_webserver:1.0 CVE-2000-0732 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:16.047-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000825 DST2K0023: Directory Traversal Possible & Denial of Service in Wo rm HTTP Server BID 1626 XF wormhttp-filename-dos(5149) Worm HTTP server allows remote attackers to cause a denial of service via a long URL. cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 cpe:/o:sgi:irix:6.5.1 cpe:/o:sgi:irix:6.5.2m cpe:/o:sgi:irix:6.5.3 cpe:/o:sgi:irix:6.5.3f cpe:/o:sgi:irix:6.5.3m cpe:/o:sgi:irix:6.5.4 cpe:/o:sgi:irix:6.5.6 cpe:/o:sgi:irix:6.5.7 cpe:/o:sgi:irix:6.5.8 CVE-2000-0733 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:45.280-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS SGI 20000801-02-P BUGTRAQ 20000814 [LSD] IRIX telnetd remote vulnerability BID 1572 Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request. cpe:/a:eeye_digital_security:iris:1.0.1 cpe:/a:spynet:capturenet:3.0.12 CVE-2000-0734 2000-10-20T00:00:00.000-04:00 2016-10-17T22:07:26.990-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000831 Remote DoS Attack in Eeye Iris 1.01 and SpyNet CaptureNet v3.12 BID 1627 eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections. cpe:/a:rimarts_inc.:becky_internet_mail:1.26.3 CVE-2000-0735 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:45.607-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000818 Becky! Internet Mail Buffer overflow CONFIRM http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt BID 1588 Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message. cpe:/a:rimarts_inc.:becky_internet_mail:1.26.3 CVE-2000-0736 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:45.750-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BUGTRAQ 20000818 Becky! Internet Mail Buffer overflow CONFIRM http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt BID 1588 Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message. cpe:/o:microsoft:windows_2000 CVE-2000-0737 2000-10-20T00:00:00.000-04:00 2018-10-12T17:29:44.483-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BID 1535 MS MS00-053 The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability. cpe:/a:network_associates:webshield_smtp:4.5 CVE-2000-0738 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:16.140-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov NTBUGTRAQ 20000818 WebShield SMTP infinite loop DoS Attack BID 1589 XF webshield-smtp-dos(5100) WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail. cpe:/a:network_associates:net_tools_pki_server:1.0 cpe:/a:network_associates:net_tools_pki_server:1.0hotfix1 cpe:/a:network_associates:net_tools_pki_server:1.0hotfix2 CVE-2000-0739 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:16.297-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20000802 NAI Net Tools PKI Server vulnerabilities CONFIRM http://download.nai.com/products/licensed/pgp/hf3pki10.txt BID 1537 XF nettools-pki-dir-traverse(5066) Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server. cpe:/a:network_associates:net_tools_pki_server:1.0 cpe:/a:network_associates:net_tools_pki_server:1.0hotfix1 cpe:/a:network_associates:net_tools_pki_server:1.0hotfix2 CVE-2000-0740 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:16.497-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BUGTRAQ 20000802 NAI Net Tools PKI Server vulnerabilities CONFIRM http://download.nai.com/products/licensed/pgp/hf3pki10.txt BID 1536 XF nai-nettools-strong-bo(5026) Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port. cpe:/a:network_associates:net_tools_pki_server:1.0 cpe:/a:network_associates:net_tools_pki_server:1.0hotfix1 cpe:/a:network_associates:net_tools_pki_server:1.0hotfix2 CVE-2000-0741 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:46.483-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000802 NAI Net Tools PKI Server vulnerabilities CONFIRM http://download.nai.com/products/licensed/pgp/hf3pki10.txt BID 1538 Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension. cpe:/o:microsoft:windows_95 cpe:/o:microsoft:windows_98::gold CVE-2000-0742 2000-10-20T00:00:00.000-04:00 2018-10-12T17:29:44.687-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov BID 1544 BUGTRAQ 20000602 ipx storm MS MS00-054 XF win-ipx-ping-packet(5079) The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability. cpe:/a:university_of_minnesota:gopherd:2.3 cpe:/a:university_of_minnesota:gopherd:2.3.1 CVE-2000-0743 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:46.763-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000810 Remote vulnerability in Gopherd 2.x BID 1569 Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value. cpe:/a:university_of_minnesota:gopherd:2.3 cpe:/a:university_of_minnesota:gopherd:2.3.1 CVE-2000-0744 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:45.007-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS DEPRECATED. This entry has been deprecated. It is a duplicate of CVE-2000-0743. cpe:/a:francisco_burzi:php-nuke:1.0 cpe:/a:francisco_burzi:php-nuke:2.5 CVE-2000-0745 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:47.060-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000821 Vuln. in all sites using PHP-Nuke, versions less than 3 BID 1592 admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter. cpe:/a:microsoft:frontpage cpe:/a:microsoft:internet_information_server:4.0 cpe:/a:microsoft:internet_information_services:5.0 CVE-2000-0746 2000-10-20T00:00:00.000-04:00 2018-10-30T12:25:10.357-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov ALLOWS_OTHER_ACCESS BID 1594 BID 1595 BUGTRAQ 20000821 IIS 5.0 cross site scripting vulnerability - using .shtml files or /_vti_bin/shtml.dll MS MS00-060 Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities. cpe:/o:conectiva:linux:4.1 cpe:/o:conectiva:linux:4.2 cpe:/o:conectiva:linux:5.0 CVE-2000-0747 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:16.983-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov BUGTRAQ 20000726 CONECTIVA LINUX SECURITY ANNOUNCEMENT - OPENLDAP XF openldap-logrotate-script-dos(5036) The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. cpe:/a:openldap:openldap:1.2.7 cpe:/a:openldap:openldap:1.2.8 cpe:/a:openldap:openldap:1.2.9 cpe:/a:openldap:openldap:1.2.10 cpe:/a:openldap:openldap:1.2.11 CVE-2000-0748 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:47.500-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000726 Group-writable executable in OpenLDAP BID 1511 OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse. cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:5.0 CVE-2000-0749 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:17.217-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:42 BID 1628 XF freebsd-linux-module-bo(5968) Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system. cpe:/o:netbsd:netbsd:1.4.1 cpe:/o:netbsd:netbsd:1.4.2 cpe:/o:openbsd:openbsd:2.4 cpe:/o:openbsd:openbsd:2.5 cpe:/o:openbsd:openbsd:2.6 cpe:/o:openbsd:openbsd:2.7 cpe:/o:redhat:linux:6.0 cpe:/o:redhat:linux:6.1 cpe:/o:redhat:linux:6.2 CVE-2000-0750 2000-10-20T00:00:00.000-04:00 2008-09-10T15:05:45.837-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000808 OpenBSD 2.7 / NetBSD 1.4.2 mopd buffer overflow FREEBSD FreeBSD-SA-00:40 MISC http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h OPENBSD 20000705 Mopd contained a buffer overflow. REDHAT RHSA-2000:050 BID 1558 Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. cpe:/o:netbsd:netbsd:1.4.1 cpe:/o:netbsd:netbsd:1.4.2 cpe:/o:openbsd:openbsd:2.4 cpe:/o:openbsd:openbsd:2.5 cpe:/o:openbsd:openbsd:2.6 cpe:/o:openbsd:openbsd:2.7 cpe:/o:redhat:linux:6.0 cpe:/o:redhat:linux:6.1 cpe:/o:redhat:linux:6.2 CVE-2000-0751 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:47.967-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000808 OpenBSD 2.7 / NetBSD 1.4.2 mopd buffer overflow FREEBSD FreeBSD-SA-00:40 MISC http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h OPENBSD 20000705 Mopd contained a buffer overflow. REDHAT RHSA-2000:050 BID 1559 mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands. cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha CVE-2000-0752 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:48.140-04:00 7.2 LOCAL LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS FREEBSD FreeBSD-SA-00:43 BID 1629 Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. cpe:/a:microsoft:outlook:97 cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook:2000 CVE-2000-0753 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:17.357-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov BUGTRAQ 20010802 Outlook 2000 Rich Text information disclosure BUGTRAQ 20000824 Outlook winmail.dat BID 1631 XF outlook-reveal-path(5508) The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (RTF) files. cpe:/a:hp:openview_network_node_manager:6.1 CVE-2000-0754 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:48.437-04:00 2.1 LOCAL LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 HP HPSBUX0008-119 BID 1581 Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords. cpe:/a:hp:openview_network_node_manager:6.1 CVE-2000-0755 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:48.577-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS HP HPSBUX0008-118 BID 1581 Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges. cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook:2000 CVE-2000-0756 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:48.717-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1633 BUGTRAQ 20000831 vCard DoS on Outlook 2000 Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service. cpe:/a:aptis_software:totalbill:3.0 CVE-2000-0757 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:48.857-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_ADMIN_ACCESS BUGTRAQ 20000808 Exploit for Totalbill... BID 1555 The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed. cpe:/a:lyris:list_manager:3.0 cpe:/a:lyris:list_manager:4.0 CVE-2000-0758 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:49.000-04:00 4.6 LOCAL LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 ALLOWS_OTHER_ACCESS BUGTRAQ 20000811 Lyris List Manager Administration Hole CONFIRM http://www.lyris.com/lm/lm_updates.html BID 1584 The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form field. cpe:/a:apache:tomcat:3.1 CVE-2000-0759 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:49.157-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 XF tomcat-error-path-reveal(4967) BID 1531 BUGTRAQ 20000719 [LoWNOISE] Tomcat 3.1 Path Revealing Problem. Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path. cpe:/a:apache:tomcat:3.0 cpe:/a:apache:tomcat:3.1 CVE-2000-0760 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:49.297-04:00 6.4 NETWORK LOW NONE PARTIAL PARTIAL NONE http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 BID 1532 BUGTRAQ 20000719 [LoWNOISE] Snoop Servlet (Tomcat 3.1 and 3.0) The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. cpe:/a:ibm:os2_ftp_server:4.0 cpe:/a:ibm:os2_ftp_server:4.2 cpe:/a:ibm:os2_ftp_server:4.3 CVE-2000-0761 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:49.437-04:00 5.0 NETWORK LOW NONE NONE NONE PARTIAL http://nvd.nist.gov 2004-01-01T00:00:00.000-05:00 CONFIRM ftp://ftp.software.ibm.com/ps/products/tcpip/fixes/v4.3os2/ic27721/README BUGTRAQ 20000815 OS/2 Warp 4.5 FTP Server DoS BID 1582 OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username. cpe:/a:ca:etrust_access_control:4.1 cpe:/a:ca:etrust_access_control:4.1:sp1 cpe:/a:ca:etrust_access_control:5.0 cpe:/a:ca:etrust_access_control:5.0:sp1 CVE-2000-0762 2000-10-20T00:00:00.000-04:00 2017-10-09T21:29:17.407-04:00 10.0 NETWORK LOW NONE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov ALLOWS_ADMIN_ACCESS CONFIRM http://support.ca.com/techbases/eTrust/etrust_access_control-response.html BID 1583 BUGTRAQ 20000811 eTrust Access Control - Root compromise for default install XF etrust-access-control-default(5076) The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges. cpe:/a:david_bagley:xlock:4.16 cpe:/a:david_bagley:xlock:4.16.1 CVE-2000-0763 2000-10-20T00:00:00.000-04:00 2008-09-05T16:21:49.733-04:00 7.2 LOCAL LOW NONE COMPLETE CO