CVEs published in July 1997

39 vulnerabilities, 3 critical, 0 exploited.

• hp hp-ux Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID)... CVE-1999-1308 4.6 MediumJuly 31, 1997
• sun solaris, sunos +1 more Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to... CVE-1999-1419 7.2 HighJuly 30, 1997
• microsoft windows nt The PATH in Windows NT includes the current working directory (.), which could allow local users... CVE-1999-1217 4.6 MediumJuly 25, 1997
• oracle http server Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a... CVE-1999-1068 5.0 MediumJuly 23, 1997
• university of cambridge exim Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in... CVE-1999-0971 Public exploit 7.2 HighJuly 22, 1997
• ibm aix Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a... CVE-1999-1208 Public exploit 7.2 HighJuly 21, 1997
• isc inn Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute... CVE-1999-0247 7.5 HighJuly 21, 1997
• ibm aix Buffer overflow in AIX lchangelv gives root access. CVE-1999-0122 Public exploit 7.2 HighJuly 21, 1997
• debian linux, caldera openlinux lite, delix dld +1 more +3 more Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local... CVE-1999-1182 7.2 HighJuly 17, 1997
• sgi irix root privileges via buffer overflow in xlock command on SGI IRIX systems. CVE-1999-0030 Public exploit 7.2 HighJuly 16, 1997
• sgi irix root privileges via buffer overflow in ordist command on SGI IRIX systems. CVE-1999-0029 Public exploit 7.2 HighJuly 16, 1997
• sgi irix root privileges via buffer overflow in login/scheme command on SGI IRIX systems. CVE-1999-0028 7.2 HighJuly 16, 1997
• sgi irix root privileges via buffer overflow in eject command on SGI IRIX systems. CVE-1999-0027 Public exploit 7.2 HighJuly 16, 1997
• sgi irix root privileges via buffer overflow in pset command on SGI IRIX systems. CVE-1999-0026 Public exploit 4.6 MediumJuly 16, 1997
• sgi irix root privileges via buffer overflow in df command on SGI IRIX systems. CVE-1999-0025 Public exploit EPSS 12.3% 7.2 HighJuly 16, 1997
• ncsa campas, servers +1 more The campas CGI program provided with some NCSA web servers allows an attacker to execute... CVE-1999-0146 Public exploit EPSS 14.9% 7.5 HighJuly 15, 1997
• sgi irix IRIX fam service allows an attacker to obtain a list of all files on the server. CVE-1999-0059 7.1 HighJuly 14, 1997
• microsoft windows nt Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a... CVE-1999-1463 EPSS 16.6% 5.0 MediumJuly 10, 1997
• webgais development team webgais The Webgais program allows a remote user to execute arbitrary commands. CVE-1999-0176 Public exploit 7.5 HighJuly 10, 1997
• webgais development team webgais websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary... CVE-1999-0196 Public exploit EPSS 13.4% 5.0 MediumJuly 8, 1997
• microsoft internet explorer, netscape communicator +1 more JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote... CVE-1999-0031 EPSS 18.3% 2.6 LowJuly 8, 1997
• washington university wu-ftpd wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer)... CVE-1999-1326 5.0 MediumJuly 4, 1997
• freebsd, ibm aix, linux kernel +1 more +3 more The rwho/rwhod service is running, which exposes machine status and user information. CVE-1999-0628 5.0 MediumJuly 1, 1997
• No product listed A password for accessing a WWW URL is guessable. CVE-1999-0541 7.5 HighJuly 1, 1997
• No product listed A DNS server allows inverse queries. CVE-1999-0533 7.5 HighJuly 1, 1997
• No product listed A DNS server allows zone transfers. CVE-1999-0532 Public exploit EPSS 69.3% 0.0 LowJuly 1, 1997
• x.org x11 An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to... CVE-1999-0526 Public exploit EPSS 20.8% 10.0 HighJuly 1, 1997
• dan bernstein qmail Denial of service in Qmail through long SMTP commands. CVE-1999-0250 10.0 HighJuly 1, 1997
• cat soft serv-u Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service ... CVE-1999-0219 Public exploit 7.8 HighJuly 1, 1997
• linux kernel, sgi irix +1 more Denial of service in RPC portmapper allows attackers to register or unregister RPC services or... CVE-1999-0195 5.0 MediumJuly 1, 1997
• isc bind When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server,... CVE-1999-0184 6.4 MediumJuly 1, 1997
• sun nfs NFS allows attackers to read and write any file on the system by specifying a false UID. CVE-1999-0169 10.0 HighJuly 1, 1997
• washington university wu-ftpd wu-ftpd FTP daemon allows any user and password combination. CVE-1999-0156 4.6 MediumJuly 1, 1997
• microsoft windows 95, windows 2000, windows nt +1 more +3 more Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. CVE-1999-0153 Public exploit EPSS 21.1% 5.0 MediumJuly 1, 1997
• gnu fingerd The Perl fingerd program allows arbitrary command execution from remote users. CVE-1999-0150 Fix available 7.5 HighJuly 1, 1997
• university of arizona glimpse http, webglimpse +1 more The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands. CVE-1999-0147 Public exploit 7.5 HighJuly 1, 1997
• ibm aix RIP v1 is susceptible to spoofing. CVE-1999-0111 5.0 MediumJuly 1, 1997
• washington university wu-ftpd Buffer overflow in wu-ftp from PASV command causes a core dump. CVE-1999-0076 5.0 MediumJuly 1, 1997
• freebsd, linux kernel, microsoft windows nt +1 more +3 more Listening TCP ports are sequentially allocated, allowing spoofing attacks. CVE-1999-0074 6.4 MediumJuly 1, 1997