CVEs published in September 1997

19 vulnerabilities, 3 critical, 0 exploited.

• samba Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a... CVE-1999-0182 Public exploit 10.0 HighSeptember 30, 1997
• washington university wu-ftpd Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE... CVE-1999-0955 7.6 HighSeptember 23, 1997
• ncsa httpd Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. CVE-1999-0267 Public exploit EPSS 10.2% 7.5 HighSeptember 23, 1997
• oracle http server Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the... CVE-1999-1125 10.0 HighSeptember 19, 1997
• x.org x11 Race condition in xterm allows local users to modify arbitrary files via the logging option. CVE-1999-0965 6.2 MediumSeptember 19, 1997
• next nextstep The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial... CVE-1999-0956 7.2 HighSeptember 19, 1997
• arp protocol protocol The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP... CVE-1999-0667 EPSS 13.6% 10.0 HighSeptember 19, 1997
• bsd, freebsd, netbsd +2 more +4 more The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the... CVE-1999-1214 2.1 LowSeptember 15, 1997
• bisonware ftp server Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing... CVE-1999-0079 5.0 MediumSeptember 12, 1997
• ibm lotus cc mail Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has... CVE-1999-1275 4.6 MediumSeptember 8, 1997
• hp hp-ux Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to... CVE-1999-1139 7.2 HighSeptember 1, 1997
• hp hp-ux HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile... CVE-1999-1133 4.6 MediumSeptember 1, 1997
• webcom cgi guestbook Remote execution of arbitrary commands through Guestbook CGI program. CVE-1999-0237 7.5 HighSeptember 1, 1997
• microsoft internet information server IIS newdsn.exe CGI script allows remote users to overwrite files. CVE-1999-0191 Public exploit EPSS 53.3% 6.4 MediumSeptember 1, 1997
• tftp, linux kernel +1 more Linux implementations of TFTP would allow access to files outside the restricted directory. CVE-1999-0183 6.4 MediumSeptember 1, 1997
• oreilly website The uploader program in the WebSite web server allows a remote attacker to execute arbitrary... CVE-1999-0177 7.5 HighSeptember 1, 1997
• sgi irix The handler CGI program in IRIX allows arbitrary command execution. CVE-1999-0148 Public exploit EPSS 10.5% 7.5 HighSeptember 1, 1997
• ibm aix AIX bugfiler program allows local users to gain root access. CVE-1999-0115 Public exploit 7.2 HighSeptember 1, 1997
• apache http server Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. CVE-1999-0071 7.5 HighSeptember 1, 1997