CVEs published in November 1998
22 vulnerabilities, 1 critical, 0 exploited.
- excite ews Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the... 7.2 High
- excite ews Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted... 7.2 High
- excite ews Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world... 7.2 High
- debian linux The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user... 7.5 High
- samba, caldera openlinux, redhat linux +1 more +3 more Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with... 4.6 Medium
- kde Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH... 7.2 High
- kde, freebsd, linux kernel +2 more KDE kppp allows local users to create a directory in an arbitrary location via the HOME... 2.1 Low
- kde, freebsd, linux kernel +2 more KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable... 7.2 High
- kde, freebsd, linux kernel +2 more KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the ... 4.6 Medium
- eric allman vacation, freebsd, hp hp-ux +4 more +6 more Vacation program allows command execution by remote users through a sendmail command. 7.5 High
- broadcom arcserve backup, inoculan, microsoft exchange server +2 more The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log... 4.6 Medium
- sun solaris, sunos +1 more CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's... 4.6 Medium
- mirabilis icq ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an... 7.5 High
- lakeweb mail list cgi script LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell... 7.5 High
- lakeweb filemail cgi script LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell... 7.5 High
- hamcards postcard cgi postcard cgi HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell... 7.5 High
- mit kerberos Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to... 7.5 High
- puppets place nukenabber NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber... 5.0 Medium
- freebsd, bsdi bsd os, openbsd +2 more IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. 5.0 Medium
- bmc patrol agent BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on... 7.2 High
- sun solaris A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and... 10.0 High
- ibm aix AIX infod allows local users to gain root access through an X display. 7.2 High