CVEs published in January 1999
153 vulnerabilities, 77 critical, 0 exploited.
- No product listedIIS has the #exec function enabled for Server Side Include (SSI) files.10.0 High
- microsoft windows ntA system-critical Windows NT file or directory has inappropriate permissions.10.0 High
- No product listedA system-critical Unix file or directory has inappropriate permissions.10.0 High
- No product listedTwo or more Unix accounts have the same UID.10.0 High
- No product listedA Unix account with a name other than "root" has UID 0, i.e. root privileges.10.0 High
- No product listedNFS exports system-critical data to the world, e.g. / or a password file.10.0 High
- microsoft windows ntWindows NT automatically logs in an administrator upon rebooting.7.2 High
- No product listedA superfluous NFS server is running, but it is not importing or exporting any file systems.10.0 High
- No product listedAn SSH server allows authentication through the .rhosts file.10.0 High
- No product listedA trust relationship exists between two Unix hosts.10.0 High
- No product listedA system is operating in "promiscuous" mode which allows it to perform packet sniffing.10.0 High
- No product listedA router or firewall forwards packets that claim to come from IANA reserved or private addresses,...7.5 High
- No product listedA router or firewall forwards external packets that claim to come from inside the network that...7.5 High
- No product listedThe permissions for system-critical data in an anonymous FTP account are inappropriate. For...10.0 High
- No product listedICMP echo (ping) is allowed from arbitrary hosts.0.0 Low
- No product listedA system-critical NETBIOS/SMB share has inappropriate access control.6.4 Medium
- No product listedAn unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a +...10.0 High
- No product listedA mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.10.0 High
- No product listedAnonymous FTP is enabled.0.0 Low
- No product listedA remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.10.0 High
- No product listedRemote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.10.0 High
- No product listedA remote attacker can sometimes identify the operating system of a host based on how it reacts to...10.0 High
- cisco routerAn attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the...5.0 Medium
- No product listedA service or application has a backdoor password that was placed there by the developer.10.0 High
- microsoft internet information serverIIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote...5.0 Medium
- linux kernelA race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.3.7 Low
- khaled mardam-bey mircThe DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly,...7.5 High
- ssh, ssh ssh2 +1 moreIn some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired...4.6 Medium
- No product listedThe demo version of the Quakenbush NT Password Appraiser sends passwords across the network in...10.0 High
- backweb technologies polite agent protocolA race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.5.1 Medium
- No product listedDPEC Online Courseware allows an attacker to change another user's password without knowing the...10.0 High
- eric allman sendmailRemote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages...5.0 Medium
- datalynx suguardDataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local...4.6 Medium
- microsoft visual basic, office, outlook +3 more +5 moreThe Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to...4.6 Medium
- microsoft access, fms inc. total vb sourcebook +1 moreMicrosoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to...10.0 High
- No product listedNetWare version of LaserFiche stores usernames and passwords unencrypted, and allows...10.0 High
- broadcom controlitLocal or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in...5.0 Medium
- No product listedIn some NT web servers, appending a space at the end of a URL may allow attackers to read source...10.0 High
- microsoft windows ntDenial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing...10.0 High
- No product listedThe Java Web Server would allow remote users to obtain the source code for CGI programs.10.0 High
- hughes msqlmSQL v2.0.1 and below allows remote execution through a buffer overflow.7.5 High
- metainfo metawebMetaInfo MetaWeb web server allows users to upload, execute, and read scripts.10.0 High
- No product listedBuffer overflow in ircd allows arbitrary command execution.10.0 High
- sshA race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal...10.0 High
- No product listedLinux cfingerd could be exploited to gain root access.10.0 High
- No product listedSome filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of...7.5 High
- seattle lab software slmailBuffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command...5.0 Medium
- microsoft windows ntWindows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.10.0 High
- No product listedAttackers can do a denial of service of IRC by crashing the server.10.0 High
- eric allman sendmailDenial of service in Sendmail 8.6.11 and 8.6.12.5.0 Medium
- Show moreLoading…