CVEs published in April 1999
39 vulnerabilities, 3 critical, 0 exploited.
- oracle oracle8i The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute... 4.6 Medium
- caldera coas, openlinux +1 more A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file... 2.1 Low
- No product listed The ffingerd 1.19 allows remote attackers to identify users on the target system based on its... 10.0 High
- microsoft internet explorer MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local... 7.5 High
- microsoft internet explorer Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different... 7.5 High
- netbsd The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or... 7.2 High
- i-soft quikstore quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with... 5.0 Medium
- selena sol webstore An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could... 5.0 Medium
- gnu bash The prompt parsing in bash allows a local user to execute commands as another user by creating a... 4.6 Medium
- hp sendmail Denial of service in Sendmail 8.8.6 in HPUX. 5.0 Medium
- darren reed ipfilter IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack... 7.2 High
- realnetworks realserver Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable... 4.6 Medium
- netbsd Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an... 2.1 Low
- microsoft windows 95, windows 98, windows nt +2 more Remote attackers can perform a denial of service in Windows machines using malicious ARP packets,... 5.0 Medium
- symantec norton antivirus Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus... 4.6 Medium
- bmc patrol agent BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. 10.0 High
- winroute The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without... 5.0 Medium
- novell netware A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be... 5.0 Medium
- microsoft internet explorer Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system... 2.6 Low
- webcom cgi guestbook Vulnerability in the Wguest CGI program. 7.5 High
- hummingbird exceed Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed... 5.0 Medium
- andrew tridgell rsync The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's... 2.1 Low
- network appliance netcache, snmp +1 more The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even... 5.0 Medium
- ucd-snmp vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community... 5.0 Medium
- procmail A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary... 1.2 Low
- mirabilis icq The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user... 5.0 Medium
- procmail, caldera openlinux +1 more Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute... 7.5 High
- bmc patrol agent BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service. 5.0 Medium
- mountain network systems webcart An incorrect configuration of the Webcart CGI program could disclose private information. 5.0 Medium
- mercantec softcart An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private... 5.0 Medium
- pdgsoft pdg shopping cart An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose... 5.0 Medium
- seaside enterprises ezmall An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could... 5.0 Medium
- austin contract computing merchant order form An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose... 5.0 Medium
- midnight commander commander Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. 2.1 Low
- microsoft internet explorer Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate... 5.0 Medium
- webcom cgi guestbook The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read... 5.0 Medium
- hp mpe ix Local users can gain privileges using the debug utility in the MPE/iX operating system. 4.6 Medium
- cisco ios In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by... 5.0 Medium
- bmc patrol agent Patrol management software allows a remote attacker to conduct a replay attack to steal the... 10.0 High