CVEs published in July 1999
40 vulnerabilities, 6 critical, 0 exploited.
- acushop salesbuilder .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to... 7.2 High
- ethereal group ethereal Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet... 7.2 High
- netscape enterprise server Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly... 5.0 Medium
- network associates gauntlet firewall Denial of service in Gauntlet Firewall via a malformed ICMP packet. 5.0 Medium
- ipswitch ws ftp pro WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows... 7.5 High
- checkpoint firewall-1 Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN,... 2.1 Low
- microsoft windows 2000, windows nt +1 more Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the... 6.2 Medium
- microsoft jet The Microsoft Jet database engine allows an attacker to modify text files via a database query,... 7.6 High
- seattle lab software emurl Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific... 7.5 High
- linux kernel IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the... 7.5 High
- redhat linux The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in... 7.5 High
- microsoft windows nt Denial of service in Windows NT messenger service through a long username. 5.0 Medium
- delegate Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable... 5.0 Medium
- gnu fingerd GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could... 7.2 High
- samba Buffer overflow in Samba smbd program via a malformed message command. 5.0 Medium
- samba Denial of service in Samba NETBIOS name service daemon (nmbd). 10.0 High
- tamu tiger Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute... 7.2 High
- persits aspupload Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote... 10.0 High
- microsoft windows nt, windows 2000 +1 more Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. 7.8 High
- dbmlparser.exe dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows... 5.0 Medium
- microsoft data access components, index server, internet information server +1 more +3 more The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in... 10.0 High
- cray unicos, sgi irix +1 more The default configuration of the Array Services daemon (arrayd) disables authentication, allowing... 10.0 High
- freebsd, netbsd +1 more Operating systems with shared memory implementations based on BSD 4.4 code allow a user to... 5.0 Medium
- novell netware Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows... 10.0 High
- joes own editor joe Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE,... 2.1 Low
- bmc patrol agent BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files... 7.2 High
- linux kernel Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain... 7.2 High
- apple macos MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File. 4.6 Medium
- netscape communicator Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even... 5.0 Medium
- microsoft internet information server IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not,... 5.0 Medium
- microsoft internet information server The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on... 5.0 Medium
- netscape enterprise server Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. 5.0 Medium
- microsoft windows nt A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control... 7.8 High
- microsoft windows 2000, windows 95, windows 98 +1 more +3 more Denial of service in various Windows systems via malformed, fragmented IGMP packets. 7.8 High
- bsd BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear... 2.1 Low
- cisco 675 router Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or... 7.5 High
- hp hp-ux, visualize conference ftp +1 more The default FTP configuration in HP Visualize Conference allows conference users to send a file... 7.5 High
- hp hp-ux, sun solaris, sunos +2 more Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). 10.0 High
- cde, hp hp-ux +1 more HP CDE program includes the current directory in root's PATH variable. 7.2 High
- hp hp-ux Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. 4.6 Medium