CVEs published in September 1999

61 vulnerabilities, 9 critical, 0 exploited.

• ibm aix Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long... CVE-1999-1583 7.2 HighSeptember 30, 1999
• hughes technologies w3-auth Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute... CVE-1999-1469 7.5 HighSeptember 30, 1999
• mediahouse software statistics server Mediahouse Statistics Server allows remote attackers to read the administrator password, which is... CVE-1999-0932 7.2 HighSeptember 30, 1999
• mediahouse software statistics server Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands. CVE-1999-0931 Public exploit 5.0 MediumSeptember 30, 1999
• arcad systemhaus arcad ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions,... CVE-1999-1350 4.6 MediumSeptember 29, 1999
• apache http server The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended... CVE-1999-0289 5.0 MediumSeptember 29, 1999
• linux kernel mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or... CVE-1999-1352 4.6 MediumSeptember 28, 1999
• ibm aix Buffer overflow in AIX ftpd in the libc library. CVE-1999-0789 Public exploit 10.0 HighSeptember 28, 1999
• adobe acrobat reader Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat... CVE-1999-1576 Public exploit EPSS 12.9% 7.5 HighSeptember 27, 1999
• mutt mail client Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed... CVE-1999-0940 7.5 HighSeptember 27, 1999
• knox software arkeia Arkiea nlservd allows remote attackers to conduct a denial of service. CVE-1999-0788 5.0 MediumSeptember 26, 1999
• microsoft internet explorer Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for... CVE-1999-1578 Public exploit EPSS 19.4% 5.1 MediumSeptember 24, 1999
• microsoft msn setup bulletin board services Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote... CVE-1999-1484 Public exploit EPSS 27.0% 7.5 HighSeptember 24, 1999
• kvirc irc client Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname>... CVE-1999-1351 5.0 MediumSeptember 24, 1999
• knox software arkeia Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local... CVE-1999-1534 Public exploit 7.2 HighSeptember 23, 1999
• gnome libs, mandrakesoft mandrake linux +1 more Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long -... CVE-1999-1477 Public exploit 7.2 HighSeptember 23, 1999
• ibm aix named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to... CVE-1999-1013 7.2 HighSeptember 23, 1999
• sun solaris, sunos +1 more Denial of service in Solaris TCP streams driver via a malicious connection that causes the server... CVE-1999-0908 Public exploit 5.0 MediumSeptember 23, 1999
• suse linux Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable. CVE-1999-0906 Public exploit 7.2 HighSeptember 23, 1999
• microsoft commercial internet system, internet information server +1 more IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they... CVE-1999-0777 EPSS 12.0% 7.5 HighSeptember 23, 1999
• freebsd FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large... CVE-1999-0912 Public exploit 2.1 LowSeptember 22, 1999
• sun solaris, sunos +1 more The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE... CVE-1999-0786 Public exploit 4.6 MediumSeptember 22, 1999
• infodrom cfingerd Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field. CVE-1999-0708 Public exploit 7.2 HighSeptember 21, 1999
• microsoft terminal server, windows 95, windows 98se +1 more +3 more Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a... CVE-1999-0909 EPSS 12.0% 7.5 HighSeptember 20, 1999
• microsoft windows nt The security descriptor for RASMAN allows users to point to an alternate location via the Windows... CVE-1999-0886 Public exploit EPSS 21.6% 9.0 HighSeptember 17, 1999
• ssh The SSH authentication agent follows symlinks via a UNIX domain socket. CVE-1999-0787 Public exploit 2.1 LowSeptember 17, 1999
• matt wright wwwboard WWWBoard has a default username and default password. CVE-1999-0954 7.5 HighSeptember 16, 1999
• matt wright wwwboard WWWBoard stores encrypted passwords in a password file that is under the web root and thus... CVE-1999-0953 Public exploit 10.0 HighSeptember 16, 1999
• steven j. merrifield soundcard cw sccw allows local users to read arbitrary files. CVE-1999-0907 2.1 LowSeptember 16, 1999
• ihtml merchant merchant iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a... CVE-1999-0890 7.5 HighSeptember 16, 1999
• redhat linux, bsdi bsd os, freebsd +2 more Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am... CVE-1999-0704 Public exploit 9.3 HighSeptember 16, 1999
• university of kansas lynx Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when... CVE-1999-0817 10.0 HighSeptember 15, 1999
• matt wright guestbook, apache http server +1 more guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->"... CVE-1999-1053 Public exploit EPSS 85.2% 7.5 HighSeptember 13, 1999
• sun solaris, sunos +1 more Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via... CVE-1999-1014 Public exploit 4.6 MediumSeptember 13, 1999
• fuseware fusemail Buffer overflow in FuseMAIL POP service via long USER and PASS commands. CVE-1999-0759 Public exploit 10.0 HighSeptember 13, 1999
• netscape enterprise server Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch. CVE-1999-0751 Public exploit 5.0 MediumSeptember 13, 1999
• microsoft hotmail Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to... CVE-1999-0750 Public exploit 5.1 MediumSeptember 13, 1999
• cde, digital unix, ibm aix +2 more +4 more Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain... CVE-1999-0691 Public exploit 7.2 HighSeptember 13, 1999
• cde, sun solaris, sunos +2 more The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. CVE-1999-0689 Public exploit 7.2 HighSeptember 13, 1999
• cde, digital unix, ibm aix +2 more +4 more The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to... CVE-1999-0687 7.5 HighSeptember 13, 1999
• computalynx cmail Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack... CVE-1999-1521 Public exploit 10.0 HighSeptember 12, 1999
• microsoft internet explorer The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan ... CVE-1999-1575 Public exploit EPSS 35.6% 5.1 MediumSeptember 10, 1999
• microsoft commercial internet system, site server, site server commerce +2 more Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie... CVE-1999-0910 5.0 MediumSeptember 10, 1999
• microsoft internet explorer Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import... CVE-1999-0702 Public exploit EPSS 24.2% 10.0 HighSeptember 10, 1999
• matt wright download.cgi Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot)... CVE-1999-1377 5.0 MediumSeptember 9, 1999
• sco openserver SCO Doctor allows local users to gain root privileges through a Tools option. CVE-1999-0697 7.2 HighSeptember 9, 1999
• sun solaris, sunos +1 more Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. CVE-1999-0767 Public exploit 7.2 HighSeptember 8, 1999
• nosque msgcore Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the... CVE-1999-1353 4.6 MediumSeptember 7, 1999
• freebsd, netbsd, openbsd +2 more FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large... CVE-2000-0489 Public exploit 2.1 LowSeptember 5, 1999
• gftp ftp client gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the... CVE-1999-1562 4.6 MediumSeptember 5, 1999
• Show olderLoading…