CVEs published in October 1999

57 vulnerabilities, 9 critical, 0 exploited.

• microsoft internet explorer Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5... CVE-1999-1577 Public exploit EPSS 19.5% 5.1 MediumOctober 31, 1999
• sky communications skyfull Buffer overflow in Skyfull mail server via MAIL FROM command. CVE-1999-0873 Public exploit 7.5 HighOctober 30, 1999
• netscape messaging server Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of... CVE-1999-1532 Public exploit 5.0 MediumOctober 29, 1999
• netscape communicator Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and... CVE-1999-1226 2.6 LowOctober 28, 1999
• texas imperial software wftpd Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of... CVE-1999-0950 Public exploit 10.0 HighOctober 28, 1999
• pacific software url live URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. CVE-1999-0915 Public exploit 5.0 MediumOctober 28, 1999
• falcon web server Falcon web server allows remote attackers to determine the absolute path of the web root via long... CVE-1999-0882 5.0 MediumOctober 28, 1999
• microsoft windows nt LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL... CVE-1999-1234 EPSS 13.3% 5.0 MediumOctober 26, 1999
• apple macos Idle locking function in MacOS 9 allows local users to bypass the password protection of idled... CVE-1999-1076 4.6 MediumOctober 26, 1999
• ibm aix genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports... CVE-1999-0903 7.5 HighOctober 26, 1999
• blueface falcon web server Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. CVE-1999-0881 5.0 MediumOctober 26, 1999
• zeus technologies web server The Zeus web server administrative interface uses weak encryption for its passwords. CVE-1999-0884 5.0 MediumOctober 25, 1999
• zeus technologies web server Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an... CVE-1999-0883 10.0 HighOctober 25, 1999
• No product listed IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is... CVE-1999-0944 Public exploit 10.0 HighOctober 24, 1999
• linux-nis ypserv ypserv allows local administrators to modify password tables. CVE-1999-0902 7.2 HighOctober 23, 1999
• linux-nis ypserv ypserv allows a local user to modify the GECOS and login shells of other users. CVE-1999-0901 7.2 HighOctober 23, 1999
• linux-nis rpc.yppasswdd Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation. CVE-1999-0900 7.2 HighOctober 23, 1999
• suse linux Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory. CVE-2000-0363 6.2 MediumOctober 22, 1999
• suse linux Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges. CVE-2000-0362 Public exploit 7.2 HighOctober 22, 1999
• linux kernel Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged... CVE-1999-1341 4.6 MediumOctober 22, 1999
• omnicron omnihttpd Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands. CVE-1999-0951 Public exploit 10.0 HighOctober 22, 1999
• microsoft virtual machine Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute... CVE-2000-0327 EPSS 11.8% 7.6 HighOctober 21, 1999
• axent raptor firewall Denial of service in Axent Raptor firewall via malformed zero-length IP options. CVE-1999-0905 Public exploit 5.0 MediumOctober 21, 1999
• microsoft java virtual machine The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands... CVE-1999-0766 9.3 HighOctober 21, 1999
• checkpoint firewall-1 Firewall-1 does not properly restrict access to LDAP attributes. CVE-1999-0895 7.5 HighOctober 20, 1999
• bsdi gauntlet When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows... CVE-1999-1047 7.5 HighOctober 18, 1999
• icq activelist server ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed... CVE-1999-1342 5.0 MediumOctober 17, 1999
• openlink Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request... CVE-1999-0943 Public exploit 10.0 HighOctober 15, 1999
• redhat linux Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to... CVE-2000-0356 4.6 MediumOctober 13, 1999
• xerox docucolor 4lp HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang)... CVE-1999-1343 5.0 MediumOctober 13, 1999
• sco openserver userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. CVE-1999-0893 Public exploit 2.1 LowOctober 11, 1999
• caldera openlinux The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which... CVE-2000-0369 5.0 MediumOctober 8, 1999
• t. hauck jana web server Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready... CVE-1999-1083 Public exploit 5.0 MediumOctober 8, 1999
• t. hauck jana web server Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready... CVE-1999-1082 Public exploit 5.0 MediumOctober 8, 1999
• roxen web server Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to... CVE-1999-1522 5.0 MediumOctober 7, 1999
• redhat linux Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to... CVE-1999-1347 4.6 MediumOctober 7, 1999
• redhat linux PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive... CVE-1999-1346 7.5 HighOctober 7, 1999
• xlink technology omni-nfs x enterprise NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service ... CVE-1999-1349 5.0 MediumOctober 6, 1999
• hybrid network cable modem, hsmp +1 more Hybrid Network cable modems do not include an authentication mechanism for administration,... CVE-1999-0791 Public exploit 10.0 HighOctober 6, 1999
• netscape communicator Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating... CVE-1999-1357 7.5 HighOctober 5, 1999
• auto ftp ftp Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure... CVE-1999-1345 4.6 MediumOctober 5, 1999
• auto ftp ftp Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp... CVE-1999-1344 7.5 HighOctober 5, 1999
• redhat linux RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell... CVE-1999-1542 10.0 HighOctober 4, 1999
• cactus software shell-lock shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files... CVE-1999-1541 7.2 HighOctober 4, 1999
• cactus software shell-lock shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows... CVE-1999-1540 2.1 LowOctober 4, 1999
• sambar server Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service,... CVE-1999-1523 7.5 HighOctober 4, 1999
• macromedia matrix screen saver Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled... CVE-1999-1454 4.6 MediumOctober 4, 1999
• sco unixware UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE... CVE-1999-0942 7.2 HighOctober 4, 1999
• yahoo pager Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of... CVE-2000-0047 5.0 MediumOctober 1, 1999
• true north internet anywhere mail server Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial... CVE-2000-0016 Public exploit 5.0 MediumOctober 1, 1999
• Show olderLoading…