CVEs published in November 1999

83 vulnerabilities, 10 critical, 0 exploited.

• sun sunos Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME... CVE-1999-0841 Public exploit 7.2 HighNovember 30, 1999
• sun sunos Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a... CVE-1999-0840 7.2 HighNovember 30, 1999
• microsoft windows nt A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after... CVE-1999-0824 4.6 MediumNovember 30, 1999
• qualcomm qpopper Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. CVE-1999-0822 Public exploit 10.0 HighNovember 30, 1999
• freechess.org fics program Buffer overflow in free internet chess server (FICS) program, xboard. CVE-1999-0847 5.0 MediumNovember 29, 1999
• symantec mail-gear Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. ... CVE-1999-0842 Public exploit 5.0 MediumNovember 29, 1999
• microsoft ie Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by... CVE-1999-0839 7.2 HighNovember 29, 1999
• microsoft windows 95, windows 98 +1 more A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers... CVE-1999-0387 7.8 HighNovember 29, 1999
• oracle web listener Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a... CVE-1999-1547 7.5 HighNovember 25, 1999
• sco unixware Buffer overflow in SCO su program allows local users to gain root access via a long username. CVE-1999-0845 Public exploit 7.2 HighNovember 25, 1999
• linux kernel Buffer overflow in Linux su command gives root access to local users. CVE-1999-0317 7.2 HighNovember 25, 1999
• cabletron smartswitch router 8000 firmware Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second... CVE-1999-1548 5.0 MediumNovember 24, 1999
• netscape communicator, navigator +1 more Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows... CVE-1999-1189 7.5 HighNovember 24, 1999
• hp 9000 Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the... CVE-1999-1163 7.5 HighNovember 24, 1999
• deerfield mdaemon Denial of service in MDaemon WorldClient and WebConfig services via a long URL. CVE-1999-0844 Public exploit 5.0 MediumNovember 24, 1999
• redhat linux, caldera openlinux, openlinux eserver +2 more Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl... CVE-2000-0531 Public exploit 2.1 LowNovember 23, 1999
• sun forte, netbeans developer +1 more Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community... CVE-1999-1527 7.5 HighNovember 23, 1999
• arcane software vermillion ftp daemon Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of... CVE-1999-1058 7.5 HighNovember 22, 1999
• sun solaris, sunos +1 more Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable. CVE-1999-0818 Public exploit 7.2 HighNovember 20, 1999
• proftpd project proftpd ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which... CVE-1999-1475 4.6 MediumNovember 19, 1999
• microsoft sql server Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed... CVE-1999-0999 Public exploit EPSS 21.7% 4.3 MediumNovember 19, 1999
• debian linux, cobalt qube, sun cobalt raq +2 more +4 more Denial of service in Linux syslogd via a large number of connections. CVE-1999-0831 5.0 MediumNovember 19, 1999
• university of washington pine Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows... CVE-2000-0352 10.0 HighNovember 18, 1999
• microsoft windows nt Windows NT does not properly download a system policy if the domain user logs into the domain... CVE-1999-0987 10.0 HighNovember 18, 1999
• microsoft windows 2000, windows 98, windows nt +2 more Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of... CVE-2000-0073 Public exploit EPSS 20.7% 5.0 MediumNovember 17, 1999
• gene6 g6 ftp server Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource... CVE-1999-1519 Public exploit 5.0 MediumNovember 17, 1999
• iain lea tin tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read... CVE-1999-1092 4.6 MediumNovember 17, 1999
• microsoft internet explorer Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet. CVE-1999-0793 Public exploit EPSS 13.3% 2.6 LowNovember 17, 1999
• lynx project lynx Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a... CVE-1999-1549 7.8 HighNovember 16, 1999
• tek phaser network printer 740, phaser network printer 750, phaser network printer 750dp +2 more +4 more Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain... CVE-1999-1508 Public exploit 10.0 HighNovember 16, 1999
• thttpd http server Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary... CVE-1999-1457 7.5 HighNovember 16, 1999
• matt wright formhandler.cgi Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be... CVE-1999-1051 5.0 MediumNovember 16, 1999
• admiral systems emailclub Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to... CVE-1999-1190 Public exploit 10.0 HighNovember 15, 1999
• prosoft engineering netware client ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS... CVE-1999-1528 4.6 MediumNovember 14, 1999
• microsoft internet explorer Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error... CVE-1999-1110 Public exploit 5.0 MediumNovember 14, 1999
• etl delegate The Delegate application proxy has several buffer overflows which allow a remote attacker to... CVE-2000-0165 Public exploit EPSS 11.5% 7.5 HighNovember 13, 1999
• microsoft windows 95, windows 98 +1 more The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands... CVE-2000-0330 Public exploit EPSS 15.0% 7.6 HighNovember 12, 1999
• matt wright formhandler.cgi Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers... CVE-1999-1050 Public exploit 5.0 MediumNovember 12, 1999
• microsoft ie, internet explorer, outlook +1 more +3 more A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an... CVE-2000-0329 Public exploit 5.1 MediumNovember 11, 1999
• qpc software qvt net, qvt term plus +1 more Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4... CVE-1999-1539 Public exploit EPSS 12.1% 7.5 HighNovember 10, 1999
• artisoft xtramail Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and... CVE-1999-1511 7.5 HighNovember 10, 1999
• ibm aix, sco openserver, unixware +1 more +3 more Denial of service in BIND named via naptr. CVE-1999-0851 2.1 LowNovember 10, 1999
• isc bind Denial of service in BIND named via maxdname. CVE-1999-0849 5.0 MediumNovember 10, 1999
• isc bind, sun solaris, sunos +2 more Denial of service in BIND named via consuming more than "fdmax" file descriptors. CVE-1999-0848 Public exploit 5.0 MediumNovember 10, 1999
• isc bind, sun solaris, sunos +2 more Denial of service in BIND by improperly closing TCP sessions via so_linger. CVE-1999-0837 10.0 HighNovember 10, 1999
• ibm aix, sco openserver, unixware +1 more +3 more Denial of service in BIND named via malformed SIG records. CVE-1999-0835 10.0 HighNovember 10, 1999
• isc bind, sun solaris, sunos +2 more Buffer overflow in BIND 8.2 via NXT records. CVE-1999-0833 7.5 HighNovember 10, 1999
• irfanview Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands... CVE-1999-1112 Public exploit 7.5 HighNovember 9, 1999
• immunix stackguard Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and... CVE-1999-1111 7.5 HighNovember 9, 1999
• cc whois CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters... CVE-1999-0985 Public exploit 7.5 HighNovember 9, 1999
• Show olderLoading…