CVEs published in December 1999
200 vulnerabilities, 21 critical, 0 exploited.
- suse linuxThe PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world...2.1 Low
- intel inbusiness email stationdaynad program in Intel InBusiness E-mail Station does not require authentication, which allows...7.5 High
- openbsd opensshAn SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the...2.1 Low
- vdonet vdolive playerBuffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client...7.6 High
- jgaa warftpdWar FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with...5.0 Medium
- microsoft exchange serverModifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until...7.5 High
- disney go express searchThe Disney Go Express Search allows remote attackers to access and modify search information for...2.6 Low
- sun solaris, sunos +1 moreBuffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a...10.0 High
- microsoft windows 95, windows 98, windows nt +2 moreThe Windows help system can allow a local user to execute commands as another user by editing a...4.6 Medium
- debian linuxhtdig allows remote attackers to execute commands via filenames with shell metacharacters.7.5 High
- sun solaris, sunos +1 moreBuffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA...10.0 High
- wolfpack development xshipwarsBuffer overflow in Xshipwars xsw program.7.5 High
- debian linux, linux kernel +1 moreThe ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large...5.0 Medium
- microsoft internet explorerInternet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client...5.1 Medium
- eric allman sendmailSendmail allows local users to reinitialize the aliases database via the newaliases command, then...2.1 Low
- sun solaris, sunos +1 moreBuffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a...10.0 High
- goodtech telnet server ntBuffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via...5.0 Medium
- microsoft ieBuffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to...7.5 High
- gnome gdmError messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid...2.1 Low
- sun web-based enterprise management, solaris +1 moreThe Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext...7.2 High
- sco unixwareUnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.7.2 High
- redhat linuxORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.5.0 Medium
- redhat linuxORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local...7.5 High
- true north internet anywhere mail serverInternet Anywhere POP3 Mail Server allows local users to cause a denial of service via a...2.1 Low
- sco unixwareBuffer overflow in UnixWare xauto program allows local users to gain root privilege.7.2 High
- stalker communigate proBuffer overflow in CommuniGatePro via a long string to the HTTP configuration port.5.0 Medium
- sco unixwareUnixWare programs that dump core allow a local user to modify files via a symlink attack on the ....7.2 High
- sco unixwareThe default permissions for UnixWare /var/mail allow local users to read and modify other users'...3.6 Low
- debian linuxdump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to...2.1 Low
- postgresqlInsecure directory permissions in RPM distribution for PostgreSQL allows local users to gain...2.1 Low
- microsoft internet explorerInternet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a...5.0 Medium
- ibm websphere application serverIBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its...7.2 High
- endymion mailman webmailThe default permissions for Endymion MailMan allow local users to read email or modify files.3.6 Low
- sco unixwareUnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary...3.6 Low
- lotus domino serverLotus Domino HTTP server allows remote attackers to determine the real path of the server via a...5.0 Medium
- zbsoft zbserverZBServer Pro allows remote attackers to read source code for executable files by inserting a . ...5.0 Medium
- freebsdFreeBSD mount_union command allows local users to gain root privileges via a symlink attack.7.2 High
- sun solaris, sunos +1 moreSolaris chkperm allows local users to read files owned by bin via the VMSYS environmental...2.1 Low
- sun solaris, sunos +1 moreSolaris arp allows local users to read files via the -f parameter, which lists lines in the file...2.1 Low
- freebsdFreeBSD gdc program allows local users to modify files via a symlink attack.2.1 Low
- slackware linuxlogin in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting...5.0 Medium
- freebsdBuffer overflow in FreeBSD gdc program.7.2 High
- netscape enterprise server, fasttrack server +1 moreBuffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote...10.0 High
- deerfield mdaemonDenial of service in MDaemon 2.7 via a large number of connection attempts.5.0 Medium
- deerfield serv-u ftp-serverBuffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE...5.0 Medium
- rsa rsarefBuffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.10.0 High
- freebsdBuffer overflow in FreeBSD angband allows local users to gain privileges.4.6 Medium
- freebsdBuffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.4.6 Medium
- freebsdFreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm...4.6 Medium
- microsoft windows 2000, windows nt +1 moreNTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.5.0 Medium