CVEs published in December 1999
200 vulnerabilities, 21 critical, 0 exploited.
- microsoft windows ntWindows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic...4.6 Medium
- microsoft windows ntPassfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name,...7.5 High
- dec openvmsVulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow...4.6 Medium
- novell unixwareVulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.7.2 High
- cray unicosVulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and...3.6 Low
- microsoft windows ntOffice Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are...2.1 Low
- apache http servermod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via...10.0 High
- chris matthee nftpBuffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a...5.1 Medium
- stephen turner analogVulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the...5.0 Medium
- microsoft sna serverAn interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier...5.0 Medium
- microsoft officeMicrosoft Office 98, Macintosh Edition, does not properly initialize the disk space used by...2.1 Low
- microsoft site serverDirect Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in...7.5 High
- microsoft internet information serverIIS 4.0 does not properly restrict access for the initial session request from a user's IP...7.5 High
- microsoft internet information serverIIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in...5.0 Medium
- microsoft windows ntNetbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service ...5.0 Medium
- systemsoft systemwizardSystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms...7.5 High
- lincoln d. stein nph-publishDirectory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite...5.0 Medium
- cisco iosWeb Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not...7.5 High
- third voice webCross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to...6.4 Medium
- microsoft windows ntTcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via...5.0 Medium
- microsoft internet information serverFTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource...5.0 Medium
- microsoft windows ntWindows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source...5.0 Medium
- microsoft windows ntWindows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows...7.5 High
- cisco resource managerCisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that...2.1 Low
- allaire coldfusionHTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for...7.5 High
- ibm aixlquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in...2.1 Low
- microsoft windows 95Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates...5.0 Medium
- microsoft windows 95Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is...4.6 Medium
- bsd, sun sunos, apple a ux +1 more +3 morelpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users...2.1 Low
- cisco pix private linkCisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the...7.5 High
- microsoft internet explorerBuffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute...7.5 High
- microsoft internet explorerBuffer overflow in the Window.External function in the JScript Scripting Engine in Internet...5.1 Medium
- microsoft internet explorerInternet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname...7.5 High
- microsoft windows ntThe "AEDebug" registry key is installed with insecure permissions, which allows local users to...4.6 Medium
- webminWebmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid...7.5 High
- microsoft excelMicrosoft Excel 97 does not warn the user before executing worksheet functions, which could allow...7.5 High
- microsoft exchange serverMicrosoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2)...5.0 Medium
- cisco resource managerCisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files,...1.2 Low
- microsoft internet information serverIIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via...5.0 Medium
- microsoft windows ntMemory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a...5.0 Medium
- isc dhcp clientMultiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote...7.5 High
- microsoft internet information server, internet information services +1 moreIIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . ...5.0 Medium
- berkeley nvi, debian linux +1 morenviboot boot script in the Debian nvi package allows local users to delete files via malformed...2.1 Low
- camshot webcam http serverBuffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a...7.5 High
- sco unixwareBuffer overflow in UnixWare rtpm program allows local users to gain privileges via a long...10.0 High
- bsdi bsd os, freebsd, openbsd +2 moreip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of...5.0 Medium
- microsoft systems management serverThe SMS Remote Control program is installed with insecure permissions, which allows local users...7.2 High
- csm mail serverBuffer overflow in CSM mail server allows remote attackers to cause a denial of service or...10.0 High
- altavista search intranetAltaVista search engine allows remote attackers to read files above the document root via a .. ...5.0 Medium
- nortel optivity net architectThe bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding...7.2 High
- Show moreLoading…