Search
Total
86024 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-1999-0724 | 1 Openbsd | 1 Openbsd | 2008-09-09 | 4.6 MEDIUM | N/A |
| Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function. | |||||
| CVE-1999-0735 | 1 Kde | 1 K-mail | 2008-09-09 | 4.6 MEDIUM | N/A |
| KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. | |||||
| CVE-1999-0748 | 1 Redhat | 1 Linux | 2008-09-09 | 7.5 HIGH | N/A |
| Buffer overflows in Red Hat net-tools package. | |||||
| CVE-1999-0750 | 1 Microsoft | 1 Hotmail | 2008-09-09 | 5.1 MEDIUM | N/A |
| Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account. | |||||
| CVE-1999-0761 | 1 Freebsd | 1 Freebsd | 2008-09-09 | 7.2 HIGH | N/A |
| Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. | |||||
| CVE-1999-0762 | 1 Netscape | 2 Communicator, Navigator | 2008-09-09 | 2.6 LOW | N/A |
| When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information. | |||||
| CVE-1999-0763 | 1 Netbsd | 1 Netbsd | 2008-09-09 | 6.4 MEDIUM | N/A |
| NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. | |||||
| CVE-1999-0764 | 1 Netbsd | 1 Netbsd | 2008-09-09 | 6.4 MEDIUM | N/A |
| NetBSD allows ARP packets to overwrite static ARP entries. | |||||
| CVE-1999-0778 | 1 Xi Graphics | 1 Accelerated-x Server | 2008-09-09 | 7.2 HIGH | N/A |
| Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter. | |||||
| CVE-1999-0779 | 1 Hp | 1 Hp-ux | 2008-09-09 | 5.0 MEDIUM | N/A |
| Denial of service in HP-UX SharedX recserv program. | |||||
| CVE-1999-0789 | 1 Ibm | 1 Aix | 2008-09-09 | 10.0 HIGH | N/A |
| Buffer overflow in AIX ftpd in the libc library. | |||||
| CVE-1999-0790 | 1 Netscape | 1 Communicator | 2008-09-09 | 2.6 LOW | N/A |
| A remote attacker can read information from a Netscape user's cache via JavaScript. | |||||
| CVE-1999-0791 | 1 Hybrid Network | 2 Cable Modem, Hsmp | 2008-09-09 | 10.0 HIGH | N/A |
| Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol. | |||||
| CVE-1999-0792 | 1 Osicom | 1 Routermate | 2008-09-09 | 5.0 MEDIUM | N/A |
| ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration. | |||||
| CVE-1999-0801 | 1 Bmc | 1 Patrol Agent | 2008-09-09 | 10.0 HIGH | N/A |
| BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. | |||||
| CVE-1999-0804 | 4 Debian, Linux, Redhat and 1 more | 4 Debian Linux, Linux Kernel, Linux and 1 more | 2008-09-09 | 5.0 MEDIUM | N/A |
| Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths. | |||||
| CVE-1999-0814 | 1 Redhat | 1 Linux | 2008-09-09 | 10.0 HIGH | N/A |
| Red Hat pump DHCP client allows remote attackers to gain root access in some configurations. | |||||
| CVE-1999-0816 | 1 Motorola | 1 Motorola Cablerouter | 2008-09-09 | 10.0 HIGH | N/A |
| The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024. | |||||
| CVE-1999-0747 | 1 Bsdi | 1 Bsd Os | 2008-09-09 | 2.1 LOW | N/A |
| Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load. | |||||
| CVE-1999-0807 | 1 Netscape | 1 Directory Server | 2008-09-09 | 7.2 HIGH | N/A |
| The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users. | |||||
| CVE-1999-0796 | 1 Freebsd | 1 Freebsd | 2008-09-09 | 7.5 HIGH | N/A |
| FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. | |||||
| CVE-1999-0795 | 1 Sun | 2 Solaris, Sunos | 2008-09-09 | 7.5 HIGH | N/A |
| The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches. | |||||
| CVE-1999-0612 | 2 Gnu, Microsoft | 4 Finger Service, Fingerd, Windows 2000 and 1 more | 2008-09-09 | 0.0 LOW | N/A |
| A version of finger is running that exposes valid user information to any entity on the network. | |||||
| CVE-1999-0628 | 4 Freebsd, Ibm, Linux and 1 more | 4 Freebsd, Aix, Linux Kernel and 1 more | 2008-09-09 | 5.0 MEDIUM | N/A |
| The rwho/rwhod service is running, which exposes machine status and user information. | |||||
| CVE-1999-0745 | 1 Ibm | 1 Aix | 2008-09-09 | 10.0 HIGH | N/A |
| Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. | |||||
| CVE-1999-0752 | 1 Netscape | 1 Enterprise Server | 2008-09-09 | 5.0 MEDIUM | N/A |
| Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. | |||||
| CVE-1999-0765 | 1 Sgi | 1 Irix | 2008-09-09 | 10.0 HIGH | N/A |
| SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. | |||||
| CVE-1999-0667 | 1 Arp Protocol | 1 Arp Protocol | 2008-09-09 | 10.0 HIGH | N/A |
| The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service. | |||||
| CVE-1999-0679 | 1 Hybrid Network | 1 Hybrid Ircd | 2008-09-09 | 7.5 HIGH | N/A |
| Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option. | |||||
| CVE-1999-0688 | 1 Hp | 1 Hp-ux | 2008-09-09 | 4.6 MEDIUM | N/A |
| Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. | |||||
| CVE-1999-0690 | 2 Cde, Hp | 2 Cde, Hp-ux | 2008-09-09 | 7.2 HIGH | N/A |
| HP CDE program includes the current directory in root's PATH variable. | |||||
| CVE-1999-0692 | 2 Cray, Sgi | 2 Unicos, Irix | 2008-09-09 | 10.0 HIGH | N/A |
| The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges. | |||||
| CVE-1999-0769 | 4 Caldera, Debian, Paul Vixie and 1 more | 4 Openlinux, Debian Linux, Vixie Cron and 1 more | 2008-09-09 | 7.2 HIGH | N/A |
| Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. | |||||
| CVE-1999-0768 | 2 Redhat, Suse | 2 Linux, Suse Linux | 2008-09-09 | 7.5 HIGH | N/A |
| Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. | |||||
| CVE-1999-0703 | 3 Bsdi, Freebsd, Openbsd | 3 Bsd Os, Freebsd, Openbsd | 2008-09-09 | 3.6 LOW | N/A |
| OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. | |||||
| CVE-1999-0704 | 3 Bsdi, Freebsd, Redhat | 3 Bsd Os, Freebsd, Linux | 2008-09-09 | 9.3 HIGH | N/A |
| Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | |||||
| CVE-1999-0719 | 1 Gnu | 1 Gnumeric | 2008-09-09 | 4.6 MEDIUM | N/A |
| The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code. | |||||
| CVE-1999-0720 | 1 Linux | 1 Linux Kernel | 2008-09-09 | 4.6 MEDIUM | N/A |
| The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. | |||||
| CVE-1999-0746 | 2 Slackware, Suse | 2 Slackware Linux, Suse Linux | 2008-09-09 | 5.0 MEDIUM | N/A |
| A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service. | |||||
| CVE-1999-0733 | 1 Vmware | 1 Workstation | 2008-09-09 | 7.2 HIGH | N/A |
| Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable. | |||||
| CVE-1999-0771 | 1 Compaq | 2 Insight Management Agent, Power Management | 2008-09-09 | 5.0 MEDIUM | N/A |
| The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack. | |||||
| CVE-1999-0772 | 1 Compaq | 2 Insight Management Agent, Power Management | 2008-09-09 | 6.4 MEDIUM | N/A |
| Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301. | |||||
| CVE-1999-0551 | 1 Hp | 1 Openmail | 2008-09-09 | 4.6 MEDIUM | N/A |
| HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests. | |||||
| CVE-1999-0753 | 1 Hughes | 1 Msql | 2008-09-09 | 7.5 HIGH | N/A |
| The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories. | |||||
| CVE-1999-0575 | 1 Microsoft | 1 Windows Nt | 2008-09-09 | 7.5 HIGH | N/A |
| A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking. | |||||
| CVE-1999-0550 | 2008-09-09 | 7.5 HIGH | N/A | ||
| A router's routing tables can be obtained from arbitrary hosts. | |||||
| CVE-1999-0576 | 1 Microsoft | 1 Windows Nt | 2008-09-09 | 7.5 HIGH | N/A |
| A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories. | |||||
| CVE-1999-0820 | 1 Freebsd | 1 Freebsd | 2008-09-09 | 4.6 MEDIUM | N/A |
| FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. | |||||
| CVE-1999-0809 | 1 Netscape | 1 Communicator | 2008-09-09 | 5.0 MEDIUM | N/A |
| Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed". | |||||
| CVE-1999-0754 | 1 Isc | 1 Inn | 2008-09-09 | 10.0 HIGH | N/A |
| The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable. | |||||