Search Results (Refine Search)
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-1999-1166 |
Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory. Published: July 11, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.2 HIGH |
CVE-1999-1543 |
MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File. Published: July 10, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 4.6 MEDIUM |
CVE-1999-0809 |
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed". Published: July 09, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-1999-1537 |
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL. Published: July 07, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-1999-0728 |
A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them. Published: July 06, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.8 HIGH |
CVE-1999-0752 |
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. Published: July 06, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-1999-1478 |
The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character. Published: July 06, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-1999-0918 |
Denial of service in various Windows systems via malformed, fragmented IGMP packets. Published: July 03, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.8 HIGH |
CVE-1999-1394 |
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device. Published: July 02, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 2.1 LOW |
CVE-1999-0688 |
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. Published: July 01, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 4.6 MEDIUM |
CVE-1999-0690 |
HP CDE program includes the current directory in root's PATH variable. Published: July 01, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.2 HIGH |
CVE-1999-0696 |
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). Published: July 01, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-1999-0707 |
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization. Published: July 01, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-1999-0889 |
Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set. Published: July 01, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-1999-0140 |
Denial of service in RAS/PPTP on NT systems. Published: June 30, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-1999-0726 |
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header. Published: June 30, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.8 HIGH |
CVE-1999-1348 |
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service. Published: June 30, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 2.1 LOW |
CVE-1999-0916 |
WebTrends software stores account names and passwords in a file which does not have restricted access permissions. Published: June 29, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 2.1 LOW |
CVE-1999-0938 |
MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages. Published: June 28, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-1999-1365 |
Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default. Published: June 28, 1999; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.2 HIGH |