CVE Database — Page 21

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-1999-1040 UNKNOWN — CVE-1999-1040: Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root
• CVE-1999-1041 UNKNOWN — CVE-1999-1041: Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a lo
• CVE-1999-1042 UNKNOWN — CVE-1999-1042: Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitiv
• CVE-1999-1043 UNKNOWN — CVE-1999-1043: Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, whic
• CVE-1999-1044 UNKNOWN — CVE-1999-1044: Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privil
• CVE-1999-1045 UNKNOWN — CVE-1999-1045: pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malforme
• CVE-1999-1046 UNKNOWN — CVE-1999-1046: Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbi
• CVE-1999-1047 UNKNOWN — CVE-1999-1047: When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass
• CVE-1999-1048 UNKNOWN — CVE-1999-1048: Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extre
• CVE-1999-1049 UNKNOWN — CVE-1999-1049: ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication re
• CVE-1999-1050 UNKNOWN — CVE-1999-1050: Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files
• CVE-1999-1051 UNKNOWN — CVE-1999-1051: Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and
• CVE-1999-1052 UNKNOWN — CVE-1999-1052: Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and
• CVE-1999-1053 UNKNOWN — CVE-1999-1053: guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remo
• CVE-1999-1054 UNKNOWN — CVE-1999-1054: The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut d
• CVE-1999-1055 UNKNOWN — CVE-1999-1055: Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute a
• CVE-1999-1056 UNKNOWN — CVE-1999-1056: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1395. Reason: This candidate is a duplicate of
• CVE-1999-1057 UNKNOWN — CVE-1999-1057: VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.
• CVE-1999-1058 UNKNOWN — CVE-1999-1058: Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly e
• CVE-1999-1059 UNKNOWN — CVE-1999-1059: Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute ar
• CVE-1999-1060 UNKNOWN — CVE-1999-1060: Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly exec
• CVE-1999-1061 UNKNOWN — CVE-1999-1061: HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allo
• CVE-1999-1062 UNKNOWN — CVE-1999-1062: HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters b
• CVE-1999-1063 UNKNOWN — CVE-1999-1063: CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in
• CVE-1999-1064 UNKNOWN — CVE-1999-1064: Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly e
• CVE-1999-1065 UNKNOWN — CVE-1999-1065: Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execut
• CVE-1999-1066 UNKNOWN — CVE-1999-1066: Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote at
• CVE-1999-1067 UNKNOWN — CVE-1999-1067: SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status inform
• CVE-1999-1068 UNKNOWN — CVE-1999-1068: Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a
• CVE-1999-1069 UNKNOWN — CVE-1999-1069: Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary file
• CVE-1999-1070 UNKNOWN — CVE-1999-1070: Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of serv
• CVE-1999-1071 UNKNOWN — CVE-1999-1071: Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which
• CVE-1999-1072 UNKNOWN — CVE-1999-1072: Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the worl
• CVE-1999-1073 UNKNOWN — CVE-1999-1073: Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encryp
• CVE-1999-1074 UNKNOWN — CVE-1999-1074: Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could a
• CVE-1999-1075 UNKNOWN — CVE-1999-1075: inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently liste
• CVE-1999-1076 UNKNOWN — CVE-1999-1076: Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the
• CVE-1999-1077 UNKNOWN — CVE-1999-1077: Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the prog
• CVE-1999-1078 UNKNOWN — CVE-1999-1078: WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily d
• CVE-1999-1079 UNKNOWN — CVE-1999-1079: Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
• CVE-1999-1080 UNKNOWN — CVE-1999-1080: rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in pr
• CVE-1999-1082 UNKNOWN — CVE-1999-1082: Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "
• CVE-1999-1083 UNKNOWN — CVE-1999-1083: Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .
• CVE-1999-1084 UNKNOWN — CVE-1999-1084: The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify
• CVE-1999-1085 UNKNOWN — CVE-1999-1085: SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) mod
• CVE-1999-1086 UNKNOWN — CVE-1999-1086: Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain a
• CVE-1999-1087 UNKNOWN — CVE-1999-1087: Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address,
• CVE-1999-1088 UNKNOWN — CVE-1999-1088: Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
• CVE-1999-1089 UNKNOWN — CVE-1999-1089: Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line
• CVE-1999-1090 UNKNOWN — CVE-1999-1090: The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "f