CVE Database — Page 27

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-1999-1344 UNKNOWN — CVE-1999-1344: Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
• CVE-1999-1345 UNKNOWN — CVE-1999-1345: Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows l
• CVE-1999-1346 UNKNOWN — CVE-1999-1346: PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restri
• CVE-1999-1347 UNKNOWN — CVE-1999-1347: Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xse
• CVE-1999-1348 UNKNOWN — CVE-1999-1348: Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which cou
• CVE-1999-1349 UNKNOWN — CVE-1999-1349: NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via
• CVE-1999-1350 UNKNOWN — CVE-1999-1350: ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local
• CVE-1999-1351 UNKNOWN — CVE-1999-1351: Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabl
• CVE-1999-1352 UNKNOWN — CVE-1999-1352: mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
• CVE-1999-1353 UNKNOWN — CVE-1999-1353: Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2)
• CVE-1999-1354 UNKNOWN — CVE-1999-1354: E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the
• CVE-1999-1355 UNKNOWN — CVE-1999-1355: BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Ser
• CVE-1999-1356 UNKNOWN — CVE-1999-1356: Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal
• CVE-1999-1357 UNKNOWN — CVE-1999-1357: Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b
• CVE-1999-1358 UNKNOWN — CVE-1999-1358: When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the loc
• CVE-1999-1359 UNKNOWN — CVE-1999-1359: When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enf
• CVE-1999-1360 UNKNOWN — CVE-1999-1360: Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was
• CVE-1999-1361 UNKNOWN — CVE-1999-1361: Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of servic
• CVE-1999-1362 UNKNOWN — CVE-1999-1362: Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32
• CVE-1999-1363 UNKNOWN — CVE-1999-1363: Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large
• CVE-1999-1364 UNKNOWN — CVE-1999-1364: Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functio
• CVE-1999-1365 UNKNOWN — CVE-1999-1365: Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs
• CVE-1999-1367 UNKNOWN — CVE-1999-1367: Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache c
• CVE-1999-1366 UNKNOWN — CVE-1999-1366: Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows l
• CVE-1999-1368 UNKNOWN — CVE-1999-1368: AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder t
• CVE-1999-1369 UNKNOWN — CVE-1999-1369: Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which
• CVE-1999-1370 UNKNOWN — CVE-1999-1370: The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system op
• CVE-1999-1371 UNKNOWN — CVE-1999-1371: Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the te
• CVE-1999-1372 UNKNOWN — CVE-1999-1372: Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry key
• CVE-1999-1375 UNKNOWN — CVE-1999-1375: FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by s
• CVE-1999-1376 UNKNOWN — CVE-1999-1376: Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary
• CVE-1999-1377 UNKNOWN — CVE-1999-1377: Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
• CVE-1999-1379 UNKNOWN — CVE-1999-1379: DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source addr
• CVE-1999-1380 UNKNOWN — CVE-1999-1380: Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows r
• CVE-1999-1378 UNKNOWN — CVE-1999-1378: dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read
• CVE-1999-1381 UNKNOWN — CVE-1999-1381: Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
• CVE-1999-1382 UNKNOWN — CVE-1999-1382: NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allo
• CVE-1999-1383 UNKNOWN — CVE-1999-1383: (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell me
• CVE-1999-1384 UNKNOWN — CVE-1999-1384: Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain ro
• CVE-1999-1386 UNKNOWN — CVE-1999-1386: Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite
• CVE-1999-1387 UNKNOWN — CVE-1999-1387: Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packet
• CVE-1999-1385 UNKNOWN — CVE-1999-1385: Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environm
• CVE-1999-1388 UNKNOWN — CVE-1999-1388: passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argum
• CVE-1999-1389 UNKNOWN — CVE-1999-1389: US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filte
• CVE-1999-1391 UNKNOWN — CVE-1999-1391: Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combina
• CVE-1999-1390 UNKNOWN — CVE-1999-1390: suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program
• CVE-1999-1392 UNKNOWN — CVE-1999-1392: Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.
• CVE-1999-1393 UNKNOWN — CVE-1999-1393: Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to by
• CVE-1999-1394 UNKNOWN — CVE-1999-1394: BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append
• CVE-1999-1395 UNKNOWN — CVE-1999-1395: Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges.