CVE Database — Page 4

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-1999-0147 UNKNOWN — CVE-1999-0147: The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
• CVE-1999-0150 UNKNOWN — CVE-1999-0150: The Perl fingerd program allows arbitrary command execution from remote users.
• CVE-1999-0151 UNKNOWN — CVE-1999-0151: The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
• CVE-1999-0153 UNKNOWN — CVE-1999-0153: Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
• CVE-1999-0154 UNKNOWN — CVE-1999-0154: IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the U
• CVE-1999-0155 UNKNOWN — CVE-1999-0155: The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
• CVE-1999-0152 UNKNOWN — CVE-1999-0152: The DG/UX finger daemon allows remote command execution through shell metacharacters.
• CVE-1999-0156 UNKNOWN — CVE-1999-0156: wu-ftpd FTP daemon allows any user and password combination.
• CVE-1999-0157 UNKNOWN — CVE-1999-0157: Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
• CVE-1999-0158 UNKNOWN — CVE-1999-0158: Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve a
• CVE-1999-0159 UNKNOWN — CVE-1999-0159: Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). Thi
• CVE-1999-0160 UNKNOWN — CVE-1999-0160: Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connect
• CVE-1999-0161 UNKNOWN — CVE-1999-0161: In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
• CVE-1999-0162 UNKNOWN — CVE-1999-0162: The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
• CVE-1999-0163 UNKNOWN — CVE-1999-0163: In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
• CVE-1999-0164 UNKNOWN — CVE-1999-0164: A race condition in the Solaris ps command allows an attacker to overwrite critical files.
• CVE-1999-0165 UNKNOWN — CVE-1999-0165: NFS cache poisoning.
• CVE-1999-0166 UNKNOWN — CVE-1999-0166: NFS allows users to use a "cd .." command to access other directories besides the exported file system.
• CVE-1999-0167 UNKNOWN — CVE-1999-0167: In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.
• CVE-1999-0168 UNKNOWN — CVE-1999-0168: The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from
• CVE-1999-0169 UNKNOWN — CVE-1999-0169: NFS allows attackers to read and write any file on the system by specifying a false UID.
• CVE-1999-0170 UNKNOWN — CVE-1999-0170: Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
• CVE-1999-0171 UNKNOWN — CVE-1999-0171: Denial of service in syslog by sending it a large number of superfluous messages.
• CVE-1999-0173 UNKNOWN — CVE-1999-0173: FormMail CGI program can be used by web servers other than the host server that the program resides on.
• CVE-1999-0174 UNKNOWN — CVE-1999-0174: The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
• CVE-1999-0175 UNKNOWN — CVE-1999-0175: The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is intern
• CVE-1999-0172 UNKNOWN — CVE-1999-0172: FormMail CGI program allows remote execution of commands.
• CVE-1999-0176 UNKNOWN — CVE-1999-0176: The Webgais program allows a remote user to execute arbitrary commands.
• CVE-1999-0177 UNKNOWN — CVE-1999-0177: The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
• CVE-1999-0178 UNKNOWN — CVE-1999-0178: Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to
• CVE-1999-0179 UNKNOWN — CVE-1999-0179: Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
• CVE-1999-0180 UNKNOWN — CVE-1999-0180: in.rshd allows users to login with a NULL username and execute commands.
• CVE-1999-0181 UNKNOWN — CVE-1999-0181: The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
• CVE-1999-0182 UNKNOWN — CVE-1999-0182: Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
• CVE-1999-0183 UNKNOWN — CVE-1999-0183: Linux implementations of TFTP would allow access to files outside the restricted directory.
• CVE-1999-0184 UNKNOWN — CVE-1999-0184: When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious mod
• CVE-1999-0185 UNKNOWN — CVE-1999-0185: In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trust
• CVE-1999-0186 UNKNOWN — CVE-1999-0186: In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands a
• CVE-1999-0187 UNKNOWN — CVE-1999-0187: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of
• CVE-1999-0188 UNKNOWN — CVE-1999-0188: The passwd command in Solaris can be subjected to a denial of service.
• CVE-1999-0189 UNKNOWN — CVE-1999-0189: Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
• CVE-1999-0190 UNKNOWN — CVE-1999-0190: Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
• CVE-1999-0191 UNKNOWN — CVE-1999-0191: IIS newdsn.exe CGI script allows remote users to overwrite files.
• CVE-1999-0192 UNKNOWN — CVE-1999-0192: Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environment
• CVE-1999-0194 UNKNOWN — CVE-1999-0194: Denial of service in in.comsat allows attackers to generate messages.
• CVE-1999-0195 UNKNOWN — CVE-1999-0195: Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using
• CVE-1999-0196 UNKNOWN — CVE-1999-0196: websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver pa
• CVE-1999-0197 UNKNOWN — CVE-1999-0197: finger 0@host on some systems may print information on some user accounts.
• CVE-1999-0198 UNKNOWN — CVE-1999-0198: finger .@host on some systems may print information on some user accounts.
• CVE-1999-0193 UNKNOWN — CVE-1999-0193: Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.