-
CVE-1999-0515
•
published on February 4, 2000
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
-
CVE-1999-0518
•
published on February 4, 2000
A NETBIOS/SMB share password is guessable.
-
CVE-1999-0520
•
published on February 4, 2000
A system-critical NETBIOS/SMB share has inappropriate access control.
-
CVE-1999-0525
•
published on February 4, 2000
IP traceroute is allowed from arbitrary hosts.
-
CVE-1999-0527
•
published on February 4, 2000
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.
-
CVE-1999-0534
•
published on February 4, 2000
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
-
CVE-1999-0535
•
published on February 4, 2000
A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
-
CVE-1999-0537
•
published on February 4, 2000
A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
-
CVE-1999-0539
•
published on February 4, 2000
A trust relationship exists between two Unix hosts.
-
CVE-1999-0562
•
published on February 4, 2000
The registry in Windows NT can be accessed remotely by users who are not administrators.
-
CVE-1999-0657
•
published on February 4, 2000
WinGate is being used.
-
CVE-1999-0664
•
published on February 4, 2000
An application-critical Windows NT registry key has inappropriate permissions.
-
CVE-1999-0670
•
published on February 4, 2000
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
-
CVE-1999-0677
•
published on February 4, 2000
The WebRamp web administration utility has a default password.
-
CVE-1999-0568
•
published on February 4, 2000
rpc.admind in Solaris is not running in a secure mode.
-
CVE-1999-0571
•
published on February 4, 2000
A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
-
CVE-1999-0576
•
published on February 4, 2000
A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories.
-
CVE-1999-0580
•
published on February 4, 2000
The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
-
CVE-1999-0588
•
published on February 4, 2000
A filter in a router or firewall allows unusual fragmented packets.
-
CVE-1999-0589
•
published on February 4, 2000
A system-critical Windows NT registry key has inappropriate permissions.