-
CVE-1999-0511
•
published on February 4, 2000
IP forwarding is enabled on a machine which is not a router or firewall.
-
CVE-1999-0522
•
published on February 4, 2000
The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.
-
CVE-1999-0530
•
published on February 4, 2000
A system is operating in "promiscuous" mode which allows it to perform packet sniffing.
-
CVE-1999-0541
•
published on February 4, 2000
A password for accessing a WWW URL is guessable.
-
CVE-1999-0556
•
published on February 4, 2000
Two or more Unix accounts have the same UID.
-
CVE-1999-0560
•
published on February 4, 2000
A system-critical Windows NT file or directory has inappropriate permissions.
-
CVE-1999-0565
•
published on February 4, 2000
A Sendmail alias allows input to be piped to a program.
-
CVE-1999-0575
•
published on February 4, 2000
A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking.
-
CVE-1999-0577
•
published on February 4, 2000
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
-
CVE-1999-0578
•
published on February 4, 2000
A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
-
CVE-1999-0579
•
published on February 4, 2000
A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.
-
CVE-1999-0582
•
published on February 4, 2000
A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc.
-
CVE-1999-0585
•
published on February 4, 2000
A Windows NT administrator account has the default name of Administrator.
-
CVE-1999-0586
•
published on February 4, 2000
A network service is running on a nonstandard port.
-
CVE-1999-0592
•
published on February 4, 2000
The Logon box of a Windows NT system displays the name of the last user who logged in.
-
CVE-1999-0595
•
published on February 4, 2000
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
-
CVE-1999-0596
•
published on February 4, 2000
A Windows NT log file has an inappropriate maximum size or retention period.
-
CVE-1999-0604
•
published on February 4, 2000
An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
-
CVE-1999-0609
•
published on February 4, 2000
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
-
CVE-1999-0306
•
published on February 4, 2000
buffer overflow in HP xlock program.