-
CVE-1999-0847
•
published on January 18, 2000
Buffer overflow in free internet chess server (FICS) program, xboard.
-
CVE-1999-0875
•
published on January 18, 2000
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
-
CVE-1999-0881
•
published on January 18, 2000
Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
CVE-1999-0898
•
published on January 18, 2000
Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.
-
CVE-1999-0905
•
published on January 18, 2000
Denial of service in Axent Raptor firewall via malformed zero-length IP options.
-
CVE-1999-0853
•
published on January 18, 2000
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
-
CVE-1999-0955
•
published on January 18, 2000
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
-
CVE-1999-0775
•
published on January 18, 2000
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.
-
CVE-1999-0831
•
published on January 18, 2000
Denial of service in Linux syslogd via a large number of connections.
-
CVE-1999-0992
•
published on January 18, 2000
HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
-
CVE-1999-1001
•
published on January 18, 2000
Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
-
CVE-1999-0995
•
published on January 18, 2000
Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
-
CVE-1999-0994
•
published on January 18, 2000
Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
-
CVE-1999-0999
•
published on January 18, 2000
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
-
CVE-1999-0151
•
published on January 4, 2000
The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
-
CVE-1999-0275
•
published on January 4, 2000
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
-
CVE-1999-0291
•
published on January 4, 2000
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
-
CVE-1999-0318
•
published on January 4, 2000
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
-
CVE-1999-0212
•
published on January 4, 2000
Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
-
CVE-1999-0408
•
published on January 4, 2000
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.