[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 408547
> CVE-1999-0109 [HIGH]
[PUBLISHED: 1997-02-10] [EPSS 0.80%]
Buffer overflow in ffbconfig in Solaris 2.5.1.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Solaris ... (+1)
> CVE-1999-0228 [MEDIUM]
[PUBLISHED: 1997-02-07] [EPSS 4.97%]
Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0046 [CRITICAL]
[PUBLISHED: 1997-02-06] [âš¡ EPSS 51.9%]
Buffer overflow of rlogin program using TERM environmental variable.
AFFECTED_PRODUCTS: Oracle Solaris, Oracle Solaris, Oracle Solaris ... (+36)
> CVE-1999-0298 [HIGH]
[PUBLISHED: 1997-02-05] [EPSS 2.03%]
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Slackware Slackware Linux ... (+2)
> CVE-1999-1299 [CRITICAL]
[PUBLISHED: 1997-02-03] [EPSS 1.84%]
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
AFFECTED_PRODUCTS: Red Hat Linux, Slackware Slackware Linux
> CVE-1999-1160 [CRITICAL]
[PUBLISHED: 1997-02-02] [EPSS 4.37%]
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux
> CVE-1999-0174 [MEDIUM]
[PUBLISHED: 1997-02-01] [EPSS 6.90%]
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
AFFECTED_PRODUCTS: Netscape Communicator, Netscape Communicator, Netscape Communicator ... (+4)
> CVE-1999-0309 [HIGH]
[PUBLISHED: 1997-02-01] [EPSS 0.53%]
HP-UX vgdisplay program gives root access to local users.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+2)
> CVE-1999-0369 [HIGH]
[PUBLISHED: 1997-02-01] [EPSS 0.81%]
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+11)
> CVE-1999-0959 [HIGH]
[PUBLISHED: 1997-02-01] [EPSS 0.71%]
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+4)
> CVE-1999-1144 [HIGH]
[PUBLISHED: 1997-01-30] [EPSS 0.51%]
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+1)
> CVE-1999-0047 [CRITICAL]
[PUBLISHED: 1997-01-28] [EPSS 3.11%]
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
AFFECTED_PRODUCTS: Eric Allman Sendmail, Eric Allman Sendmail, Bsdi Bsd Os ... (+1)
> CVE-1999-0048 [CRITICAL]
[PUBLISHED: 1997-01-27] [EPSS 3.13%]
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+4)
> CVE-1999-0966 [HIGH]
[PUBLISHED: 1997-01-27] [EPSS 0.40%]
Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
AFFECTED_PRODUCTS: Sun Sunos
> CVE-1999-0081 [MEDIUM]
[PUBLISHED: 1997-01-11] [EPSS 1.58%]
wu-ftp allows files to be overwritten via the rnfr command.
AFFECTED_PRODUCTS: Washington University Wu Ftpd
> CVE-1999-1088 [HIGH]
[PUBLISHED: 1997-01-09] [EPSS 0.51%]
Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+3)
> CVE-1999-0049 [HIGH]
[PUBLISHED: 1997-01-08] [EPSS 0.44%]
Csetup under IRIX allows arbitrary file creation or overwriting.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+2)
> CVE-1999-1145 [HIGH]
[PUBLISHED: 1997-01-07] [EPSS 0.52%]
Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+1)
> CVE-1999-1311 [MEDIUM]
[PUBLISHED: 1997-01-07] [EPSS 0.51%]
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux
> CVE-1999-0051 [HIGH]
[PUBLISHED: 1997-01-06] [EPSS 1.30%]
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+46)
> CVE-1999-1249 [MEDIUM]
[PUBLISHED: 1997-01-06] [EPSS 0.48%]
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
AFFECTED_PRODUCTS: HP Hp Ux
> CVE-1999-1120 [MEDIUM]
[PUBLISHED: 1997-01-04] [EPSS 0.85%]
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+4)
> CVE-1999-0100 [CRITICAL]
[PUBLISHED: 1997-01-01]
Remote access in AIX innd 1.5.1, using control messages.
AFFECTED_PRODUCTS: Isc Inn
> CVE-1999-0163 [HIGH]
[PUBLISHED: 1997-01-01]
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
AFFECTED_PRODUCTS: Eric Allman Sendmail
> CVE-1999-0166 [MEDIUM]
[PUBLISHED: 1997-01-01]
NFS allows users to use a "cd .." command to access other directories besides the exported file system.
AFFECTED_PRODUCTS: Sun Nfs
> CVE-1999-0170 [HIGH]
[PUBLISHED: 1997-01-01]
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
AFFECTED_PRODUCTS: Digital Ultrix
> CVE-1999-0171 [LOW]
[PUBLISHED: 1997-01-01]
Denial of service in syslog by sending it a large number of superfluous messages.
AFFECTED_PRODUCTS: Linux Linux Kernel
> CVE-1999-0173 [MEDIUM]
[PUBLISHED: 1997-01-01]
FormMail CGI program can be used by web servers other than the host server that the program resides on.
AFFECTED_PRODUCTS: Matt Wright Formmail
> CVE-1999-0178 [HIGH]
[PUBLISHED: 1997-01-01]
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
AFFECTED_PRODUCTS: Oreilly Oreilly Website
> CVE-1999-0179 [MEDIUM]
[PUBLISHED: 1997-01-01]
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 95
> CVE-1999-0180 [HIGH]
[PUBLISHED: 1997-01-01]
in.rshd allows users to login with a NULL username and execute commands.
> CVE-1999-0201 [MEDIUM]
[PUBLISHED: 1997-01-01]
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
AFFECTED_PRODUCTS: Ftp Ftp
> CVE-1999-0202 [HIGH]
[PUBLISHED: 1997-01-01]
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
AFFECTED_PRODUCTS: University Of Washington Wu Ftpd
> CVE-1999-0204 [CRITICAL]
[PUBLISHED: 1997-01-01]
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
AFFECTED_PRODUCTS: Eric Allman Sendmail
> CVE-1999-0217 [MEDIUM]
[PUBLISHED: 1997-01-01]
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+5)
> CVE-1999-0236 [HIGH 7.5]
[PUBLISHED: 1997-01-01]
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
AFFECTED_PRODUCTS: Apache HTTP Server
> CVE-1999-0249 [HIGH]
[PUBLISHED: 1997-01-01]
Windows NT RSHSVC program allows remote users to execute arbitrary commands.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000
> CVE-1999-0251 [MEDIUM]
[PUBLISHED: 1997-01-01]
Denial of service in talk program allows remote attackers to disrupt a user's display.
AFFECTED_PRODUCTS: Talkd Talkd
> CVE-1999-0252 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 2.86%]
Buffer overflow in listserv allows arbitrary command execution.
AFFECTED_PRODUCTS: Lsoft Listserv
> CVE-1999-0253 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 7.95%]
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
AFFECTED_PRODUCTS: Microsoft Internet Information Services, Microsoft Internet Information Services, Microsoft Internet Information Server
> CVE-1999-0265 [MEDIUM]
[PUBLISHED: 1997-01-01] [EPSS 1.09%]
ICMP redirect messages may crash or lock up a host.
AFFECTED_PRODUCTS: Novell Netware, Microware Os 9
> CVE-1999-0274 [MEDIUM]
[PUBLISHED: 1997-01-01] [EPSS 5.87%]
Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0345 [MEDIUM]
[PUBLISHED: 1997-01-01] [EPSS 1.35%]
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
AFFECTED_PRODUCTS: Sun Sunos, FreeBSD Freebsd, FreeBSD Freebsd ... (+13)
> CVE-1999-0496 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 1.40%]
A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0499 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 4.79%]
NETBIOS share information may be published through SNMP registry keys in NT.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000
> CVE-1999-0503 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 1.82%]
A Windows NT local user or administrator account has a guessable password.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000
> CVE-1999-0504 [HIGH]
[PUBLISHED: 1997-01-01] [âš¡ EPSS 64.3%]
A Windows NT local user or administrator account has a default, null, blank, or missing password.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000
> CVE-1999-0510 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 1.52%]
A router or firewall allows source routed packets from arbitrary hosts.
> CVE-1999-0511 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 6.96%]
IP forwarding is enabled on a machine which is not a router or firewall.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000
> CVE-1999-0517 [HIGH]
[PUBLISHED: 1997-01-01] [âš¡ EPSS 28.7%]
An SNMP community name is the default (e.g. public), null, or missing.
AFFECTED_PRODUCTS: Sun Sunos, HP Hp Ux, HP Hp Ux