IT-Sentinel

> CVE-1999-0315 [HIGH]

[PUBLISHED: 1997-04-01] [EPSS 0.84%]

Buffer overflow in Solaris fdformat command gives root access to local users.

AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+6)

> CVE-1999-1525 [MEDIUM]

[PUBLISHED: 1997-03-14] [EPSS 1.15%]

Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.

AFFECTED_PRODUCTS: Macromedia Shockwave Flash Plugin

> CVE-1999-0299 [CRITICAL]

[PUBLISHED: 1997-03-05] [EPSS 1.30%]

Buffer overflow in FreeBSD lpd through long DNS hostnames.

AFFECTED_PRODUCTS: FreeBSD Freebsd

> CVE-1999-1408 [LOW]

[PUBLISHED: 1997-03-05] [EPSS 1.00%]

Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost.

AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+6)

> CVE-1999-1489 [HIGH]

[PUBLISHED: 1997-03-04] [EPSS 1.06%]

Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.

AFFECTED_PRODUCTS: Slackware Slackware Linux

> CVE-1999-0105 [LOW]

[PUBLISHED: 1997-03-01] [EPSS 0.37%]

finger allows recursive searches by using a long string of @ symbols.

> CVE-1999-0106 [LOW]

[PUBLISHED: 1997-03-01] [EPSS 0.36%]

Finger redirection allows finger bombs.

> CVE-1999-0165 [CRITICAL]

[PUBLISHED: 1997-03-01] [EPSS 1.95%]

NFS cache poisoning.

AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+16)

> CVE-1999-0318 [HIGH]

[PUBLISHED: 1997-03-01] [EPSS 0.61%]

Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.

AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+4)

> CVE-1999-0612

[PUBLISHED: 1997-03-01] [⚡ EPSS 68.0%]

A version of finger is running that exposes valid user information to any entity on the network.

AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000, GNU Finger Service ... (+1)

> CVE-1999-1128 [MEDIUM]

[PUBLISHED: 1997-03-01] [EPSS 3.59%]

Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.

AFFECTED_PRODUCTS: Microsoft Internet Explorer

> CVE-1999-0868 [HIGH]

[PUBLISHED: 1997-02-20] [EPSS 1.50%]

ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.

AFFECTED_PRODUCTS: Red Hat Linux, Red Hat Linux, Isc Inn ... (+6)

> CVE-1999-0041 [HIGH]

[PUBLISHED: 1997-02-13] [EPSS 9.09%]

Buffer overflow in NLS (Natural Language Service).

AFFECTED_PRODUCTS: Cray Unicos, Cray Unicos, Cray Unicos ... (+9)

> CVE-1999-0109 [HIGH]

[PUBLISHED: 1997-02-10] [EPSS 0.80%]

Buffer overflow in ffbconfig in Solaris 2.5.1.

AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Solaris ... (+1)

> CVE-1999-0228 [MEDIUM]

[PUBLISHED: 1997-02-07] [EPSS 4.97%]

Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.

AFFECTED_PRODUCTS: Microsoft Windows Nt

> CVE-1999-0046 [CRITICAL]

[PUBLISHED: 1997-02-06] [⚡ EPSS 51.9%]

Buffer overflow of rlogin program using TERM environmental variable.

AFFECTED_PRODUCTS: Oracle Solaris, Oracle Solaris, Oracle Solaris ... (+36)

> CVE-1999-0298 [HIGH]

[PUBLISHED: 1997-02-05] [EPSS 2.03%]

ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.

AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Slackware Slackware Linux ... (+2)

> CVE-1999-1299 [CRITICAL]

[PUBLISHED: 1997-02-03] [EPSS 1.84%]

rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.

AFFECTED_PRODUCTS: Red Hat Linux, Slackware Slackware Linux

> CVE-1999-1160 [CRITICAL]

[PUBLISHED: 1997-02-02] [EPSS 4.37%]

Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.

AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux

> CVE-1999-0174 [MEDIUM]

[PUBLISHED: 1997-02-01] [EPSS 6.90%]

The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.

AFFECTED_PRODUCTS: Netscape Communicator, Netscape Communicator, Netscape Communicator ... (+4)

> CVE-1999-0309 [HIGH]

[PUBLISHED: 1997-02-01] [EPSS 0.53%]

HP-UX vgdisplay program gives root access to local users.

AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+2)

> CVE-1999-0369 [HIGH]

[PUBLISHED: 1997-02-01] [EPSS 0.81%]

The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.

AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+11)

> CVE-1999-0959 [HIGH]

[PUBLISHED: 1997-02-01] [EPSS 0.71%]

IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.

AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+4)

> CVE-1999-1144 [HIGH]

[PUBLISHED: 1997-01-30] [EPSS 0.51%]

Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.

AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+1)

> CVE-1999-0047 [CRITICAL]

[PUBLISHED: 1997-01-28] [EPSS 3.11%]

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.

AFFECTED_PRODUCTS: Eric Allman Sendmail, Eric Allman Sendmail, Bsdi Bsd Os ... (+1)

> CVE-1999-0048 [CRITICAL]

[PUBLISHED: 1997-01-27] [EPSS 3.13%]

Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.

AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+4)

> CVE-1999-0966 [HIGH]

[PUBLISHED: 1997-01-27] [EPSS 0.40%]

Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].

AFFECTED_PRODUCTS: Sun Sunos

> CVE-1999-0081 [MEDIUM]

[PUBLISHED: 1997-01-11] [EPSS 1.58%]

wu-ftp allows files to be overwritten via the rnfr command.

AFFECTED_PRODUCTS: Washington University Wu Ftpd

> CVE-1999-1088 [HIGH]

[PUBLISHED: 1997-01-09] [EPSS 0.51%]

Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.

AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+3)

> CVE-1999-0049 [HIGH]

[PUBLISHED: 1997-01-08] [EPSS 0.44%]

Csetup under IRIX allows arbitrary file creation or overwriting.

AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+2)

> CVE-1999-1145 [HIGH]

[PUBLISHED: 1997-01-07] [EPSS 0.52%]

Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.

AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+1)

> CVE-1999-1311 [MEDIUM]

[PUBLISHED: 1997-01-07] [EPSS 0.51%]

Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.

AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux

> CVE-1999-0051 [HIGH]

[PUBLISHED: 1997-01-06] [EPSS 1.30%]

Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.

AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+46)

> CVE-1999-1249 [MEDIUM]

[PUBLISHED: 1997-01-06] [EPSS 0.48%]

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.

AFFECTED_PRODUCTS: HP Hp Ux

> CVE-1999-1120 [MEDIUM]

[PUBLISHED: 1997-01-04] [EPSS 0.85%]

netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.

AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+4)

> CVE-1999-0100 [CRITICAL]

[PUBLISHED: 1997-01-01]

Remote access in AIX innd 1.5.1, using control messages.

AFFECTED_PRODUCTS: Isc Inn

> CVE-1999-0163 [HIGH]

[PUBLISHED: 1997-01-01]

In older versions of Sendmail, an attacker could use a pipe character to execute root commands.

AFFECTED_PRODUCTS: Eric Allman Sendmail

> CVE-1999-0166 [MEDIUM]

[PUBLISHED: 1997-01-01]

NFS allows users to use a "cd .." command to access other directories besides the exported file system.

AFFECTED_PRODUCTS: Sun Nfs

> CVE-1999-0170 [HIGH]

[PUBLISHED: 1997-01-01]

Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.

AFFECTED_PRODUCTS: Digital Ultrix

> CVE-1999-0171 [LOW]

[PUBLISHED: 1997-01-01]

Denial of service in syslog by sending it a large number of superfluous messages.

AFFECTED_PRODUCTS: Linux Linux Kernel

> CVE-1999-0173 [MEDIUM]

[PUBLISHED: 1997-01-01]

FormMail CGI program can be used by web servers other than the host server that the program resides on.

AFFECTED_PRODUCTS: Matt Wright Formmail

> CVE-1999-0178 [HIGH]

[PUBLISHED: 1997-01-01]

Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.

AFFECTED_PRODUCTS: Oreilly Oreilly Website

> CVE-1999-0179 [MEDIUM]

[PUBLISHED: 1997-01-01]

Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.

AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 95

> CVE-1999-0180 [HIGH]

[PUBLISHED: 1997-01-01]

in.rshd allows users to login with a NULL username and execute commands.

> CVE-1999-0201 [MEDIUM]

[PUBLISHED: 1997-01-01]

A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.

AFFECTED_PRODUCTS: Ftp Ftp