[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 422751
> CVE-1999-0958 [HIGH]
[PUBLISHED: 1998-01-12] [EPSS 0.43%]
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
AFFECTED_PRODUCTS: Todd Miller Sudo, Todd Miller Sudo, Todd Miller Sudo
> CVE-1999-1176 [HIGH]
[PUBLISHED: 1998-01-10] [EPSS 0.39%]
Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.
AFFECTED_PRODUCTS: Aaron Ledbetter Cidentd, Jidentd Jidentd
> CVE-1999-0086 [MEDIUM]
[PUBLISHED: 1998-01-08] [EPSS 2.12%]
AIX routed allows remote users to modify sensitive files.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+1)
> CVE-1999-1429 [LOW]
[PUBLISHED: 1998-01-05] [EPSS 0.29%]
DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver.
AFFECTED_PRODUCTS: Dit Transferpro
> CVE-1999-0513 [MEDIUM]
[PUBLISHED: 1998-01-05] [âš¡ EPSS 70.9%]
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+28)
> CVE-1999-1439 [LOW]
[PUBLISHED: 1998-01-02] [EPSS 0.34%]
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
AFFECTED_PRODUCTS: Gcc Gcc
> CVE-1999-0341 [HIGH]
[PUBLISHED: 1998-01-01] [EPSS 0.40%]
Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
AFFECTED_PRODUCTS: Debian Debian Linux, Slackware Slackware Linux, Slackware Slackware Linux ... (+1)
> CVE-1999-0331 [HIGH]
[PUBLISHED: 1998-01-01] [EPSS 4.99%]
Buffer overflow in Internet Explorer 4.0(1).
AFFECTED_PRODUCTS: Microsoft Internet Explorer, Microsoft Internet Explorer, Microsoft Internet Explorer
> CVE-1999-0293 [HIGH]
[PUBLISHED: 1998-01-01] [EPSS 2.61%]
AAA authentication on Cisco systems allows attackers to execute commands without authorization.
> CVE-1999-0284 [HIGH]
[PUBLISHED: 1998-01-01] [âš¡ EPSS 11.5%]
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
AFFECTED_PRODUCTS: Microsoft Exchange Server, Microsoft Exchange Server, IBM Lotus Domino Mail Server
> CVE-1999-0279 [HIGH]
[PUBLISHED: 1998-01-01] [EPSS 3.92%]
Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
AFFECTED_PRODUCTS: Excite Ews
> CVE-1999-0273 [MEDIUM]
[PUBLISHED: 1998-01-01] [EPSS 1.39%]
Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
AFFECTED_PRODUCTS: Sun Sunos
> CVE-1999-0239 [HIGH 7.5]
[PUBLISHED: 1998-01-01] [EPSS 7.59%]
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
AFFECTED_PRODUCTS: Netscape Fasttrack Server
> CVE-1999-0114 [MEDIUM]
[PUBLISHED: 1998-01-01] [EPSS 0.82%]
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
AFFECTED_PRODUCTS: Elm Development Group Elm
> CVE-1999-0107 [MEDIUM]
[PUBLISHED: 1997-12-30] [âš¡ EPSS 19.9%]
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
AFFECTED_PRODUCTS: Apache HTTP Server, Apache HTTP Server, Apache HTTP Server ... (+6)
> CVE-1999-1274 [MEDIUM]
[PUBLISHED: 1997-12-29] [EPSS 1.07%]
iPass RoamServer 3.1 creates temporary files with world-writable permissions.
AFFECTED_PRODUCTS: Ipass Roamserver
> CVE-1999-1230 [MEDIUM]
[PUBLISHED: 1997-12-24] [EPSS 1.26%]
Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
AFFECTED_PRODUCTS: Id Software Quake 2
> CVE-1999-1581 [MEDIUM]
[PUBLISHED: 1997-12-23] [âš¡ EPSS 20.6%]
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
AFFECTED_PRODUCTS: Microsoft Windows Nt
> CVE-1999-0104 [MEDIUM]
[PUBLISHED: 1997-12-16] [EPSS 9.32%]
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, HP Hp Ux ... (+3)
> CVE-1999-0015 [MEDIUM]
[PUBLISHED: 1997-12-16] [âš¡ EPSS 35.4%]
Teardrop IP denial of service.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, HP Hp Ux ... (+19)
> CVE-1999-0004 [MEDIUM]
[PUBLISHED: 1997-12-16] [EPSS 4.09%]
MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.
AFFECTED_PRODUCTS: Sco Unixware, University Of Washington Pine, HP Dtmail
> CVE-1999-0230 [MEDIUM]
[PUBLISHED: 1997-12-15] [EPSS 1.06%]
Buffer overflow in Cisco 7xx routers through the telnet service.
AFFECTED_PRODUCTS: Cisco IOS, Cisco IOS, Cisco IOS
> CVE-1999-1140 [HIGH]
[PUBLISHED: 1997-12-14] [EPSS 0.43%]
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.
AFFECTED_PRODUCTS: Alec Muffet Cracklib
> CVE-1999-0017 [HIGH]
[PUBLISHED: 1997-12-10] [EPSS 1.98%]
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+26)
> CVE-1999-0018 [CRITICAL]
[PUBLISHED: 1997-12-05] [âš¡ EPSS 10.5%]
Buffer overflow in statd allows root privileges.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+11)
> CVE-1999-0340 [HIGH]
[PUBLISHED: 1997-12-01] [EPSS 0.40%]
Buffer overflow in Linux Slackware crond program allows local users to gain root access.
AFFECTED_PRODUCTS: Slackware Slackware Linux
> CVE-1999-0244 [HIGH]
[PUBLISHED: 1997-12-01] [EPSS 3.03%]
Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
AFFECTED_PRODUCTS: Livingston Radius
> CVE-1999-0193 [MEDIUM]
[PUBLISHED: 1997-12-01] [EPSS 4.89%]
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
AFFECTED_PRODUCTS: Ascend Cascadeview Ux
> CVE-1999-0016 [MEDIUM]
[PUBLISHED: 1997-12-01] [âš¡ EPSS 96.4%]
Land IP denial of service.
AFFECTED_PRODUCTS: Cisco IOS, Sun Sunos, Sun Sunos ... (+20)
> CVE-1999-1257 [HIGH]
[PUBLISHED: 1997-11-26] [EPSS 1.58%]
Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark).
AFFECTED_PRODUCTS: Xyplex Maxserver Xyplex Terminal Server, Xyplex Maxserver Xyplex Terminal Server
> CVE-1999-0210 [CRITICAL]
[PUBLISHED: 1997-11-26] [EPSS 6.22%]
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+3)
> CVE-1999-1209 [HIGH]
[PUBLISHED: 1997-11-20] [EPSS 0.39%]
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
AFFECTED_PRODUCTS: Sco Open Desktop, Sco Openserver, Sco Openserver
> CVE-1999-1210 [HIGH]
[PUBLISHED: 1997-11-12] [EPSS 0.33%]
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
AFFECTED_PRODUCTS: Digital Unix
> CVE-1999-1428 [MEDIUM]
[PUBLISHED: 1997-11-10] [EPSS 0.28%]
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.
AFFECTED_PRODUCTS: Sun Solstice Adminsuite, Sun Solstice Adminsuite
> CVE-1999-1427 [MEDIUM]
[PUBLISHED: 1997-11-10] [EPSS 0.28%]
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.
AFFECTED_PRODUCTS: Sun Solstice Adminsuite, Sun Solstice Adminsuite
> CVE-1999-1426 [MEDIUM]
[PUBLISHED: 1997-11-10] [EPSS 0.28%]
Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.
AFFECTED_PRODUCTS: Sun Solstice Adminsuite, Sun Solstice Adminsuite
> CVE-1999-1425 [MEDIUM]
[PUBLISHED: 1997-11-10] [EPSS 0.28%]
Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
AFFECTED_PRODUCTS: Sun Solstice Adminsuite, Sun Solstice Adminsuite
> CVE-1999-1424 [MEDIUM]
[PUBLISHED: 1997-11-10] [EPSS 0.28%]
Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.
AFFECTED_PRODUCTS: Sun Solstice Adminsuite, Sun Solstice Adminsuite
> CVE-1999-1069 [MEDIUM]
[PUBLISHED: 1997-11-08] [EPSS 8.05%]
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
AFFECTED_PRODUCTS: Icat Electronic Commerce Suite
> CVE-1999-0021 [HIGH]
[PUBLISHED: 1997-11-05] [âš¡ EPSS 26.7%]
Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
AFFECTED_PRODUCTS: Muhammad A. Muquit Wwwcount
> CVE-1999-0306 [HIGH]
[PUBLISHED: 1997-11-04] [EPSS 1.67%]
buffer overflow in HP xlock program.
AFFECTED_PRODUCTS: HP Vvos
> CVE-1999-0967 [CRITICAL]
[PUBLISHED: 1997-11-01] [EPSS 6.90%]
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
AFFECTED_PRODUCTS: Microsoft Internet Explorer, Microsoft Outlook Express, Microsoft Windows Explorer
> CVE-1999-0328 [HIGH]
[PUBLISHED: 1997-11-01] [EPSS 0.68%]
SGI permissions program allows local users to gain root privileges.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+8)
> CVE-1999-0327 [LOW]
[PUBLISHED: 1997-11-01] [EPSS 0.33%]
SGI syserr program allows local users to corrupt files.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+1)
> CVE-1999-0216 [MEDIUM]
[PUBLISHED: 1997-11-01] [EPSS 2.62%]
Denial of service of inetd on Linux through SYN and RST packets.
AFFECTED_PRODUCTS: HP Hp Ux, Linux Linux Kernel, GNU Inet
> CVE-1999-0322 [LOW]
[PUBLISHED: 1997-10-29] [EPSS 0.30%]
The open() function in FreeBSD allows local attackers to write to arbitrary files.
AFFECTED_PRODUCTS: FreeBSD Freebsd, FreeBSD Freebsd
> CVE-1999-0097 [CRITICAL]
[PUBLISHED: 1997-10-29] [EPSS 4.04%]
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+35)
> CVE-1999-0094 [MEDIUM]
[PUBLISHED: 1997-10-29] [EPSS 0.38%]
AIX piodmgrsu command allows local users to gain additional group privileges.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+4)
> CVE-1999-0093 [HIGH]
[PUBLISHED: 1997-10-29] [EPSS 0.42%]
AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix ... (+4)
> CVE-1999-0092 [HIGH]
[PUBLISHED: 1997-10-29] [EPSS 0.79%]
Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
AFFECTED_PRODUCTS: IBM Aix