[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 422751
> CVE-1999-0252 [HIGH]
[PUBLISHED: 1997-01-01] [EPSS 2.86%]
Buffer overflow in listserv allows arbitrary command execution.
AFFECTED_PRODUCTS: Lsoft Listserv
> CVE-1999-0251 [MEDIUM]
[PUBLISHED: 1997-01-01]
Denial of service in talk program allows remote attackers to disrupt a user's display.
AFFECTED_PRODUCTS: Talkd Talkd
> CVE-1999-0249 [HIGH]
[PUBLISHED: 1997-01-01]
Windows NT RSHSVC program allows remote users to execute arbitrary commands.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 2000
> CVE-1999-0236 [HIGH 7.5]
[PUBLISHED: 1997-01-01]
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
AFFECTED_PRODUCTS: Apache HTTP Server
> CVE-1999-0217 [MEDIUM]
[PUBLISHED: 1997-01-01]
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+5)
> CVE-1999-0204 [CRITICAL]
[PUBLISHED: 1997-01-01]
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
AFFECTED_PRODUCTS: Eric Allman Sendmail
> CVE-1999-0202 [HIGH]
[PUBLISHED: 1997-01-01]
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
AFFECTED_PRODUCTS: University Of Washington Wu Ftpd
> CVE-1999-0201 [MEDIUM]
[PUBLISHED: 1997-01-01]
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
AFFECTED_PRODUCTS: Ftp Ftp
> CVE-1999-0180 [HIGH]
[PUBLISHED: 1997-01-01]
in.rshd allows users to login with a NULL username and execute commands.
> CVE-1999-0179 [MEDIUM]
[PUBLISHED: 1997-01-01]
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
AFFECTED_PRODUCTS: Microsoft Windows Nt, Microsoft Windows 95
> CVE-1999-0178 [HIGH]
[PUBLISHED: 1997-01-01]
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
AFFECTED_PRODUCTS: Oreilly Oreilly Website
> CVE-1999-0173 [MEDIUM]
[PUBLISHED: 1997-01-01]
FormMail CGI program can be used by web servers other than the host server that the program resides on.
AFFECTED_PRODUCTS: Matt Wright Formmail
> CVE-1999-0171 [LOW]
[PUBLISHED: 1997-01-01]
Denial of service in syslog by sending it a large number of superfluous messages.
AFFECTED_PRODUCTS: Linux Linux Kernel
> CVE-1999-0170 [HIGH]
[PUBLISHED: 1997-01-01]
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
AFFECTED_PRODUCTS: Digital Ultrix
> CVE-1999-0166 [MEDIUM]
[PUBLISHED: 1997-01-01]
NFS allows users to use a "cd .." command to access other directories besides the exported file system.
AFFECTED_PRODUCTS: Sun Nfs
> CVE-1999-0163 [HIGH]
[PUBLISHED: 1997-01-01]
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
AFFECTED_PRODUCTS: Eric Allman Sendmail
> CVE-1999-0100 [CRITICAL]
[PUBLISHED: 1997-01-01]
Remote access in AIX innd 1.5.1, using control messages.
AFFECTED_PRODUCTS: Isc Inn
> CVE-1999-1251 [LOW]
[PUBLISHED: 1996-12-24]
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux
> CVE-1999-0260 [HIGH]
[PUBLISHED: 1996-12-24]
The jj CGI program allows command execution via shell metacharacters.
AFFECTED_PRODUCTS: Renaud Deraison Jj
> CVE-1999-1026 [HIGH]
[PUBLISHED: 1996-12-20]
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
AFFECTED_PRODUCTS: Sun Solaris, Sun Solaris, Sun Solaris
> CVE-1999-1385 [HIGH]
[PUBLISHED: 1996-12-19]
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.
AFFECTED_PRODUCTS: FreeBSD Freebsd, FreeBSD Freebsd, FreeBSD Freebsd ... (+3)
> CVE-1999-0127 [HIGH]
[PUBLISHED: 1996-12-19]
swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access.
AFFECTED_PRODUCTS: HP Hp Ux
> CVE-1999-0128 [MEDIUM]
[PUBLISHED: 1996-12-18]
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, Sun Sunos ... (+15)
> CVE-1999-1089 [HIGH]
[PUBLISHED: 1996-12-13]
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux
> CVE-1999-0297 [HIGH]
[PUBLISHED: 1996-12-12]
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
AFFECTED_PRODUCTS: FreeBSD Freebsd, Red Hat Linux, Bsdi Bsd Os ... (+2)
> CVE-1999-0101 [CRITICAL]
[PUBLISHED: 1996-12-10]
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
AFFECTED_PRODUCTS: IBM Aix, IBM Aix, IBM Aix
> CVE-1999-0096 [MEDIUM]
[PUBLISHED: 1996-12-10]
Sendmail decode alias can be used to overwrite sensitive files.
AFFECTED_PRODUCTS: FreeBSD Freebsd, FreeBSD Freebsd, FreeBSD Freebsd ... (+5)
> CVE-1999-0045 [HIGH]
[PUBLISHED: 1996-12-10]
List of arbitrary files on Web host via nph-test-cgi script.
AFFECTED_PRODUCTS: Apache HTTP Server, Apache HTTP Server, Apache HTTP Server ... (+8)
> CVE-1999-1401 [MEDIUM]
[PUBLISHED: 1996-12-05]
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+7)
> CVE-1999-0043 [CRITICAL 9.8]
[PUBLISHED: 1996-12-04]
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
AFFECTED_PRODUCTS: Red Hat Linux, Red Hat Linux, Bsdi Bsd Os ... (+11)
> CVE-1999-0129 [MEDIUM]
[PUBLISHED: 1996-12-03]
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
AFFECTED_PRODUCTS: Eric Allman Sendmail, Eric Allman Sendmail, Eric Allman Sendmail ... (+26)
> CVE-1999-0044 [HIGH]
[PUBLISHED: 1996-12-03]
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+5)
> CVE-1999-0050 [HIGH]
[PUBLISHED: 1996-12-01]
Buffer overflow in HP-UX newgrp program.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux, HP Hp Ux ... (+11)
> CVE-1999-1240 [HIGH]
[PUBLISHED: 1996-11-26]
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
AFFECTED_PRODUCTS: Gracenote Cddbd
> CVE-1999-1099 [MEDIUM]
[PUBLISHED: 1996-11-22]
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
AFFECTED_PRODUCTS: Kth Kth Kerberos
> CVE-1999-1221 [LOW]
[PUBLISHED: 1996-11-17]
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
AFFECTED_PRODUCTS: Digital Unix
> CVE-1999-0130 [HIGH]
[PUBLISHED: 1996-11-16]
Local users can start Sendmail in daemon mode and gain root privileges.
AFFECTED_PRODUCTS: Eric Allman Sendmail, Eric Allman Sendmail, Eric Allman Sendmail ... (+11)
> CVE-1999-1161 [HIGH]
[PUBLISHED: 1996-11-03]
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux
> CVE-1999-0336 [HIGH]
[PUBLISHED: 1996-11-01]
Buffer overflow in mstm in HP-UX allows local users to gain root access.
AFFECTED_PRODUCTS: HP Hp Ux
> CVE-1999-0311 [HIGH]
[PUBLISHED: 1996-11-01]
fpkg2swpk in HP-UX allows local users to gain root access.
AFFECTED_PRODUCTS: HP Hp Ux
> CVE-1999-1384 [HIGH]
[PUBLISHED: 1996-10-30]
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
AFFECTED_PRODUCTS: Sgi Irix, Sgi Irix, Sgi Irix ... (+9)
> CVE-1999-0277 [HIGH]
[PUBLISHED: 1996-10-28]
The WorkMan program can be used to overwrite any file to get root access.
AFFECTED_PRODUCTS: Sun Sunos
> CVE-1999-0032 [HIGH]
[PUBLISHED: 1996-10-25]
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
AFFECTED_PRODUCTS: Sun Sunos, Sun Sunos, FreeBSD Freebsd ... (+18)
> CVE-1999-0075 [MEDIUM]
[PUBLISHED: 1996-10-16]
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
AFFECTED_PRODUCTS: Washington University Wu Ftpd
> CVE-1999-0234 [MEDIUM]
[PUBLISHED: 1996-10-08]
Bash treats any character with a value of 255 as a command separator.
AFFECTED_PRODUCTS: Sgi Irix, Red Hat Linux, Yggdrasil Linux ... (+2)
> CVE-1999-0319 [HIGH]
[PUBLISHED: 1996-10-01]
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
> CVE-1999-0308 [MEDIUM]
[PUBLISHED: 1996-10-01]
HP-UX gwind program allows users to modify arbitrary files.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux
> CVE-1999-0246 [CRITICAL]
[PUBLISHED: 1996-10-01]
HP Remote Watch allows a remote user to gain root access.
AFFECTED_PRODUCTS: HP Hp Ux
> CVE-1999-0206 [CRITICAL]
[PUBLISHED: 1996-10-01]
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
AFFECTED_PRODUCTS: Eric Allman Sendmail, Eric Allman Sendmail
> CVE-1999-0961 [MEDIUM]
[PUBLISHED: 1996-09-21]
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
AFFECTED_PRODUCTS: HP Hp Ux, HP Hp Ux