6722 matches found
CVE-1999-1561
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file scserv.conf, which could allow a local user to gain administrative privileges on the server...
CVE-1999-0741
QMS CrownNet Unix Utilities for 2060 allows root to log on without a password...
CVE-1999-1337
FTP client in Midnight Commander mc before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges...
CVE-1999-1165
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to 1 gain root privileges via a malicious program in the .fingerrc file, or 2 read arbitrary files via symbolic links from .plan, .forward, or .project files...
CVE-1999-1378
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files...
CVE-1999-1231
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server...
CVE-1999-1033
Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang...
CVE-1999-0686
Denial of service in Netscape Enterprise Server NES in HP Virtual Vault VVOS via a long URL...
CVE-1999-0712
A vulnerability in Caldera Open Administration System COAS allows the /etc/shadow password file to be made world-readable...
CVE-1999-1245
vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information...
CVE-1999-0439
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file...
CVE-1999-0481
Denial of service in "poll" in OpenBSD...
CVE-1999-1567
Seapine Software TestTrack server allows a remote attacker to cause a denial of service high CPU via 1 TestTrackWeb.exe and 2 ttcgi.exe by connecting to port 99 and disconnecting without sending any data...
CVE-1999-0432
ftp on HP-UX 11.00 allows local users to gain privileges...
CVE-1999-0430
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload...
CVE-1999-0484
Buffer overflow in OpenBSD ping...
CVE-1999-0371
Lynx allows a local user to overwrite sensitive files through /tmp symlinks...
CVE-1999-0367
NetBSD netstat command allows local users to access kernel memory...