9422 matches found
CVE-1999-0468
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component...
CVE-1999-0409
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access...
CVE-2000-0371
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...
CVE-1999-0372
The installer for BackOffice Server includes account names and passwords in a setup file reboot.ini which is not deleted...
CVE-1999-0407
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system...
CVE-1999-0383
ACC Tigris allows public access without a login...
CVE-1999-1172
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared...
CVE-1999-0402
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself...
CVE-1999-0454
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso...
CVE-1999-0618
The rexec service is running...
CVE-1999-0638
The daytime service is running...
CVE-1999-0603
In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc...
CVE-1999-0453
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...
CVE-1999-0654
The OS/2 or POSIX subsystem in NT is enabled...
CVE-1999-0584
A Windows NT file system is not NTFS...
PT-1999-1136 · Cisco · Cisco
Name of the Vulnerable Software and Affected Versions: CISCO affected versions not specified Description: The issue allows an attacker to identify a CISCO device. This can be achieved by sending a SYN packet to port 1999, which is used for the Cisco Discovery Protocol CDP. Recommendations: At the...
PT-1999-1137 · Nmap +1 · Nmap +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso. Recommendations: At th...
CVE-1999-1073
Excite for Web Servers EWS 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack...