9528 matches found
CVE-1999-1366
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...
CVE-1999-1029
SSH server sshd2 before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs...
CVE-1999-0806
Buffer overflow in Solaris dtprintinfo program...
CVE-1999-0738
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-1999-0763
NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network...
CVE-1999-0492
The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses...
CVE-1999-0491
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute...
CVE-1999-0468
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component...
CVE-1999-0409
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access...
CVE-2000-0371
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...
CVE-1999-0372
The installer for BackOffice Server includes account names and passwords in a setup file reboot.ini which is not deleted...
CVE-1999-0407
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system...
CVE-1999-0383
ACC Tigris allows public access without a login...
CVE-1999-1172
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared...
CVE-1999-0402
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself...
CVE-1999-0454
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso...
CVE-1999-0618
The rexec service is running...
CVE-1999-0603
In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc...