CVE-1999-1086

CVE-1999-1086 affects Novell NetWare 5 and earlier when running over IPX with a packet signature level

CVE-1999-1257

Xyplex terminal server 6.0.1S1 (and possibly other versions) is affected by an authentication bypass vulnerability. Remote attackers can bypass the password prompt by entering either a CTRL-Z character or a question mark (?), as described in CVE-1999-1257. The available documents confirm the affe...

CVE-1999-1377

The CVE-1999-1377 entry concerns Matt Wright’s download.cgi 1.0. The vulnerability arises from a pathname traversal flaw: remote attackers can read arbitrary files by supplying a .. (dot dot) sequence in the f parameter. This indicates a breach of confidentiality via improper input handling in th...

CVE-1999-1065

Palm Pilot HotSync Manager 3.0.4 on Windows 98 is affected. A remote attacker can cause a denial of service—and possibly execute arbitrary commands—by sending a long string to port 14238 while the manager is in network mode. No root cause, exploit specifics, or remediation details are provided in...

CVE-1999-1255

CVE-1999-1255 affects Hyperseek. The vulnerability allows a remote attacker to modify the Hyperseek configuration by directly invoking the admin.cgi program with an edit_file action parameter. Per the records, this is a network-exposed issue with no authentication required, enabling an integrity ...

CVE-1999-1445

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords...

CVE-1999-1164

Microsoft Outlook client is affected by CVE-1999-1164, where processing multiple email messages with identical X-UIDL headers can cause the application to hang, resulting in a denial of service. The available documents confirm the DoS impact but do not provide concrete remediation steps or patche...

CVE-1999-1267

CVE-1999-1267 concerns the KDE file manager (kfm), which exposes a TCP server for certain file operations. According to the description and linked records, a remote attacker can modify arbitrary files by sending a copy command to this server. The vulnerability is categorized with a NVD base score...

CVE-1999-1206

The CVE-1999-1206 issue concerns SystemSoft SystemWizard on HP Pavilion PCs running Windows 98, where two ActiveX controls (LaunchCtrl and RegistryAccess) marked as safe-for-scripting can be used by a malicious web page to execute arbitrary commands. The vulnerabilities are tied to the Registry O...

CVE-1999-1485

The CVE-1999-1485 issue concerns the nsd service in IRIX 6.5 through 6.5.2, which exports a virtual filesystem on a UDP port. According to the provided documents, this allows remote attackers to view files and can cause a possible denial of service by mounting the nsd virtual filesystem. The sour...

CVE-2001-0994

Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...

CVE-2001-0703

The CVE-2001-0703 entry concerns tradecli.dll in Arcadia Internet Store 1.0, where a remote attacker can cause a denial of service by issuing a URL request containing an MS-DOS device name in the template parameter. The vulnerability is described as a DoS with partial availability impact (per the...

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password AFFECTED ZyXEL Prestige 642R and 642R-I V2.50AJ.4 V2.50AL.1 V2.50AL.2b2 seems to be latest public beta and probably all other earlier versions too. NOT AFFECTED ZyXEL Prestige 642M SUMMARY The ADSL routers P642R and P642R-I...

CVE-2001-1260

Avaya Argent Office uses weak encryption trivial encoding for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot...

CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...

CVE-2001-0352

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via 1 dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or 2 ap128bWepKeyValue i...

CVE-2001-0980

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...

CVE-2001-1038

Cisco SN 5420 Storage Router 1.13 and earlier allows remote attackers to cause a denial of service reboot via a series of connections to TCP port 8023...

CVE-2001-1144

Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP request...

Microsoft IIS 4.0/5.0 - Device File Remote Denial of Service

source: https://www.securityfocus.com/bid/2977/info Microsoft IIS is prone to denial of service attacks by remote attackers. This can occur if the remote attack crafts a URL which tries to pass a script parameter that is a device name. The end result of exploiting this vulnerability is that the...