5673 matches found
CVE-1999-0983
The CVE-1999-0983 entry concerns the Whois Internic Lookup program’s whois.cgi, where the domain field accepts input that can be manipulated with shell metacharacters to execute commands remotely. Public sources in the connected documents confirm the vulnerability involves remote command executio...
CVE-1999-0001
CVE-1999-0001 concerns a DoS in BSD-derived TCP/IP stacks: ip_input.c can crash or hang when remote attackers send crafted packets. The description across connected sources reiterates that remote packet crafting triggers a denial of service, with no publicly stated exploit details or mitigation i...
CVE-1999-0241
The provided connected documents confirm CVE-1999-0241 affects X Windows (X11) with a vulnerability in the authentication cookies: guessable magic cookies allow remote attackers to execute commands (e.g., via xterm). Root cause is guessable, enabling remote command execution with no authenticatio...
CVE-2000-0059
CVE-2000-0059 affects PHP3 when safe_mode is enabled. The vulnerability arises because shell metacharacters are not properly filtered from commands executed via popen , potentially allowing remote attackers to execute arbitrary commands. The provided documents describe the issue but do not specif...
CVE-1999-0254
CVE-1999-0254 relates to HP OpenView and describes a hidden SNMP community string vulnerability. A remote attacker could exploit this via SNMP to modify MIB tables and obtain sensitive information, with network access and no authentication required. The NVD entry records a CVSSv2 base score of 10...
CVE-1999-0999
Microsoft SQL Server 7.0 is affected by a remote denial-of-service via malformed TDS packets. A crafted TCP packet (described as containing more than 2 NULLs) can shut down the server. This is documented as MS99-059/MSKB 248749; remediation involves applying the MS99-059 patch. Exploitation statu...
CVE-1999-0710
CVE-1999-0710 affects the Squid proxy (publicly accessible cachemgr.cgi) and allows remote attackers to use it as an intermediary to connect to other systems. OpenVAS/Nessus entries corroborate a public-facing cachemgr.cgi risk across Red Hat, Debian, CentOS, and FreeBSD/OpenBSD ecosystems. The R...
CVE-1999-0951
Vulnerability summary (CVE-1999-0951) : The OmniHTTPd CGI program imagemap.exe is affected by a remote buffer overflow in its /cgi-bin/imagemap.exe CGI. This can allow a remote attacker to execute arbitrary commands with the web server’s privileges (typically nobody or root). The issue is exploit...
CVE-1999-0290
The CVE-1999-0290 entry concerns the WinGate Telnet Proxy. Public sources indicate a denial of service can be triggered by establishing a large number of connections to localhost, leading to resource exhaustion and potential service disruption. Affected software: WinGate Telnet Proxy. The underly...
CVE-1999-0744
CVE-1999-0744 describes a buffer overflow in Netscape Enterprise Server and FastTrask Server . The vulnerability allows remote attackers to gain privileges by sending a long HTTP GET request. The primary impact documented is privilege escalation with partial confidentiality/integrity/availability...
CVE-1999-0917
The CVE-1999-0917 issue concerns the Preloader ActiveX control used by Internet Explorer. The vulnerability allows remote attackers to read arbitrary files via this ActiveX component. The affected target is the Preloader ActiveX control in IE, with a potential impact to confidentiality (partial) ...
CVE-1999-0883
CVE-1999-0883 : Zeus web server is affected; an attacker can read arbitrary files by supplying a file name to a search engine option. CVSS shows a base score of 10.0 (HIGH) with complete impact to confidentiality, integrity, and availability. The documents do not provide exploitation details or r...
CVE-1999-1223
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / forward slash characters...
CVE-2000-0024
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability...
CVE-1999-0349
CVE-1999-0349 is a vulnerability in Microsoft IIS FTP Server where a buffer overflow in the FTP LIST (ls) / NLST handling allows remote attackers to cause a denial of service, and in some cases may execute arbitrary commands. The issue is tied to the IIS FTP service’s command processing and memor...
CVE-1999-0414
The vulnerability CVE-1999-0414 affects Linux prior to 2.0.36, where remote attackers could spoof a TCP connection and pass data to the application layer before the three-way handshake completes. The root issue is the TCP connection handling that allows data to be injected prior to full establish...
CVE-1999-0750
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account...
Check Point FireWall-1 Identification
The remote host has the three TCP ports 256, 257, and 258 open. It's very likely that this host is a Check Point FireWall/1. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10044; scriptversion...