CVE-1999-0249

The CVE-1999-0249 entry concerns Windows NT RSHSVC, where the RSHSVC program may allow remote users to execute arbitrary commands. The connected documents confirm the affected component (RSHSVC) and the impact (arbitrary command execution), but do not provide additional technical details such as ...

CVE-1999-0597: Undefined Security Weakness

A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire...

CVE-1999-0086: Undefined Security Weakness

AIX routed allows remote users to modify sensitive files...

CVE-2000-0104

The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0108

The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0106

The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

PT-2000-1098 · Unknown · Websitetool

Name of the Vulnerable Software and Affected Versions: WebSiteTool affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no information...

PT-2000-1120 · Unknown · Check It Out

Name of the Vulnerable Software and Affected Versions: Check It Out affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no information...

PT-2000-1089 · Make A Store · Make-A-Store Orderpage

Name of the Vulnerable Software and Affected Versions: Make-a-Store OrderPage affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no...

CVE-1999-0734

A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...

CVE-1999-0734

CiscoSecure Access Control Server (ACS) is affected due to a default configuration that allows remote users to modify the server database without authentication. Affected product/component: CiscoSecure ACS; vulnerability involves unauthenticated access to modify the database via default settings....

CVE-1999-0991

CVE-1999-0991 affects GoodTech Telnet Server NT. The vulnerability is a buffer overflow that allows remote attackers to cause a denial of service by supplying a long login name. Documentation in the connected records confirms the affected product and the impact (denial of service), but does not p...

CVE-1999-0991

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name...

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin...

CVE-1999-1167

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation...

CVE-1999-0991

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name...

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

CVE-1999-0209

CVE-1999-0209 concerns SunView (SunTools) selection_svc; connected sources document a broader, concrete detail: Solaris SunRPC ypupdated RPC service vulnerable to remote command execution via MAP UPDATE handling, permitting command injection (shell) and potentially root-level execution on affecte...

CVE-1999-0150

The CVE-1999-0150 issue concerns the Perl fingerd service. Connected sources specify that the vulnerability allows arbitrary command execution from remote users and affects the finger package. Multiple entries indicate affected versions are those prior to 0.17-4, with a patched version 0.17-4 ava...

CVE-1999-0191

CVE-1999-0191 affects Microsoft IIS via the CGI newdsn.exe script. The vulnerability exists in the /scripts/tools/newdsn.exe CGI, which allows remote attackers to create or overwrite files on the server if NTFS permissions permit, enabling arbitrary file creation and potential DSN overwrites. The...