PT-2000-1120 · Unknown · Check It Out

Name of the Vulnerable Software and Affected Versions: Check It Out affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no information...

CVE-1999-0734

A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...

CVE-1999-0734

CiscoSecure Access Control Server (ACS) is affected due to a default configuration that allows remote users to modify the server database without authentication. Affected product/component: CiscoSecure ACS; vulnerability involves unauthenticated access to modify the database via default settings....

CVE-1999-0991

CVE-1999-0991 affects GoodTech Telnet Server NT. The vulnerability is a buffer overflow that allows remote attackers to cause a denial of service by supplying a long login name. Documentation in the connected records confirms the affected product and the impact (denial of service), but does not p...

CVE-1999-0991

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name...

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin...

CVE-1999-1167

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation...

CVE-1999-0991

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name...

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

CVE-1999-0209

CVE-1999-0209 concerns SunView (SunTools) selection_svc; connected sources document a broader, concrete detail: Solaris SunRPC ypupdated RPC service vulnerable to remote command execution via MAP UPDATE handling, permitting command injection (shell) and potentially root-level execution on affecte...

CVE-1999-0150

The CVE-1999-0150 issue concerns the Perl fingerd service. Connected sources specify that the vulnerability allows arbitrary command execution from remote users and affects the finger package. Multiple entries indicate affected versions are those prior to 0.17-4, with a patched version 0.17-4 ava...

CVE-1999-0191

CVE-1999-0191 affects Microsoft IIS via the CGI newdsn.exe script. The vulnerability exists in the /scripts/tools/newdsn.exe CGI, which allows remote attackers to create or overwrite files on the server if NTFS permissions permit, enabling arbitrary file creation and potential DSN overwrites. The...

CVE-1999-0150

The Perl fingerd program allows arbitrary command execution from remote users...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP...

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval source: https://www.securityfocus.com/bid/2300/info NSCA httpd prior to and including 1.5 and Apache Web Server prior to 1.0 contain a bug in the ScriptAlias function that allows remote users to view the source of CGI...

Solaris 7.0 - Recursive mutex_enter Remote Panic (Denial of Service)

source: https://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the server listening on that port is then...

nt4.index.server.2.0.txt

Date: Tue, 23 Mar 1999 23:40:55 -0000 From: Mnemonix To: [email protected] Subject: Index Server 2.0 and the Registry When Microsoft's Index Server 2.0 is installed on NT 4 with Internet Information Server 4 it opens a new "AllowedPath" into the Windows NT Registry. Administrators...

CVE-1999-0597

A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire...

CVE-1999-0283

The Java Web Server would allow remote users to obtain the source code for CGI programs...

PT-1999-1215 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: A Windows NT account policy issue allows remote users to remain connected to the server even after their logon hours have expired, as the policy does not forcibly disconnect them...