CVE-1999-0903: Undefined Security Weakness

genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767...

CVE-2000-0250

The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...

CVE-2000-0222: Undefined Security Weakness

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs...

PcAnywhere weak password encryption

PcAnywhere weak password encryption ---- Discussion ---- PcAnywhere 9.0.0 set to its default security value uses a trivial encryption method so user names and password are not sent directly in clear. Since most users have the encryption methods set to either "none" or "PcAnyWhere", their password...

CVE-1999-0189: Undefined Security Weakness

Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111...

CVE-1999-0829

HP Secure Web Console uses weak encryption...

CVE-2000-0084

CuteFTP uses weak encryption to store password information in its tree.dat file...

CVE-1999-0583: Undefined Security Weakness

There is a one-way or two-way trust relationship between Windows NT domains...

CVE-1999-0597: Undefined Security Weakness

A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire...

CVE-1999-0528: Undefined Security Weakness

A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of...

CVE-1999-0601: Undefined Security Weakness

A network intrusion detection system IDS does not properly handle data within TCP handshake packets...

CVE-1999-0852: Undefined Security Weakness

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin...

CVE-1999-0600: Undefined Security Weakness

A network intrusion detection system IDS does not verify the checksum on a packet...

CVE-1999-0548: Undefined Security Weakness

A superfluous NFS server is running, but it is not importing or exporting any file systems...

CVE-1999-0654: Undefined Security Weakness

The OS/2 or POSIX subsystem in NT is enabled...

CVE-1999-0535: Undefined Security Weakness

A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness...

CVE-1999-0559: Undefined Security Weakness

A system-critical Unix file or directory has inappropriate permissions...

CVE-1999-0561: Undefined Security Weakness

IIS has the exec function enabled for Server Side Include SSI files...

CVE-1999-0568: Undefined Security Weakness

rpc.admind in Solaris is not running in a secure mode...

CVE-1999-0653: Undefined Security Weakness

A component service related to NIS+ is running...