CVE-1999-0597: Undefined Security Weakness

A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire...

CVE-1999-0528: Undefined Security Weakness

A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of...

CVE-1999-0535: Undefined Security Weakness

A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness...

CVE-1999-0548: Undefined Security Weakness

A superfluous NFS server is running, but it is not importing or exporting any file systems...

CVE-1999-0561: Undefined Security Weakness

IIS has the exec function enabled for Server Side Include SSI files...

CVE-1999-0559: Undefined Security Weakness

A system-critical Unix file or directory has inappropriate permissions...

CVE-1999-0583: Undefined Security Weakness

There is a one-way or two-way trust relationship between Windows NT domains...

CVE-1999-0601: Undefined Security Weakness

A network intrusion detection system IDS does not properly handle data within TCP handshake packets...

CVE-1999-0600: Undefined Security Weakness

A network intrusion detection system IDS does not verify the checksum on a packet...

CVE-1999-0690: Undefined Security Weakness

HP CDE program includes the current directory in root's PATH variable...

CVE-1999-0714: Undefined Security Weakness

Vulnerability in Compaq Tru64 UNIX edauth command...

CVE-1999-0809: Undefined Security Weakness

Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed"...

CVE-1999-0886: Undefined Security Weakness

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager...

CVE-1999-0703: Undefined Security Weakness

OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...

Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation

Avirt Gateway Suite 3.33.3 a3.5 - Directory Creation source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to...

Avirt Gateway Suite 3.3/3.3 a/3.5 - Directory Creation

source: https://www.securityfocus.com/bid/764/info The aVirt Mail Server has a weakness in the code that handles the RCPT TO command. By specifying a path in the command instead of an email recipient , an attacker could cause the mail server to create a directory in the server's local filesystem...

IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password

IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password source: https://www.securityfocus.com/bid/1763/info IBM WebSphere ships with a tool called 'ikeyman' that encrypts server certificates/key pairs when the IBM HTTP Server and SSL connections are enabled. Ikeyman stores the password in a stash...

FTP client/server and listen() implementation

Here is exploit. It works as described in NAI 1996 bulletin http://www.nai.com/nailabs/aspset/advisory/ftp-paper.asp but.... there are two points i'm disagree with NAI. 1. ftp console client under FreeBSD 2.2.x IS vulnerable 2. Inspite I don't treat FTP as secured protocol IMHO it's OS/software...

CVE-1999-0070: Undefined Security Weakness

test-cgi program allows an attacker to list files on the server...

CVE-1999-0472: Undefined Security Weakness

The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it...