CVE Notifier

CVE-1999-1104 CWE-? N/A

CVE-1999-1104

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1103 CWE-? N/A

CVE-1999-1103

dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1102 CWE-? N/A

CVE-1999-1102

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1100 CWE-? N/A

CVE-1999-1100

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier fo…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1099 CWE-? N/A

CVE-1999-1099

Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1098 CWE-? N/A

CVE-1999-1098

Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1094 CWE-? N/A

CVE-1999-1094

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1093 CWE-? N/A

CVE-1999-1093

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1090 CWE-? N/A

CVE-1999-1090

The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1087 CWE-? N/A

CVE-1999-1087

Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote ma…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1085 CWE-? N/A

CVE-1999-1085

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client a…

MITRE n/a:n/a 09 Mar 2002

CVE-1999-1074 CWE-? N/A

CVE-1999-1074

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.

MITRE n/a:n/a 09 Mar 2002