CVE Notifier

CVE-1999-1084 CWE-? N/A

CVE-1999-1084

The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1083 CWE-? N/A

CVE-1999-1083

Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1082 CWE-? N/A

CVE-1999-1082

Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1081 CWE-? N/A

CVE-1999-1081

Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1079 CWE-? N/A

CVE-1999-1079

Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1078 CWE-? N/A

CVE-1999-1078

WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1077 CWE-? N/A

CVE-1999-1077

Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use t…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1076 CWE-? N/A

CVE-1999-1076

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1075 CWE-? N/A

CVE-1999-1075

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denia…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1073 CWE-? N/A

CVE-1999-1073

Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictiona…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1072 CWE-? N/A

CVE-1999-1072

Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP reques…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1071 CWE-? N/A

CVE-1999-1071

Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file.

MITRE n/a:n/a 12 Sep 2001