CVE Notifier

CVE-1999-0854 CWE-? N/A

CVE-1999-0854

Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0842 CWE-? N/A

CVE-1999-0842

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0838 CWE-? N/A

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0836 CWE-? N/A

CVE-1999-0836

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0832 CWE-? N/A

CVE-1999-0832

Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0819 CWE-? N/A

CVE-1999-0819

NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0754 CWE-? N/A

CVE-1999-0754

The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0719 CWE-? N/A

CVE-1999-0719

The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0696 CWE-? N/A

CVE-1999-0696

Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0668 CWE-? N/A

CVE-1999-0668

The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0493 CWE-? N/A

CVE-1999-0493

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.

MITRE n/a:n/a 02 Jun 2000

CVE-1999-0491 CWE-? N/A

CVE-1999-0491

The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.

MITRE n/a:n/a 02 Jun 2000