Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,445 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0231 | Not scored | Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access. | Feb 4, 2000 |
| CVE-1999-0229 | Not scored | Denial of service in Windows NT IIS server using ..\.. | Feb 4, 2000 |
| CVE-1999-0226 | Not scored | Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service. | Feb 4, 2000 |
| CVE-1999-0222 | Not scored | Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. | Feb 4, 2000 |
| CVE-1999-0220 | Not scored | Attackers can do a denial of service of IRC by crashing the server. | Feb 4, 2000 |
| CVE-1999-0216 | Not scored | Denial of service of inetd on Linux through SYN and RST packets. | Feb 4, 2000 |
| CVE-1999-0213 | Not scored | libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. | Feb 4, 2000 |
| CVE-1999-0205 | Not scored | Denial of service in Sendmail 8.6.11 and 8.6.12. | Feb 4, 2000 |
| CVE-1999-0200 | Not scored | Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password. | Feb 4, 2000 |
| CVE-1999-0198 | Not scored | finger .@host on some systems may print information on some user accounts. | Feb 4, 2000 |
| CVE-1999-0197 | Not scored | finger 0@host on some systems may print information on some user accounts. | Feb 4, 2000 |
| CVE-1999-0195 | Not scored | Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1. | Feb 4, 2000 |
| CVE-1999-0193 | Not scored | Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option. | Feb 4, 2000 |
| CVE-1999-0186 | Not scored | In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. | Feb 4, 2000 |
| CVE-1999-0171 | Not scored | Denial of service in syslog by sending it a large number of superfluous messages. | Feb 4, 2000 |
| CVE-1999-0169 | Not scored | NFS allows attackers to read and write any file on the system by specifying a false UID. | Feb 4, 2000 |
| CVE-1999-0165 | Not scored | NFS cache poisoning. | Feb 4, 2000 |
| CVE-1999-0163 | Not scored | In older versions of Sendmail, an attacker could use a pipe character to execute root commands. | Feb 4, 2000 |
| CVE-1999-0156 | Not scored | wu-ftpd FTP daemon allows any user and password combination. | Feb 4, 2000 |
| CVE-1999-0144 | Not scored | Denial of service in Qmail by specifying a large number of recipients with the RCPT command. | Feb 4, 2000 |
| CVE-1999-0140 | Not scored | Denial of service in RAS/PPTP on NT systems. | Feb 4, 2000 |
| CVE-1999-0127 | Not scored | swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access. | Feb 4, 2000 |
| CVE-1999-0123 | Not scored | Race condition in Linux mailx command allows local users to read user files. | Feb 4, 2000 |
| CVE-1999-0121 | Not scored | Buffer overflow in dtaction command gives root access. | Feb 4, 2000 |
| CVE-1999-0119 | Not scored | Windows NT 4.0 beta allows users to read and delete shares. | Feb 4, 2000 |
| CVE-1999-0114 | Not scored | Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack. | Feb 4, 2000 |
| CVE-1999-0107 | Not scored | Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters. | Feb 4, 2000 |
| CVE-1999-0106 | Not scored | Finger redirection allows finger bombs. | Feb 4, 2000 |
| CVE-1999-0105 | Not scored | finger allows recursive searches by using a long string of @ symbols. | Feb 4, 2000 |
| CVE-1999-0104 | Not scored | A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. | Feb 4, 2000 |
| CVE-1999-0098 | Not scored | Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities. | Feb 4, 2000 |
| CVE-1999-0092 | Not scored | Various vulnerabilities in the AIX portmir command allows local users to obtain root access. | Feb 4, 2000 |
| CVE-1999-0089 | Not scored | Buffer overflow in AIX libDtSvc library can allow local users to gain root access. | Feb 4, 2000 |
| CVE-1999-0088 | Not scored | IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. | Feb 4, 2000 |
| CVE-1999-0086 | Not scored | AIX routed allows remote users to modify sensitive files. | Feb 4, 2000 |
| CVE-1999-0078 | Not scored | pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. | Feb 4, 2000 |
| CVE-1999-0076 | Not scored | Buffer overflow in wu-ftp from PASV command causes a core dump. | Feb 4, 2000 |
| CVE-1999-0061 | Not scored | File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). | Feb 4, 2000 |
| CVE-1999-0033 | Not scored | Command execution in Sun systems via buffer overflow in the at program. | Feb 4, 2000 |
| CVE-1999-0030 | Not scored | root privileges via buffer overflow in xlock command on SGI IRIX systems. | Feb 4, 2000 |
| CVE-1999-0015 | Not scored | Teardrop IP denial of service. | Feb 4, 2000 |
| CVE-1999-0004 | Not scored | MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. | Feb 4, 2000 |
| CVE-1999-0001 | Not scored | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. | Feb 4, 2000 |
| CVE-1999-1001 | Not scored | Cisco Cache Engine allows a remote attacker to gain access via a null username and password. | Jan 18, 2000 |
| CVE-1999-0999 | Not scored | Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet. | Jan 18, 2000 |
| CVE-1999-0995 | Not scored | Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request." | Jan 18, 2000 |
| CVE-1999-0994 | Not scored | Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords. | Jan 18, 2000 |
| CVE-1999-0992 | Not scored | HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP). | Jan 18, 2000 |
| CVE-1999-0955 | Not scored | Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command. | Jan 18, 2000 |
| CVE-1999-0905 | Not scored | Denial of service in Axent Raptor firewall via malformed zero-length IP options. | Jan 18, 2000 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.