Security Vulnerabilities, CVEs, Published In January 1999
Windows NT 4.0 beta allows users to read and delete shares.
Max CVSS
10.0
EPSS Score
0.35%
Published
1999-01-19
Updated
2022-08-17
finger 0@host on some systems may print information on some user accounts.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
finger .@host on some systems may print information on some user accounts.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
Attackers can do a denial of service of IRC by crashing the server.
Max CVSS
10.0
EPSS Score
0.53%
Published
1999-01-01
Updated
2022-08-17
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
Max CVSS
10.0
EPSS Score
0.54%
Published
1999-01-01
Updated
2022-08-17
Linux cfingerd could be exploited to gain root access.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Max CVSS
10.0
EPSS Score
11.70%
Published
1999-01-01
Updated
2008-09-05
Buffer overflow in ircd allows arbitrary command execution.
Max CVSS
10.0
EPSS Score
0.39%
Published
1999-01-01
Updated
2022-08-17
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
Max CVSS
10.0
EPSS Score
0.68%
Published
1999-01-01
Updated
2008-09-09
The Java Web Server would allow remote users to obtain the source code for CGI programs.
Max CVSS
10.0
EPSS Score
3.64%
Published
1999-01-01
Updated
2016-10-18
Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
Max CVSS
10.0
EPSS Score
0.47%
Published
1999-01-01
Updated
2022-08-17
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
Max CVSS
10.0
EPSS Score
0.37%
Published
1999-01-01
Updated
2022-08-17
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
Max CVSS
10.0
EPSS Score
1.96%
Published
1999-01-26
Updated
2016-10-18
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
Max CVSS
10.0
EPSS Score
0.63%
Published
1999-01-25
Updated
2022-08-17
NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
Max CVSS
10.0
EPSS Score
0.35%
Published
1999-01-01
Updated
2016-10-18
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
A service or application has a backdoor password that was placed there by the developer.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
Max CVSS
10.0
EPSS Score
0.73%
Published
1999-01-01
Updated
2022-08-17
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
Max CVSS
10.0
EPSS Score
0.71%
Published
1999-01-28
Updated
2022-08-17
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
Max CVSS
10.0
EPSS Score
0.73%
Published
1999-01-01
Updated
2022-08-17
A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.
Max CVSS
10.0
EPSS Score
0.73%
Published
1999-01-01
Updated
2022-08-17
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
Max CVSS
10.0
EPSS Score
1.50%
Published
1999-01-01
Updated
2022-08-17