Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.
Max CVSS
5.0
EPSS Score
0.71%
Published
1999-08-20
Updated
2021-06-06
The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.
Max CVSS
10.0
EPSS Score
0.87%
Published
1999-08-22
Updated
2017-10-10
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
Max CVSS
7.5
EPSS Score
1.06%
Published
1999-08-21
Updated
2008-09-10
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
Max CVSS
5.0
EPSS Score
2.86%
Published
1999-08-24
Updated
2018-10-12
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
Max CVSS
7.2
EPSS Score
0.08%
Published
1999-08-20
Updated
2018-10-12
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Max CVSS
4.6
EPSS Score
0.05%
Published
1999-08-20
Updated
2008-09-05
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
Max CVSS
7.2
EPSS Score
0.04%
Published
1999-08-20
Updated
2008-09-05
FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.
Max CVSS
5.0
EPSS Score
0.95%
Published
1999-08-07
Updated
2016-10-18
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.
Max CVSS
5.0
EPSS Score
0.24%
Published
1999-08-31
Updated
2017-12-19
Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities.
Max CVSS
7.5
EPSS Score
1.50%
Published
1999-08-30
Updated
2016-10-18
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.
Max CVSS
4.6
EPSS Score
0.05%
Published
1999-08-30
Updated
2016-10-18
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
Max CVSS
4.6
EPSS Score
0.04%
Published
1999-08-01
Updated
2016-10-18
3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port.
Max CVSS
5.0
EPSS Score
1.18%
Published
1999-08-12
Updated
2016-10-18
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
Max CVSS
4.6
EPSS Score
0.05%
Published
1999-08-25
Updated
2021-07-22
Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).
Max CVSS
10.0
EPSS Score
1.30%
Published
1999-08-22
Updated
2016-10-18
Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.
Max CVSS
5.0
EPSS Score
86.85%
Published
1999-08-24
Updated
2016-10-18
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
Max CVSS
5.0
EPSS Score
0.18%
Published
1999-08-27
Updated
2021-07-22
Denial of service in Debian IRC Epic/epic4 client via a long string.
Max CVSS
5.0
EPSS Score
3.35%
Published
1999-08-26
Updated
2008-09-09
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
Max CVSS
10.0
EPSS Score
2.21%
Published
1999-08-05
Updated
2016-10-18
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
Max CVSS
10.0
EPSS Score
2.45%
Published
1999-08-27
Updated
2008-09-09
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Max CVSS
4.6
EPSS Score
0.04%
Published
1999-08-16
Updated
2008-09-09
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
Max CVSS
10.0
EPSS Score
0.84%
Published
1999-08-22
Updated
2008-09-09
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
Max CVSS
7.5
EPSS Score
1.49%
Published
1999-08-11
Updated
2018-10-30
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
Max CVSS
7.2
EPSS Score
0.05%
Published
1999-08-25
Updated
2008-09-09
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Max CVSS
5.0
EPSS Score
0.50%
Published
1999-08-11
Updated
2018-10-12
60 vulnerabilities found
1 2 3
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!