Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
1999-01-29 CVE-1999-1546 Unspecified vulnerability in IBM Navio NC Browser 1.1.0.1
netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
network
low complexity
ibm
5.0
1999-01-28 CVE-1999-0952 Unspecified vulnerability in SUN Solaris and Sunos
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
local
low complexity
sun
7.2
1999-01-28 CVE-1999-0461 Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
network
low complexity
sgi linux
critical
10.0
1999-01-27 CVE-1999-1450 Unspecified vulnerability in SCO Openserver and Unixware
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
network
low complexity
sco
7.5
1999-01-26 CVE-1999-0450 Unspecified vulnerability in Microsoft products
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
network
low complexity
microsoft
7.5
1999-01-26 CVE-1999-0449 Unspecified vulnerability in Microsoft Internet Information Server 4.0
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
network
low complexity
microsoft
7.8
1999-01-26 CVE-1999-0400 Unspecified vulnerability in Linux Kernel 2.2.0
Denial of service in Linux 2.2.0 running the ldd command on a core file.
local
low complexity
linux
4.6
1999-01-26 CVE-1999-0347 Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
network
low complexity
critical
10.0
1999-01-25 CVE-1999-1458 Unspecified vulnerability in Digital Unix
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.
local
low complexity
digital
7.2
1999-01-25 CVE-1999-0357 Unspecified vulnerability in Microsoft Windows 98
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
network
low complexity
microsoft
5.0