Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
1999-05-01 CVE-1999-0807 Unspecified vulnerability in Netscape Directory Server
The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.
local
low complexity
netscape
7.2
1999-05-01 CVE-1999-0764 Unspecified vulnerability in Netbsd 1.3
NetBSD allows ARP packets to overwrite static ARP entries.
network
low complexity
netbsd
6.4
1999-05-01 CVE-1999-0763 Unspecified vulnerability in Netbsd 1.3
NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
network
low complexity
netbsd
6.4
1999-05-01 CVE-1999-0487 Unspecified vulnerability in Microsoft Internet Explorer 4.0/5.0
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
network
high complexity
microsoft
2.6
1999-05-01 CVE-1999-0194 Denial of service in in.comsat allows attackers to generate messages.
network
low complexity
5.0
1999-04-29 CVE-1999-0711 Unspecified vulnerability in Oracle Oracle8I
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
local
low complexity
oracle
4.6
1999-04-27 CVE-1999-0712 Unspecified vulnerability in Caldera Coas and Openlinux
A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
local
low complexity
caldera
2.1
1999-04-23 CVE-1999-0492 The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
network
low complexity
critical
10.0
1999-04-21 CVE-1999-0490 Unspecified vulnerability in Microsoft Internet Explorer 4.0/5.0
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
network
low complexity
microsoft
7.5
1999-04-21 CVE-1999-0488 Unspecified vulnerability in Microsoft Internet Explorer 4.0/4.0.1/5.0
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.
network
low complexity
microsoft
7.5