Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
1995-11-30 CVE-1999-0080 Unspecified vulnerability in Washington University Wu-Ftpd 2.4
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
network
low complexity
washington-university
critical
 10.0
10
1995-11-01 CVE-1999-0241 Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g.
network
low complexity
sgi xfree86-project sun
critical
 10.0
10
1995-10-19 CVE-1999-0099 Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
network
low complexity
sun cray convex bsdi ibm
critical
 10.0
10
1995-10-13 CVE-1999-0073 Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
network
low complexity
sgi digital
critical
 10.0
10
1995-08-17 CVE-1999-0203 Unspecified vulnerability in Eric Allman Sendmail 8.6.10
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
network
low complexity
eric-allman
critical
 10.0
10
1995-02-17 CVE-1999-0235 Unspecified vulnerability in Ncsa web Server 1.3/1.4/1.4.1
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
network
low complexity
ncsa
critical
 10.0
10
1995-02-01 CVE-1999-0232 Unspecified vulnerability in Ncsa Httpd Project Ncsa Httpd 1.5C
Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
network
low complexity
ncsa-httpd-project
critical
 10.0
10
1993-09-17 CVE-1999-1138 Unspecified vulnerability in SCO products
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.
network
low complexity
sco
critical
 10.0
10
1993-08-09 CVE-1999-0124 Unspecified vulnerability in University of Minnesota Gopherd
Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon.
network
low complexity
university-of-minnesota
critical
 10.0
10
1992-07-21 CVE-1999-0214 Unspecified vulnerability in SUN Sunos 4.1/4.1.1/4.1.2
Denial of service by sending forged ICMP unreachable packets.
network
low complexity
sun
critical
 10.0
10