Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
1996-10-01 CVE-1999-0206 Unspecified vulnerability in Eric Allman Sendmail 8.8/8.8.1
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
network
low complexity
eric-allman
critical
 10.0
10
1996-05-29 CVE-1999-0509 Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands.
network
low complexity
CWE-94
critical
 10.0
10
1996-01-03 CVE-1999-1319 Unspecified vulnerability in SGI Irix
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations.
network
low complexity
sgi
critical
 10.0
10
1995-12-12 CVE-1999-0208 rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
network
low complexity
sgi nec ibm
critical
 10.0
10
1995-11-30 CVE-1999-0080 Unspecified vulnerability in Washington University Wu-Ftpd 2.4
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
network
low complexity
washington-university
critical
 10.0
10
1995-11-01 CVE-1999-0241 Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g.
network
low complexity
sgi xfree86-project sun
critical
 10.0
10
1995-10-19 CVE-1999-0099 Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
network
low complexity
sun cray convex bsdi ibm
critical
 10.0
10
1995-10-13 CVE-1999-0073 Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
network
low complexity
sgi digital
critical
 10.0
10
1995-08-17 CVE-1999-0203 Unspecified vulnerability in Eric Allman Sendmail 8.6.10
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
network
low complexity
eric-allman
critical
 10.0
10
1995-02-17 CVE-1999-0235 Unspecified vulnerability in Ncsa web Server 1.3/1.4/1.4.1
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
network
low complexity
ncsa
critical
 10.0
10