Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
1998-11-05 CVE-1999-1321 Unspecified vulnerability in MIT Kerberos V
Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing.
network
low complexity
mit
7.5
1998-11-02 CVE-1999-1459 Symbolic Link vulnerability in BMC Patrol
BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
local
low complexity
bmc
7.2
1998-11-01 CVE-1999-0118 Unspecified vulnerability in IBM AIX
AIX infod allows local users to gain root access through an X display.
local
low complexity
ibm
7.2
1998-10-08 CVE-1999-1381 Unspecified vulnerability in Dbadmin 1.0.1
Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
network
low complexity
dbadmin
7.5
1998-10-06 CVE-1999-1185 Unspecified vulnerability in SCO products
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
local
low complexity
sco
7.2
1998-10-02 CVE-1999-1403 Multiple vulnerability in IBM Tivoli OPC Tracker Agent 1.0X/2.0X/3.0X
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
local
low complexity
ibm
7.2
1998-10-01 CVE-1999-0506 Unspecified vulnerability in Microsoft Windows 2000 and Windows NT
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
local
low complexity
microsoft
7.2
1998-10-01 CVE-1999-0505 Unspecified vulnerability in Microsoft Windows 2000 and Windows NT
A Windows NT domain user or administrator account has a guessable password.
local
low complexity
microsoft
7.2
1998-09-29 CVE-1999-1181 Unspecified vulnerability in SGI Irix
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
local
low complexity
sgi
7.2
1998-09-27 CVE-1999-1228 Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others.
network
low complexity
logicode diamond us-robotics
7.5