CVE Vulnerability Catalog

The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.

Buffer overflow in ToxSoft NextFTP client occurs when executing the CWD command.

Buffer overflow in Fujitsu Chocoa IRC client occurs via IRC channel topics.

The FTP client in Midnight Commander (mc) before version 4.5.11 stores usernames and passwords for visited sites in plaintext in a world-readable history file.

The default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.

CVE-1999-0683 affects the Gauntlet Firewall, which is vulnerable to a denial of service (DoS) attack via a malformed ICMP packet. An attacker can exploit this vulnerability to disrupt access to services protected by the firewall.

Buffer overflow in Microsoft Phone Dialer (dialer.exe) caused by a malformed entry in the dialer.ini file.

The Windows NT messenger service is vulnerable to a denial of service (DoS) attack caused by a long username.

Buffer overflow in the Samba smbd program caused by a malformed message command.

Delegate proxy version 5.9.3 and earlier creates files and directories in DGROOT with world-writable permissions.

The dbmlparser.exe CGI guestbook program does not perform the chroot operation properly, allowing remote attackers to read arbitrary files.

Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits using mmap or shmget to allocate memory and cause page faults.

MacOS uses weak encryption for passwords stored in the Users & Groups Data File.

Netscape Communicator 4.x with JavaScript enabled does not warn a user of cookie settings, even if they have selected the option 'Only accept cookies originating from the same server as the page being viewed'.

IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, allowing remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files.

CVE-1999-0752 affects the Netscape Enterprise Server, where a buffer overflow during the SSL handshake can lead to a denial of service.

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.

Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x may lead to unauthorized access or execution of malicious code.

CVE-1999-0140 is a Denial of Service (DoS) vulnerability in the RAS/PPTP protocol on NT systems, potentially leading to service unavailability.

The Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.