CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
1048 | CVE-1999-1068 | Candidate | Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request. | Proposed (20010912) | MODIFY(1) Frech | NOOP(2) Cole, Foat | Frech> XF:oracle-webserver-dos(1812) | View |
1049 | CVE-1999-1069 | Candidate | Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter. | Proposed (20010912) | ACCEPT(2) Cole, Frech | NOOP(1) Foat | Frech> iCat"s site at http://www.icat.com/ is shut down, and no | further support seems to be available. | View |
1050 | CVE-1999-1070 | Candidate | Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter. | Proposed (20010912) | MODIFY(1) Frech | NOOP(3) Cole, Foat, Wall | Frech> XF:annex-ping-crash(2090) | View |
1051 | CVE-1999-1071 | Candidate | Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file. | Proposed (20010912) | ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall | View | |
1052 | CVE-1999-1072 | Candidate | Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi. | Proposed (20010912) | NOOP(3) Cole, Foat, Wall | View |
Page 20679 of 20943, showing 5 records out of 104715 total, starting on record 103391, ending on 103395