CVE List

Id CVE No. Status Description Phase Votes Comments Actions
1048  CVE-1999-1068  Candidate  Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.  Proposed (20010912)  MODIFY(1) Frech | NOOP(2) Cole, Foat  Frech> XF:oracle-webserver-dos(1812)  View
1049  CVE-1999-1069  Candidate  Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.  Proposed (20010912)  ACCEPT(2) Cole, Frech | NOOP(1) Foat  Frech> iCat"s site at http://www.icat.com/ is shut down, and no | further support seems to be available.  View
1050  CVE-1999-1070  Candidate  Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.  Proposed (20010912)  MODIFY(1) Frech | NOOP(3) Cole, Foat, Wall  Frech> XF:annex-ping-crash(2090)  View
1051  CVE-1999-1071  Candidate  Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file.  Proposed (20010912)  ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall    View
1052  CVE-1999-1072  Candidate  Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.  Proposed (20010912)  NOOP(3) Cole, Foat, Wall    View

Page 20679 of 20943, showing 5 records out of 104715 total, starting on record 103391, ending on 103395

Actions