CVE List

Id CVE No. Status Description Phase Votes Comments Actions
465  CVE-1999-0467  Candidate  The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.  Modified (20000106-01)  ACCEPT(4) Blake, Frech, Landfield, Ozancin | NOOP(3) Baker, Christey, Northcutt  Christey> CVE-1999-0287 is probably a duplicate of CVE-1999-0467. In | NTBUGTRAQ:19990409 Webcom"s CGI Guestbook for Win32 web servers | Mnemonix says that he had previously reported on a similar | problem. Let"s refer to the NTBugtraq posting as | CVE-1999-0467. We will refer to the "previous report" as | CVE-1999-0287, which can be found at: | http://oliver.efri.hr/~crv/security/bugs/NT/httpd41.html | | 0287 describes an exploit via the "template" hidden variable. | The exploit describes manually editing the HTML form to | change the filename to read from the template variable. | | The exploit as described in 0467 encodes the template variable | directly into the URL. However, hidden variables are also | encoded into the URL, which would have looked the same to | the web server regardless of the exploit. Therefore 0287 | and 0467 are the same. | Christey> | The CD:SF-EXEC content decision also applies here. We have 2 | programs, wguest.exe and rguest.exe, which appear to have the | same problem. CD:SF-EXEC needs to be accepted by the Editorial | Board before this candidate can be converted into a CVE | entry. When finalized, CD:SF-EXEC will decide whether | this candidate should be split or not. | Christey> BID:2024  View
464  CVE-1999-0466  Entry  The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.        View
463  CVE-1999-0465  Candidate  Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.  Proposed (19990728)  ACCEPT(2) Frech, Northcutt | NOOP(1) Baker | REJECT(2) LeBlanc, Wall  Wall> Reject based on client-side DoS | LeBlanc> Client side DOS  View
462  CVE-1999-0464  Entry  Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.        View
461  CVE-1999-0463  Entry  Remote attackers can perform a denial of service using IRIX fcagent.        View

Page 20851 of 20943, showing 5 records out of 104715 total, starting on record 104251, ending on 104255

<<first 20847 | 20848 | 20849 | 20850 | 20851 | 20852 | 20853 | 20854 | 20855 last>>

Actions