CVE List

Id CVE No. Status Description Phase Votes Comments Actions
1469  CVE-1999-1489  Candidate  Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.  Proposed (20010912)  MODIFY(1) Frech | NOOP(2) Cole, Foat  Frech> XF:xfree86-superprobe-testchip-bo(7198)  View
1214  CVE-1999-1234  Candidate  LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.  Proposed (20010912)  ACCEPT(3) Cole, Frech, Wall | NOOP(1) Foat    View
1215  CVE-1999-1235  Candidate  Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user"s index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.  Proposed (20010912)  ACCEPT(4) Cole, Foat, Frech, Wall  CHANGE> [Foat changed vote from NOOP to ACCEPT]  View
1471  CVE-1999-1491  Candidate  abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.  Proposed (20010912)  ACCEPT(1) Cole | NOOP(1) Foat    View
1216  CVE-1999-1236  Candidate  Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.  Proposed (20010912)  ACCEPT(2) Cole, Frech | NOOP(2) Foat, Wall    View

Page 247 of 20943, showing 5 records out of 104715 total, starting on record 1231, ending on 1235

Actions