CVE List

Id CVE No. Status Description Phase Votes Comments Actions
1516  CVE-1999-1536  Candidate  .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.  Modified (20070207)  NOOP(3) Cole, Foat, Wall | REVIEWING(1) Frech  Frech> (ACCEPT; Task 2356)  View
1517  CVE-1999-1537  Entry  IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.        View
1518  CVE-1999-1538  Candidate  When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator"s password.  Proposed (20010912)  ACCEPT(1) Wall | MODIFY(1) Frech | NOOP(2) Cole, Foat  Frech> XF:iis-ismdll-info(7566)  View
1519  CVE-1999-1539  Candidate  Buffer overflow in FTP server in QPC Software"s QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.  Proposed (20010912)  ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall    View
1520  CVE-1999-1540  Candidate  shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.  Proposed (20010912)  ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall    View

Page 304 of 20943, showing 5 records out of 104715 total, starting on record 1516, ending on 1520

Actions