По дате публикации
Эксплуатируемые и новые серьёзные CVE: январь 1999 г.
15 записей · 0 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
27Наблюдать | CVE-1999-0448Proof of concept | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really requestmicrosoft · internet information server | Средняя5,0 | — | 24,6 % | 1 янв. 1999 г. |
40В плане | CVE-1999-0497Готовый эксплойт | Anonymous FTP is enabled. | —0,0 | — | 7,2 % | 1 янв. 1999 г. |
44В плане | CVE-1999-0512Готовый эксплойт | A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. | Критическая10,0 | — | 12,3 % | 1 янв. 1999 г. |
43В плане | CVE-1999-0554Готовый эксплойт | NFS exports system-critical data to the world, e.g. | Критическая10,0 | — | 11,1 % | 1 янв. 1999 г. |
40В плане | CVE-1999-0651Готовый эксплойт | The rsh/rlogin service is running. | Высокая7,5 | — | 11,9 % | 1 янв. 1999 г. |
56В плане | CVE-1999-0661Proof of concept | A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers | Критическая10,0 | — | 54,2 % | 1 янв. 1999 г. |
47В плане | CVE-1999-1376Эксплойта нет | Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.microsoft · internet information server | Критическая10,0 | — | 23,9 % | 14 янв. 1999 г. |
16Наблюдать | CVE-1999-1538Proof of concept | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machinmicrosoft · internet information server | Низкая2,1 | — | 25,2 % | 14 янв. 1999 г. |
29Наблюдать | CVE-1999-0678Proof of concept | A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation filesapache · http server | Средняя5,0 | — | 31,4 % | 17 янв. 1999 г. |
24Наблюдать | CVE-1999-1544Эксплойта нет | Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a lomicrosoft · internet information server | Средняя5,0 | — | 13,6 % | 24 янв. 1999 г. |
25Наблюдать | CVE-1999-0357Эксплойта нет | Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involvingmicrosoft · windows 98 | Средняя5,0 | — | 16,5 % | 25 янв. 1999 г. |
46В плане | CVE-1999-0449Эксплойта нет | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advseamicrosoft · internet information server | Высокая7,8 | — | 49,2 % | 26 янв. 1999 г. |
36Наблюдать | CVE-1999-0450Proof of concept | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).microsoft · internet information server | Высокая7,5 | — | 19,0 % | 26 янв. 1999 г. |
23Наблюдать | CVE-1999-0348Эксплойта нет | IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.microsoft · internet information server · CWE-200 | Средняя5,0 | — | 10,5 % | 27 янв. 1999 г. |
35Наблюдать | CVE-1999-0349Эксплойта нет | A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbmicrosoft · internet information server · CWE-119 | Высокая7,5 | — | 17,9 % | 27 янв. 1999 г. |
- CVE-1999-044827Наблюдать
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request
СредняяCVSS 5,0Proof of conceptEPSS 24 %microsoft · internet information server1 янв. 1999 г.
- CVE-1999-049740В плане
Anonymous FTP is enabled.
CVSS 0,0Готовый эксплойтEPSS 7 %1 янв. 1999 г.
- CVE-1999-051244В плане
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
КритическаяCVSS 10,0Готовый эксплойтEPSS 12 %1 янв. 1999 г.
- CVE-1999-055443В плане
NFS exports system-critical data to the world, e.g.
КритическаяCVSS 10,0Готовый эксплойтEPSS 11 %1 янв. 1999 г.
- CVE-1999-065140В плане
The rsh/rlogin service is running.
ВысокаяCVSS 7,5Готовый эксплойтEPSS 11 %1 янв. 1999 г.
- CVE-1999-066156В плане
A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers
КритическаяCVSS 10,0Proof of conceptEPSS 54 %1 янв. 1999 г.
- CVE-1999-137647В плане
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
КритическаяCVSS 10,0Эксплойта нетEPSS 23 %microsoft · internet information server14 янв. 1999 г.
- CVE-1999-153816Наблюдать
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machin
НизкаяCVSS 2,1Proof of conceptEPSS 25 %microsoft · internet information server14 янв. 1999 г.
- CVE-1999-067829Наблюдать
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files
СредняяCVSS 5,0Proof of conceptEPSS 31 %apache · http server17 янв. 1999 г.
- CVE-1999-154424Наблюдать
Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a lo
СредняяCVSS 5,0Эксплойта нетEPSS 13 %microsoft · internet information server24 янв. 1999 г.
- CVE-1999-035725Наблюдать
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving
СредняяCVSS 5,0Эксплойта нетEPSS 16 %microsoft · windows 9825 янв. 1999 г.
- CVE-1999-044946В плане
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsea
ВысокаяCVSS 7,8Эксплойта нетEPSS 49 %microsoft · internet information server26 янв. 1999 г.
- CVE-1999-045036Наблюдать
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
ВысокаяCVSS 7,5Proof of conceptEPSS 19 %microsoft · internet information server26 янв. 1999 г.
- CVE-1999-034823Наблюдать
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
СредняяCVSS 5,0Эксплойта нетEPSS 10 %microsoft · internet information server27 янв. 1999 г.
- CVE-1999-034935Наблюдать
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arb
ВысокаяCVSS 7,5Эксплойта нетEPSS 17 %microsoft · internet information server27 янв. 1999 г.