Количество 371 149
Количество 371 149
CVE-1999-0531
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "An SMTP service supports EXPN, VRFY, HELP, ESMTP, and/or EHLO.
CVE-1999-0530
A system is operating in "promiscuous" mode which allows it to perform packet sniffing.
CVE-1999-0529
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.
CVE-1999-0528
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.
CVE-1999-0526
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
CVE-1999-0525
IP traceroute is allowed from arbitrary hosts.
CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVE-1999-0523
ICMP echo (ping) is allowed from arbitrary hosts.
CVE-1999-0522
The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.
CVE-1999-0521
An NIS domain name is easily guessable.
CVE-1999-0520
A system-critical NETBIOS/SMB share has inappropriate access control.
CVE-1999-0519
A NETBIOS/SMB share password is the default, null, or missing.
CVE-1999-0518
A NETBIOS/SMB share password is guessable.
CVE-1999-0517
An SNMP community name is the default (e.g. public), null, or missing.
CVE-1999-0516
An SNMP community name is guessable.
CVE-1999-0515
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
CVE-1999-0514
UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target.
CVE-1999-0513
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVE-1999-0512
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-1999-0531 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "An SMTP service supports EXPN, VRFY, HELP, ESMTP, and/or EHLO. | больше 27 лет назад | ||
| CVE-1999-0530 A system is operating in "promiscuous" mode which allows it to perform packet sniffing. | CVSS2: 10 | 2% Низкий | больше 27 лет назад |
| CVE-1999-0529 A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc. | CVSS2: 7.5 | 2% Низкий | больше 27 лет назад |
| CVE-1999-0528 A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of. | CVSS2: 7.5 | 2% Низкий | больше 27 лет назад |
| CVE-1999-0527 The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten. | CVSS2: 10 | 2% Низкий | больше 27 лет назад |
| CVE-1999-0526 An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server. | CVSS2: 10 | 21% Средний | около 29 лет назад |
| CVE-1999-0525 IP traceroute is allowed from arbitrary hosts. | 3% Низкий | больше 29 лет назад | |
| CVE-1999-0524 ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. | CVSS3: 4 | 32% Средний | почти 29 лет назад |
| CVE-1999-0523 ICMP echo (ping) is allowed from arbitrary hosts. | 1% Низкий | больше 27 лет назад | |
| CVE-1999-0522 The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate. | CVSS2: 7.2 | 0% Низкий | около 30 лет назад |
| CVE-1999-0521 An NIS domain name is easily guessable. | CVSS2: 7.2 | 0% Низкий | больше 29 лет назад |
| CVE-1999-0520 A system-critical NETBIOS/SMB share has inappropriate access control. | CVSS2: 6.4 | 1% Низкий | больше 27 лет назад |
| CVE-1999-0519 A NETBIOS/SMB share password is the default, null, or missing. | CVSS2: 7.5 | 6% Низкий | больше 29 лет назад |
| CVE-1999-0518 A NETBIOS/SMB share password is guessable. | CVSS2: 7.5 | 5% Низкий | больше 29 лет назад |
| CVE-1999-0517 An SNMP community name is the default (e.g. public), null, or missing. | CVSS3: 5.9 | 27% Средний | больше 29 лет назад |
| CVE-1999-0516 An SNMP community name is guessable. | CVSS2: 7.5 | 10% Средний | почти 28 лет назад |
| CVE-1999-0515 An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv. | CVSS2: 10 | 2% Низкий | больше 27 лет назад |
| CVE-1999-0514 UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target. | CVSS2: 5 | 2% Низкий | больше 28 лет назад |
| CVE-1999-0513 ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | CVSS2: 5 | 70% Высокий | больше 28 лет назад |
| CVE-1999-0512 A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. | CVSS2: 10 | 12% Средний | больше 27 лет назад |
Уязвимостей на страницу