Vuldb Updates

A vulnerability has been found in Microsoft Internet Explorer 5.0 and classified as problematic. This affects an unknown part of the file ie5setup.exe of the component Setup Wizard. Performing a manipulation results in improper privilege management. This vulnerability is reported as CVE-1999-1370. The attack requires a local approach. Moreover, an exploit is present. The affected component should be upgraded.

A vulnerability was found in NetBSD and Linux. It has been declared as problematic. Impacted is an unknown function of the file xfs of the component XFree86. The manipulation results in symlink following. This vulnerability is known as CVE-1999-0434. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in Alcatel OmniSwitch 3.2.4. It has been rated as problematic. The affected element is an unknown function of the component Login Prompt. This manipulation with the input Ctrl+D causes denial of service. This vulnerability is handled as CVE-1999-1559. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability categorized as problematic has been discovered in BMC Patrol Agent 3.2.3. The impacted element is an unknown function. Such manipulation leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-1999-0443. The attack can be launched remotely. No exploit exists.

A vulnerability identified as critical has been detected in Cisco IOS up to 12.0.2. This affects an unknown function of the component NAT. Performing a manipulation results in improper privilege management. This vulnerability was named CVE-1999-0445. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in HP MPE-iX. This impacts an unknown function of the component Debug Utility. Executing a manipulation can lead to improper privilege management. The identification of this vulnerability is CVE-1999-0447. The attack can only be executed locally. There is no exploit available.

A vulnerability described as problematic has been identified in Microsoft Internet Explorer 5.0. Affected by this vulnerability is an unknown functionality of the component Window Handler. The manipulation results in authentication bypass by spoofing. This vulnerability is identified as CVE-1999-0469. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Midnight Commander 4.x. Affected by this issue is some unknown functionality. This manipulation causes symlink following. This vulnerability is tracked as CVE-1999-0480. The attack is restricted to local execution. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Austin Contract Computing Merchant Order Form 1.0/1.2. This affects an unknown part of the component Shopping Cart. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-1999-0605. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as problematic, has been found in Seaside Enterprises EZMall 2000. This vulnerability affects unknown code of the file mall2000.cgi. Performing a manipulation results in information disclosure. This vulnerability is cataloged as CVE-1999-0606. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Mercantec SoftCart and classified as problematic. Impacted is an unknown function of the file softcart.exe. The manipulation leads to information disclosure. This vulnerability is documented as CVE-1999-0609. The attack can be initiated remotely. There is not any exploit available.

A vulnerability has been found in Cisco Router 3.2/4.2 and classified as critical. Affected is an unknown function of the component Web Server. This manipulation causes improper privilege management. This vulnerability appears as CVE-1999-0415. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in Cisco Router 700 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Telnet. Such manipulation as part of TCP Connection leads to denial of service. This vulnerability is traded as CVE-1999-0416. The attack may be launched remotely. Furthermore, there is an exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Macromedia Shockwave Flash Plugin 7.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Auto Update. Performing a manipulation results in cleartext storage of sensitive information. This vulnerability is known as CVE-1999-1526. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in NetBSD. It has been rated as problematic. This vulnerability affects unknown code of the file mount_umap of the component umapfs. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-1999-0420. Local access is required to approach this attack. No exploit exists. Upgrading the affected component is advised.

A vulnerability categorized as problematic has been discovered in Slackware Linux 3.6. This issue affects some unknown processing of the component Net Installer. The manipulation results in improper authentication. This vulnerability was named CVE-1999-0421. The attack needs to be approached locally. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in NetBSD 1.3.3. Impacted is an unknown function of the component Software Handler. This manipulation causes improper privilege management. The identification of this vulnerability is CVE-1999-0422. The attack can only be executed locally. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in SuSE Linux 5.3. The affected element is an unknown function of the file suidmount of the component Perl. Such manipulation leads to Local Privilege Escalation. This vulnerability is referenced as CVE-1999-0462. The attack can only be performed from a local environment. No exploit is available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Netscape Communicator 4.5. The impacted element is an unknown function of the component talkback. Performing a manipulation results in improper privilege management. This vulnerability is identified as CVE-1999-0424. The attack is only possible with local access. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Netscape Communicator 4.5. This affects an unknown function of the component talkback. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-1999-0425. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.