Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-0712
A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0712'}]
CVE State: PUBLISHED
Explain CVE-1999-0713
The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'J-044', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-044.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0715
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
Affected Products: n/a
References: [{'name': 'MS99-016', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-016'}, {'name': 'Q230677', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230677'}]
CVE State: PUBLISHED
Explain CVE-1999-0716
Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.
Affected Products: n/a
References: [{'name': 'MS99-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015'}, {'name': 'Q231605', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231605'}]
CVE State: PUBLISHED
Explain CVE-1999-0717
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
Affected Products: n/a
References: [{'name': 'MS99-014', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-014'}, {'name': 'Q231304', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304'}]
CVE State: PUBLISHED
Explain CVE-1999-0718
IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.
Affected Products: n/a
References: [{'name': 'ibm-gina-group-add(3166)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3166'}, {'name': '19990823 IBM Gina security warning', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=&S=&P=5534'}, {'name': '608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/608'}]
CVE State: PUBLISHED
Explain CVE-1999-0719
The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': '563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/563'}]
CVE State: PUBLISHED
Explain CVE-1999-0720
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
Affected Products: n/a
References: [{'name': '597', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/597'}, {'name': '19990823 [Linux] glibc 2.1.x / wu-ftpd <=2.5 / BeroFTPD / lynx / vlock / mc / glibc 2.0.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=lcamtuf.4.05.9907041223290.355-300000%40nimue.ids.pl'}]
CVE State: PUBLISHED
Explain CVE-1999-0721
Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.
Affected Products: n/a
References: [{'name': 'J-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-049.shtml'}, {'name': 'MS99-020', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-020'}, {'name': 'Q231457', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231457'}]
CVE State: PUBLISHED
Explain CVE-1999-0722
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
Affected Products: n/a
References: [{'name': '558', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/558'}]
CVE State: PUBLISHED
Explain CVE-1999-0723
The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.
Affected Products: n/a
References: [{'name': '478', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/478'}, {'name': 'Q233323', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233323'}, {'name': 'J-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-049.shtml'}, {'name': 'MS99-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-021'}]
CVE State: PUBLISHED
Explain CVE-1999-0724
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
Affected Products: n/a
References: [{'name': '6128', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6128'}]
CVE State: PUBLISHED
Explain CVE-1999-0725
When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".
Affected Products: n/a
References: [{'name': '477', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/477'}, {'name': 'MS99-022', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022'}, {'name': 'Q233335', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335'}, {'name': 'iis-double-byte-code-page(2302)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2302'}]
CVE State: PUBLISHED
Explain CVE-1999-0726
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
Affected Products: n/a
References: [{'name': 'MS99-023', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-023'}, {'name': 'Q234557', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234557'}, {'name': '499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/499'}]
CVE State: PUBLISHED
Explain CVE-1999-0728
A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.
Affected Products: n/a
References: [{'name': 'Q236359', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ236359'}, {'name': 'MS99-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-024'}]
CVE State: PUBLISHED
Explain CVE-1999-0729
Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.
Affected Products: n/a
References: [{'name': '19990823 Denial of Service Attack against Lotus Notes Domino Server 4.6', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise34.php'}, {'name': '601', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/601'}, {'name': '1057', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1057'}, {'name': 'J-061', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-061.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0730
The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0730'}]
CVE State: PUBLISHED
Explain CVE-1999-0731
The KDE klock program allows local users to unlock a session using malformed input.
Affected Products: n/a
References: [{'name': '489', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/489'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/KDE/kde1-kdebase/commit/04906bd5de2f220bf100b605dad37b4a1d9a91a6'}]
CVE State: PUBLISHED
Explain CVE-1999-0733
Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.
Affected Products: n/a
References: [{'name': '490', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/490'}]
CVE State: PUBLISHED
Explain CVE-1999-0734
A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.
Affected Products: n/a
References: [{'name': 'ciscosecure-read-write(3133)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3133'}, {'name': '19990819 CiscoSecure Access Control Server for UNIX Remote Administration Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990819-dbaccess'}]
CVE State: PUBLISHED
Explain CVE-1999-0735
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
Affected Products: n/a
References: [{'name': 'RHSA-1999:015-01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA1999015_01.html'}, {'name': '300', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/300'}]
CVE State: PUBLISHED
Explain CVE-1999-0736
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:932', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932'}, {'name': 'MS99-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}]
CVE State: PUBLISHED
Explain CVE-1999-0737
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'MS99-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}]
CVE State: PUBLISHED
Explain CVE-1999-0738
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'MS99-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}]
CVE State: PUBLISHED
Explain CVE-1999-0739
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'MS99-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}]
CVE State: PUBLISHED
Explain CVE-1999-0740
Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.
Affected Products: n/a
References: [{'name': '594', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/594'}]
CVE State: PUBLISHED
Explain CVE-1999-0741
QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.
Affected Products: n/a
References: [{'name': '593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/593'}]
CVE State: PUBLISHED
Explain CVE-1999-0743
Trn allows local users to overwrite other users' files via symlinks.
Affected Products: n/a
References: [{'name': 'trn-symlinks(3144)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3144'}]
CVE State: PUBLISHED
Explain CVE-1999-0744
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '603', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/603'}]
CVE State: PUBLISHED
Explain CVE-1999-0745
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
Affected Products: n/a
References: [{'name': 'J-059', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-059.shtml'}, {'name': '590', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/590'}]
CVE State: PUBLISHED
Explain CVE-1999-0746
A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
Affected Products: n/a
References: [{'name': '587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/587'}]
CVE State: PUBLISHED
Explain CVE-1999-0747
Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.
Affected Products: n/a
References: [{'name': '19990816 Symmetric Multiprocessing (SMP) Vulnerbility in BSDi 4.0.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSI.4.10.9908170253560.19291-100000%40saturn.psn.net'}, {'name': '589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/589'}]
CVE State: PUBLISHED
Explain CVE-1999-0749
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
Affected Products: n/a
References: [{'name': 'MS99-033', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-033'}, {'name': '586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/586'}]
CVE State: PUBLISHED
Explain CVE-1999-0750
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
Affected Products: n/a
References: [{'name': '630', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/630'}]
CVE State: PUBLISHED
Explain CVE-1999-0751
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
Affected Products: n/a
References: [{'name': 'netscape-accept-bo(3256)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3256'}, {'name': '631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/631'}]
CVE State: PUBLISHED
Explain CVE-1999-0753
The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.
Affected Products: n/a
References: [{'name': '591', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/591'}]
CVE State: PUBLISHED
Explain CVE-1999-0754
The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
Affected Products: n/a
References: [{'name': '255', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/255'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.redhat.com/corp/support/errata/inn99_05_22.html'}, {'name': 'CSSA-1999-011.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt'}]
CVE State: PUBLISHED
Explain CVE-1999-0755
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
Affected Products: n/a
References: [{'name': 'Q230681', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230681'}, {'name': 'MS99-017', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-017'}]
CVE State: PUBLISHED
Explain CVE-1999-0756
ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.
Affected Products: n/a
References: [{'name': 'ASB99-07', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=10968&Method=Full'}, {'name': 'coldfusion-admin-dos(2207)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2207'}]
CVE State: PUBLISHED
Explain CVE-1999-0757
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
Affected Products: n/a
References: [{'name': 'ASB99-08', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=10969&Method=Full'}, {'name': 'coldfusion-encryption(2208)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2208'}]
CVE State: PUBLISHED
Explain CVE-1999-0758
Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0758'}]
CVE State: PUBLISHED
Explain CVE-1999-0759
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
Affected Products: n/a
References: [{'name': '634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/634'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.crosswinds.net/~fuseware/faq.html#8'}]
CVE State: PUBLISHED
Explain CVE-1999-0760
Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.
Affected Products: n/a
References: [{'name': '550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/550'}, {'name': 'ASB99-10', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=11714&Method=Full'}, {'name': 'coldfusion-server-cfml-tags(3288)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3288'}]
CVE State: PUBLISHED
Explain CVE-1999-0761
Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
Affected Products: n/a
References: [{'name': '644', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/644'}, {'name': '1074', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1074'}]
CVE State: PUBLISHED
Explain CVE-1999-0762
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0762'}]
CVE State: PUBLISHED
Explain CVE-1999-0763
NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
Affected Products: n/a
References: [{'name': '6540', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6540'}]
CVE State: PUBLISHED
Explain CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
Affected Products: n/a
References: [{'name': '19990501-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19990501-01-A'}, {'name': '262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/262'}]
CVE State: PUBLISHED
Explain CVE-1999-0766
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
Affected Products: n/a
References: [{'name': '600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/600'}, {'name': 'MS99-031', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-031'}, {'name': 'Q240346', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240346'}]
CVE State: PUBLISHED
Explain CVE-1999-0769
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
Affected Products: n/a
References: [{'name': '611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/611'}]
CVE State: PUBLISHED
Explain CVE-1999-0770
Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.
Affected Products: n/a
References: [{'name': '1027', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1027'}, {'name': '549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/549'}]
CVE State: PUBLISHED
Explain CVE-1999-0771
The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0771'}]
CVE State: PUBLISHED
Explain CVE-1999-0772
Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0772'}]
CVE State: PUBLISHED
Explain CVE-1999-0773
Buffer overflow in Solaris lpset program allows local users to gain root access.
Affected Products: n/a
References: [{'name': '19990511 Solaris2.6 and 2.7 lpset overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.netspace.org/cgi-bin/wa?A2=ind9905B&L=bugtraq&P=R2017'}]
CVE State: PUBLISHED
Explain CVE-1999-0774
Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.
Affected Products: n/a
References: [{'name': '617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/617'}]
CVE State: PUBLISHED
Explain CVE-1999-0775
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0775'}]
CVE State: PUBLISHED
Explain CVE-1999-0776
Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '19990506 ".."-hole in Alibaba 2.0', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9905&L=NTBUGTRAQ&P=R1533'}]
CVE State: PUBLISHED
Explain CVE-1999-0777
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
Affected Products: n/a
References: [{'name': 'Q241407', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407'}, {'name': '658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/658'}, {'name': 'Q242559', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242559'}, {'name': 'MS99-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039'}]
CVE State: PUBLISHED
Explain CVE-1999-0778
Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.
Affected Products: n/a
References: [{'name': '488', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/488'}]
CVE State: PUBLISHED
Explain CVE-1999-0779
Denial of service in HP-UX SharedX recserv program.
Affected Products: n/a
References: [{'name': 'HPSBUX9810-086', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9810-086'}]
CVE State: PUBLISHED
Explain CVE-1999-0780
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
Affected Products: n/a
References: [{'name': '19981118 Multiple KDE security vulnerabilities (root compromise)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91141486301691&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0781
KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.
Affected Products: n/a
References: [{'name': '19981118 Multiple KDE security vulnerabilities (root compromise)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91141486301691&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0782
KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.
Affected Products: n/a
References: [{'name': '19981118 Multiple KDE security vulnerabilities (root compromise)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91141486301691&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0783
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.
Affected Products: n/a
References: [{'name': 'I-057', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/i-057.shtml'}, {'name': '6090', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6090'}]
CVE State: PUBLISHED
Explain CVE-1999-0784
Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.
Affected Products: n/a
References: [{'name': '19980827 NERP DoS attack possible in Oracle', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/1998/msg00536.html'}, {'name': '19981228 Oracle8 TNSLSNR DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/1998_4/0764.html'}, {'name': '19990104 Re: Fw:"NERP" DoS attack possible in Oracle', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/1999_1/0056.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0785
The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.
Affected Products: n/a
References: [{'name': '254', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/254'}]
CVE State: PUBLISHED
Explain CVE-1999-0786
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Affected Products: n/a
References: [{'name': '659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/659'}]
CVE State: PUBLISHED
Explain CVE-1999-0787
The SSH authentication agent follows symlinks via a UNIX domain socket.
Affected Products: n/a
References: [{'name': '19990917 A few bugs...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93760201002154&w=2'}, {'name': '660', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/660'}, {'name': '19990924 [Fwd: Truth about ssh 1.2.27 vulnerability]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93832856804415&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0788
Arkiea nlservd allows remote attackers to conduct a denial of service.
Affected Products: n/a
References: [{'name': '19990924 Multiple vendor Knox Arkiea local root/remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93837184228248&w=2'}, {'name': '662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/662'}]
CVE State: PUBLISHED
Explain CVE-1999-0789
Buffer overflow in AIX ftpd in the libc library.
Affected Products: n/a
References: [{'name': '679', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/679'}, {'name': 'J-072', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-072.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0791
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.
Affected Products: n/a
References: [{'name': '695', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/695'}]
CVE State: PUBLISHED
Explain CVE-1999-0793
Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.
Affected Products: n/a
References: [{'name': 'MS99-043', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-043'}]
CVE State: PUBLISHED
Explain CVE-1999-0794
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
Affected Products: n/a
References: [{'name': 'Q241902', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241902'}, {'name': 'Q241900', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241900'}, {'name': 'MS99-044', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-044'}, {'name': 'Q241901', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241901'}]
CVE State: PUBLISHED
Explain CVE-1999-0795
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0795'}]
CVE State: PUBLISHED
Explain CVE-1999-0797
NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries.
Affected Products: n/a
References: [{'name': 'I-070', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/i-070.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0798
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
Affected Products: n/a
References: [{'name': '19981204 bootpd remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91278867118128&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0800
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
Affected Products: n/a
References: [{'name': '19990211 ACFUG List: Alert: Allaire Forums GetFile bug', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00332.html'}, {'name': 'allaire-forums-file-read(1748)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1748'}, {'name': 'ASB99-05', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=9602&Method=Full'}, {'name': '944', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/944'}]
CVE State: PUBLISHED
Explain CVE-1999-0801
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
Affected Products: n/a
References: [{'name': '19990409 Patrol security bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13204'}, {'name': 'bmc-patrol-frames(2075)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/2075.php'}]
CVE State: PUBLISHED
Explain CVE-1999-0802
Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
Affected Products: n/a
References: [{'name': 'MS99-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018'}, {'name': 'Q231450', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231450'}]
CVE State: PUBLISHED
Explain CVE-1999-0803
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '962', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/962'}, {'name': '19990525 IBM eNetwork Firewall for AIX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92765973207648&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0804
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
Affected Products: n/a
References: [{'name': '302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/302'}]
CVE State: PUBLISHED
Explain CVE-1999-0805
Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.
Affected Products: n/a
References: [{'name': "19990512 DoS with Netware 4.x's TTS", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/1999_2/0439.html'}, {'name': 'novell-tts-dos(2184)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2184'}]
CVE State: PUBLISHED
Explain CVE-1999-0808
Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
Affected Products: n/a
References: [{'name': '19980518 DHCP 1.0 and 2.0 SECURITY ALERT! (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101925960&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.isc.org/isc/dhcp/dhcp-1.0-history/dhcp-1.0.0-1.0pl1.diff.gz'}, {'name': 'I-053', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/i-053.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0809
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed".
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0809'}]
CVE State: PUBLISHED
Explain CVE-1999-0813
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0813'}]
CVE State: PUBLISHED
Explain CVE-1999-0814
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
Affected Products: n/a
References: [{'name': 'RHSA-1999:027', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-1999-027.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0815
Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.
Affected Products: n/a
References: [{'name': 'Q196270', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q196/2/70.asp'}, {'name': 'nt-snmpagent-leak(1974)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1974'}, {'name': 'oval:org.mitre.oval:def:952', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A952'}]
CVE State: PUBLISHED
Explain CVE-1999-0816
The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
Affected Products: n/a
References: [{'name': '19980510 Security Vulnerability in Motorola CableRouters', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621'}]
CVE State: PUBLISHED
Explain CVE-1999-0817
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0817'}]
CVE State: PUBLISHED
Explain CVE-1999-0818
Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
Affected Products: n/a
References: [{'name': '831', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/831'}, {'name': '19991130 another hole of Solaris7 kcms_configure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=38433B7F5A.53F4SHADOWPENGUIN%40fox.nightland.net'}]
CVE State: PUBLISHED
Explain CVE-1999-0819
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Affected Products: n/a
References: [{'name': '19991130 NTmail and VRFY', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94398141118586&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0820
FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
Affected Products: n/a
References: [{'name': '838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/838'}, {'name': '5996', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5996'}]
CVE State: PUBLISHED
Explain CVE-1999-0821
FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
Affected Products: n/a
References: [{'name': '838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/838'}]
CVE State: PUBLISHED
Explain CVE-1999-0822
Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
Affected Products: n/a
References: [{'name': '830', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/830'}]
CVE State: PUBLISHED
Explain CVE-1999-0823
Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
Affected Products: n/a
References: [{'name': '1150', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1150'}, {'name': '839', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/839'}]
CVE State: PUBLISHED
Explain CVE-1999-0824
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
Affected Products: n/a
References: [{'name': '833', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/833'}]
CVE State: PUBLISHED
Explain CVE-1999-0825
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
Affected Products: n/a
References: [{'name': '849', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/849'}]
CVE State: PUBLISHED
Explain CVE-1999-0826
Buffer overflow in FreeBSD angband allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1151', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1151'}, {'name': '840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/840'}]
CVE State: PUBLISHED
Explain CVE-1999-0827
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0827'}]
CVE State: PUBLISHED
Explain CVE-1999-0828
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
Affected Products: n/a
References: [{'name': '853', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/853'}]
CVE State: PUBLISHED
Explain CVE-1999-0831
Denial of service in Linux syslogd via a large number of connections.
Affected Products: n/a
References: [{'name': 'CSSA-1999-035.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-035.0.txt'}, {'name': '809', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/809'}]
CVE State: PUBLISHED
Explain CVE-1999-0832
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
Affected Products: n/a
References: [{'name': 'CSSA-1999-033.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-033.0.txt'}, {'name': 'RHSA-1999:053-01', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/rh42-errata-general.html#NFS'}, {'name': '19991111 buffer overflow in nfs server', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/1999/19991111'}, {'name': '19991110 Security hole in nfs-server < 2.2beta47 within nkita', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_29.html'}, {'name': '19991109 undocumented bugs - nfsd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.20.9911091058140.12964-100000%40mail.zigzag.pl'}, {'name': '782', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/782'}]
CVE State: PUBLISHED
Explain CVE-1999-0833
Buffer overflow in BIND 8.2 via NXT records.
Affected Products: n/a
References: [{'name': 'CSSA-1999-034.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt'}, {'name': '788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/788'}]
CVE State: PUBLISHED
Explain CVE-1999-0834
Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.
Affected Products: n/a
References: [{'name': '843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/843'}]
CVE State: PUBLISHED
Explain CVE-1999-0835
Denial of service in BIND named via malformed SIG records.
Affected Products: n/a
References: [{'name': 'CSSA-1999-034.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt'}, {'name': '788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/788'}]
CVE State: PUBLISHED
Explain CVE-1999-0836
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': 'SB-99.22a', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.22a'}, {'name': '19991202 UnixWare 7 uidadmin exploit + discussion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991202160111.20553.qmail%40nwcst282.netaddress.usa.net'}, {'name': '842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/842'}]
CVE State: PUBLISHED
Explain CVE-1999-0837
Denial of service in BIND by improperly closing TCP sessions via so_linger.
Affected Products: n/a
References: [{'name': 'CSSA-1999-034.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt'}, {'name': '788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/788'}, {'name': '00194', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194'}]
CVE State: PUBLISHED
Explain CVE-1999-0838
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
Affected Products: n/a
References: [{'name': '859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/859'}]
CVE State: PUBLISHED
Explain CVE-1999-0839
Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.
Affected Products: n/a
References: [{'name': 'Q246972', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246972'}, {'name': 'MS99-051', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-051'}, {'name': '828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/828'}]
CVE State: PUBLISHED
Explain CVE-1999-0840
Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
Affected Products: n/a
References: [{'name': '19991129 Solaris7 dtmail/dtmailpr/mailtool Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.security-express.com/archives/bugtraq/1999-q4/0122.html'}, {'name': 'solaris-dtmailpr-overflow(3580)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3580'}, {'name': 'solaris-dtmail-overflow(3579)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3579'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/3J5QQPPQ0O.html'}, {'name': '832', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/832'}]
CVE State: PUBLISHED