Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-1527
Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
Affected Products: n/a
References: [{'name': "19991123 NetBeans/ Forte' Java IDE HTTP vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94338883114254&w=2'}, {'name': '816', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/816'}]
CVE State: PUBLISHED
Explain CVE-1999-1528
ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.
Affected Products: n/a
References: [{'name': '794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/794'}, {'name': '19991114 MacOS 9 and the MacOS Netware Client', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94261444428430&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1529
A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.
Affected Products: n/a
References: [{'name': '787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/787'}, {'name': '19991108 Patch for VirusWall 3.23.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94204166130782&w=2'}, {'name': '19991107 Interscan VirusWall NT 3.23/3.3 buffer overflow.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94199707625818&w=2'}, {'name': '19991107 Interscan VirusWall NT 3.23/3.3 buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94201512111092&w=2'}, {'name': '19991108 Patch for VirusWall 3.23.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94208143007829&w=2'}, {'name': '20000417 New DOS on Interscan NT/3.32', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/55551'}, {'name': '19991108 Re: Interscan VirusWall NT 3.23/3.3 buffer overflow.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94210427406568&w=2'}, {'name': 'viruswall-helo-bo(3465)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3465'}]
CVE State: PUBLISHED
Explain CVE-1999-1530
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.
Affected Products: n/a
References: [{'name': '777', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/777'}, {'name': 'cobalt-cgiwrap-incorrect-permissions(7764)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7764.php'}, {'name': '35', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/35'}, {'name': '19991109 [Cobalt] Security Advisory - cgiwrap', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94225629200045&w=2'}, {'name': '19991108 Security flaw in Cobalt RaQ2 cgiwrap', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94209954200450&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1531
Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.
Affected Products: n/a
References: [{'name': '19991102 Some holes for Win/UNIX softwares', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94157187815629&w=2'}, {'name': '763', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/763'}, {'name': 'ibm-homepageprint-bo(7767)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7767.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1532
Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.
Affected Products: n/a
References: [{'name': '19991029 message:Netscape Messaging Server RCPT TO vul.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94117465014255&w=2'}, {'name': '748', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/748'}]
CVE State: PUBLISHED
Explain CVE-1999-1533
Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.
Affected Products: n/a
References: [{'name': '19990926 DoS Exploit in Eicon Diehl LAN ISDN Modem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93846522511387&w=2'}, {'name': '665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/665'}, {'name': 'diva-lan-isdn-dos(3317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3317'}]
CVE State: PUBLISHED
Explain CVE-1999-1534
Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.
Affected Products: n/a
References: [{'name': '661', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/661'}, {'name': '19990923 Multiple vendor Knox Arkiea local root/remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93837184228248&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1535
Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.
Affected Products: n/a
References: [{'name': 'http-aspupload-bo(3291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3291'}, {'name': '592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/592'}, {'name': '19990720 Buffer overflow in AspUpload 1.4', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93256878011447&w=2'}, {'name': '19990818 AspUpload Buffer Overflow Fixed', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93501427820328&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1536
.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.
Affected Products: n/a
References: [{'name': '560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/560'}, {'name': '13557', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13557'}, {'name': '19990730 World writable root owned script in SalesBuilder (RedHat 6.0)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93347785827287&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1537
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.
Affected Products: n/a
References: [{'name': '19990707 SSL and IIS.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93138827329577&w=2'}, {'name': '521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/521'}, {'name': 'ssl-iis-dos(2352)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2352'}]
CVE State: PUBLISHED
Explain CVE-1999-1538
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
Affected Products: n/a
References: [{'name': '19990114 MS IIS 4.0 Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91638375309890&w=2'}, {'name': '19990114 MS IIS 4.0 Security Advisory', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91632724913080&w=2'}, {'name': '189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/189'}]
CVE State: PUBLISHED
Explain CVE-1999-1539
Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.
Affected Products: n/a
References: [{'name': "19991110 Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94225924803704&w=2'}, {'name': "19991110 Remote DoS Attack in QVT/Term 'Plus' 4.2d FTP Server Vulnerability", 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94223972910670&w=2'}, {'name': '796', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/796'}, {'name': 'qvtterm-login-dos(3491)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3491'}]
CVE State: PUBLISHED
Explain CVE-1999-1540
shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.
Affected Products: n/a
References: [{'name': "19991005 Cactus Software's shell-lock", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93916168802365&w=2'}, {'name': '19991004', 'tags': ['vendor-advisory', 'x_refsource_L0PHT'], 'url': 'http://www.atstake.com/research/advisories/1999/shell-lock.txt'}, {'name': 'cactus-shell-lock-retrieve-shell-code(3356)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3356'}]
CVE State: PUBLISHED
Explain CVE-1999-1541
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': "19991005 Cactus Software's shell-lock", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93916168802365&w=2'}, {'name': '19991004', 'tags': ['vendor-advisory', 'x_refsource_L0PHT'], 'url': 'http://www.atstake.com/research/advisories/1999/shell-lock.txt'}, {'name': 'cactus-shell-lock-root-privs(3358)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3358'}]
CVE State: PUBLISHED
Explain CVE-1999-1542
RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.
Affected Products: n/a
References: [{'name': '19991006 Fwd: [Re: RH6.0 local/remote command execution]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93923853105687&w=2'}, {'name': '19991004 RH6.0 local/remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93915641729415&w=2'}, {'name': 'linux-rh-rpmmail(3353)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3353'}]
CVE State: PUBLISHED
Explain CVE-1999-1543
MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
Affected Products: n/a
References: [{'name': '19990710 MacOS system encryption algorithm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93188174906513&w=2'}, {'name': '519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/519'}, {'name': '19990914 MacOS system encryption algorithm 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93736667813924&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1544
Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.
Affected Products: n/a
References: [{'name': '19990124 Advisory: IIS FTP Exploit/DoS Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91722115016183&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1545
Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users.
Affected Products: n/a
References: [{'name': '19990714', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93216103027827&w=2'}, {'name': '19990717 joe 2.8 makes world-readable DEADJOE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93226771401036&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1546
netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
Affected Products: n/a
References: [{'name': '19990129 TROJAN: netstation.navio-comm.rte 1.1.0.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12217'}, {'name': 'navionc-config-script(1724)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1724'}]
CVE State: PUBLISHED
Explain CVE-1999-1547
Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
Affected Products: n/a
References: [{'name': '19991125 Oracle Web Listener', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94390053530890&w=2'}, {'name': '19991125 Oracle Web Listener', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94359982417686&w=2'}, {'name': '841', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/841'}]
CVE State: PUBLISHED
Explain CVE-1999-1548
Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.
Affected Products: n/a
References: [{'name': '19991124 Cabletron SmartSwitch Router 8000 Firmware v2.x', 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_Cabletron.html'}, {'name': '821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/821'}]
CVE State: PUBLISHED
Explain CVE-1999-1549
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
Affected Products: n/a
References: [{'name': '804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/804'}, {'name': "19991116 lynx 2.8.x - 'special URLs' anti-spoofing protection is weak", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94286509804526&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1550
bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.
Affected Products: n/a
References: [{'name': 'bigip-bigconf-view-files(7771)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7771.php'}, {'name': '19991109', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94225879703021&w=2'}, {'name': '778', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/778'}, {'name': '19991108 BigIP - bigconf.cgi holes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94217006208374&w=2'}, {'name': '19991109 Re: BigIP - bigconf.cgi holes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94217879020184&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1551
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
Affected Products: n/a
References: [{'name': 'imail-websvc-overflow(1898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1898'}, {'name': '505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/505'}, {'name': '19990302 Multiple IMail Vulnerabilites', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92038879607336&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1552
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
Affected Products: n/a
References: [{'name': '19940720 xnews and XDM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://lists.insecure.org/lists/bugtraq/1994/Jul/0038.html'}, {'name': '358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/358'}]
CVE State: PUBLISHED
Explain CVE-1999-1553
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
Affected Products: n/a
References: [{'name': '311', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/311'}, {'name': 'xcmail-reply-overflow(1859)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1859'}, {'name': '19990301 [0z0n3] XCmail remotely exploitable vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12730'}]
CVE State: PUBLISHED
Explain CVE-1999-1554
/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.
Affected Products: n/a
References: [{'name': 'CA-1990-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1990-08.html'}, {'name': '13', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13'}, {'name': 'sgi-irix-reset(3164)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/3164.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1555
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll.
Affected Products: n/a
References: [{'name': '19980611 Cheyenne Inoculan vulnerability on NT', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9515'}, {'name': '106', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106'}, {'name': 'inoculan-bad-permissions(1536)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1536'}]
CVE State: PUBLISHED
Explain CVE-1999-1556
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
Affected Products: n/a
References: [{'name': '19980629 MS SQL Server 6.5 stores password in unprotected registry keys', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=90222453431645&w=2'}, {'name': '109', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109'}, {'name': 'mssql-sqlexecutivecmdexec-password(7354)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7354'}]
CVE State: PUBLISHED
Explain CVE-1999-1557
Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password.
Affected Products: n/a
References: [{'name': 'imail-imap-overflow(1895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1895'}, {'name': '19990301 Multiple IMail Vulnerabilites', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92038879607336&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1558
Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled.
Affected Products: n/a
References: [{'name': '161', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/161'}, {'name': 'openvms-loginout-unauth-access(7151)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7151.php'}, {'name': 'I-071A', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/i-071a.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1559
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.
Affected Products: n/a
References: [{'name': 'xylan-omniswitch-login(2064)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2064'}, {'name': '19990331 Xylan OmniSwitch "features"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92299263017061&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1560
Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root.
Affected Products: n/a
References: [{'name': '19990720 tiger vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93252050203589&w=2'}, {'name': 'tiger-script-execute(2369)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2369'}]
CVE State: PUBLISHED
Explain CVE-1999-1561
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
Affected Products: n/a
References: [{'name': '19990820 Winamp SHOUTcast server: Gain Administrator Password', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/24852'}]
CVE State: PUBLISHED
Explain CVE-1999-1562
gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.
Affected Products: n/a
References: [{'name': '3446', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3446'}, {'name': '19990905 gftp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/26915'}, {'name': 'DSA-084', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-084'}]
CVE State: PUBLISHED
Explain CVE-1999-1563
Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.
Affected Products: n/a
References: [{'name': '19991014 NEUROCOM: Nashuatec printer, 3 vulnerabilities found', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/30849'}, {'name': '19991116 NEUROCOM: Nashuatec D445/435 vulnerabilities updated', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/35075'}]
CVE State: PUBLISHED
Explain CVE-1999-1564
FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.
Affected Products: n/a
References: [{'name': '19990902 [ Kernel panic with FreeBSD-3.2-19990830-STABLE ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/26166'}]
CVE State: PUBLISHED
Explain CVE-1999-1565
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': '19990820 [SECURITY] New versions of man2html fixes postinst glitch', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/24784'}, {'name': '6291', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6291'}]
CVE State: PUBLISHED
Explain CVE-1999-1566
Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.
Affected Products: n/a
References: [{'name': '19990508 iParty Daemon Vulnerability w/ Exploit Code (worse than thought?)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13600'}]
CVE State: PUBLISHED
Explain CVE-1999-1567
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data.
Affected Products: n/a
References: [{'name': '19990616 Password and DOS Vulnerability with Testrack (bug tracking software)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9906&L=NTBUGTRAQ&P=R1680'}, {'name': 'testtrack-dos(1948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1948'}, {'name': '19990308 Password and DOS Vulnerability with Testrack (bug tracking software)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9903&L=NTBUGTRAQ&P=R1215'}]
CVE State: PUBLISHED
Explain CVE-1999-1568
Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.
Affected Products: n/a
References: [{'name': '19990223 Comments on NcFTPd "theoretical root compromise"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12699'}, {'name': 'ncftpd-port-bo(1833)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1833'}, {'name': '19990223 NcFTPd remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91981352617720&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1569
Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit.
Affected Products: n/a
References: [{'name': '19981101 Quake problem?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91012172524181&w=2'}, {'name': '3051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3051'}, {'name': '19980502 NetQuake Protocol problem resulting in smurf like effect.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101925989&w=2'}, {'name': '20010716 Quake client and server denial-of-service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/197268'}, {'name': 'quake-spoofed-client-dos(6871)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6871'}]
CVE State: PUBLISHED
Explain CVE-1999-1570
Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.
Affected Products: n/a
References: [{'name': '19990909 19 SCO 5.0.5+Skunware98 buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/27074'}, {'name': 'CSSA-2002-SCO.17', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17/CSSA-2002-SCO.17.txt'}, {'name': '4089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4089'}, {'name': 'openserver-sar-bo(8989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8989.php'}, {'name': '20020509 Sar -o exploitation process info.', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102098949103708&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1571
Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.
Affected Products: n/a
References: [{'name': '19991020 Re: recent SCO 5.0.x vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94053017801639&w=2'}, {'name': '19990909 19 SCO 5.0.5+Skunware98 buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/27074'}, {'name': '19991105 SCO Security Bulletin 99.17', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94183363719024&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://stage.caldera.com/pub/security/sse/sse037c/sse037c.ltr'}, {'name': 'openserver-sar-bo(8989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8989.php'}, {'name': '20020509 Sar -o exploitation process info.', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102098949103708&w=2'}, {'name': '643', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/643'}, {'tags': ['x_refsource_MISC'], 'url': 'http://online.securityfocus.com/advisories/1843'}, {'name': 'SB-99.17c', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://stage.caldera.com/pub/security/sse/security_bulletins/SB-99.17c'}, {'name': '19990917 Re: recent SCO 5.0.x vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93762097815861&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1572
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
Affected Products: n/a
References: [{'name': '20050204 [USN-75-1] cpio vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110763404701519&w=2'}, {'name': 'RHSA-2005:073', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-073.html'}, {'name': 'cpio-o-archive-insecure-permissions(19167)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19167'}, {'name': '17063', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17063'}, {'name': '17532', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17532'}, {'name': '2005-0003', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2005/0003/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2005-212.pdf'}, {'name': 'RHSA-2005:080', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-080.html'}, {'name': 'oval:org.mitre.oval:def:10888', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10888'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/1391'}, {'name': '14357', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14357'}, {'name': 'MDKSA-2005:032', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:032'}, {'name': 'DSA-664', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-664'}, {'name': 'RHSA-2005:806', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-806.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1573
Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
Affected Products: n/a
References: [{'name': 'ESB-98.186', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=490'}, {'name': 'J-022', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-022.shtml'}, {'name': 'HPSBUX9812-090', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/1471'}, {'name': 'hp-rcmnds-gain-privileges(7860)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7860'}, {'name': 'VU#13217', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/13217'}, {'name': 'oval:org.mitre.oval:def:5550', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5550'}]
CVE State: PUBLISHED
Explain CVE-1999-1574
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."
Affected Products: n/a
References: [{'name': 'VU#182777', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/182777'}, {'name': 'IX79909', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IX79909&apar=only'}, {'name': 'aix-nslookup-lex-bo(7867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7867'}]
CVE State: PUBLISHED
Explain CVE-1999-1575
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'VU#41408', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/41408'}, {'name': 'VU#24839', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/24839'}, {'name': 'MS99-037', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037'}, {'name': 'VU#26924', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/26924'}, {'name': 'VU#9162', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/9162'}, {'name': 'wang-kodak-activex-control(7097)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7097'}, {'name': '19990924 Several ActiveX Buffer Overruns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/28719'}, {'name': 'VU#23412', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/23412'}]
CVE State: PUBLISHED
Explain CVE-1999-1576
Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method.
Affected Products: n/a
References: [{'name': 'VU#25919', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/25919'}, {'name': '666', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/666'}, {'name': 'adobe-acrobat-pdf-bo(3318)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3318'}, {'name': '19990924 Several ActiveX Buffer Overruns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/28719'}]
CVE State: PUBLISHED
Explain CVE-1999-1577
Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.
Affected Products: n/a
References: [{'name': 'ie-hhopen-bo(3314)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3314'}, {'name': 'VU#29795', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/29795'}, {'name': '669', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/669'}, {'name': '19990924 Several ActiveX Buffer Overruns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/28719'}]
CVE State: PUBLISHED
Explain CVE-1999-1578
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'VU#37556', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/37556'}, {'name': '671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/671'}, {'name': '19990924 Several ActiveX Buffer Overruns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/28719'}, {'name': 'ie-registration-wiz-bo(3311)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3311'}]
CVE State: PUBLISHED
Explain CVE-1999-1579
The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.
Affected Products: n/a
References: [{'name': 'winnt-xenroll-dos(7107)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7107'}, {'name': 'Q242366', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B242366'}, {'name': 'VU#3062', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/3062'}, {'name': '6827', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6827'}]
CVE State: PUBLISHED
Explain CVE-1999-1580
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.
Affected Products: n/a
References: [{'name': 'VU#3278', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/3278'}, {'name': 'CA-1995-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul'}, {'name': '7829', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7829'}, {'name': 'AA-95.09', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'http://www.auscert.org.au/render.html?it=1853&cid=1978'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1581
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
Affected Products: n/a
References: [{'name': 'Q178381', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/kb/q178381/'}, {'name': 'winnt-snmp-oid-memory-leak(8231)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8231'}, {'name': 'VU#4923', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/4923'}]
CVE State: PUBLISHED
Explain CVE-1999-1582
By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality.
Affected Products: n/a
References: [{'name': 'cisco-pix-established-bypass(8052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8052'}, {'name': '19980715 PIX Firewall "established" Command', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/pixest-pub.shtml'}, {'name': 'VU#6733', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/6733'}]
CVE State: PUBLISHED
Explain CVE-1999-1583
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
Affected Products: n/a
References: [{'name': 'VU#872443', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/872443'}, {'name': 'aix-nslookup-hostname-bo(8031)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8031'}, {'name': 'IY02120', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY02120&apar=only'}]
CVE State: PUBLISHED
Explain CVE-1999-1584
Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.
Affected Products: n/a
References: [{'name': '00124', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1'}, {'name': 'CA-93.18', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-18.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1585
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
Affected Products: n/a
References: [{'name': '00124', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1'}]
CVE State: PUBLISHED
Explain CVE-1999-1586
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
Affected Products: n/a
References: [{'name': 'CA-95.12', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1995-12.html'}, {'name': 'G-02', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/g-02.shtml'}, {'name': 'sun-loadmodule(498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/498'}]
CVE State: PUBLISHED
Explain CVE-1999-1587
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
Affected Products: n/a
References: [{'name': 'ADV-2006-1123', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1123'}, {'name': '1015833', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015833'}, {'name': 'oval:org.mitre.oval:def:1470', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1470'}, {'name': '19426', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19426'}, {'name': 'solaris-ps-information-disclosure(25460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25460'}, {'name': '102215', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102215-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.sunmanagers.org/archives/1996/1383.html'}, {'name': '19662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19662'}, {'name': '24200', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24200'}]
CVE State: PUBLISHED
Explain CVE-1999-1588
Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/data/vulnerabilities/exploits/nlps_server.c'}, {'name': '2319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2319'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security-protocols.com/sploits/unsorted_exploits/nlps_server.c'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lsd-pl.net/files/get?SOLARIS/solx86_nlps_server'}]
CVE State: PUBLISHED
Explain CVE-1999-1589
Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
Affected Products: n/a
References: [{'name': 'CA-1992-10', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-10.html'}, {'name': '357', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/357'}]
CVE State: PUBLISHED
Explain CVE-1999-1590
Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021.
Affected Products: n/a
References: [{'name': '19971010 Security flaw in Count.cgi (wwwcount)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/1997/Oct/0058.html'}]
CVE State: PUBLISHED