Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-1380
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://mlarchive.ima.com/win95/1997/May/0342.html'}, {'name': 'nu-tuneocx-activex-control(7188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7188.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.net-security.sk/bugs/NT/nu20.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1381
Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '19981008 buffer overflow in dbadmin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90786656409618&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1382
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
Affected Products: n/a
References: [{'name': '19980108 NetWare NFS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88427711321769&w=2'}, {'name': 'netware-nfs-file-ownership(7246)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7246.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551'}, {'name': '19980812 Re: Netware NFS (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90295697702474&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1383
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
Affected Products: n/a
References: [{'name': '19960919 Vulnerability in expansion of PS1 in bash & tcsh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1996_3/0503.html'}, {'name': '19960913 tee see shell problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167419868&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1384
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
Affected Products: n/a
References: [{'name': '19961030 (Another) vulnerability in new SGIs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420095&w=2'}, {'name': 'AA-96.08', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.08.SGI.systour.vul'}, {'name': 'irix-systour(7456)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7456.php'}, {'name': '470', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/470'}, {'name': '19961101-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19961101-01-I'}]
CVE State: PUBLISHED
Explain CVE-1999-1385
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.
Affected Products: n/a
References: [{'name': '6085', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6085'}, {'name': 'FreeBSD-SA-96:20', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:20.stack-overflow.asc'}, {'name': 'ppp-bo(7465)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7465.php'}, {'name': '19961219 Exploit for ppp bug (FreeBSD 2.1.0).', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420332&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1386
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh50-errata-general.html#perl'}, {'name': "19980308 another /tmp race: `perl -e' opens temp file not safely", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88932165406213&w=2'}, {'name': 'perl-e-tmp-symlink(7243)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7243.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1387
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25.
Affected Products: n/a
References: [{'name': '19970402 Fatal bug in NT 4.0 server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420731&w=2'}, {'name': '19970403 Fatal bug in NT 4.0 server (more comments)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420732&w=2'}, {'name': '19970407 DUMP of NT system crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420741&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1388
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
Affected Products: n/a
References: [{'name': '19941218 Sun Patch Id #102060-01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1994_4/0755.html'}, {'name': '19940513 [8lgm]-Advisory-7.UNIX.passwd.11-May-1994', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www2.dataguard.no/bugtraq/1994_2/0197.html'}, {'name': '19940514 [8lgm]-Advisory-7.UNIX.passwd.11-May-1994.NEWFIX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www2.dataguard.no/bugtraq/1994_2/0207.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1389
US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt.
Affected Products: n/a
References: [{'name': '99', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/99'}, {'name': '19980511 3Com/USR Total Control Chassis dialup port access filters', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101925916&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1390
suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.
Affected Products: n/a
References: [{'name': '94', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/94'}, {'name': '19980428 [Debian 2.0] /usr/bin/suidexec gives root access', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://darwin.bio.uci.edu/~mcoogan/bugtraq/msg00890.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1391
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions.
Affected Products: n/a
References: [{'name': '10', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10'}, {'name': 'CA-1990-06', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1990-06.html'}, {'name': 'nextstep-npd-root-access(7143)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7143.php'}, {'name': 'B-01', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/b-01.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1392
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'CA-1990-06', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1990-06.html'}, {'name': '9', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9'}, {'name': 'nextstep-restore09-root-access(7144)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7144.php'}, {'name': 'B-01', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/b-01.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1393
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html'}, {'name': '532', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/532'}]
CVE State: PUBLISHED
Explain CVE-1999-1394
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.
Affected Products: n/a
References: [{'name': '19990702 BSD-fileflags', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93094058620450&w=2'}, {'name': '510', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/510'}]
CVE State: PUBLISHED
Explain CVE-1999-1395
Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '59332', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/59332'}, {'name': 'CA-92.16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-92.16.VMS.Monitor.vulnerability'}, {'name': 'vms-monitor-gain-privileges(7136)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7136.php'}, {'name': 'CA-1992-18', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-18.html'}, {'name': '51', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51'}]
CVE State: PUBLISHED
Explain CVE-1999-1396
Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash).
Affected Products: n/a
References: [{'name': '49', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/49'}, {'name': 'sun-integer-multiplication-access(7150)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7150.php'}, {'name': 'CA-1992-15', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-15.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1397
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.
Affected Products: n/a
References: [{'name': 'iis-indexserver-reveal-path(7559)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7559.php'}, {'name': '19990323 Index Server 2.0 and the Registry', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92242671024118&w=2'}, {'name': '19990323 Index Server 2.0 and the Registry', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92223293409756&w=2'}, {'name': '476', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/476'}]
CVE State: PUBLISHED
Explain CVE-1999-1398
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.
Affected Products: n/a
References: [{'name': '19970507 Irix: misc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420921&w=2'}, {'name': '472', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/472'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.insecure.org/sploits/irix.xfsdump.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1399
spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed.
Affected Products: n/a
References: [{'name': '471', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/471'}, {'name': '19970820 SpaceWare 7.3 v1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602746719552&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1400
The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked.
Affected Products: n/a
References: [{'name': '466', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/466'}, {'name': '19990603 Huge Exploit in NT 4.0 SP5 Screensaver with Password Protection Enabled', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0007.html'}, {'name': '19990604 Official response from The Economist re: 1999 Screen Saver', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92851653600852&w=2'}, {'name': '19990603 Re: Huge Exploit in NT 4.0 SP5 Screensaver with Password Protecti on Enabled.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0009.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1401
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
Affected Products: n/a
References: [{'name': 'irix-searchbook-permissions(7575)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7575.php'}, {'name': '463', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/463'}, {'name': '8563', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8563'}, {'name': '19961201-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19961201-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-1402
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
Affected Products: n/a
References: [{'name': 'sun-domain-socket-permissions(7172)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7172.php'}, {'name': '456', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/456'}, {'name': '19971003 Solaris 2.6 and sockets', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602248718482&w=2'}, {'name': '19970517 UNIX domain socket (Solarisx86 2.5)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167418317&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1403
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
Affected Products: n/a
References: [{'name': '19981002 Several potential security problems in IBM/Tivoli OPC Tracker Age nt', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10771'}, {'name': '382', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/382'}]
CVE State: PUBLISHED
Explain CVE-1999-1404
IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtracker client port (5011), which prevents the connection from being closed properly.
Affected Products: n/a
References: [{'name': '19981002 Several potential security problems in IBM/Tivoli OPC Tracker Age nt', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10771'}, {'name': '382', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/382'}]
CVE State: PUBLISHED
Explain CVE-1999-1405
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.
Affected Products: n/a
References: [{'name': '19990220 Re: snap utility for AIX.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91954824614013&w=2'}, {'name': '375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/375'}, {'name': '19990217 snap utility for AIX.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91936783009385&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1406
dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.
Affected Products: n/a
References: [{'name': '372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/372'}, {'name': "19980730 FD's 0..2 and suid/sgid procs (Was: Crash a redhat 5.1 linux box)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526192&w=2'}, {'name': '19980729 Crash a redhat 5.1 linux box', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526185&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1407
ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file.
Affected Products: n/a
References: [{'name': 'initscripts-ifdhcpdone-dhcplog-symlink(7294)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7294.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh50-errata-general.html#initscripts'}, {'name': '19980309 *sigh* another RH5 /tmp problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88950856416985&w=2'}, {'name': '368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/368'}]
CVE State: PUBLISHED
Explain CVE-1999-1408
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost.
Affected Products: n/a
References: [{'name': '352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/352'}, {'name': '19970305 Bug in connect() for aix 4.1.4 ?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420641&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1409
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
Affected Products: n/a
References: [{'name': '331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/331'}, {'name': "19980703 more about 'at'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.shmoo.com/mail/bugtraq/jul98/msg00064.html'}, {'name': 'NetBSD-SA1998-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc'}, {'name': 'at-f-read-files(7577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7577.php'}, {'name': '19980805 irix-6.2 "at -f" vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90233906612929&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1410
addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX'}, {'name': '19970509 Re: Irix: misc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420927&w=2'}, {'name': '330', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/330'}]
CVE State: PUBLISHED
Explain CVE-1999-1411
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
Affected Products: n/a
References: [{'name': 'fsp-anon-ftp-access(7574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7574.php'}, {'name': '19981128 Debian: Security flaw in FSP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91228908407679&w=2'}, {'name': '19981130 Debian: Security flaw in FSP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91244712808780&w=2'}, {'name': '316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/316'}, {'name': '19990217 Debian GNU/Linux 2.0r5 released (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91936850009861&w=2'}, {'name': '19981126 new version of fsp fixes security flaw', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://lists.debian.org/debian-security-announce/debian-security-announce-1998/msg00033.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1412
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
Affected Products: n/a
References: [{'name': '19990603 MacOS X system panic with CGI', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/14215'}, {'name': '306', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/306'}]
CVE State: PUBLISHED
Explain CVE-1999-1413
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
Affected Products: n/a
References: [{'name': '19960803 Exploiting Zolaris 2.4 ??  :)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167419549&w=2'}, {'name': '296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/296'}]
CVE State: PUBLISHED
Explain CVE-1999-1414
IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges.
Affected Products: n/a
References: [{'name': '19990525 Security Leak with IBM Netfinity Remote Control Software', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92765856706547&w=2'}, {'name': '19990609 IBM\'s response to "Security Leak with IBM Netfinity Remote Control Software', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92902484317769&w=2'}, {'name': '284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/284'}]
CVE State: PUBLISHED
Explain CVE-1999-1415
Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'CA-91.13', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability'}, {'name': '27', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27'}]
CVE State: PUBLISHED
Explain CVE-1999-1416
AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length.
Affected Products: n/a
References: [{'name': '19980823 Solaris ab2 web server is junk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10383'}, {'name': '253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/253'}]
CVE State: PUBLISHED
Explain CVE-1999-1417
Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
Affected Products: n/a
References: [{'name': '19980823 Solaris ab2 web server is junk', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10383'}, {'name': '253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/253'}]
CVE State: PUBLISHED
Explain CVE-1999-1418
ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist ("404 not found").
Affected Products: n/a
References: [{'name': '19990501 Update: security hole in the ICQ-Webserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13508'}, {'name': '246', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/246'}]
CVE State: PUBLISHED
Explain CVE-1999-1419
Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '00148', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/148'}, {'name': '219', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/219'}, {'name': 'sun-nisplus-bo(7535)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7535.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1420
NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's configuration.
Affected Products: n/a
References: [{'name': '19980722 N-Base Vulnerability Advisory Followup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526065&w=2'}, {'name': '212', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/212'}, {'name': '19980720 N-Base Vulnerability Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526016&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1421
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names.
Affected Products: n/a
References: [{'name': '19980722 N-Base Vulnerability Advisory Followup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526065&w=2'}, {'name': '212', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/212'}, {'name': '19980720 N-Base Vulnerability Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526016&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1422
The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.
Affected Products: n/a
References: [{'name': '19990102 PATH variable in zip-slackware 2.0.35', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91540043023167&w=2'}, {'name': '211', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/211'}]
CVE State: PUBLISHED
Explain CVE-1999-1423
ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.
Affected Products: n/a
References: [{'name': '19970626 Solaris Ping bug (DoS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602558319160&w=2'}, {'name': '19970627 SUMMARY: Solaris Ping bug (DoS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602558319171&w=2'}, {'name': '00146', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/146'}, {'name': '209', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/209'}, {'name': 'ping-multicast-loopback-dos(7492)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7492.php'}, {'name': '19971005 Solaris Ping Bug and other [bc] oddities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602558319180&w=2'}, {'name': '19970627 Solaris Ping bug(inetsvc)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602558319181&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1424
Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.
Affected Products: n/a
References: [{'name': '208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/208'}, {'name': '00145', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145'}]
CVE State: PUBLISHED
Explain CVE-1999-1425
Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
Affected Products: n/a
References: [{'name': '208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/208'}, {'name': '00145', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145'}]
CVE State: PUBLISHED
Explain CVE-1999-1426
Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.
Affected Products: n/a
References: [{'name': '208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/208'}, {'name': '00145', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145'}]
CVE State: PUBLISHED
Explain CVE-1999-1427
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/208'}, {'name': '00145', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145'}]
CVE State: PUBLISHED
Explain CVE-1999-1428
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.
Affected Products: n/a
References: [{'name': '208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/208'}, {'name': '00145', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145'}]
CVE State: PUBLISHED
Explain CVE-1999-1429
DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver.
Affected Products: n/a
References: [{'name': '19980105 Security flaw in either DIT TransferPro or Solaris', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88419633507543&w=2'}, {'name': '204', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/204'}]
CVE State: PUBLISHED
Explain CVE-1999-1430
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access.
Affected Products: n/a
References: [{'name': '185', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/185'}, {'name': '19990102 security problem with Royal daVinci', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91540043723185&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1431
ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe.
Affected Products: n/a
References: [{'name': '181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/181'}, {'name': '19990107 WinNT, ZAK and Office 97', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91576100022688&w=2'}, {'name': '19990109 WinNT, ZAK and Office 97', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91606260910008&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1432
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.
Affected Products: n/a
References: [{'name': '19980716 Security risk with powermanagemnet on Solaris 2.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525997&w=2'}, {'name': '160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/160'}]
CVE State: PUBLISHED
Explain CVE-1999-1433
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
Affected Products: n/a
References: [{'name': '19980715 JetAdmin software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525988&w=2'}, {'name': '19980722 Re: JetAdmin software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526067&w=2'}, {'name': '157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/157'}]
CVE State: PUBLISHED
Explain CVE-1999-1434
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
Affected Products: n/a
References: [{'name': '155', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/155'}, {'name': '19980713 Slackware Shadow Insecurity', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525951&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1435
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
Affected Products: n/a
References: [{'name': '154', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/154'}, {'name': '19980710 socks5 1.0r5 buffer overflow..', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525933&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1436
Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter.
Affected Products: n/a
References: [{'name': '19980708 WWW Authorization Gateway', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525905&w=2'}, {'name': '152', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/152'}]
CVE State: PUBLISHED
Explain CVE-1999-1437
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
Affected Products: n/a
References: [{'name': '19980707 ePerl: bad handling of ISINDEX queries', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525890&w=2'}, {'name': '151', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/151'}, {'name': '19980710 ePerl Security Update Available', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525927&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1438
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments.
Affected Products: n/a
References: [{'name': '15', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15'}, {'name': '00105', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/105'}, {'name': 'CA-1991-01', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-91.01a.SunOS.mail.vulnerability'}]
CVE State: PUBLISHED
Explain CVE-1999-1439
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
Affected Products: n/a
References: [{'name': '19980115 GCC 2.7.? /tmp files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88492937727193&w=2'}, {'name': '19980108 GCC Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88524071002939&w=2'}, {'name': '19980102 Symlink bug with GCC 2.7.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88419592307388&w=2'}, {'name': '146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/146'}]
CVE State: PUBLISHED
Explain CVE-1999-1440
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.
Affected Products: n/a
References: [{'name': '19990101 Win32 ICQ 98a flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91522424302962&w=2'}, {'name': '132', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/132'}]
CVE State: PUBLISHED
Explain CVE-1999-1441
Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it.
Affected Products: n/a
References: [{'name': '19980630 Serious Linux 2.0.34 security problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221103126047&w=2'}, {'name': '111', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/111'}]
CVE State: PUBLISHED
Explain CVE-1999-1442
Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.cs.helsinki.fi/linux/linux-kernel/Year-1998/1998-25/0816.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://uwsg.iu.edu/hypermail/linux/kernel/9805.3/0855.html'}, {'name': '105', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/105'}]
CVE State: PUBLISHED
Explain CVE-1999-1443
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CTRL><ALT><DEL> and kill the process using the task manager, (2) booting the system from a separate disk, or (3) interrupting certain processes that execute while the system is booting.
Affected Products: n/a
References: [{'name': '19980609 Full Armor', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221103125869&w=2'}, {'name': '103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/103'}, {'name': '19980602 Full Armor.... Fool Proof etc... bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221103125889&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1444
genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://catless.ncl.ac.uk/Risks/20.41.html#subj4'}]
CVE State: PUBLISHED
Explain CVE-1999-1445
Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords.
Affected Products: n/a
References: [{'name': '19980202 imapd/ipop3d coredump in slackware 3.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88637951600184&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1446
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays.
Affected Products: n/a
References: [{'name': '19970805 Re: Strange behavior regarding directory', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=87602837719654&w=2'}, {'name': '19970806 Re: Strange behavior regarding directory', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=87602837719655&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1447
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
Affected Products: n/a
References: [{'name': '19980730 Re: Object tag crashes Internet Explorer 4.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526188&w=2'}, {'name': '19980728 Object tag crashes Internet Explorer 4.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526169&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1448
Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are 100 years after the current date, which causes a segmentation fault.
Affected Products: n/a
References: [{'name': '19980729 Eudora exploit (was Microsoft Security Bulletin (MS98-008))', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526168&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1449
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.insecure.org/sploits/sunos.dev.tcx0.write.wierd.shit.to.device.bug.html'}, {'name': "19970519 /dev/tcx0 crashes SunOS 4.1.4 on Sparc 20's", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://oamk.fi/~jukkao/bugtraq/before-971202/0498.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1450
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
Affected Products: n/a
References: [{'name': 'SSE020', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.COM/SSE/sse020.ltr'}, {'name': 'SB-99.06b', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.06b'}, {'name': 'SB-99.03b', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.03b'}]
CVE State: PUBLISHED
Explain CVE-1999-1451
The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'Q231368', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q231/3/68.asp'}, {'name': 'iis-samples-winmsdp(3271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3271'}, {'name': 'MS99-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}]
CVE State: PUBLISHED