Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-1069
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
Affected Products: n/a
References: [{'name': 'icat-carbo-server-vuln(1620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1620'}, {'name': '19971108 Security bug in iCat Suite version 3.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/7943'}, {'name': '2126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2126'}]
CVE State: PUBLISHED
Explain CVE-1999-1070
Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.
Affected Products: n/a
References: [{'name': '19980725 Annex DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10021'}]
CVE State: PUBLISHED
Explain CVE-1999-1071
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file.
Affected Products: n/a
References: [{'name': 'excite-world-write(1417)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1417'}, {'name': '19981130 Security bugs in Excite for Web Servers 1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91248445931140&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1072
Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
Affected Products: n/a
References: [{'name': '19981130 Security bugs in Excite for Web Servers 1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91248445931140&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1073
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack.
Affected Products: n/a
References: [{'name': '19981130 Security bugs in Excite for Web Servers 1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91248445931140&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1074
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
Affected Products: n/a
References: [{'name': '19980501 Warning! Webmin Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9138'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webmin.com/webmin/changes.html'}, {'name': '98', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98'}]
CVE State: PUBLISHED
Explain CVE-1999-1075
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.
Affected Products: n/a
References: [{'name': '19980318 AIX 4.1.5 DoS attack (aka "Port 1025 problem")', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=89025820612530&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1076
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.
Affected Products: n/a
References: [{'name': '19991026 Mac OS 9 Idle Lock Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94096348604173&w=2'}, {'name': '745', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/745'}]
CVE State: PUBLISHED
Explain CVE-1999-1077
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.
Affected Products: n/a
References: [{'name': '756', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/756'}, {'name': '19991101 Re: Mac OS 9 Idle Lock Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94149318124548&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1078
WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.
Affected Products: n/a
References: [{'name': '547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/547'}, {'name': '19990729 WS_FTP Pro 6.0 Weak Password Encryption Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P'}]
CVE State: PUBLISHED
Explain CVE-1999-1079
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
Affected Products: n/a
References: [{'name': 'IX80470', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36'}, {'name': '439', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/439'}, {'name': '19990825 AIX security summary', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93587956513233&w=2'}, {'name': '19990506 AIX Security Fixes Update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92601792420088&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1080
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
Affected Products: n/a
References: [{'name': '19990510 SunOS 5.7 rmmount, no nosuid.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92633694100270&w=2'}, {'name': '250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/250'}, {'name': 'solaris-rmmount-gain-root(8350)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8350'}, {'name': '19991011', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93971288323395&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1081
Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.w3.org/Security/Faq/wwwsf8.html#Q87'}, {'name': 'http-nov-files(2054)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2054'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.roxanne.org/faqs/www-secure/wwwsf4.html#Q35'}]
CVE State: PUBLISHED
Explain CVE-1999-1082
Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.
Affected Products: n/a
References: [{'name': '19991008 Jana webserver exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93941794201059&w=2'}, {'name': '699', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/699'}]
CVE State: PUBLISHED
Explain CVE-1999-1083
Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20000502 Security Bug in Jana HTTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95730430727064&w=2'}, {'name': '699', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/699'}]
CVE State: PUBLISHED
Explain CVE-1999-1084
The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.
Affected Products: n/a
References: [{'name': '19980622 Yet another "get yourself admin rights exploit":', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=90222453431604&w=2'}, {'name': '1044', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1044'}, {'name': 'K-029', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/k-029.shtml'}, {'name': 'MS00-008', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-008'}, {'name': 'Q103861', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q103/8/61.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1085
SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack."
Affected Products: n/a
References: [{'name': '19980703 UPDATE: SSH insertion attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525878&w=2'}, {'name': 'ssh-insert(1126)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/1126.php'}, {'name': 'VU#13877', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/13877'}, {'name': '19980612 CORE-SDI-04: SSH insertion attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221103125884&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1086
Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.
Affected Products: n/a
References: [{'name': '528', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/528'}, {'name': '19990715 NMRC Advisory: Netware 5 Client Hijacking', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93214475111651&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1087
Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.microsoft.com/Windows/Ie/security/dotless.asp'}, {'name': '7828', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7828'}, {'name': 'MS98-016', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016'}, {'name': 'Q168617', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q168/6/17.asp'}, {'name': 'ie-dotless(2209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2209'}]
CVE State: PUBLISHED
Explain CVE-1999-1088
Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'H-21', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-21.shtml'}, {'name': 'hp-chsh(2012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2012'}]
CVE State: PUBLISHED
Explain CVE-1999-1089
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
Affected Products: n/a
References: [{'name': '19961209 the HP Bug of the Week!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420285&w=2'}, {'name': 'H-21', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-21.shtml'}, {'name': 'H-16', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-16.shtml'}, {'name': 'hp-chfn(2008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2008'}]
CVE State: PUBLISHED
Explain CVE-1999-1090
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.
Affected Products: n/a
References: [{'name': 'ftp-ncsa(1844)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1844'}, {'name': 'CA-1991-15', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1991-15.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1091
UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.
Affected Products: n/a
References: [{'name': '19960903 [BUG] Vulnerability in TIN', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167419835&w=2'}, {'name': 'tin-tmpfile(431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/431'}, {'name': '19960903 Re: BoS:      [BUG] Vulnerability in TIN', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167419839&w=2'}, {'name': '19970329 symlink bug in tin/rtin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420726&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1092
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
Affected Products: n/a
References: [{'name': '19991117 default permissions for tin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94286179032648&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1093
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.
Affected Products: n/a
References: [{'name': 'Q191200', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q191/2/00.asp'}, {'name': 'MS98-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011'}, {'name': 'java-script-patch(1276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/1276.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1094
Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."
Affected Products: n/a
References: [{'name': 'iemk-bug(917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/917'}, {'name': '19980114 L0pht Advisory MSIE4.0(1)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88480839506155&w=2'}, {'name': 'Q176697', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q176/6/97.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1095
sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort.
Affected Products: n/a
References: [{'name': '19971006 KSR[T] Advisory #3: updatedb / crontabs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87619953510834&w=2'}, {'name': '19980302 overwrite any file with updatedb', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88886870129518&w=2'}, {'name': '19980303 updatedb stuff', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88890116304676&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1096
Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable.
Affected Products: n/a
References: [{'name': '19980516 kde exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101925954&w=2'}, {'name': '19980517 simple kde exploit fix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101925959&w=2'}, {'name': 'kde-klock-home-bo(1644)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1644'}]
CVE State: PUBLISHED
Explain CVE-1999-1097
Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
Affected Products: n/a
References: [{'name': '19990504 Microsoft Netmeeting Hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92586457816446&w=2'}, {'name': 'netmeeting-clipboard(2187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2187'}]
CVE State: PUBLISHED
Explain CVE-1999-1098
Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.
Affected Products: n/a
References: [{'name': 'bsd-telnet(516)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/516.php'}, {'name': '4881', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4881'}, {'name': 'F-12', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/f-12.shtml'}, {'name': 'CA-1995-03', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1995-03.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1099
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
Affected Products: n/a
References: [{'name': '19961122 L0pht Kerberos Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420184&w=2'}, {'name': 'kerberos-user-grab(65)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65'}]
CVE State: PUBLISHED
Explain CVE-1999-1100
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
Affected Products: n/a
References: [{'name': 'I-056', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/i-056.shtml'}, {'name': 'cisco-pix-parse-error(1579)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1579'}, {'name': '19980616 PIX Private Link Key Processing and Cryptography Issues', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/pixkey-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1101
Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges.
Affected Products: n/a
References: [{'name': '19990219 Yet Another password storing problem (was: Re: Possible Netscape Crypto Security Flaw)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12618'}]
CVE State: PUBLISHED
Explain CVE-1999-1102
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.phreak.org/archives/security/8lgm/8lgm.lpr'}, {'name': '19940307 8lgm Advisory Releases', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm'}, {'name': 'E-25a', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/e-25.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1103
dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.
Affected Products: n/a
References: [{'name': 'osf-dxconsole-gain-privileges(7138)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7138.php'}, {'name': 'VB-96.05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/vendor_bulletins/VB-96.05.dec'}, {'name': 'G-18', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/g-18.shtml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.tao.ca/fire/bos/0209.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1104
Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.
Affected Products: n/a
References: [{'name': '19980120 How to recover private keys for various Microsoft products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88536273725787&w=2'}, {'name': 'win95-nbsmbpwl(71)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/71.php'}, {'name': 'Q140557', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q140/5/57.asp'}, {'name': '19951205 Cracked: WINDOWS.PWL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167418931&w=2'}, {'name': '19980121 How to recover private keys for various Microsoft products', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=88540877601866&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1105
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.
Affected Products: n/a
References: [{'name': 'win95-netware-hidden-share(7231)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7231.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zdnet.com/eweek/reviews/1016/tr42bug.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.net-security.sk/bugs/NT/netware1.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1106
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument.
Affected Products: n/a
References: [{'name': '19980429 Security hole in kppp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9121'}, {'name': 'kde-kppp-account-bo(1643)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1643'}, {'name': '92', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92'}]
CVE State: PUBLISHED
Explain CVE-1999-1107
Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
Affected Products: n/a
References: [{'name': '19981118 Multiple KDE security vulnerabilities (root compromise)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91141486301691&w=2'}, {'name': 'kde-kppp-path-bo(1650)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1650'}]
CVE State: PUBLISHED
Explain CVE-1999-1109
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
Affected Products: n/a
References: [{'name': '19991222 Re: procmail / Sendmail - five bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94632241202626&w=2'}, {'name': '904', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/904'}, {'name': '20000113 Re: procmail / Sendmail - five bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94780566911948&w=2'}, {'name': 'sendmail-etrn-dos(7760)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7760.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1110
Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.
Affected Products: n/a
References: [{'name': '793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/793'}, {'name': '19991114 IE 5.0 and Windows Media Player ActiveX object allow checking the existence of local files and directories', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/34675'}]
CVE State: PUBLISHED
Explain CVE-1999-1111
Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack which directly modifies a pointer to a return address instead of using a buffer overflow to reach the return address entry itself.
Affected Products: n/a
References: [{'name': '786', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/786'}, {'name': 'immunix-stackguard-bo(3524)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3524'}, {'name': '19911109 ImmuniX OS Security Alert: StackGuard 1.21 Released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94218618329838&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1112
Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.
Affected Products: n/a
References: [{'name': '19991109 Irfan view 3.07 buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/34066'}, {'name': 'irfan-view32-bo(3549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3549'}, {'tags': ['x_refsource_MISC'], 'url': 'http://stud4.tuwien.ac.at/~e9227474/main2.html'}, {'name': '781', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/781'}]
CVE State: PUBLISHED
Explain CVE-1999-1113
Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106.
Affected Products: n/a
References: [{'name': '75', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75'}, {'name': '19980414 MacOS based buffer overflows...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=89258194718577&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1114
Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'H-15A', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-15a.shtml'}, {'name': 'AA-96.17', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.17.suid_exec.vul'}, {'name': '19980405-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980405-01-I'}, {'name': 'ksh-suid_exec(2100)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2100'}, {'name': '467', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/467'}]
CVE State: PUBLISHED
Explain CVE-1999-1115
Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh).
Affected Products: n/a
References: [{'name': 'apollo-suidexec-unauthorized-access(6721)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6721.php'}, {'name': 'CA-1990-04', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1990-04.html'}, {'name': '7', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7'}, {'name': 'A-30', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/a-30.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1116
Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '462', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/462'}, {'name': '1009', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1009'}, {'name': '19970503-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19970503-01-PX'}, {'name': 'sgi-runpriv(2108)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2108'}]
CVE State: PUBLISHED
Explain CVE-1999-1117
lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.
Affected Products: n/a
References: [{'name': 'H-13', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-13.shtml'}, {'name': '19961125 AIX lquerypv', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420196&w=2'}, {'name': 'ibm-lquerypv(1752)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1752'}, {'name': '455', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/455'}, {'name': '19961125 lquerypv fix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420195&w=2'}, {'name': '19961124', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&w=2&r=1&s=lquerypv&q=b'}]
CVE State: PUBLISHED
Explain CVE-1999-1118
ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
Affected Products: n/a
References: [{'name': 'sun-ndd(817)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/817'}, {'name': '433', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/433'}, {'name': '00165', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/165&type=0&nav=sec.sba'}]
CVE State: PUBLISHED
Explain CVE-1999-1119
FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '41', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/41'}, {'name': 'CA-1992-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-09.html'}, {'name': 'aix-anon-ftp(3154)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3154'}]
CVE State: PUBLISHED
Explain CVE-1999-1120
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '19970104 Irix: netprint story', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420403&w=2'}, {'name': '993', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/993'}, {'name': '395', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/395'}, {'name': 'sgi-netprint(2107)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2107'}, {'name': '19961203-02-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX'}, {'name': '19961203-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-1121
The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'CA-1992-06', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-06.html'}, {'name': '38', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38'}, {'name': '891', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/891'}, {'name': 'ibm-uucp(554)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/554'}]
CVE State: PUBLISHED
Explain CVE-1999-1122
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'CA-1989-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1989-02.html'}, {'name': '3', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3'}, {'name': 'CIAC-08', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/ciac-08.shtml'}, {'name': 'sun-restore-gain-privileges(6695)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6695'}]
CVE State: PUBLISHED
Explain CVE-1999-1123
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.
Affected Products: n/a
References: [{'name': '21', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21'}, {'name': 'CA-1991-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1991-07.html'}, {'name': 'sun-sourcetapes(582)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/582'}, {'name': '22', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22'}, {'name': '00107', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/107&type=0&nav=sec.sba'}]
CVE State: PUBLISHED
Explain CVE-1999-1124
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstorm.securify.com/mag/phrack/phrack54/P54-08'}]
CVE State: PUBLISHED
Explain CVE-1999-1125
Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.
Affected Products: n/a
References: [{'name': '19970919 Instresting practises of Oracle [Oracle Webserver]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602880019796&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1126
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".
Affected Products: n/a
References: [{'name': 'I-086', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/i-086.shtml'}, {'name': 'cisco-crm-file-vuln(1575)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1575'}, {'name': '19980813 CRM Temporary File Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/crmtmp-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1127
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.
Affected Products: n/a
References: [{'name': 'Q195733', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q195/7/33.asp'}, {'name': 'nt-spoolss(523)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/523.php'}, {'name': 'MS98-017', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017'}]
CVE State: PUBLISHED
Explain CVE-1999-1128
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://members.tripod.com/~unibyte/iebug3.htm'}]
CVE State: PUBLISHED
Explain CVE-1999-1129
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.
Affected Products: n/a
References: [{'name': 'cisco-catalyst-vlan-frames(3294)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3294'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htm'}, {'name': '19990901 VLAN Security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/26008'}, {'name': '615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/615'}]
CVE State: PUBLISHED
Explain CVE-1999-1130
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
Affected Products: n/a
References: [{'name': '19990730 Netscape Enterprise Server yeilds source of JHTML', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93346448121208&w=2'}, {'name': '19990730 Netscape Enterprise Server yeilds source of JHTML', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93337389603117&w=2'}, {'name': '559', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/559'}]
CVE State: PUBLISHED
Explain CVE-1999-1131
Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization.
Affected Products: n/a
References: [{'name': 'VB-97.12', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/vendor_bulletins/VB-97.12.opengroup'}, {'name': 'I-060', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/i-060.shtml'}, {'name': '19980601-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980601-01-PX'}, {'name': 'sgi-osf-dce-dos(1123)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1123'}]
CVE State: PUBLISHED
Explain CVE-1999-1132
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs.
Affected Products: n/a
References: [{'name': '19981005 NMRC Advisory - Lame NT Token Ring DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90763508011966&w=2'}, {'name': '19981002 NMRC Advisory - Lame NT Token Ring DoS', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=90760603030452&w=2'}, {'name': 'token-ring-dos(1399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/1399.php'}, {'name': 'Q179157', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q179/1/57.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1133
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users.
Affected Products: n/a
References: [{'name': 'hp-vue-dt(499)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/499'}, {'name': 'HPSBUX9709-069', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=87602880019776&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1134
Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066.
Affected Products: n/a
References: [{'name': 'HPSBUX9404-008', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://packetstorm.securify.com/advisories/hpalert/008'}, {'name': 'hp-vue(2284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/2284.php'}, {'name': 'E-23', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/e-23.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1135
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
Affected Products: n/a
References: [{'name': 'hp-vue(2284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2284'}, {'name': 'HPSBUX9504-027', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://packetstorm.securify.com/advisories/hpalert/027'}]
CVE State: PUBLISHED
Explain CVE-1999-1136
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
Affected Products: n/a
References: [{'name': 'mpeix-predictive(1413)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1413'}, {'name': 'HPSBUX9807-081', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.codetalker.com/advisories/vendor/hp/hpsbux9807-081.html'}, {'name': '19980729 HP-UX Predictive & Netscape SSL Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526177&w=2'}, {'name': 'HPSBMP9807-005', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://cert.ip-plus.net/bulletin-archive/msg00040.html'}, {'name': 'I-081', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/i-081.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1137
The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone.
Affected Products: n/a
References: [{'name': '00122', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba'}, {'name': 'E-01', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/e-01.shtml'}, {'name': 'sun-audio(549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/549'}, {'name': '6436', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6436'}]
CVE State: PUBLISHED
Explain CVE-1999-1138
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.
Affected Products: n/a
References: [{'name': 'sco-homedir(546)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/546'}, {'name': 'CA-1993-13', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-13.html'}]
CVE State: PUBLISHED