Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-1139
Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file.
Affected Products: n/a
References: [{'name': 'HPSBUX9801-074', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.codetalker.com/advisories/vendor/hp/hpsbux9801-074.html'}, {'name': 'hp-cue(2007)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/2007.php'}, {'name': '19980121 HP-UX CUE, CUD and LAND vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-199801/0122.html'}, {'name': '19970901 HP UX Bug :)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602880019745&w=2'}, {'name': 'I-027B', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/i-027b.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1140
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.
Affected Products: n/a
References: [{'name': 'VB-97.16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/vendor_bulletins/VB-97.16.CrackLib'}, {'name': '19971214 buffer overflows in cracklib?!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88209041500913&w=2'}, {'name': 'cracklib-bo(1539)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1539'}]
CVE State: PUBLISHED
Explain CVE-1999-1141
Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters.
Affected Products: n/a
References: [{'name': 'ascom-timeplex-debug(1824)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1824'}, {'name': '19970515 MicroSolved finds hole in Ascom Timeplex Router Security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420981&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1142
SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user.
Affected Products: n/a
References: [{'name': 'CA-1992-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-11.html'}, {'name': 'sun-env(3152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3152'}, {'name': '00116', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/116'}]
CVE State: PUBLISHED
Explain CVE-1999-1143
Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs.
Affected Products: n/a
References: [{'name': 'sgi-rld(2109)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2109'}, {'name': '19970504-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19970504-01-PX'}, {'name': 'H-065', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-65.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1144
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX9701-051', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-051.html'}, {'name': 'hp-mpower(2056)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2056'}]
CVE State: PUBLISHED
Explain CVE-1999-1145
Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.
Affected Products: n/a
References: [{'name': 'H-21', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-21.shtml'}, {'name': 'HPSBUX9701-044', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/templates/advisory.html?id=1514'}, {'name': 'hp-glanceplus(2059)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2059'}]
CVE State: PUBLISHED
Explain CVE-1999-1146
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX9405-011', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/1555'}, {'name': 'hp-glanceplus-gpm(2060)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2060'}]
CVE State: PUBLISHED
Explain CVE-1999-1147
Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe.
Affected Products: n/a
References: [{'name': 'pcm-dos-execute(1430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1430'}, {'name': '19981204 [SAFER-981204.DOS.1.3] Buffer Overflow in Platinum PCM 7.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91273739726314&w=2'}, {'name': '3164', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3164'}]
CVE State: PUBLISHED
Explain CVE-1999-1148
FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time.
Affected Products: n/a
References: [{'name': 'Q189262', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q189/2/62.ASP'}, {'name': 'MS98-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006'}, {'name': 'iis-passive-ftp(1215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1215'}]
CVE State: PUBLISHED
Explain CVE-1999-1149
Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port.
Affected Products: n/a
References: [{'name': '19980716 S.A.F.E.R. Security Bulletin 980708.DOS.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525993&w=2'}, {'name': 'csm-proxy-dos(1422)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1422'}]
CVE State: PUBLISHED
Explain CVE-1999-1150
Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions.
Affected Products: n/a
References: [{'name': '19980630 Livingston Portmaster - ISN generation is loosy!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9723'}, {'name': 'portmaster-fixed-isn(1882)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1882'}]
CVE State: PUBLISHED
Explain CVE-1999-1151
Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password.
Affected Products: n/a
References: [{'name': '19980603 Compaq/Microcom 6000 DoS + more', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90296493106214&w=2'}, {'name': 'microcom-dos(2089)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2089'}]
CVE State: PUBLISHED
Explain CVE-1999-1152
Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack.
Affected Products: n/a
References: [{'name': '19980603 Compaq/Microcom 6000 DoS + more', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90296493106214&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1153
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
Affected Products: n/a
References: [{'name': '19981109 Several new CGI vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11175'}, {'name': 'cgi-perl-mail-programs(1400)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1400'}]
CVE State: PUBLISHED
Explain CVE-1999-1154
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://lakeweb.com/scripts/'}, {'name': '19981109 Several new CGI vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11175'}, {'name': 'cgi-perl-mail-programs(1400)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1400'}]
CVE State: PUBLISHED
Explain CVE-1999-1155
LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://lakeweb.com/scripts/'}, {'name': '19981109 Several new CGI vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11175'}, {'name': 'cgi-perl-mail-programs(1400)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1400'}]
CVE State: PUBLISHED
Explain CVE-1999-1156
BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.
Affected Products: n/a
References: [{'name': 'bisonware-port-crash(2254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2254'}]
CVE State: PUBLISHED
Explain CVE-1999-1157
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.
Affected Products: n/a
References: [{'name': 'tcpipsys-icmp-dos(3894)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3894'}, {'name': 'Q192774', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q192/7/74.ASP'}]
CVE State: PUBLISHED
Explain CVE-1999-1158
Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.
Affected Products: n/a
References: [{'name': 'AA-97.09', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul'}, {'name': '00139', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/139&type=0&nav=sec.sba'}]
CVE State: PUBLISHED
Explain CVE-1999-1159
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
Affected Products: n/a
References: [{'name': 'ssh-privileged-port-forward(1471)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1471'}, {'name': '19981229 ssh2 security problem (and patch) (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91495920911490&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1160
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX9702-055', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420581&w=2'}, {'name': 'H-33', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-33.shtml'}, {'name': 'hp-ftpd-kftpd(7437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7437.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1161
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
Affected Products: n/a
References: [{'name': 'HPSBUX9704-057', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.codetalker.com/advisories/vendor/hp/hpsbux9704-057.html'}, {'name': 'hp-ppl(7438)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7438.php'}, {'name': '19961104 ppl bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420103&w=2'}, {'name': 'H-32', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-32.shtml'}, {'name': '19961103 Re: Untitled', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420102&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1162
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
Affected Products: n/a
References: [{'name': 'sco-passwd-deny(542)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/542.php'}, {'name': 'CA-1993-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-08.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1163
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation.
Affected Products: n/a
References: [{'name': 'hp-ssp(7439)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7439.php'}, {'name': 'HPSBUX9911-105', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=94347039929958&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1164
Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.
Affected Products: n/a
References: [{'name': '19990625 Outlook denial of service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93041631215856&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1165
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.
Affected Products: n/a
References: [{'name': '535', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/535'}, {'name': '19990721 old gnu finger bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93268249021561&w=2'}, {'name': '19950317 GNU finger 1.37 executes ~/.fingerrc with gid root', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/2478'}]
CVE State: PUBLISHED
Explain CVE-1999-1166
Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.
Affected Products: n/a
References: [{'name': '523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/523'}, {'name': '19990711 Linux 2.0.37 segment limit bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/18156'}]
CVE State: PUBLISHED
Explain CVE-1999-1167
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.
Affected Products: n/a
References: [{'name': 'thirdvoice-cross-site-scripting(7252)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7252.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wired.com/news/technology/0%2C1282%2C20636%2C00.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wired.com/news/technology/0%2C1282%2C20677%2C00.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1168
install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': '19990220 ISS install.iss security hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12640'}]
CVE State: PUBLISHED
Explain CVE-1999-1169
nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
Affected Products: n/a
References: [{'name': '19990204 NOBO denial of service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12284'}]
CVE State: PUBLISHED
Explain CVE-1999-1170
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
Affected Products: n/a
References: [{'name': '19990204 WS FTP Server Remote DoS Attack', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91816507920544&w=2'}, {'name': '218', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/218'}]
CVE State: PUBLISHED
Explain CVE-1999-1171
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
Affected Products: n/a
References: [{'name': '19990204 WS FTP Server Remote DoS Attack', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91816507920544&w=2'}, {'name': '218', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/218'}]
CVE State: PUBLISHED
Explain CVE-1999-1172
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.
Affected Products: n/a
References: [{'name': '19990114 security hole in Maximizer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11947'}]
CVE State: PUBLISHED
Explain CVE-1999-1173
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack.
Affected Products: n/a
References: [{'name': '19981218 wordperfect 8 for linux security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91404045014047&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1174
ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to access the target disk.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.counterpane.com/crypto-gram-9812.html#doghouse'}]
CVE State: PUBLISHED
Explain CVE-1999-1175
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.
Affected Products: n/a
References: [{'name': 'I-054', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/i-054.shtml'}, {'name': '19980513 Cisco Web Cache Control Protocol Router Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/wccpauth-pub.shtml'}, {'name': 'cisco-wccp-vuln(1577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1577'}]
CVE State: PUBLISHED
Explain CVE-1999-1176
Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.
Affected Products: n/a
References: [{'name': '19980911 Re: security problems with jidentd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90554230925545&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://spisa.act.uji.es/spi/progs/codigo/www.hack.co.za/exploits/daemon/ident/cidentd.c'}, {'name': '19980110 Cidentd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88466930416716&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1177
Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.
Affected Products: n/a
References: [{'name': 'http-cgi-nphpublish(2055)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2055'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-genome.wi.mit.edu/WWW/tools/CGI_scripts/server_publish/nph-publish'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.w3.org/Security/Faq/wwwsf4.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1178
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
Affected Products: n/a
References: [{'name': 'sambar-dump-env(3223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3223'}, {'name': '19980610 Sambar Server Beta BUG..', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9505'}]
CVE State: PUBLISHED
Explain CVE-1999-1179
Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '19980515 May SysAdmin man.sh security hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9330'}]
CVE State: PUBLISHED
Explain CVE-1999-1180
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://oliver.efri.hr/~crv/security/bugs/NT/buffer.html'}, {'name': '19990216 Website Pro v2.0 (NT) Configuration Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.tryc.on.ca/archives/bugtraq/1999_1/0612.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1181
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'irix-register(7441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7441.php'}, {'name': 'J-003', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-003.shtml'}, {'name': '19980901-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980901-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-1182
Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error.
Affected Products: n/a
References: [{'name': '19980204 An old ld-linux.so hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88661732807795&w=2'}, {'name': '19970722 ld.so vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602661419351&w=2'}, {'name': '19970717 KSR[T] Advisory #2: ld.so', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602661419318&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1183
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
Affected Products: n/a
References: [{'name': '8556', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8556'}, {'name': '19980403-02-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980403-02-PX'}, {'name': '19980403-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980403-01-PX'}, {'name': 'sgi-mailcap(809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/809.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1184
Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.
Affected Products: n/a
References: [{'name': '19970513', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420967&w=2'}, {'name': '19970514 Re: ELM overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420970&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1185
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
Affected Products: n/a
References: [{'name': 'sco-openserver-mscreen-bo(1379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1379'}, {'name': '19980926 Root exploit for SCO OpenServer.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90686250717719&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1186
rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter.
Affected Products: n/a
References: [{'name': '19960102 rxvt security hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167418966&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1187
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
Affected Products: n/a
References: [{'name': '19960826 [BUG] Vulnerability in PINE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167419803&w=2'}, {'name': 'pine-tmpfile(416)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/416'}]
CVE State: PUBLISHED
Explain CVE-1999-1188
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.
Affected Products: n/a
References: [{'name': '19981227 mysql: mysqld creates world readable logs..', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91479159617803&w=2'}, {'name': 'mysql-readable-log-files(1568)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1568'}]
CVE State: PUBLISHED
Explain CVE-1999-1189
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.
Affected Products: n/a
References: [{'name': '822', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/822'}, {'name': 'netscape-long-argument-bo(7884)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7884'}, {'name': '19991127 Netscape Communicator 4.7 - Navigator Overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/36608'}, {'name': '19991124 Netscape Communicator 4.7 - Navigator Overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/36306'}]
CVE State: PUBLISHED
Explain CVE-1999-1190
Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/E-MailClub__FROM__remote_buffer_overflow.html'}, {'name': '801', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/801'}]
CVE State: PUBLISHED
Explain CVE-1999-1191
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Affected Products: n/a
References: [{'name': 'solaris-chkey-bo(7442)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7442.php'}, {'name': '00144', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/144'}, {'name': '207', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/207'}, {'name': "19970519 Re: Finally, most of an exploit for Solaris 2.5.1's ps.", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167418335&w=2'}, {'name': 'AA-97.18', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.18.solaris.chkey.buffer.overflow.vul'}]
CVE State: PUBLISHED
Explain CVE-1999-1192
Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Affected Products: n/a
References: [{'name': '206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/206'}, {'name': 'solaris-eeprom-bo(7444)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7444.php'}, {'name': '00143', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/143'}]
CVE State: PUBLISHED
Explain CVE-1999-1193
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
Affected Products: n/a
References: [{'name': 'CA-1991-06', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1991-06.html'}, {'name': '20', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/20'}, {'name': 'next-me(581)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/581'}]
CVE State: PUBLISHED
Explain CVE-1999-1194
chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'CA-1991-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1991-05.html'}, {'name': '17', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17'}, {'name': 'dec-chroot(577)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/577'}]
CVE State: PUBLISHED
Explain CVE-1999-1195
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.
Affected Products: n/a
References: [{'name': '19990505 NAI AntiVirus Update Problem', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92587579032534&w=2'}, {'name': '169', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/169'}, {'name': '19990505 NAI AntiVirus Update Problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92588169005196&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1196
Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
Affected Products: n/a
References: [{'name': '19990427 NT/Exceed D.O.S.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13451'}, {'name': '158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/158'}]
CVE State: PUBLISHED
Explain CVE-1999-1197
TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges.
Affected Products: n/a
References: [{'name': '14', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14'}, {'name': 'CA-1990-12', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1990-12.html'}, {'name': 'sunos-tioccons-console-redirection(7140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7140.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1198
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'CA-1990-06', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1990-06.html'}, {'name': 'B-01', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/b-01.shtml'}, {'name': 'nextstep-builddisk-root-access(7141)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7141.php'}, {'name': '11', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11'}]
CVE State: PUBLISHED
Explain CVE-1999-1199
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh51-errata-general.html#apache'}, {'name': '19980810 Apache DoS Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90286768232093&w=2'}, {'name': "19980811 Apache 'sioux' DOS fix for TurboLinux", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90280517007869&w=2'}, {'name': '19980807 YA Apache DoS attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90252779826784&w=2'}, {'name': '19980808 Debian Apache Security Update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90276683825862&w=2'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E'}]
CVE State: PUBLISHED
Explain CVE-1999-1200
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.
Affected Products: n/a
References: [{'name': '19980720 DOS in Vintra systems Mailserver software.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=90222454131610&w=2'}, {'name': 'vintra-mail-dos(1617)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1617'}]
CVE State: PUBLISHED
Explain CVE-1999-1201
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
Affected Products: n/a
References: [{'name': '19990206 New Windows 9x Bug:  TCP Chorusing', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91849617221319&w=2'}, {'name': '225', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/225'}, {'name': 'win-multiple-ip-dos(7542)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7542'}]
CVE State: PUBLISHED
Explain CVE-1999-1202
StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command.
Affected Products: n/a
References: [{'name': '19980703 Windows95 Proxy DoS Vulnerabilites', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104525873&w=2'}, {'name': 'startech-pop3-overflow(2088)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2088'}]
CVE State: PUBLISHED
Explain CVE-1999-1203
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier.
Affected Products: n/a
References: [{'name': '19990210 Security problems in ISDN equipment authentication', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91868964203769&w=2'}, {'name': 'ascend-ppp-isdn-dos(7498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7498.php'}, {'name': '19990212 PPP/ISDN multilink security issue - summary', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91888117502765&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1204
Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator.
Affected Products: n/a
References: [{'name': '4416', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.checkpoint.com/techsupport/config/keywords.html'}, {'name': 'fw1-user-defined-keywords-access(7293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7293'}, {'name': '19980511 Firewall-1 Reserved Keywords Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101925912&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1205
nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information.
Affected Products: n/a
References: [{'name': 'hp-nettune(414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/414'}, {'name': '19960607 HP-UX B.10.01 vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167419195&w=2'}, {'name': 'HPSBUX9607-035', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://packetstormsecurity.org/advisories/ibm-ers/96-08'}]
CVE State: PUBLISHED
Explain CVE-1999-1206
SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control.
Affected Products: n/a
References: [{'name': '19990729 New ActiveX security problems in Windows 98 PCs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93336970231857&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.systemsoft.com/l-2/l-3/support-systemwizard.htm'}, {'name': '555', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/555'}]
CVE State: PUBLISHED
Explain CVE-1999-1207
Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
Affected Products: n/a
References: [{'name': 'netxray-bo(907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/907'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.efri.hr/~crv/security/bugs/NT/netxtray.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1208
Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument.
Affected Products: n/a
References: [{'name': 'ping-bo(803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/803'}, {'name': '19970721 AIX ping (Exploit)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602661419330&w=2'}, {'name': '19970721 AIX ping, lchangelv, xlock fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602661419337&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1209
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'VB-97.14', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/vendor_bulletins/VB-97.14.scoterm'}, {'name': '19971204 scoterm exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88131151000069&w=2'}, {'name': 'sco-scoterm(690)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/690'}]
CVE State: PUBLISHED
Explain CVE-1999-1210
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
Affected Products: n/a
References: [{'name': 'dec-xterm(613)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/613'}, {'name': '19971112 Digital Unix Security Problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87936891504885&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1211
Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'sun-intelnetd(574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/574'}, {'name': 'CA-1991-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1991-02.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1212
Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'sun-intelnetd(574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/574'}, {'name': 'CA-1991-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1991-02.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1213
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
Affected Products: n/a
References: [{'name': 'hp-telnetdos(571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/571'}, {'name': 'HPSBUX9710-070', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www2.dataguard.no/bugtraq/1997_4/0001.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1214
The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.openbsd.com/advisories/signals.txt'}, {'name': '19970915 Vulnerability in I/O Signal Handling', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.com/advisories/signals.txt'}, {'name': '11062', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11062'}, {'name': 'openbsd-iosig(556)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/556'}]
CVE State: PUBLISHED
Explain CVE-1999-1215
LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': 'CA-1993-12', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-12.html'}, {'name': 'D-21', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/d-21.shtml'}, {'name': 'novell-login(545)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/545'}]
CVE State: PUBLISHED