Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-1216
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command.
Affected Products: n/a
References: [{'name': 'D-15', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/d-15.shtml'}, {'name': 'CA-1993-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-07.html'}, {'name': 'cisco-sourceroute(541)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/541'}]
CVE State: PUBLISHED
Explain CVE-1999-1217
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
Affected Products: n/a
References: [{'name': '19970725 Re: NT security - why bother?', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=87602726319435&w=2'}, {'name': 'nt-path(526)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/526'}, {'name': '19970723 NT security - why bother?', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=87602726319426&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1218
Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files.
Affected Products: n/a
References: [{'name': 'CA-1993-04', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-04.html'}, {'name': 'amiga-finger(522)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/522'}]
CVE State: PUBLISHED
Explain CVE-1999-1219
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.
Affected Products: n/a
References: [{'name': 'sgi-prn-mgr(511)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/511'}, {'name': '468', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/468'}, {'name': 'E-33', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/e-33.shtml'}, {'name': 'CA-1994-13', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1994-13.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1220
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
Affected Products: n/a
References: [{'name': '19970824 Vulnerability in Majordomo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/7527'}, {'name': 'majordomo-advertise(502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/502'}]
CVE State: PUBLISHED
Explain CVE-1999-1221
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
Affected Products: n/a
References: [{'name': '19961117 Digital Unix v3.x (v4.x?) security vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420141&w=2'}, {'name': 'dgux-chpwd(399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/399'}]
CVE State: PUBLISHED
Explain CVE-1999-1222
Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.
Affected Products: n/a
References: [{'name': 'Q188571', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q188/5/71.ASP'}, {'name': 'dns-netbtsys-dos(3893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3893'}]
CVE State: PUBLISHED
Explain CVE-1999-1223
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.
Affected Products: n/a
References: [{'name': 'url-asp-av(3892)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3892'}, {'name': 'Q187503', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q187/5/03.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1224
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.
Affected Products: n/a
References: [{'name': 'imapd-core(349)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/349'}, {'name': '19971008 L0pht Advisory: IMAP4rev1 imapd server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87635124302928&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1225
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
Affected Products: n/a
References: [{'name': 'mountd-file-exists(347)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/347'}, {'name': '19970824 Serious security flaw in rpc.mountd on several operating systems.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/7526'}]
CVE State: PUBLISHED
Explain CVE-1999-1226
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
Affected Products: n/a
References: [{'name': 'netscape-huge-key-dos(3436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3436'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/Netscape_4_7_and_earlier_vulnerable_to__Huge_Key__DoS.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1227
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
Affected Products: n/a
References: [{'name': 'ethereal-dev-capturec-root(3334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3334'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1228
Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.macintouch.com/modemsecurity.html'}, {'name': 'global-village-modem-dos(3320)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3320'}, {'name': '19980927 1+2=3, +++ATH0=Old school DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90695973308453&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1229
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.
Affected Products: n/a
References: [{'name': 'linux-quake2(733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/733'}, {'name': '19980225 Quake 2 Linux 3.13 (and lower) allow users to read arbitrary files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8590'}]
CVE State: PUBLISHED
Explain CVE-1999-1230
Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
Affected Products: n/a
References: [{'name': 'quake2-dos(698)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/698'}, {'name': '19971224 Quake II Remote Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8282'}]
CVE State: PUBLISHED
Explain CVE-1999-1231
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.
Affected Products: n/a
References: [{'name': '19990609 ssh advirsory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/14758'}, {'name': 'ssh-leak(2276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2276'}]
CVE State: PUBLISHED
Explain CVE-1999-1232
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.
Affected Products: n/a
References: [{'name': 'sgi-day5datacopier(3316)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3316'}, {'name': '19970516 Irix and WWW', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420994&w=2'}, {'name': '8559', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8559'}]
CVE State: PUBLISHED
Explain CVE-1999-1233
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.
Affected Products: n/a
References: [{'name': 'iis-unresolved-domain-access(3306)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3306'}, {'name': '241562', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q241/5/62.asp'}, {'name': '657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/657'}, {'name': 'MS99-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039'}]
CVE State: PUBLISHED
Explain CVE-1999-1234
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.
Affected Products: n/a
References: [{'name': '19991026 Re: LSA vulnerability on NT40 SP5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94096671308565&w=2'}, {'name': 'msrpc-samr-open-dos(3293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3293'}]
CVE State: PUBLISHED
Explain CVE-1999-1235
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
Affected Products: n/a
References: [{'name': '19990825 IE5 FTP password exposure & index.dat null ACL problem', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html'}, {'name': 'nt-ie5-user-ftp-password(3289)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3289'}, {'name': '19990331 Minor Bug in IE5.0', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179'}]
CVE State: PUBLISHED
Explain CVE-1999-1236
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
Affected Products: n/a
References: [{'name': 'iams-passwords-plaintext(3285)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3285'}, {'name': '19991001 Vulnerabilities in the Internet Anywhere Mail Server', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662'}, {'name': '731', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/731'}]
CVE State: PUBLISHED
Explain CVE-1999-1237
Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.
Affected Products: n/a
References: [{'name': '19990606 Buffer overflows in smbval library', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/14384'}, {'name': 'smbvalid-bo(2272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2272'}]
CVE State: PUBLISHED
Explain CVE-1999-1238
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'hp-core-diag-fileset(2262)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2262'}, {'name': 'HPSBUX9409-017', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/1531'}]
CVE State: PUBLISHED
Explain CVE-1999-1239
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Affected Products: n/a
References: [{'name': 'HPSBUX9407-015', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/1559'}, {'name': 'hp-xauthority(2261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2261'}]
CVE State: PUBLISHED
Explain CVE-1999-1240
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
Affected Products: n/a
References: [{'name': 'cddbd-bo(2203)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2203'}, {'name': '19961126 Major Security Vulnerabilities in Remote CD Databases', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/5784'}]
CVE State: PUBLISHED
Explain CVE-1999-1241
Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.
Affected Products: n/a
References: [{'name': 'ie-filesystemobject(2173)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2173'}, {'tags': ['x_refsource_MISC'], 'url': 'http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1242
Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'hp-subnet-config(2162)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2162'}, {'name': 'HPSBUX9402-003', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://packetstormsecurity.org/advisories/hpalert/003'}]
CVE State: PUBLISHED
Explain CVE-1999-1243
SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges.
Affected Products: n/a
References: [{'name': 'F-16', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-16.shtml'}, {'name': 'sgi-permissions(2113)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2113'}, {'name': '19950301-01-P373', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19950301-01-P373'}]
CVE State: PUBLISHED
Explain CVE-1999-1244
IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.
Affected Products: n/a
References: [{'name': '19990415 FSA-99.04-IPFILTER-v3.2.10', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13303'}, {'name': 'ipfilter-temp-file(2087)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2087'}]
CVE State: PUBLISHED
Explain CVE-1999-1245
vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information.
Affected Products: n/a
References: [{'name': 'ucd-snmpd-community(2086)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2086'}]
CVE State: PUBLISHED
Explain CVE-1999-1246
Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.
Affected Products: n/a
References: [{'name': 'Q229972', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q229/9/72.asp'}, {'name': 'siteserver-directmail-passwords(2068)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2068'}]
CVE State: PUBLISHED
Explain CVE-1999-1247
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX9402-006', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://packetstormsecurity.org/advisories/hpalert/006'}, {'name': 'hp-dce9000(2061)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2061'}]
CVE State: PUBLISHED
Explain CVE-1999-1248
Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'hp-supportwatch(2058)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2058'}, {'name': 'HPSBUX9411-019', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://packetstormsecurity.org/advisories/hpalert/019'}]
CVE State: PUBLISHED
Explain CVE-1999-1249
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '8099', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8099'}, {'name': 'HPSBUX9701-047', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-047.html'}, {'name': 'hp-movemail(2057)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2057'}]
CVE State: PUBLISHED
Explain CVE-1999-1250
Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'http-cgi-lasso(2044)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2044'}, {'name': '19970819 Lasso CGI security hole (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/7506'}]
CVE State: PUBLISHED
Explain CVE-1999-1251
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
Affected Products: n/a
References: [{'name': 'hp-audio-panic(2010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2010'}, {'name': 'HPSBUX9612-043', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://packetstormsecurity.org/advisories/hpalert/043'}]
CVE State: PUBLISHED
Explain CVE-1999-1252
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.
Affected Products: n/a
References: [{'name': 'VB-96.15', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/vendor_bulletins/VB-96.15.sco'}, {'name': '96:002', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.COM/SSE/security_bulletins/SB.96:02a'}, {'name': 'sco-system-call(1966)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1966'}]
CVE State: PUBLISHED
Explain CVE-1999-1253
Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'VB-96.10', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/vendor_bulletins/VB-96.10.sco'}, {'name': '96:001', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB.96:01a'}, {'name': 'sco-kernel(1965)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1965'}]
CVE State: PUBLISHED
Explain CVE-1999-1254
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
Affected Products: n/a
References: [{'name': 'win-redirects-freeze(1947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1947'}, {'name': '19990308 Winfreeze EXPLOIT  Win9x/NT', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92099515709467&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1255
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
Affected Products: n/a
References: [{'name': 'hyperseek-modify(1914)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1914'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rootshell.com/archive-j457nxiqi3gq59dv/199902/hyperseek.txt.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1256
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file.
Affected Products: n/a
References: [{'name': 'oracle-passwords(1902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1902'}, {'name': '19990304 Oracle Plaintext Password', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92056752115116&w=2'}, {'name': '19990304 Oracle Plaintext Password', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12744'}]
CVE State: PUBLISHED
Explain CVE-1999-1257
Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark).
Affected Products: n/a
References: [{'name': 'xyplex-controlz-login(1825)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1825'}, {'name': '19971126 Xyplex terminal server bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8134'}, {'name': 'xyplex-question-login(1826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1826'}]
CVE State: PUBLISHED
Explain CVE-1999-1258
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information.
Affected Products: n/a
References: [{'name': '00102', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/102'}, {'name': 'sun-pwdauthd(1782)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1782'}]
CVE State: PUBLISHED
Explain CVE-1999-1259
Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information.
Affected Products: n/a
References: [{'name': 'Q189529', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q189/5/29.asp'}, {'name': 'office-extraneous-data(1780)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1780'}]
CVE State: PUBLISHED
Explain CVE-1999-1260
mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.
Affected Products: n/a
References: [{'name': '19990215 KSR[T] Advisory #10: mSQL ServerStats', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91910115718150&w=2'}, {'name': 'msql-serverstats(1777)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1777'}]
CVE State: PUBLISHED
Explain CVE-1999-1261
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command.
Affected Products: n/a
References: [{'name': '19990211 Rainbow Six Buffer Overflow.....', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12433'}, {'name': 'rainbowsix-nick-bo(1772)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1772'}]
CVE State: PUBLISHED
Explain CVE-1999-1262
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.
Affected Products: n/a
References: [{'name': '19990202 Unsecured server in applets under Netscape', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12231'}, {'name': 'java-socket-open(1727)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1727'}]
CVE State: PUBLISHED
Explain CVE-1999-1263
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file.
Affected Products: n/a
References: [{'name': 'metamail-file-creation(1677)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1677'}, {'name': '19971024 Vulnerability in metamail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87773365324657&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1264
WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled.
Affected Products: n/a
References: [{'name': '19990121 WebRamp M3 remote network access bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12048'}, {'name': 'webramp-remote-access(1670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1670'}, {'name': '19990203 WebRamp M3 Perceived Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91815321510224&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1265
SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO.
Affected Products: n/a
References: [{'name': 'slmail-parens-overload(1664)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1664'}, {'name': '19980922 WARNING! SMTP Denial of Service in SLmail ver 3.1', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=90650438826447&w=2'}, {'name': '19980922 WARNING! SMTP Denial of Service in SLmail ver 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90649892424117&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1266
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.
Affected Products: n/a
References: [{'name': '19970613 rshd gives away usernames', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/6978'}, {'name': 'rsh-username-leaks(1660)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1660'}]
CVE State: PUBLISHED
Explain CVE-1999-1267
KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server.
Affected Products: n/a
References: [{'name': '19970505 Hole in the KDE desktop', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420906&w=2'}, {'name': 'kde-flawed-ipc(1646)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1646'}]
CVE State: PUBLISHED
Explain CVE-1999-1268
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.
Affected Products: n/a
References: [{'name': 'kde-konsole-hijack(1645)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1645'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.kde.org/?l=kde-devel&m=91560433413263&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1269
Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file.
Affected Products: n/a
References: [{'name': 'kde-kss-file-clobber(1641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1641'}, {'name': '19980206 serious security hole in KDE Beta 3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8506'}]
CVE State: PUBLISHED
Explain CVE-1999-1270
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.
Affected Products: n/a
References: [{'name': 'kde-kmail-passphrase-leak(1639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1639'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1271
Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users.
Affected Products: n/a
References: [{'name': '19980611 Unsecure passwords in Macromedia Dreamweaver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9511'}, {'name': 'dreamweaver-weak-passwords(1636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1636'}]
CVE State: PUBLISHED
Explain CVE-1999-1272
Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'irix-cdrom-confidence(1635)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1635'}, {'name': '19980301-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-1273
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
Affected Products: n/a
References: [{'name': '19980220 Simple way to bypass squid ACLs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8551'}, {'name': 'squid-regexp-acl(1627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1627'}]
CVE State: PUBLISHED
Explain CVE-1999-1274
iPass RoamServer 3.1 creates temporary files with world-writable permissions.
Affected Products: n/a
References: [{'name': 'ipass-temporary-files(1625)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1625'}, {'name': '19971229 iPass RoamServer 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8307'}]
CVE State: PUBLISHED
Explain CVE-1999-1275
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'lotus-ccmail-passwords(1619)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1619'}, {'name': '19970908 Password unsecurity in cc:Mail release 8', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9478'}]
CVE State: PUBLISHED
Explain CVE-1999-1276
fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device.
Affected Products: n/a
References: [{'name': '19981207 fte-console: does not drop its root priviliges', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/1998/19981207'}, {'name': 'fte-console-privileges(1609)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1609'}]
CVE State: PUBLISHED
Explain CVE-1999-1277
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
Affected Products: n/a
References: [{'name': '19981224 BackWeb - Password issue (used by NAI for Corporate customer notification).', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91487886514546&w=2'}, {'name': 'backweb-cleartext-passwords(1565)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1565'}]
CVE State: PUBLISHED
Explain CVE-1999-1278
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl.
Affected Products: n/a
References: [{'name': '19981226 Nlog 1.1b released - security holes fixed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91471400632145&w=2'}, {'name': '19981225 Re: Nlog v1.0 Released - Nmap 2.x log management / analyzing tool', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91470326629357&w=2'}, {'name': 'http-cgi-nlog-netbios(1550)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1550'}, {'name': 'http-cgi-nlog-metachars(1549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1549'}]
CVE State: PUBLISHED
Explain CVE-1999-1279
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU.
Affected Products: n/a
References: [{'name': 'snaserver-shared-folders(1548)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1548'}, {'name': 'Q138001', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q138/0/01.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1280
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file.
Affected Products: n/a
References: [{'name': '19981203 Remote Tools w/Exceed v.6.0.1.0 fer 95', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11512'}, {'name': 'exceed-cleartext-passwords(1547)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1547'}]
CVE State: PUBLISHED
Explain CVE-1999-1281
Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program.
Affected Products: n/a
References: [{'name': '19981226 Breeze Network Server remote reboot and other bogosity.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11720'}, {'name': 'breeze-remote-reboot(1544)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1544'}]
CVE State: PUBLISHED
Explain CVE-1999-1282
RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'realsystem-readable-conf-file(1542)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1542'}, {'name': '19981210 RealSystem passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11543'}]
CVE State: PUBLISHED
Explain CVE-1999-1283
Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag.
Affected Products: n/a
References: [{'name': '19980814 URL exploit to crash Opera Browser', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10320'}, {'name': 'opera-slash-crash(1541)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1541'}]
CVE State: PUBLISHED
Explain CVE-1999-1284
NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.dynamsol.com/puppet/text/new.txt'}, {'name': '19981107 Re: various *lame* DoS attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91063407332594&w=2'}, {'name': '19981105 various *lame* DoS attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11131'}, {'name': 'nukenabber-timeout-dos(1540)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1540'}]
CVE State: PUBLISHED
Explain CVE-1999-1285
Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.
Affected Products: n/a
References: [{'name': '19981227 [patch] fix for urandom read(2) not interruptible', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91495921611500&w=2'}, {'name': 'linux-random-read-dos(1472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1472'}]
CVE State: PUBLISHED
Explain CVE-1999-1286
addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': 'irix-addnetpr(1433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1433'}, {'name': '8560', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8560'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX'}, {'name': '19970509 Re: Irix: misc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420927&w=2'}, {'name': '330', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/330'}]
CVE State: PUBLISHED
Explain CVE-1999-1287
Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.statslab.cam.ac.uk/~sret1/analog/security.html'}, {'name': 'analog-remote-file(1410)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1410'}]
CVE State: PUBLISHED
Explain CVE-1999-1288
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.
Affected Products: n/a
References: [{'name': 'samba-wsmbconf(1406)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1406'}, {'name': '19981119 Vulnerability in Samba on RedHat, Caldera and PHT TurboLinux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11397'}, {'name': 'SA-1998.35', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/SA-1998.35.txt'}]
CVE State: PUBLISHED
Explain CVE-1999-1289
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration.
Affected Products: n/a
References: [{'name': '19981111 WARNING: Another ICQ IP address vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11233'}, {'name': 'icq-ip-info(1398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1398'}]
CVE State: PUBLISHED
Explain CVE-1999-1290
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.
Affected Products: n/a
References: [{'name': '19981117 nftp vulnerability (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91127951426494&w=2'}, {'name': 'nftp-bo(1397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ayukov.com/nftp/history.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1291
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.
Affected Products: n/a
References: [{'name': 'nt-brkill(1383)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1383'}, {'name': '19981005 New Windows Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10789'}]
CVE State: PUBLISHED
Explain CVE-1999-1292
Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL.
Affected Products: n/a
References: [{'name': '19980901 Remote Buffer Overflow in the Kolban Webcam32 Program', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise7.php'}, {'name': 'webcam32-buffer-overflow(1366)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1366'}]
CVE State: PUBLISHED
Explain CVE-1999-1293
mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.
Affected Products: n/a
References: [{'name': '19980106 Apache security advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88413292830649&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apache.org/info/security_bulletin_1.2.5.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1294
Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission.
Affected Products: n/a
References: [{'name': 'Q146604', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q146/6/04.asp'}, {'name': 'nt-filemgr(562)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/562'}]
CVE State: PUBLISHED
Explain CVE-1999-1295
Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS.
Affected Products: n/a
References: [{'name': 'VB-96.16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/vendor_bulletins/VB-96.16.transarc'}, {'name': 'dfs-login-groups(7154)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7154'}]
CVE State: PUBLISHED
Explain CVE-1999-1296
Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable.
Affected Products: n/a
References: [{'name': '19970429 vulnerabilities in kerberos', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420878&w=2'}]
CVE State: PUBLISHED