Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-0841
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
Affected Products: n/a
References: [{'name': '19991129 Solaris7 dtmail/dtmailpr/mailtool Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.security-express.com/archives/bugtraq/1999-q4/0122.html'}, {'name': 'cde-mailtool-bo(3732)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3732'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/3J5QQPPQ0O.html'}, {'name': '832', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/832'}]
CVE State: PUBLISHED
Explain CVE-1999-0842
Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '827', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/827'}, {'name': '19991129 Symantec Mail-Gear 1.0 Web interface Server Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEAFCBAA.labs%40ussrback.com'}, {'name': '1144', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1144'}]
CVE State: PUBLISHED
Explain CVE-1999-0843
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0843'}]
CVE State: PUBLISHED
Explain CVE-1999-0844
Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
Affected Products: n/a
References: [{'name': '823', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/823'}, {'name': '820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/820'}]
CVE State: PUBLISHED
Explain CVE-1999-0848
Denial of service in BIND named via consuming more than "fdmax" file descriptors.
Affected Products: n/a
References: [{'name': 'CSSA-1999-034.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt'}, {'name': '788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/788'}, {'name': '00194', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194'}]
CVE State: PUBLISHED
Explain CVE-1999-0849
Denial of service in BIND named via maxdname.
Affected Products: n/a
References: [{'name': 'CSSA-1999-034.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt'}, {'name': '788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/788'}, {'name': '00194', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194'}]
CVE State: PUBLISHED
Explain CVE-1999-0851
Denial of service in BIND named via naptr.
Affected Products: n/a
References: [{'name': 'CSSA-1999-034.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt'}, {'name': '788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/788'}, {'name': '00194', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194'}]
CVE State: PUBLISHED
Explain CVE-1999-0852
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
Affected Products: n/a
References: [{'name': '844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/844'}]
CVE State: PUBLISHED
Explain CVE-1999-0853
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
Affected Products: n/a
References: [{'name': '847', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/847'}]
CVE State: PUBLISHED
Explain CVE-1999-0854
Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.
Affected Products: n/a
References: [{'name': '20000225 FW: Important UBB News For Licensed Users', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ultimatebb.com/home/versions.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0856
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://marc.info/?l=bugtraq&m=94416739411280&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0858
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
Affected Products: n/a
References: [{'name': 'MS99-054', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-054'}, {'name': '846', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/846'}, {'name': 'Q247333', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ247333'}]
CVE State: PUBLISHED
Explain CVE-1999-0859
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
Affected Products: n/a
References: [{'name': '837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/837'}, {'name': '6994', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6994'}]
CVE State: PUBLISHED
Explain CVE-1999-0860
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
Affected Products: n/a
References: [{'name': '837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/837'}]
CVE State: PUBLISHED
Explain CVE-1999-0861
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
Affected Products: n/a
References: [{'name': 'Q244613', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ244613'}, {'name': 'MS99-053', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-053'}]
CVE State: PUBLISHED
Explain CVE-1999-0862
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0862'}]
CVE State: PUBLISHED
Explain CVE-1999-0863
Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0863'}]
CVE State: PUBLISHED
Explain CVE-1999-0864
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
Affected Products: n/a
References: [{'name': '19991220 SCO OpenServer Security Status', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94581379905584&w=2'}, {'name': '851', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/851'}, {'name': '19991215 Recent postings about SCO UnixWare 7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94530783815434&w=2'}, {'name': '19991223 FYI, SCO Security patches available.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94606167110764&w=2'}, {'name': '19991202 UnixWare coredumps follow symlinks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991203020720.13115.qmail%40nwcst289.netaddress.usa.net'}]
CVE State: PUBLISHED
Explain CVE-1999-0865
Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
Affected Products: n/a
References: [{'name': '19991203 CommuniGatePro 3.1 for NT Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94454565726775&w=2'}, {'name': '860', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/860'}, {'name': '19991203 CommuniGatePro 3.1 for NT DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94426440413027&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0866
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
Affected Products: n/a
References: [{'name': '19991220 SCO OpenServer Security Status', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94581379905584&w=2'}, {'name': '19991215 Recent postings about SCO UnixWare 7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94530783815434&w=2'}, {'name': '848', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/848'}, {'name': 'SB-99.24a', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.24a'}, {'name': '19991223 FYI, SCO Security patches available.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94606167110764&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0867
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Affected Products: n/a
References: [{'name': 'Q238349', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349'}, {'name': 'J-058', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-058.shtml'}, {'name': 'MS99-029', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029'}, {'name': '579', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/579'}]
CVE State: PUBLISHED
Explain CVE-1999-0868
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0869
Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
Affected Products: n/a
References: [{'name': 'MS98-020', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-020'}]
CVE State: PUBLISHED
Explain CVE-1999-0870
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.
Affected Products: n/a
References: [{'name': 'MS98-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-015'}]
CVE State: PUBLISHED
Explain CVE-1999-0871
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.
Affected Products: n/a
References: [{'name': '7837', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7837'}, {'name': 'ie-crossframe-file-read(3668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3668'}, {'name': 'MS98-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-013'}]
CVE State: PUBLISHED
Explain CVE-1999-0872
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
Affected Products: n/a
References: [{'name': '611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/611'}, {'name': '759', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/759'}]
CVE State: PUBLISHED
Explain CVE-1999-0874
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Affected Products: n/a
References: [{'name': 'AD06081999', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD06081999.html'}, {'name': 'oval:org.mitre.oval:def:915', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A915'}, {'name': 'MS99-019', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-019'}, {'name': 'Q234905', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905'}, {'name': 'J-048', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-048.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0875
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
Affected Products: n/a
References: [{'name': '578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/578'}, {'name': 'Q216141', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ216141'}]
CVE State: PUBLISHED
Explain CVE-1999-0876
Buffer overflow in Internet Explorer 4.0 via EMBED tag.
Affected Products: n/a
References: [{'name': 'Q185959', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ185959'}, {'name': 'Q176697', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q176/6/97.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-0877
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
Affected Products: n/a
References: [{'name': 'Q243638', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243638'}, {'name': 'MS99-042', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-042'}]
CVE State: PUBLISHED
Explain CVE-1999-0878
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
Affected Products: n/a
References: [{'name': '599', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/599'}]
CVE State: PUBLISHED
Explain CVE-1999-0879
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0879'}]
CVE State: PUBLISHED
Explain CVE-1999-0880
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0880'}]
CVE State: PUBLISHED
Explain CVE-1999-0881
Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '1127', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1127'}, {'name': '743', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/743'}]
CVE State: PUBLISHED
Explain CVE-1999-0883
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
Affected Products: n/a
References: [{'name': 'zeus-remote-root(3380)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3380'}, {'name': '742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/742'}, {'name': '1126', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1126'}]
CVE State: PUBLISHED
Explain CVE-1999-0884
The Zeus web server administrative interface uses weak encryption for its passwords.
Affected Products: n/a
References: [{'name': '742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/742'}, {'name': '8186', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8186'}, {'name': 'zeus-weak-password(3833)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3833'}]
CVE State: PUBLISHED
Explain CVE-1999-0885
Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.
Affected Products: n/a
References: [{'name': '770', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/770'}, {'name': '19991103 More Alibaba Web Server problems...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-11-01&msg=01BF261F.928821E0.kerb%40fnusa.com'}]
CVE State: PUBLISHED
Explain CVE-1999-0886
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
Affected Products: n/a
References: [{'name': 'Q242294', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242294'}, {'name': 'MS99-041', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-041'}, {'name': '645', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/645'}]
CVE State: PUBLISHED
Explain CVE-1999-0887
FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': 'AD05261999', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD05261999.html'}, {'name': '1137', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1137'}]
CVE State: PUBLISHED
Explain CVE-1999-0888
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Affected Products: n/a
References: [{'name': '585', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/585'}]
CVE State: PUBLISHED
Explain CVE-1999-0889
Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
Affected Products: n/a
References: [{'name': '39', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/39'}]
CVE State: PUBLISHED
Explain CVE-1999-0890
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ihtmlmerchant.com/support_patches_feedback.htm'}, {'name': '694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/694'}]
CVE State: PUBLISHED
Explain CVE-1999-0891
The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
Affected Products: n/a
References: [{'name': '674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/674'}, {'name': 'MS99-040', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-040'}, {'name': 'K-002', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/k-002.shtml'}, {'name': 'Q242542', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242542'}, {'name': 'VU#37828', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/37828'}, {'name': '11274', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11274'}]
CVE State: PUBLISHED
Explain CVE-1999-0892
Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0892'}]
CVE State: PUBLISHED
Explain CVE-1999-0895
Firewall-1 does not properly restrict access to LDAP attributes.
Affected Products: n/a
References: [{'name': '19991020 Checkpoint FireWall-1 V4.0: possible bug in LDAP authentication', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991020150002.21047.qmail%40tarjan.mediaways.net'}, {'name': '725', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/725'}, {'name': '1117', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1117'}]
CVE State: PUBLISHED
Explain CVE-1999-0896
Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
Affected Products: n/a
References: [{'name': '767', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/767'}, {'tags': ['x_refsource_MISC'], 'url': 'http://service.real.com/help/faq/servg260.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0897
iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '19980908 bug in iChat 3.0 (maybe others)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90538488231977&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0898
Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.
Affected Products: n/a
References: [{'name': '768', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/768'}, {'name': 'Q243649', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649'}, {'name': 'MS99-047', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047'}]
CVE State: PUBLISHED
Explain CVE-1999-0899
The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.
Affected Products: n/a
References: [{'name': '769', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/769'}, {'name': 'Q243649', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649'}, {'name': 'MS99-047', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047'}]
CVE State: PUBLISHED
Explain CVE-1999-0903
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0903'}]
CVE State: PUBLISHED
Explain CVE-1999-0904
Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.
Affected Products: n/a
References: [{'name': '771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/771'}]
CVE State: PUBLISHED
Explain CVE-1999-0905
Denial of service in Axent Raptor firewall via malformed zero-length IP options.
Affected Products: n/a
References: [{'name': '1121', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1121'}, {'name': '736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/736'}]
CVE State: PUBLISHED
Explain CVE-1999-0908
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
Affected Products: n/a
References: [{'name': '655', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/655'}]
CVE State: PUBLISHED
Explain CVE-1999-0909
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
Affected Products: n/a
References: [{'name': 'Q238453', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238453'}, {'name': '646', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/646'}, {'name': 'MS99-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-038'}]
CVE State: PUBLISHED
Explain CVE-1999-0910
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
Affected Products: n/a
References: [{'name': 'MS99-035', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-035'}, {'name': '625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/625'}]
CVE State: PUBLISHED
Explain CVE-1999-0911
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
Affected Products: n/a
References: [{'name': '612', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/612'}, {'name': '19990210', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/1999/19990210'}]
CVE State: PUBLISHED
Explain CVE-1999-0912
FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
Affected Products: n/a
References: [{'name': '1079', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1079'}, {'name': '653', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/653'}]
CVE State: PUBLISHED
Explain CVE-1999-0913
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '564', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/564'}, {'name': '19990804 NSW Dragon Fire gets drowned', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93383593909438&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0915
URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/746'}, {'name': '1129', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1129'}]
CVE State: PUBLISHED
Explain CVE-1999-0917
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'Q231452', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231452'}, {'name': 'MS99-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018'}]
CVE State: PUBLISHED
Explain CVE-1999-0918
Denial of service in various Windows systems via malformed, fragmented IGMP packets.
Affected Products: n/a
References: [{'name': '514', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/514'}, {'name': 'MS99-034', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-034'}, {'name': 'Q238329', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238329'}]
CVE State: PUBLISHED
Explain CVE-1999-0919
A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
Affected Products: n/a
References: [{'name': 'motorola-cable-crash(2004)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2004'}, {'name': '19980510 Security Vulnerability in Motorola CableRouters', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621'}]
CVE State: PUBLISHED
Explain CVE-1999-0920
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
Affected Products: n/a
References: [{'name': '283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/283'}]
CVE State: PUBLISHED
Explain CVE-1999-0921
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
Affected Products: n/a
References: [{'name': '19990409 Patrol security bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13204'}, {'name': '1879', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1879'}, {'name': 'bmc-patrol-udp-dos(4291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/4291.php'}]
CVE State: PUBLISHED
Explain CVE-1999-0922
An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
Affected Products: n/a
References: [{'name': 'ASB99-02', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full'}]
CVE State: PUBLISHED
Explain CVE-1999-0923
Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.
Affected Products: n/a
References: [{'name': 'ASB99-02', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full'}]
CVE State: PUBLISHED
Explain CVE-1999-0924
The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
Affected Products: n/a
References: [{'name': 'ASB99-02', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full'}, {'name': 'coldfusion-syntax-checker(1742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1742'}, {'name': '3236', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3236'}]
CVE State: PUBLISHED
Explain CVE-1999-0925
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
Affected Products: n/a
References: [{'name': '19980903 Web servers / possible DOS Attack / mime header flooding', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90486243124867&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0926
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
Affected Products: n/a
References: [{'name': '19990903 Web servers / possible DOS Attack / mime header flooding', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/1998_3/0742.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0927
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': 'AD05261999', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD05261999.html'}, {'name': '279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/279'}]
CVE State: PUBLISHED
Explain CVE-1999-0928
Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.
Affected Products: n/a
References: [{'name': '278', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/278'}]
CVE State: PUBLISHED
Explain CVE-1999-0929
Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0929'}]
CVE State: PUBLISHED
Explain CVE-1999-0930
wwwboard allows a remote attacker to delete message board articles via a malformed argument.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.worldwidemart.com/scripts/faq/wwwboard/q5.shtml'}, {'name': 'http-cgi-wwwboard(2344)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2344'}, {'name': '1795', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1795'}]
CVE State: PUBLISHED
Explain CVE-1999-0932
Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.
Affected Products: n/a
References: [{'name': '735', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/735'}]
CVE State: PUBLISHED
Explain CVE-1999-0933
TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/689'}, {'name': '1096', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1096'}]
CVE State: PUBLISHED
Explain CVE-1999-0934
classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
Affected Products: n/a
References: [{'name': 'http-cgi-classifieds-read(3102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3102'}, {'name': '2020', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2020'}]
CVE State: PUBLISHED
Explain CVE-1999-0935
classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0935'}]
CVE State: PUBLISHED
Explain CVE-1999-0938
MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0938'}]
CVE State: PUBLISHED
Explain CVE-1999-0941
Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '19980728 mutt x.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221104526154&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0942
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0942'}]
CVE State: PUBLISHED
Explain CVE-1999-0943
Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.
Affected Products: n/a
References: [{'name': '720', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/720'}]
CVE State: PUBLISHED
Explain CVE-1999-0944
IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0944'}]
CVE State: PUBLISHED
Explain CVE-1999-0945
Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands.
Affected Products: n/a
References: [{'name': 'exchange-dos(1223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1223'}, {'name': 'Q169174', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174'}, {'name': '19980724 Denial of Service attacks against Microsoft Exchange 5.0 to 5.5', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise4.php'}, {'name': 'I-080', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/i-080.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0946
Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.
Affected Products: n/a
References: [{'name': '19991102 Some holes for Win/UNIX softwares', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94157187815629&w=2'}, {'name': '760', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/760'}]
CVE State: PUBLISHED
Explain CVE-1999-0947
AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '19991102 Some holes for Win/UNIX softwares', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94157187815629&w=2'}, {'name': '762', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/762'}]
CVE State: PUBLISHED
Explain CVE-1999-0950
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via	a series of MKD and CWD commands that create nested directories.
Affected Products: n/a
References: [{'name': '747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/747'}]
CVE State: PUBLISHED
Explain CVE-1999-0951
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
Affected Products: n/a
References: [{'name': '3380', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3380'}, {'name': '739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/739'}]
CVE State: PUBLISHED
Explain CVE-1999-0952
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
Affected Products: n/a
References: [{'name': '19990126 Buffer overflow in Solaris 2.6/2.7 /usr/bin/lpstat', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91759216618637&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0955
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0955'}]
CVE State: PUBLISHED
Explain CVE-1999-0958
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '19980112 Re: hole in sudo for MP-RAS.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88465708614896&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '19980301-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX'}, {'name': '469', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/469'}, {'name': 'irix-startmidi-file-creation(1634)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1634'}, {'name': '8447', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8447'}]
CVE State: PUBLISHED
Explain CVE-1999-0960
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
Affected Products: n/a
References: [{'name': '19980301-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-0961
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
Affected Products: n/a
References: [{'name': '19960921 Vunerability in HP sysdiag ?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167419906&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0962
Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
Affected Products: n/a
References: [{'name': '6415', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6415'}, {'name': 'HPSBUX9701-045', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9701-045'}]
CVE State: PUBLISHED
Explain CVE-1999-0964
Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.
Affected Products: n/a
References: [{'name': '6086', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6086'}]
CVE State: PUBLISHED
Explain CVE-1999-0967
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0967'}]
CVE State: PUBLISHED
Explain CVE-1999-0968
Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
Affected Products: n/a
References: [{'name': '1927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1927'}, {'name': '19981226 bnc exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/11711'}, {'name': 'bnc-proxy-bo(1546)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1546'}]
CVE State: PUBLISHED
Explain CVE-1999-0969
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork.
Affected Products: n/a
References: [{'name': 'Q193233', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ193233'}, {'name': 'MS98-014', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-014'}]
CVE State: PUBLISHED
Explain CVE-1999-0970
The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.
Affected Products: n/a
References: [{'name': '1808', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1808'}, {'name': '19990605 Remote Exploit (Bug) in OmniHTTPd Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/14311'}, {'name': 'omnihttpd-dos(2271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2271'}]
CVE State: PUBLISHED
Explain CVE-1999-0971
Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.
Affected Products: n/a
References: [{'name': '19970722 Security hole in exim 1.62: local root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/7301'}]
CVE State: PUBLISHED
Explain CVE-1999-0973
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
Affected Products: n/a
References: [{'name': '858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/858'}]
CVE State: PUBLISHED
Explain CVE-1999-0974
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
Affected Products: n/a
References: [{'name': '864', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/864'}, {'name': '00190', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/190'}]
CVE State: PUBLISHED
Explain CVE-1999-0975
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
Affected Products: n/a
References: [{'name': '868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/868'}]
CVE State: PUBLISHED
Explain CVE-1999-0976
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
Affected Products: n/a
References: [{'name': '857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/857'}]
CVE State: PUBLISHED
Explain CVE-1999-0977
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
Affected Products: n/a
References: [{'name': '00191', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191'}, {'name': '2354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2354'}, {'name': '2558', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2558'}, {'name': '866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/866'}]
CVE State: PUBLISHED
Explain CVE-1999-0979
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
Affected Products: n/a
References: [{'name': '869', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/869'}, {'name': '19991215 Recent postings about SCO UnixWare 7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94530783815434&w=2'}]
CVE State: PUBLISHED