Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-0233
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
Affected Products: n/a
References: [{'name': 'Q148188', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188'}, {'name': 'Q155056', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056'}]
CVE State: PUBLISHED
Explain CVE-1999-0239
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
Affected Products: n/a
References: [{'name': '122', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/122'}]
CVE State: PUBLISHED
Explain CVE-1999-0247
Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '1443', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1443'}, {'name': '19970721 INN news server vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/nai_labs/asp_set/advisory/17_inn_avd.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-0248
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1'}]
CVE State: PUBLISHED
Explain CVE-1999-0250
Denial of service in Qmail through long SMTP commands.
Affected Products: n/a
References: [{'name': '19970612 qmail-dos-2.c, another denial of service attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602558319024&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cr.yp.to/qmail/venema.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0253
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/1814'}]
CVE State: PUBLISHED
Explain CVE-1999-0254
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0254'}]
CVE State: PUBLISHED
Explain CVE-1999-0262
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
Affected Products: n/a
References: [{'name': 'http-cgi-faxsurvey(1532)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1532'}, {'name': '2056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2056'}]
CVE State: PUBLISHED
Explain CVE-1999-0263
Solaris SUNWadmap can be exploited to obtain root access.
Affected Products: n/a
References: [{'name': '00173', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/173'}]
CVE State: PUBLISHED
Explain CVE-1999-0265
ICMP redirect messages may crash or lock up a host.
Affected Products: n/a
References: [{'name': 'Q154174', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154174'}]
CVE State: PUBLISHED
Explain CVE-1999-0268
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
Affected Products: n/a
References: [{'name': '110', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/110'}, {'name': '3969', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3969'}]
CVE State: PUBLISHED
Explain CVE-1999-0270
Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'sgi-pfdispaly(810)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/810'}, {'name': 'I-041', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/i-041.shtml'}, {'name': '64', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64'}, {'name': '134', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/134'}, {'name': '19980401-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980401-01-P'}]
CVE State: PUBLISHED
Explain CVE-1999-0278
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
Affected Products: n/a
References: [{'name': 'MS98-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-003'}, {'name': 'oval:org.mitre.oval:def:913', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A913'}]
CVE State: PUBLISHED
Explain CVE-1999-0283
The Java Web Server would allow remote users to obtain the source code for CGI programs.
Affected Products: n/a
References: [{'name': '19970716 Viewable .jhtml source with JavaWebServer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88256790401004&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0284
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0284'}]
CVE State: PUBLISHED
Explain CVE-1999-0286
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0286'}]
CVE State: PUBLISHED
Explain CVE-1999-0288
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://safenetworks.com/Windows/wins.html'}, {'name': 'nt-winsupd-fix(1233)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1233'}]
CVE State: PUBLISHED
Explain CVE-1999-0289
The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0289'}]
CVE State: PUBLISHED
Explain CVE-1999-0290
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0290'}]
CVE State: PUBLISHED
Explain CVE-1999-0295
Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
Affected Products: n/a
References: [{'name': '00157', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/157'}]
CVE State: PUBLISHED
Explain CVE-1999-0296
Solaris volrmmount program allows attackers to read any file.
Affected Products: n/a
References: [{'name': '00162', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/162'}]
CVE State: PUBLISHED
Explain CVE-1999-0297
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0297'}]
CVE State: PUBLISHED
Explain CVE-1999-0298
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '19970205 Vulnerabilities in Ypbind when run with -ypset/-ypsetme', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/nai_labs/asp_set/advisory/06_ypbindsetme_adv.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-0300
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
Affected Products: n/a
References: [{'name': '00155', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/155'}]
CVE State: PUBLISHED
Explain CVE-1999-0301
Buffer overflow in SunOS/Solaris ps command.
Affected Products: n/a
References: [{'name': '00149', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/149'}]
CVE State: PUBLISHED
Explain CVE-1999-0302
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
Affected Products: n/a
References: [{'name': '00176', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/176'}]
CVE State: PUBLISHED
Explain CVE-1999-0305
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.openbsd.org/advisories/sourceroute.txt'}, {'name': '11502', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11502'}, {'name': 'bsd-sourceroute(736)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/736'}]
CVE State: PUBLISHED
Explain CVE-1999-0308
HP-UX gwind program allows users to modify arbitrary files.
Affected Products: n/a
References: [{'name': 'HPSBUX9410-018', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9410-018'}]
CVE State: PUBLISHED
Explain CVE-1999-0309
HP-UX vgdisplay program gives root access to local users.
Affected Products: n/a
References: [{'name': 'HPSBUX9702-056', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-056'}]
CVE State: PUBLISHED
Explain CVE-1999-0311
fpkg2swpk in HP-UX allows local users to gain root access.
Affected Products: n/a
References: [{'name': 'HPSBUX9612-042', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9612-042'}]
CVE State: PUBLISHED
Explain CVE-1999-0313
disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Affected Products: n/a
References: [{'name': '214', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/214'}, {'name': 'sgi-disk-bandwidth(1441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1441'}, {'name': '936', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/936'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/213/exploit'}, {'name': '19980701-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P'}]
CVE State: PUBLISHED
Explain CVE-1999-0314
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Affected Products: n/a
References: [{'name': '6788', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6788'}, {'name': '213', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/213/exploit'}, {'name': '19980701-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P'}, {'name': 'sgi-ioconfig(1199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1199'}]
CVE State: PUBLISHED
Explain CVE-1999-0315
Buffer overflow in Solaris fdformat command gives root access to local users.
Affected Products: n/a
References: [{'name': '00138', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/138'}]
CVE State: PUBLISHED
Explain CVE-1999-0320
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
Affected Products: n/a
References: [{'name': '00166', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/166'}]
CVE State: PUBLISHED
Explain CVE-1999-0323
FreeBSD mmap function allows users to modify append-only or immutable files.
Affected Products: n/a
References: [{'name': '1998-003', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1998-003.txt.asc'}]
CVE State: PUBLISHED
Explain CVE-1999-0324
ppl program in HP-UX allows local users to create root files through symlinks.
Affected Products: n/a
References: [{'name': 'HPSBUX9702-053', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-053'}]
CVE State: PUBLISHED
Explain CVE-1999-0325
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
Affected Products: n/a
References: [{'name': 'HPSBUX9406-013', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9406-013'}]
CVE State: PUBLISHED
Explain CVE-1999-0326
Vulnerability in HP-UX mediainit program.
Affected Products: n/a
References: [{'name': 'HPSBUX9710-071', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9710-071'}]
CVE State: PUBLISHED
Explain CVE-1999-0327
SGI syserr program allows local users to corrupt files.
Affected Products: n/a
References: [{'name': '19971103-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-0328
SGI permissions program allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '19971103-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-0329
SGI mediad program allows local users to gain root access.
Affected Products: n/a
References: [{'name': '19980602-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980602-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-0332
Buffer overflow in NetMeeting allows denial of service and remote command execution.
Affected Products: n/a
References: [{'name': 'Q184346', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ184346'}]
CVE State: PUBLISHED
Explain CVE-1999-0333
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0333'}]
CVE State: PUBLISHED
Explain CVE-1999-0334
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0334'}]
CVE State: PUBLISHED
Explain CVE-1999-0344
NT users can gain debug-level access on a system process using the Sechole exploit.
Affected Products: n/a
References: [{'name': 'MS98-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-009'}, {'name': 'Q190288', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ190288'}]
CVE State: PUBLISHED
Explain CVE-1999-0346
CGI PHP mlog script allows an attacker to read any file on the target server.
Affected Products: n/a
References: [{'name': '713', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/713'}, {'name': '3397', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3397'}]
CVE State: PUBLISHED
Explain CVE-1999-0347
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
Affected Products: n/a
References: [{'name': '19990126 Javascript ecurity bug in Internet Explorer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91745430007021&w=2'}, {'name': '19990126 Javascript ecurity bug in Internet Explorer', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91756771207719&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0348
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
Affected Products: n/a
References: [{'name': 'Q197003', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ197003'}, {'name': '930', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/930'}]
CVE State: PUBLISHED
Explain CVE-1999-0349
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'IIS Remote FTP Exploit/DoS Attack', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html'}, {'name': 'Q188348', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ188348'}, {'name': 'MS99-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-003'}]
CVE State: PUBLISHED
Explain CVE-1999-0351
FTP PASV "Pizza Thief" denial of service and unauthorized data access.  Attackers can steal data by connecting to a port that was intended for use by a client.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://attrition.org/security/advisory/misc/infowar/iw_sec_01.txt'}, {'name': 'pasv-pizza-thief-dos(3389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3389'}]
CVE State: PUBLISHED
Explain CVE-1999-0353
rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
Affected Products: n/a
References: [{'name': 'J-026', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-026.shtml'}, {'name': 'HPSBUX9902-091', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9902-091'}]
CVE State: PUBLISHED
Explain CVE-1999-0354
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content.  Also applies to Outlook when the client views a malicious email message.
Affected Products: n/a
References: [{'name': 'MS99-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002'}]
CVE State: PUBLISHED
Explain CVE-1999-0355
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0355'}]
CVE State: PUBLISHED
Explain CVE-1999-0357
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0357'}]
CVE State: PUBLISHED
Explain CVE-1999-0358
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
Affected Products: n/a
References: [{'name': '19990125 Digital Unix 4.0 exploitable buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12121'}, {'name': 'J-027', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-027.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0359
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0359'}]
CVE State: PUBLISHED
Explain CVE-1999-0360
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
Affected Products: n/a
References: [{'name': '19990130 Security Advisory for Internet Information Server 4 with Site', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91763097004101&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0361
NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0361'}]
CVE State: PUBLISHED
Explain CVE-1999-0362
WS_FTP server remote denial of service through cwd command.
Affected Products: n/a
References: [{'name': 'AD02021999', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD02021999.html'}, {'name': '217', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/217'}]
CVE State: PUBLISHED
Explain CVE-1999-0363
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
Affected Products: n/a
References: [{'name': '328', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/328'}]
CVE State: PUBLISHED
Explain CVE-1999-0364
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
Affected Products: n/a
References: [{'name': '19990204 Microsoft Access 97 Stores Database Password as Plaintext', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91816470220259&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0366
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
Affected Products: n/a
References: [{'name': 'Q214840', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ214840'}, {'name': 'MS99-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-004'}]
CVE State: PUBLISHED
Explain CVE-1999-0368
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368'}]
CVE State: PUBLISHED
Explain CVE-1999-0369
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
Affected Products: n/a
References: [{'name': '00183', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/183'}]
CVE State: PUBLISHED
Explain CVE-1999-0370
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
Affected Products: n/a
References: [{'name': '165', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/165'}]
CVE State: PUBLISHED
Explain CVE-1999-0372
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
Affected Products: n/a
References: [{'name': 'Q217004', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004'}, {'name': 'MS99-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005'}]
CVE State: PUBLISHED
Explain CVE-1999-0373
Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0373'}]
CVE State: PUBLISHED
Explain CVE-1999-0375
Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0375'}]
CVE State: PUBLISHED
Explain CVE-1999-0376
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
Affected Products: n/a
References: [{'name': 'MS99-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-006'}]
CVE State: PUBLISHED
Explain CVE-1999-0377
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
Affected Products: n/a
References: [{'name': '1033881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033881'}]
CVE State: PUBLISHED
Explain CVE-1999-0378
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
Affected Products: n/a
References: [{'name': '6167', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6167'}]
CVE State: PUBLISHED
Explain CVE-1999-0379
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
Affected Products: n/a
References: [{'name': '1019', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1019'}, {'name': 'MS99-007', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-007'}, {'name': '498', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/498'}]
CVE State: PUBLISHED
Explain CVE-1999-0380
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
Affected Products: n/a
References: [{'name': '199902225 ALERT: SLMail 3.2 (and 3.1) with the Remote Administration Service', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91999015212415&w=2'}, {'name': '497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/497'}, {'name': 'SLmail 3.2 Build 3113 (Web Administration Security Fix)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92110501504997&w=2'}, {'name': '19990225 ALERT: SLMail 3.2 (and 3.1) with the Remote Administration Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91996412724720&w=2'}, {'name': 'slmail-ras-ntfs-bypass(5392)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5392'}]
CVE State: PUBLISHED
Explain CVE-1999-0381
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
Affected Products: n/a
References: [{'name': '19990225 SUPER buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.990225011801.12757A-100000%40eleet'}, {'name': '342', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/342'}]
CVE State: PUBLISHED
Explain CVE-1999-0382
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
Affected Products: n/a
References: [{'name': 'MS99-008', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-008'}]
CVE State: PUBLISHED
Explain CVE-1999-0383
ACC Tigris allows public access without a login.
Affected Products: n/a
References: [{'name': '267', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/267'}, {'name': '183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/183'}]
CVE State: PUBLISHED
Explain CVE-1999-0384
The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
Affected Products: n/a
References: [{'name': 'MS99-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-001'}]
CVE State: PUBLISHED
Explain CVE-1999-0385
The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
Affected Products: n/a
References: [{'name': 'MS99-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-009'}]
CVE State: PUBLISHED
Explain CVE-1999-0386
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
Affected Products: n/a
References: [{'name': '111', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/111'}, {'name': 'MS99-010', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-010'}]
CVE State: PUBLISHED
Explain CVE-1999-0387
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
Affected Products: n/a
References: [{'name': 'MS99-052', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-052'}, {'name': 'Q168115', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ168115'}, {'name': '829', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/829'}]
CVE State: PUBLISHED
Explain CVE-1999-0388
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
Affected Products: n/a
References: [{'name': '3186', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3186'}]
CVE State: PUBLISHED
Explain CVE-1999-0390
Buffer overflow in Dosemu Slang library in Linux.
Affected Products: n/a
References: [{'name': 'CSSA-1999-006.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-006.1.txt'}, {'name': '187', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/187'}]
CVE State: PUBLISHED
Explain CVE-1999-0391
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://marc.info/?l=bugtraq&m=91552769809542&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0393
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
Affected Products: n/a
References: [{'name': '19990121 Sendmail 8.8.x/8.9.x bugware', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91694391227372&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0395
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
Affected Products: n/a
References: [{'name': '19990118 Vulnerability in the BackWeb Polite Agent Protocol', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise17.php'}]
CVE State: PUBLISHED
Explain CVE-1999-0396
A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0396'}]
CVE State: PUBLISHED
Explain CVE-1999-0398
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0398'}]
CVE State: PUBLISHED
Explain CVE-1999-0399
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0399'}]
CVE State: PUBLISHED
Explain CVE-1999-0400
Denial of service in Linux 2.2.0 running the ldd command on a core file.
Affected Products: n/a
References: [{'name': '344', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/344'}]
CVE State: PUBLISHED
Explain CVE-1999-0403
A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
Affected Products: n/a
References: [{'name': '19990204 Cyrix bug: freeze in hell, badboy', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91821080015725&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0407
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
Affected Products: n/a
References: [{'name': '19990209 ALERT: IIS4 allows proxied password attacks over NetBIOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91983486431506&w=2'}, {'name': '19990209 Re: IIS4 allows proxied password attacks over NetBIOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92000623021036&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0408
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
Affected Products: n/a
References: [{'name': '337', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/337'}]
CVE State: PUBLISHED
Explain CVE-1999-0409
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Affected Products: n/a
References: [{'name': '319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/319'}]
CVE State: PUBLISHED
Explain CVE-1999-0410
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
Affected Products: n/a
References: [{'name': '293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/293'}]
CVE State: PUBLISHED
Explain CVE-1999-0411
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0411'}]
CVE State: PUBLISHED
Explain CVE-1999-0412
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Affected Products: n/a
References: [{'name': '501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/501'}]
CVE State: PUBLISHED
Explain CVE-1999-0413
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
Affected Products: n/a
References: [{'name': '19990301-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19990301-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-0414
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0414'}]
CVE State: PUBLISHED
Explain CVE-1999-0415
The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
Affected Products: n/a
References: [{'name': '19990311 Cisco 7xx TCP and HTTP Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/7xxconn-pub.shtml'}, {'name': 'J-034', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-034.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0416
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
Affected Products: n/a
References: [{'name': '19990311 Cisco 7xx TCP and HTTP Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/7xxconn-pub.shtml'}, {'name': 'J-034', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-034.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0417
64 bit Solaris 7 procfs allows local users to perform a denial of service.
Affected Products: n/a
References: [{'name': '448', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/448'}, {'name': '1001', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1001'}]
CVE State: PUBLISHED
Explain CVE-1999-0418
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
Affected Products: n/a
References: [{'name': '19990308 SMTP server account probing', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92100018214316&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0419
When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0419'}]
CVE State: PUBLISHED
Explain CVE-1999-0421
During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
Affected Products: n/a
References: [{'name': '981', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/981'}, {'name': '338', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/338'}]
CVE State: PUBLISHED
Explain CVE-1999-0422
In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0422'}]
CVE State: PUBLISHED
Explain CVE-1999-0423
Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX9903-093', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-093'}]
CVE State: PUBLISHED
Explain CVE-1999-0424
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0424'}]
CVE State: PUBLISHED
Explain CVE-1999-0425
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0425'}]
CVE State: PUBLISHED
Explain CVE-1999-0426
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0426'}]
CVE State: PUBLISHED
Explain CVE-1999-0427
Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0427'}]
CVE State: PUBLISHED
Explain CVE-1999-0429
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
Affected Products: n/a
References: [{'name': '19990326 Lotus Notes Encryption Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92246997917866&w=2'}, {'name': '19990323', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92221437025743&w=2'}, {'name': '19990326 Re: Lotus Notes security advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92249282302994&w=2'}, {'name': '19990324 Re: LNotes encryption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92241547418689&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0430
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload.
Affected Products: n/a
References: [{'name': '1103', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1103'}]
CVE State: PUBLISHED
Explain CVE-1999-0431
Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0431'}]
CVE State: PUBLISHED
Explain CVE-1999-0432
ftp on HP-UX 11.00 allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX9903-094', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-094'}]
CVE State: PUBLISHED
Explain CVE-1999-0433
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433'}]
CVE State: PUBLISHED
Explain CVE-1999-0434
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Affected Products: n/a
References: [{'name': '359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/359'}]
CVE State: PUBLISHED
Explain CVE-1999-0435
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0435'}]
CVE State: PUBLISHED
Explain CVE-1999-0436
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX9903-095', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-095'}]
CVE State: PUBLISHED
Explain CVE-1999-0438
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0438'}]
CVE State: PUBLISHED
Explain CVE-1999-0439
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0439'}]
CVE State: PUBLISHED
Explain CVE-1999-0440
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
Affected Products: n/a
References: [{'name': '1939', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1939'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://java.sun.com/pr/1999/03/pr990329-01.html'}, {'name': '19990405 Security Hole in Java 2 (and JDK 1.1.x)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92333596624452&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0441
Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.
Affected Products: n/a
References: [{'name': '509', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/509'}, {'name': 'AD02221999', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD02221999.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0443
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
Affected Products: n/a
References: [{'name': '19990409 Patrol security bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13204'}]
CVE State: PUBLISHED