Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-1452
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
Affected Products: n/a
References: [{'name': '19990205 Alert: MS releases GINA-fix for SP3, SP4, and TS', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91822011021558&w=2'}, {'name': '19990129 ole objects in a "secured" environment?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91788829326419&w=2'}, {'name': '19990129 ole objects in a "secured" environment?', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91764169410814&w=2'}, {'name': '198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/198'}, {'name': 'nt-gina-clipboard(1975)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1975'}, {'name': 'Q214802', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q214/8/02.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1453
Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.
Affected Products: n/a
References: [{'name': '19990222 New IE4 vulnerability : the clipboard again.', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91979439932341&w=2'}, {'name': '215', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/215'}]
CVE State: PUBLISHED
Explain CVE-1999-1454
Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key.
Affected Products: n/a
References: [{'name': '19991004 Weakness In "The Matrix" Screensaver For Windows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93915027622690&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1455
RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.
Affected Products: n/a
References: [{'name': 'nt-rshsvc-ale-bypass(7422)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7422'}, {'name': 'Q158320', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q158/3/20.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1456
thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.acme.com/software/thttpd/thttpd.html#releasenotes'}, {'name': 'thttpd-file-read(1809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1809'}, {'name': '19980819 thttpd 2.04 released (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/10368'}]
CVE State: PUBLISHED
Explain CVE-1999-1457
Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
Affected Products: n/a
References: [{'name': '19991116 thttpd', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_30.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1458
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.
Affected Products: n/a
References: [{'name': '19990125 Digital Unix 4.0 exploitable buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12121'}, {'name': 'du-at(3138)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3138'}, {'name': 'SSRT0583U', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://ftp1.support.compaq.com/public/dunix/v4.0d/ssrt0583u.README'}]
CVE State: PUBLISHED
Explain CVE-1999-1459
BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': 'bmc-patrol-file-create(1388)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1388'}, {'name': '19981102 BMC PATROL File Creation Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise10.php'}, {'name': '534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/534'}]
CVE State: PUBLISHED
Explain CVE-1999-1460
BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program.
Affected Products: n/a
References: [{'name': '19990713 Root Perms Gained with Patrol SNMP Agent 3.2 (all others?)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93198293132463&w=2'}, {'name': '19990801 Re: Root Perms Gained with Patrol SNMP Agent 3.2 (all others?)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93372579004129&w=2'}, {'name': '525', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/525'}]
CVE State: PUBLISHED
Explain CVE-1999-1461
inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.
Affected Products: n/a
References: [{'name': '19970507 Irix: misc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420921&w=2'}, {'name': '381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/381'}, {'name': '20001101-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I'}]
CVE State: PUBLISHED
Explain CVE-1999-1462
Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
Affected Products: n/a
References: [{'name': '142', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/142'}, {'name': '19990426 FW: Security Notice: Big Brother 1.09b/c', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/13440'}, {'name': 'http-cgi-bigbrother-bbhist(3755)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3755'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bb4.com/README.CHANGES'}]
CVE State: PUBLISHED
Explain CVE-1999-1463
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
Affected Products: n/a
References: [{'name': 'nt-frag(528)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/528'}, {'name': '19970710 A New Fragmentation Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/7219'}]
CVE State: PUBLISHED
Explain CVE-1999-1464
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564.
Affected Products: n/a
References: [{'name': 'J-016', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-016.shtml'}, {'name': '19981105 Cisco IOS DFS Access List Leakage', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml'}, {'name': 'cisco-acl-leakage(1401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1401'}]
CVE State: PUBLISHED
Explain CVE-1999-1465
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.
Affected Products: n/a
References: [{'name': 'J-016', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-016.shtml'}, {'name': '19981105 Cisco IOS DFS Access List Leakage', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml'}, {'name': 'cisco-acl-leakage(1401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1401'}]
CVE State: PUBLISHED
Explain CVE-1999-1466
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword.
Affected Products: n/a
References: [{'name': 'CA-1992-20', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-20.html'}, {'name': '53', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/53'}]
CVE State: PUBLISHED
Explain CVE-1999-1467
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
Affected Products: n/a
References: [{'name': 'CA-1989-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1989-07.html'}, {'name': '5', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5'}, {'name': 'sun-rcp(3165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3165'}]
CVE State: PUBLISHED
Explain CVE-1999-1468
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html'}, {'name': '31', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/31'}, {'name': '8106', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8106'}, {'name': 'rdist-popen-gain-privileges(7160)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7160.php'}, {'name': 'CA-91.20', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-91.20.rdist.vulnerability'}]
CVE State: PUBLISHED
Explain CVE-1999-1469
Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.
Affected Products: n/a
References: [{'name': '19990930 mini-sql Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93871926821410&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1470
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': '19990624 Eastman Software Work Management 3.21', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93034788412494&w=2'}, {'name': 'eastman-cleartext-passwords(2303)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2303'}, {'name': '485', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/485'}]
CVE State: PUBLISHED
Explain CVE-1999-1471
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.
Affected Products: n/a
References: [{'name': 'bsd-passwd-bo(7152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7152.php'}, {'name': '4', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4'}, {'name': 'CA-1989-01', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1989-01.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1472
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.microsoft.com/Windows/ie/security/freiburg.asp'}, {'name': '7819', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7819'}, {'name': 'Q176794', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q176/7/94.asp'}, {'name': 'Q176697', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q176/6/97.asp'}, {'name': '19971017 Security Hole in Explorer 4.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87710897923098&w=2'}, {'name': 'http-ie-spy(587)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/587'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.insecure.org/sploits/Internet_explorer_4.0.hack.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1473
When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue."
Affected Products: n/a
References: [{'name': '7818', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7818'}, {'name': 'ie-page-redirect(7426)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7426.php'}, {'name': 'Q176697', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q176/6/97.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1474
PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.
Affected Products: n/a
References: [{'name': 'nt-ppt-patch(179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/179'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.microsoft.com/windows/ie/security/powerpoint.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1475
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
Affected Products: n/a
References: [{'name': '19991119 ProFTPd - mod_sqlpw.c', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/35483'}, {'name': '812', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/812'}]
CVE State: PUBLISHED
Explain CVE-1999-1476
A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem.
Affected Products: n/a
References: [{'name': 'Q163852', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q163/8/52.asp'}, {'name': 'pentium-crash(704)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/704'}]
CVE State: PUBLISHED
Explain CVE-1999-1477
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
Affected Products: n/a
References: [{'name': '663', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/663'}, {'name': '19990923 Linux GNOME exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/28717'}, {'name': 'gnome-espeaker-local-bo(3349)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3349'}]
CVE State: PUBLISHED
Explain CVE-1999-1478
The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.
Affected Products: n/a
References: [{'name': '19990716 FW: (Review ID: 85125) Hotspot crashes bringing down webserver', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93240220324183&w=2'}, {'name': "19990706 Bug in SUN's Hotspot VM", 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93138827429589&w=2'}, {'name': 'sun-hotspot-vm(2348)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2348'}, {'name': '522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/522'}]
CVE State: PUBLISHED
Explain CVE-1999-1479
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '2265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2265'}, {'name': 'http-cgi-textcounter(2052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2052'}, {'name': '19980624 textcounter.pl SECURITY HOLE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/9609'}]
CVE State: PUBLISHED
Explain CVE-1999-1480
(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
Affected Products: n/a
References: [{'name': '429', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/429'}]
CVE State: PUBLISHED
Explain CVE-1999-1481
Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
Affected Products: n/a
References: [{'name': '19991103 [squid]exploit for external authentication problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/33295'}, {'name': 'squid-proxy-auth-access(3433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3433'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.2/bugs/'}, {'name': '741', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/741'}, {'name': '19991025 [squid] exploit for external authentication problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/33295'}]
CVE State: PUBLISHED
Explain CVE-1999-1482
SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
Affected Products: n/a
References: [{'name': '19990219 Security hole: "zgv"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-02-15&msg=Pine.LNX.3.96.990219175605.9622A-100000%40ferret.lmh.ox.ac.uk'}]
CVE State: PUBLISHED
Explain CVE-1999-1483
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Affected Products: n/a
References: [{'name': '19970619 svgalib/zgv', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/7041'}]
CVE State: PUBLISHED
Explain CVE-1999-1484
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.
Affected Products: n/a
References: [{'name': '668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/668'}, {'name': 'msn-setup-bbs-activex-bo(3310)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3310'}, {'name': '19990924 Several ActiveX Buffer Overruns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/28719'}]
CVE State: PUBLISHED
Explain CVE-1999-1485
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
Affected Products: n/a
References: [{'name': 'sgi-nsd-view(2246)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2246'}, {'name': '412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/412'}, {'name': '19990531 IRIX 6.5 nsd virtual filesystem vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92818552106912&w=2'}, {'name': '8564', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8564'}, {'name': 'sgi-nsd-create(2247)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2247'}]
CVE State: PUBLISHED
Explain CVE-1999-1486
sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info'}, {'name': 'IX75554', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only'}, {'name': 'IX76330', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only'}, {'name': '408', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/408'}, {'name': 'aix-sadc-timex(7675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7675'}, {'name': 'IX76853', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IX76853&apar=only'}]
CVE State: PUBLISHED
Explain CVE-1999-1487
Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.
Affected Products: n/a
References: [{'name': 'IX74599', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/servlet/support/manager?rt=0&rs=0&org=apars&doc=41D8B61D1E1C4FAB852567C9002C546C'}, {'name': 'aix-digest(7477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7477.php'}, {'name': '405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/405'}]
CVE State: PUBLISHED
Explain CVE-1999-1488
sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
Affected Products: n/a
References: [{'name': '371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/371'}, {'name': 'I-079A', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/i-079a.shtml'}, {'name': 'ibm-sdr-read-files(7217)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7217.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1489
Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.
Affected Products: n/a
References: [{'name': '364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/364'}, {'name': '19970304 Linux SuperProbe exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/6384'}]
CVE State: PUBLISHED
Explain CVE-1999-1490
xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
Affected Products: n/a
References: [{'name': '19980529 Re: Tiresome security hole in "xosview" (xosexp.c)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101926034&w=2'}, {'name': '19980528 ALERT: Tiresome security hole in "xosview", RedHat5.1?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101926021&w=2'}, {'name': '362', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/362'}, {'name': 'linux-xosview-bo(8787)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8787.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1491
abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
Affected Products: n/a
References: [{'name': '354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/354'}, {'name': '19960202 abuse Red Hat 2.1 security hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167418994&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1492
Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges.
Affected Products: n/a
References: [{'name': 'sgi-diskperf(2103)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2103'}, {'name': '348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/348'}, {'name': 'sgi-diskalign(2104)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2104'}, {'name': '19980502-01-P3030', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030'}]
CVE State: PUBLISHED
Explain CVE-1999-1493
Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk().
Affected Products: n/a
References: [{'name': 'apollo-crp-root-access(7158)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7158'}, {'name': 'CA-1991-23', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1991-23.html'}, {'name': '34', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34'}]
CVE State: PUBLISHED
Explain CVE-1999-1494
colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
Affected Products: n/a
References: [{'name': '19950209-00-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19950209-01-P'}, {'name': '336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/336'}, {'name': '19950307 sigh. another Irix 5.2 hole.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.tryc.on.ca/archives/bugtraq/1995_1/0614.html'}, {'name': '19940809 Re: IRIX 5.2 Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/675'}, {'name': 'sgi-colorview(2112)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2112'}]
CVE State: PUBLISHED
Explain CVE-1999-1495
xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
Affected Products: n/a
References: [{'name': 'xtvscreen-overwrite(1792)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1792'}, {'name': '19990218 xtvscreen and suse 6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12580'}, {'name': '325', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/325'}]
CVE State: PUBLISHED
Explain CVE-1999-1496
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
Affected Products: n/a
References: [{'name': '19990608 unneeded information in sudo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/14665'}, {'name': '321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/321'}, {'name': 'sudo-file-exists(2277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2277'}]
CVE State: PUBLISHED
Explain CVE-1999-1497
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Affected Products: n/a
References: [{'name': "19991221 [w00giving '99 #11] IMail's password encryption scheme", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/39329'}, {'name': '880', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/880'}]
CVE State: PUBLISHED
Explain CVE-1999-1498
Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.
Affected Products: n/a
References: [{'name': '82', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/82'}]
CVE State: PUBLISHED
Explain CVE-1999-1499
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
Affected Products: n/a
References: [{'name': '19980410 BIND 4.9.7 named follows symlinks, clobbers anything', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8966'}, {'name': '80', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/80'}]
CVE State: PUBLISHED
Explain CVE-1999-1500
Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.
Affected Products: n/a
References: [{'name': '19991001 Vulnerabilities in the Internet Anywhere Mail Server', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93880357530599&w=2'}, {'name': '733', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/733'}]
CVE State: PUBLISHED
Explain CVE-1999-1501
(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '19980408 SGI O2 ipx security issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=89217373930054&w=2'}, {'name': '70', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/70'}, {'name': '71', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71'}]
CVE State: PUBLISHED
Explain CVE-1999-1502
Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.
Affected Products: n/a
References: [{'name': '68', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/68'}, {'name': '69', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/69'}, {'name': '19980408 QuakeI client: serious holes.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=89205623028934&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1503
Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field.
Affected Products: n/a
References: [{'name': '63', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/63'}]
CVE State: PUBLISHED
Explain CVE-1999-1504
Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Affected Products: n/a
References: [{'name': '62', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62'}, {'name': '19980408 Re: AppleShare IP Mail Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/8951'}]
CVE State: PUBLISHED
Explain CVE-1999-1505
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
Affected Products: n/a
References: [{'name': '19980407 QW vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=89200537415923&w=2'}, {'name': '60', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60'}]
CVE State: PUBLISHED
Explain CVE-1999-1506
Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
Affected Products: n/a
References: [{'name': '6', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6'}, {'name': 'CA-1990-01', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-90.01.sun.sendmail.vulnerability'}]
CVE State: PUBLISHED
Explain CVE-1999-1507
Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash.
Affected Products: n/a
References: [{'name': '59', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59'}, {'name': 'CA-1993-03', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-03.html'}, {'name': 'sun-dir(521)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/521'}]
CVE State: PUBLISHED
Explain CVE-1999-1508
Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.
Affected Products: n/a
References: [{'name': '19991116 [Fwd: Printer Vulnerability: Tektronix PhaserLink Webserver gives Administrator Password]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94286041430870&w=2'}, {'name': '806', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/806'}]
CVE State: PUBLISHED
Explain CVE-1999-1509
Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.
Affected Products: n/a
References: [{'name': '773', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/773'}, {'name': '19991104 Eserv 2.50 Web interface Server Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94177470915423&w=2'}, {'name': '19991104 Eserv 2.50 Web interface Server Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94183041514522&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1510
Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.
Affected Products: n/a
References: [{'name': '19990517 Vulnerabilities in BisonWare FTP Server 3.5', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92697301706956&w=2'}, {'name': 'bisonware-command-bo(3234)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3234'}]
CVE State: PUBLISHED
Explain CVE-1999-1511
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.
Affected Products: n/a
References: [{'name': 'xtramail-pass-dos(3488)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3488'}, {'name': '19991110 Multiples Remotes DoS Attacks in Artisoft XtraMail v1.11 Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94226003804744&w=2'}, {'name': '791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/791'}]
CVE State: PUBLISHED
Explain CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.
Affected Products: n/a
References: [{'name': 'amavis-command-execute(2349)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2349'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.amavis.org/ChangeLog.txt'}, {'name': '19990716 AMaViS virus scanner for Linux - root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93219846414732&w=2'}, {'name': '527', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/527'}]
CVE State: PUBLISHED
Explain CVE-1999-1513
Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities.
Affected Products: n/a
References: [{'name': '19990830 One more 3Com SNMP vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93616983223090&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1514
Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command.
Affected Products: n/a
References: [{'name': '19990729 ExpressFS 2.x FTPServer remotely exploitable buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94121377716133&w=2'}, {'name': '19990729 ExpressFS 2.x FTPServer remotely exploitable buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94130292519646&w=2'}, {'name': '749', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/749'}, {'name': 'expressfs-command-bo(3401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3401'}]
CVE State: PUBLISHED
Explain CVE-1999-1515
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.
Affected Products: n/a
References: [{'name': '613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/613'}, {'name': 'tfs-gateway-dos(3290)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3290'}]
CVE State: PUBLISHED
Explain CVE-1999-1516
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
Affected Products: n/a
References: [{'name': '19990902 [SECURITY] TenFour TFS SMTP 3.2 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93677241318492&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1517
runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.
Affected Products: n/a
References: [{'name': '19991101 Amanda multiple vendor local root compromises', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94148942818975&w=2'}, {'name': '750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/750'}]
CVE State: PUBLISHED
Explain CVE-1999-1518
Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.
Affected Products: n/a
References: [{'name': '526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/526'}, {'name': "19990715 Shared memory DoS's", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93207728118694&w=2'}, {'name': 'bsd-shared-memory-dos(2351)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2351'}]
CVE State: PUBLISHED
Explain CVE-1999-1519
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.
Affected Products: n/a
References: [{'name': 'g6ftp-username-dos(3513)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3513'}, {'name': '19991117 Remote D.o.S Attack in G6 FTP Server v2.0 (beta 4/5) Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94286244700573&w=2'}, {'name': '805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/805'}]
CVE State: PUBLISHED
Explain CVE-1999-1520
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
Affected Products: n/a
References: [{'name': 'siteserver-site-csc(2270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2270'}, {'name': '256', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/256'}, {'name': '19990511 [ALERT] Site Server 3.0 May Expose SQL IDs and PSWs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92647407227303&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1521
Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.
Affected Products: n/a
References: [{'name': 'cmail-command-bo(2240)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2240'}, {'name': '19990912 Many kind of POP3/SMTP server softwares for Windows have buffer overflow bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93720402717560&w=2'}, {'name': '19990729 Vulnerability in CMail SMTP Server Version 2.4: Remotely exploitable buffer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94121824921783&w=2'}, {'name': '633', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/633'}]
CVE State: PUBLISHED
Explain CVE-1999-1522
Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.
Affected Products: n/a
References: [{'name': '19991007 Roxen security alert', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93942579008408&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1523
Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '19991004', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93901161727373&w=2'}, {'name': 'sambar-logging-bo(1672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1672'}, {'name': '19991006 Re: Sample DOS against the Sambar HTTP-Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93941351229256&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1524
FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.
Affected Products: n/a
References: [{'name': '19990807 Re: FlowPoint DSL router vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93424680430460&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1525
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
Affected Products: n/a
References: [{'name': 'shockwave-internal-access(1585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1585'}, {'name': 'shockwave-file-read-vuln(1586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1586'}, {'name': 'http-ns-shockwave(460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/460'}, {'name': '19970314 Shockwave Security Alert', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420670&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1526
Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
Affected Products: n/a
References: [{'name': '19990311 [Fwd: Shockwave 7 Security Hole]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/12842'}, {'name': 'shockwave-updater(1931)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1931'}]
CVE State: PUBLISHED