Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-1297
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key.
Affected Products: n/a
References: [{'name': '1077164', 'tags': ['issue-tracking', 'x_refsource_SUNBUG'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100452&zone_32=10045%2A%20'}, {'name': 'sun-cmdtool-echo(7482)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7482'}]
CVE State: PUBLISHED
Explain CVE-1999-1298
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-97:03', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-97:03.sysinstall.asc'}, {'name': '6087', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6087'}, {'name': 'freebsd-sysinstall-ftp-password(7537)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7537.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1299
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
Affected Products: n/a
References: [{'name': '19970203 Linux rcp bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420509&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1300
Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.
Affected Products: n/a
References: [{'name': 'B-31', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/b-31.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1301
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-96:17', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.asc'}, {'name': 'rzsz-command-execution(7540)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7540.php'}, {'name': 'G-31', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/g-31.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1302
Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.
Affected Products: n/a
References: [{'name': '94:001', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}, {'name': '8797', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/8797'}, {'name': 'F-05', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}, {'name': 'sco-pt_chmod(7586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7586'}, {'name': 'VB-94:01', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://ftp.cerias.purdue.edu/pub/advisories/cert/cert_bulletins/VB-94:01.sco'}]
CVE State: PUBLISHED
Explain CVE-1999-1303
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
Affected Products: n/a
References: [{'name': '94:001', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}, {'name': 'F-05', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1304
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
Affected Products: n/a
References: [{'name': '94:001', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}, {'name': 'F-05', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1305
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
Affected Products: n/a
References: [{'name': '94:001', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}, {'name': 'F-05', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-05.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1306
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters.
Affected Products: n/a
References: [{'name': 'CA-1992-20', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1992-20.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1307
Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'F-06', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-06.shtml'}, {'name': '19941209 Novell security advisory on sadc, urestore and the suid_exec feature', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1994_4/0676.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1308
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': 'hp-large-uid-gid(7594)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7594.php'}, {'name': 'H-91', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-91.shtml'}, {'name': 'H-09', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-09.shtml'}, {'name': 'HPSBUX9611-041', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-91.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1309
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.
Affected Products: n/a
References: [{'name': 'CA-1994-12', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-94.12.sendmail.vulnerabilities'}, {'name': '19940315 anyone know details?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1994_1/0042.html'}, {'name': '19940315 Security problem in sendmail versions 8.x.x', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1994_1/0048.html'}, {'name': '19940327 sendmail exploit script - resend', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1994_1/0078.html'}, {'name': 'sendmail-debug-gain-root(7155)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7155'}, {'name': '19940315 so...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1994_1/0043.html'}, {'name': '19940314 sendmail -d problem (OLD yet still here)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.dataguard.no/bugtraq/1994_1/0040.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1311
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
Affected Products: n/a
References: [{'name': 'H-21', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-21.shtml'}, {'name': 'HPSBUX9701-046', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/h-21.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1312
Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges.
Affected Products: n/a
References: [{'name': 'CA-1993-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1993-05.html'}, {'name': 'openvms-local-privilege-elevation(7142)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7142'}]
CVE State: PUBLISHED
Explain CVE-1999-1313
Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-96:11', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:11.man.asc'}, {'name': 'bsd-man-command-sequence(7348)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7348'}, {'name': 'G-24', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/g-24.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1314
Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-96:10', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:10.mount_union.asc'}, {'name': 'unionfs-mount-ordering(7429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7429.php'}, {'name': 'G-24', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/g-24.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1315
Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service.
Affected Products: n/a
References: [{'name': 'F-04', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/f-04.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1316
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.
Affected Products: n/a
References: [{'name': 'Q247975', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/Q247/9/75.asp'}, {'name': 'passfilt-fullname(7391)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7391'}]
CVE State: PUBLISHED
Explain CVE-1999-1317
Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.
Affected Products: n/a
References: [{'name': 'Q222159', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q222/1/59.asp'}, {'name': '19990314 AW: [ ALERT ] Case Sensitivity and Symbolic Links', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92162979530341&w=2'}, {'name': 'nt-symlink-case(7398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7398'}, {'name': '19990312 [ ALERT ] Case Sensitivity and Symbolic Links', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92127046701349&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1318
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs.
Affected Products: n/a
References: [{'name': 'sun-su-path(7480)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7480.php'}, {'name': '1121935', 'tags': ['issue-tracking', 'x_refsource_SUNBUG'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20'}]
CVE State: PUBLISHED
Explain CVE-1999-1319
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations.
Affected Products: n/a
References: [{'name': '19960101-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19960101-01-PX'}, {'name': 'irix-object-server(7430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7430.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1320
Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.
Affected Products: n/a
References: [{'name': 'netware-packet-spoofing-privileges(7213)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7213.php'}, {'name': 'D-01', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/d-01.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1321
Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing.
Affected Products: n/a
References: [{'name': '19981105 security patch for ssh-1.2.26 kerberos code', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://lists.netspace.org/cgi-bin/wa?A2=ind9811A&L=bugtraq&P=R4814'}, {'name': '4883', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4883'}]
CVE State: PUBLISHED
Explain CVE-1999-1322
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.
Affected Products: n/a
References: [{'name': '19981112 exchverify.log', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91096758513985&w=2'}, {'name': '19981117 Re: exchverify.log - update #1', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91133714919229&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1323
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE.
Affected Products: n/a
References: [{'name': '19990409 NAV for MS Exchange & Internet Email Gateways', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92370067416739&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1324
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing.
Affected Products: n/a
References: [{'name': 'openvms-sysgen-enabled(7225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7225'}, {'name': 'D-06', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/d-06.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1325
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'vaxvms-sas-gain-privileges(7261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7261'}, {'name': 'C-19', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/c-19.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-1326
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'wuftpd-abor-gain-privileges(7169)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7169'}, {'name': '19970105 BoS:  serious security bug in wu-ftpd v2.4 -- PATCH', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420408&w=2'}, {'name': '19970104 serious security bug in wu-ftpd v2.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602167420401&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1327
Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.
Affected Products: n/a
References: [{'name': '19980601 Re: SECURITY: Red Hat Linux 5.1 linuxconf bug (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221103125826&w=2'}, {'name': '6065', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6065'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf'}, {'name': 'linuxconf-lang-bo(7239)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7239.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1328
linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf'}, {'name': '19980823 Security concerns in linuxconf shipped w/RedHat 5.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90383955231511&w=2'}, {'name': '6068', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6068'}, {'name': 'linuxconf-symlink-gain-privileges(7232)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7232.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1329
Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh50-errata-general.html#SysVinit'}, {'name': 'sysvinit-root-bo(7250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7250.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1330
The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.
Affected Products: n/a
References: [{'name': 'linux-libdb-snprintf-bo(7244)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7244.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh42-errata-general.html#db'}, {'name': '19970709 [linux-security] so-called snprintf() in db-1.85.4 (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=87602661419259&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1331
netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh42-errata-general.html#netcfg'}, {'name': 'netcfg-ethernet-dos(7245)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7245.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1332
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': 'DSA-308', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-308'}, {'name': '7845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7845'}, {'name': 'gzip-gzexe-tmp-symlink(7241)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7241.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh50-errata-general.html#gzip'}, {'name': '19980128 GZEXE - the big problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88603844115233&w=2'}, {'name': '3812', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3812'}]
CVE State: PUBLISHED
Explain CVE-1999-1333
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
Affected Products: n/a
References: [{'name': 'ncftp-autodownload-command-execution(7240)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7240.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh50-errata-general.html#ncftp'}, {'name': '6111', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6111'}, {'name': '19980319 ncftp 2.4.2 MkDirs bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=89042322924057&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1334
Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.
Affected Products: n/a
References: [{'name': '19980129 KSR[T] Advisory #7: filter', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=88609666024181&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh50-errata-general.html#elm'}]
CVE State: PUBLISHED
Explain CVE-1999-1335
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/rh40-errata-general.html#cmu-snmp'}, {'name': 'cmusnmp-read-write(7251)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7251'}]
CVE State: PUBLISHED
Explain CVE-1999-1336
3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port.
Affected Products: n/a
References: [{'name': '19990816 Re: 3com hiperarch flaw [hiperbomb.c]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93492615408725&w=2'}, {'name': '6057', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6057'}, {'name': '19990812 3com hiperarch flaw [hiperbomb.c]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93458364903256&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1337
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
Affected Products: n/a
References: [{'name': '5921', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5921'}, {'name': 'midnight-commander-data-disclosure(9873)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9873.php'}, {'name': '19990801 midnight commander vulnerability(?) (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93370073207984&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1338
Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
Affected Products: n/a
References: [{'name': '19990721 Delegate creates directories writable for anyone', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93259112204664&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1339
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz'}, {'name': '19990722 Linux +ipchains+ ping -R', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93277426802802&w=2'}, {'name': '6105', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6105'}, {'name': '19990722 Re: ping -R causes kernel panic on a forwarding machine ( 2.2.5 a nd 2 .2.10)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93277766505061&w=2'}, {'name': 'ipchains-ping-route-dos(7257)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7257.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1340
Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.
Affected Products: n/a
References: [{'name': '19991104 hylafax-4.0.2 local exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94173799532589&w=2'}, {'name': '765', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/765'}]
CVE State: PUBLISHED
Explain CVE-1999-1341
Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.
Affected Products: n/a
References: [{'name': 'linux-tiocsetd-forge-packets(7858)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7858'}, {'name': '19991022 Local user can send forged packets', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=94061108411308&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1342
ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.
Affected Products: n/a
References: [{'name': '19991017 ICQ ActiveList Server Exploit...', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94042342010662&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1343
HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.
Affected Products: n/a
References: [{'name': '19991013 Xerox DocuColor 4 LP D.O.S', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93986405412867&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1344
Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
Affected Products: n/a
References: [{'name': '19991005 Auto_FTP v0.02 Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93923873006014&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1345
Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.
Affected Products: n/a
References: [{'name': '19991005 Auto_FTP v0.02 Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93923873006014&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1346
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.
Affected Products: n/a
References: [{'name': '19991007 Problems with redhat 6 Xsession and pam.d/rlogin.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93942774609925&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1347
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.
Affected Products: n/a
References: [{'name': '19991007 Problems with redhat 6 Xsession and pam.d/rlogin.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93942774609925&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1348
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service.
Affected Products: n/a
References: [{'name': "19990630 linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93220073515880&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1349
NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag set, to port 111.
Affected Products: n/a
References: [{'name': '19991006 Omni-NFS/X Enterprise  (nfsd.exe) DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93923679004325&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1350
ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.
Affected Products: n/a
References: [{'name': '19990929 Multiple Vendor ARCAD permission problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93871933521519&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1351
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
Affected Products: n/a
References: [{'name': 'kvirc-dot-directory-traversal(7761)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7761.php'}, {'name': '19990924 Kvirc bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93845560631314&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1352
mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
Affected Products: n/a
References: [{'name': '19990928 Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93855134409747&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1353
Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': '19990907 MsgCore mailserver stores passwords in clear text', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93698162708211&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1354
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.
Affected Products: n/a
References: [{'name': "19990909 SoftArc's FirstClass E-mail Client", 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93698283309513&w=2'}, {'name': "19990830 SoftArc's FirstClass E-mail Client", 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93637687305327&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1355
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.compaq.com/products/servers/management/advisory.html'}, {'name': '19990817 Compaq PFCUser account', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93542118727732&w=2'}, {'name': '19990915 (I) UPDATE - PFCUser Account,', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93759822430801&w=2'}, {'name': 'management-pfcuser(3231)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3231'}, {'name': '19991105 UPDATE: SSRT0620 Compaq Foundation Agents v4.40B  PFCUser issues', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=94183795025294&w=2'}, {'name': '19990905 Case ID  SSRT0620  - PFCUser account communication', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93654336516711&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1356
Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (LegalNoticeCaption) and text (LegalNoticeText) in Windows NT, which could produce a legal notice that is in violation of the security policy.
Affected Products: n/a
References: [{'name': 'compaq-smartstart-legal-notice(7763)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7763.php'}, {'name': '19990902 Compaq CIM UG Overwrites Legal Notice', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93637792706047&w=2'}, {'name': '19990902 Compaq CIM UG Overwrites Legal Notice', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93646669500991&w=2'}, {'name': '19990917 Re: Compaq CIM UG Overwrites Legal Notice', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93759822830815&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1357
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
Affected Products: n/a
References: [{'name': '19991005 Time to update those CGIs again', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93915331626185&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1358
When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.
Affected Products: n/a
References: [{'name': 'Q157673', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q157/6/73.asp'}, {'name': 'nt-user-policy-update(7400)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7400.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1359
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.
Affected Products: n/a
References: [{'name': 'nt-group-policy-longname(7401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7401.php'}, {'name': 'Q163875', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q163/8/75.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1360
Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.
Affected Products: n/a
References: [{'name': 'nt-kernel-handle-dos(7402)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7402.php'}, {'name': 'Q160650', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q160/6/50.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1361
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.
Affected Products: n/a
References: [{'name': '19980509 coke.c', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=90221101925891&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1362
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.
Affected Products: n/a
References: [{'name': 'nt-win32k-dos(7403)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7403.php'}, {'name': 'Q160601', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q160/6/01.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1363
Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.
Affected Products: n/a
References: [{'name': 'Q163143', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q163/1/43.asp'}, {'name': 'nt-nonpagedpool-dos(7405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7405.php'}]
CVE State: PUBLISHED
Explain CVE-1999-1364
Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext.
Affected Products: n/a
References: [{'name': 'nt-threadcontext-dos(7421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7421.php'}, {'name': 'Q142653', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/support/kb/articles/q142/6/53.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1365
Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default.
Affected Products: n/a
References: [{'name': '515', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/515'}, {'name': '19990628 NT runs Explorer.exe, Taskmgr.exe etc. from wrong location', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93069418400856&w=2'}, {'name': '19990630 Update: NT runs explorer.exe, etc...', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=93127894731200&w=2'}, {'name': 'nt-login-default-folder(2336)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2336'}]
CVE State: PUBLISHED
Explain CVE-1999-1366
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.
Affected Products: n/a
References: [{'name': '19990515 Pegasus Mail weak encryption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92714118829880&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1367
Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp'}]
CVE State: PUBLISHED
Explain CVE-1999-1368
AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox.
Affected Products: n/a
References: [{'name': '19990512 InoculateIT 4.53 Real-Time Exchange Scanner Flawed', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92652152723629&w=2'}, {'name': '20001116 InoculateIT AV Option for MS Exchange Server', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=97439568517355&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1369
Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '19990414 Real Media Server stores passwords in plain text', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92411181619110&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1370
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.
Affected Products: n/a
References: [{'name': '19990323 MSIE 5 installer disables screen saver', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=92220197414799&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1371
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
Affected Products: n/a
References: [{'name': '19990308 Solaris "/usr/bin/write" bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92100752221493&w=2'}, {'name': 'solaris-write-bo(7546)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7546'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5ZP0O1P35O.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1372
Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges.
Affected Products: n/a
References: [{'name': "19990219 Plaintext Password in Tractive's Remote Manager Software", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91966339502073&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1373
FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via nmap.
Affected Products: n/a
References: [{'name': '19990105 Re: Network Scan Vulnerability [SUMMARY]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91651770130771&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1374
perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.
Affected Products: n/a
References: [{'name': '19990427 Re: Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92523159819402&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1375
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.
Affected Products: n/a
References: [{'name': '230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/230'}, {'name': '19990211 Using FSO in ASP to view just about anything', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91877455626320&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1376
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '19990114 MS IIS 4.0 Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91638375309890&w=2'}, {'name': '19990114 MS IIS 4.0 Security Advisory', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=91632724913080&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1377
Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://pulhas.org/phrack/55/P55-07.html'}]
CVE State: PUBLISHED
Explain CVE-1999-1378
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': '19990917 improper chroot in dbmlparser.exe', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93250710625956&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-1379
DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.
Affected Products: n/a
References: [{'name': 'J-063', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-063.shtml'}, {'name': 'dns-udp-query-dos(7238)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7238.php'}, {'name': '19990730 Possible Denial Of Service using DNS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93348057829957&w=2'}, {'name': 'AL-1999.004', 'tags': ['third-party-advisory', 'x_refsource_AUSCERT'], 'url': 'ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos'}, {'name': '19990810 Possible Denial Of Service using DNS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=93433758607623&w=2'}]
CVE State: PUBLISHED