Anusha64/LoanDataSet huggingface dataset:
Explain CVE-1999-0444
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://marc.info/?l=bugtraq&m=92394891221029&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0445
In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
Affected Products: n/a
References: [{'name': '1104', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1104'}]
CVE State: PUBLISHED
Explain CVE-1999-0446
Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
Affected Products: n/a
References: [{'name': '7051', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7051'}]
CVE State: PUBLISHED
Explain CVE-1999-0447
Local users can gain privileges using the debug utility in the MPE/iX operating system.
Affected Products: n/a
References: [{'name': 'HPSBMP9904-006', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMP9904-006'}]
CVE State: PUBLISHED
Explain CVE-1999-0448
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0448'}]
CVE State: PUBLISHED
Explain CVE-1999-0449
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
Affected Products: n/a
References: [{'name': '2', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2'}, {'name': '3', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3'}, {'name': '4', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4'}, {'name': '193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/193'}]
CVE State: PUBLISHED
Explain CVE-1999-0450
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
Affected Products: n/a
References: [{'name': '194', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/194'}]
CVE State: PUBLISHED
Explain CVE-1999-0451
Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
Affected Products: n/a
References: [{'name': '343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/343'}]
CVE State: PUBLISHED
Explain CVE-1999-0453
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0453'}]
CVE State: PUBLISHED
Explain CVE-1999-0454
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2048'}]
CVE State: PUBLISHED
Explain CVE-1999-0455
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
Affected Products: n/a
References: [{'name': '115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/115'}]
CVE State: PUBLISHED
Explain CVE-1999-0458
L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
Affected Products: n/a
References: [{'name': '915', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/915'}]
CVE State: PUBLISHED
Explain CVE-1999-0461
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0461'}]
CVE State: PUBLISHED
Explain CVE-1999-0462
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
Affected Products: n/a
References: [{'name': '339', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/339'}]
CVE State: PUBLISHED
Explain CVE-1999-0463
Remote attackers can perform a denial of service using IRIX fcagent.
Affected Products: n/a
References: [{'name': '19981201-01-PX', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19981201-01-PX'}]
CVE State: PUBLISHED
Explain CVE-1999-0464
Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=bugtraq&m=91592136122066&w=2'}, {'name': '19990104 Tripwire mess..', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91553066310826&w=2'}, {'name': '6609', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6609'}]
CVE State: PUBLISHED
Explain CVE-1999-0466
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
Affected Products: n/a
References: [{'name': '905', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/905'}]
CVE State: PUBLISHED
Explain CVE-1999-0467
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0467'}]
CVE State: PUBLISHED
Explain CVE-1999-0468
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
Affected Products: n/a
References: [{'name': 'MS99-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012'}]
CVE State: PUBLISHED
Explain CVE-1999-0469
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0469'}]
CVE State: PUBLISHED
Explain CVE-1999-0470
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
Affected Products: n/a
References: [{'name': '482', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/482'}]
CVE State: PUBLISHED
Explain CVE-1999-0471
The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0471'}]
CVE State: PUBLISHED
Explain CVE-1999-0472
The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0472'}]
CVE State: PUBLISHED
Explain CVE-1999-0473
The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
Affected Products: n/a
References: [{'name': '145', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/145'}]
CVE State: PUBLISHED
Explain CVE-1999-0475
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0475'}]
CVE State: PUBLISHED
Explain CVE-1999-0476
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0476'}]
CVE State: PUBLISHED
Explain CVE-1999-0477
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
Affected Products: n/a
References: [{'name': '115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/115'}]
CVE State: PUBLISHED
Explain CVE-1999-0478
Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.
Affected Products: n/a
References: [{'name': 'HPSBUX9904-097', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9904-097'}]
CVE State: PUBLISHED
Explain CVE-1999-0479
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
Affected Products: n/a
References: [{'name': 'HPSBUX9903-092', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-092'}]
CVE State: PUBLISHED
Explain CVE-1999-0486
Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0486'}]
CVE State: PUBLISHED
Explain CVE-1999-0487
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
Affected Products: n/a
References: [{'name': 'MS99-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-011'}]
CVE State: PUBLISHED
Explain CVE-1999-0488
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.
Affected Products: n/a
References: [{'name': 'MS99-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012'}]
CVE State: PUBLISHED
Explain CVE-1999-0489
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.
Affected Products: n/a
References: [{'name': 'MS99-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015'}]
CVE State: PUBLISHED
Explain CVE-1999-0490
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
Affected Products: n/a
References: [{'name': 'MS99-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012'}]
CVE State: PUBLISHED
Explain CVE-1999-0491
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
Affected Products: n/a
References: [{'name': '19990420 Bash Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9904202114070.6623-100000%40smooth.Operator.org'}, {'name': 'CSSA-1999-008.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-008.0.txt'}, {'name': '119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/119'}]
CVE State: PUBLISHED
Explain CVE-1999-0493
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.
Affected Products: n/a
References: [{'name': '19990103 SUN almost has a clue! (automountd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=91547759121289&w=2'}, {'name': 'J-045', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-045.shtml'}, {'name': '00186', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba'}, {'name': '450', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/450'}, {'name': 'CA-99-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-99-05-statd-automountd.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0496
A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin.
Affected Products: n/a
References: [{'name': 'Q146965', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ146965'}]
CVE State: PUBLISHED
Explain CVE-1999-0509
Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/146'}]
CVE State: PUBLISHED
Explain CVE-1999-0513
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0513'}]
CVE State: PUBLISHED
Explain CVE-1999-0514
UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0514'}]
CVE State: PUBLISHED
Explain CVE-1999-0515
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0515'}]
CVE State: PUBLISHED
Explain CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
Affected Products: n/a
References: [{'name': 'icmp-timestamp(322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/322'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10053'}, {'tags': ['x_refsource_MISC'], 'url': 'http://descriptions.securescout.com/tc/11010'}, {'name': 'icmp-netmask(306)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/306'}, {'tags': ['x_refsource_MISC'], 'url': 'http://descriptions.securescout.com/tc/11011'}, {'name': '95', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/95'}, {'tags': ['x_refsource_MISC'], 'url': 'http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1434'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705'}]
CVE State: PUBLISHED
Explain CVE-1999-0526
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
Affected Products: n/a
References: [{'name': 'VU#704969', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/704969'}]
CVE State: PUBLISHED
Explain CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate.  For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6253'}]
CVE State: PUBLISHED
Explain CVE-1999-0529
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0529'}]
CVE State: PUBLISHED
Explain CVE-1999-0534
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0534'}]
CVE State: PUBLISHED
Explain CVE-1999-0535
A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0535'}]
CVE State: PUBLISHED
Explain CVE-1999-0537
A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0537'}]
CVE State: PUBLISHED
Explain CVE-1999-0551
HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
Affected Products: n/a
References: [{'name': 'HPSBUX9804-078', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9804-078'}]
CVE State: PUBLISHED
Explain CVE-1999-0562
The registry in Windows NT can be accessed remotely by users who are not administrators.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:1023', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1023'}]
CVE State: PUBLISHED
Explain CVE-1999-0564
An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0564'}]
CVE State: PUBLISHED
Explain CVE-1999-0566
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0566'}]
CVE State: PUBLISHED
Explain CVE-1999-0569
A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0569'}]
CVE State: PUBLISHED
Explain CVE-1999-0571
A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0571'}]
CVE State: PUBLISHED
Explain CVE-1999-0575
A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0575'}]
CVE State: PUBLISHED
Explain CVE-1999-0582
A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0582'}]
CVE State: PUBLISHED
Explain CVE-1999-0587
A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0587'}]
CVE State: PUBLISHED
Explain CVE-1999-0593
The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
Affected Products: n/a
References: [{'name': '59333', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/59333'}, {'name': 'nt-shutdown-without-logon(1291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1291'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.microsoft.com/technet/archive/winntas/deploy/confeat/06wntpcc.mspx?mfr=true'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://technet.microsoft.com/en-us/library/cc722469.aspx'}]
CVE State: PUBLISHED
Explain CVE-1999-0598
A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0599
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0601
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0603
In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cve.org/CVERecord?id=CVE-1999-0603'}]
CVE State: PUBLISHED
Explain CVE-1999-0604
An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
Affected Products: n/a
References: [{'name': '19990420 Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92462991805485&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0605
An incorrect configuration of the Order Form 1.0 shopping cart  CGI program could disclose private information.
Affected Products: n/a
References: [{'name': '19990420 Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92462991805485&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0606
An incorrect configuration of the EZMall 2000 shopping cart  CGI program "mall2000.cgi" could disclose private information.
Affected Products: n/a
References: [{'name': '19990420 Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92462991805485&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0607
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
Affected Products: n/a
References: [{'name': '19990420 Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92462991805485&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0608
An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
Affected Products: n/a
References: [{'name': '19990420 Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92462991805485&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pdgsoft.com/Security/security.html.'}, {'name': 'pdgsoftcart-misconfig(3857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3857'}]
CVE State: PUBLISHED
Explain CVE-1999-0609
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
Affected Products: n/a
References: [{'name': '19990420 Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92462991805485&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0610
An incorrect configuration of the Webcart CGI program could disclose private information.
Affected Products: n/a
References: [{'name': '19990420 Shopping Carts exposing CC data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92462991805485&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0635
The echo service is running.
Affected Products: n/a
References: [{'name': '18514', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18514'}, {'name': '20060116 ACT P202S VoIP wireless phone multiple undocumented ports/services', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0650
The netstat service is running, which provides sensitive information to remote attackers.
Affected Products: n/a
References: [{'name': 'netstat(72)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72'}]
CVE State: PUBLISHED
Explain CVE-1999-0656
The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
Affected Products: n/a
References: [{'name': 'linux-ugidd(348)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/348'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638'}]
CVE State: PUBLISHED
Explain CVE-1999-0661
A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.
Affected Products: n/a
References: [{'name': '20021009 Re: CERT Advisory CA-2002-28 Trojan Horse Sendmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/294539'}, {'name': 'sendmail-backdoor(10313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10313.php'}, {'name': '5921', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5921'}, {'name': 'CA-1999-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1999-02.html'}, {'name': '20020801 OpenSSH Security Advisory:  Trojaned Distribution Files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102821663814127&w=2'}, {'name': 'CA-1994-14', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1994-14.html'}, {'name': '20020801 trojan horse in recent openssh (version 3.4 portable 1)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102820843403741&w=2'}, {'name': 'CA-1999-01', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1999-01.html'}, {'name': 'CA-1994-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-1994-07.html'}, {'name': 'CA-2002-28', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-28.html'}]
CVE State: PUBLISHED
Explain CVE-1999-0662
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0662'}]
CVE State: PUBLISHED
Explain CVE-1999-0667
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://marc.info/?l=bugtraq&m=87602880019797&w=2'}]
CVE State: PUBLISHED
Explain CVE-1999-0668
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Affected Products: n/a
References: [{'name': 'J-064', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-064.shtml'}, {'name': 'MS99-032', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032'}, {'name': 'Q240308', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308'}, {'name': '598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/598'}]
CVE State: PUBLISHED
Explain CVE-1999-0669
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Affected Products: n/a
References: [{'name': 'J-064', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-064.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0670
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'J-064', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/j-064.shtml'}, {'name': 'MS99-032', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032'}]
CVE State: PUBLISHED
Explain CVE-1999-0674
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
Affected Products: n/a
References: [{'name': '570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/570'}, {'name': 'J-067', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-067.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0675
Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
Affected Products: n/a
References: [{'name': '19990809 FW1 UDP Port 0 DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/23615'}, {'name': '576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/576'}, {'name': '1038', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1038'}]
CVE State: PUBLISHED
Explain CVE-1999-0676
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Affected Products: n/a
References: [{'name': '575', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/575'}, {'name': '19990808 sdtcm_convert', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=19990809134220.A1191%40hades.chaoz.org'}]
CVE State: PUBLISHED
Explain CVE-1999-0678
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
Affected Products: n/a
References: [{'name': '318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/318'}]
CVE State: PUBLISHED
Explain CVE-1999-0679
Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.efnet.org/archive/servers/hybrid/ChangeLog'}, {'name': '581', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/581'}]
CVE State: PUBLISHED
Explain CVE-1999-0680
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
Affected Products: n/a
References: [{'name': 'J-057', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-057.shtml'}, {'name': 'Q238600', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238600'}, {'name': 'MS99-028', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-028'}, {'name': '571', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/571'}]
CVE State: PUBLISHED
Explain CVE-1999-0681
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
Affected Products: n/a
References: [{'name': '19990807 Crash FrontPage Remotely...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/1999-q3/0381.html'}, {'name': '568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/568'}, {'name': 'frontpage-pws-dos(3117)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3117'}]
CVE State: PUBLISHED
Explain CVE-1999-0682
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
Affected Products: n/a
References: [{'name': 'Q237927', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237927'}, {'name': 'J-056', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-056.shtml'}, {'name': '567', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/567'}, {'name': 'MS99-027', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-027'}]
CVE State: PUBLISHED
Explain CVE-1999-0683
Denial of service in Gauntlet Firewall via a malformed ICMP packet.
Affected Products: n/a
References: [{'name': '1029', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1029'}, {'name': '556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/556'}]
CVE State: PUBLISHED
Explain CVE-1999-0686
Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
Affected Products: n/a
References: [{'name': 'J-046', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-046.shtml'}, {'name': 'HPSBUX9906-098', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-098'}]
CVE State: PUBLISHED
Explain CVE-1999-0687
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
Affected Products: n/a
References: [{'name': 'K-001', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/k-001.shtml'}, {'name': 'HPSBUX9909-103', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103'}, {'name': '00192', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192'}, {'name': '637', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/637'}]
CVE State: PUBLISHED
Explain CVE-1999-0688
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
Affected Products: n/a
References: [{'name': 'HPSBUX9907-101', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-101'}, {'name': '545', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/545'}]
CVE State: PUBLISHED
Explain CVE-1999-0689
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:1880', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1880'}, {'name': 'HPSBUX9909-103', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103'}, {'name': '00192', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192'}, {'name': '636', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/636'}]
CVE State: PUBLISHED
Explain CVE-1999-0690
HP CDE program includes the current directory in root's PATH variable.
Affected Products: n/a
References: [{'name': 'HPSBUX9907-100', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-100'}, {'name': 'J-053', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-053.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0691
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:3078', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3078'}, {'name': 'HPSBUX9909-103', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103'}, {'name': '00192', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192'}, {'name': '635', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/635'}]
CVE State: PUBLISHED
Explain CVE-1999-0692
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
Affected Products: n/a
References: [{'name': '19990701-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P'}, {'name': 'J-052', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-052.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0693
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': '641', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/641'}, {'name': 'HPSBUX9909-103', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103'}, {'name': '00192', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192'}, {'name': 'oval:org.mitre.oval:def:4374', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4374'}]
CVE State: PUBLISHED
Explain CVE-1999-0694
Denial of service in AIX ptrace system call allows local users to crash the system.
Affected Products: n/a
References: [{'name': 'J-055', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-055.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0695
The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '1064', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1064'}, {'name': '620', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/620'}]
CVE State: PUBLISHED
Explain CVE-1999-0696
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
Affected Products: n/a
References: [{'name': '00188', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/188'}, {'name': 'J-051', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-051.shtml'}, {'name': 'HPSBUX9908-102', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9908-102'}]
CVE State: PUBLISHED
Explain CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
Affected Products: n/a
References: [{'name': '623', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/623'}]
CVE State: PUBLISHED
Explain CVE-1999-0700
Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
Affected Products: n/a
References: [{'name': 'MS99-026', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-026'}, {'name': 'Q237185', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237185'}]
CVE State: PUBLISHED
Explain CVE-1999-0701
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
Affected Products: n/a
References: [{'name': 'MS99-036', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-036'}, {'name': '626', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/626'}, {'name': 'Q173039', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ173039'}]
CVE State: PUBLISHED
Explain CVE-1999-0702
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.
Affected Products: n/a
References: [{'name': 'MS99-037', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037'}, {'name': '627', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/627'}, {'name': 'Q241361', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241361'}]
CVE State: PUBLISHED
Explain CVE-1999-0703
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
Affected Products: n/a
References: [{'name': 'J-066', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-066.shtml'}]
CVE State: PUBLISHED
Explain CVE-1999-0704
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
Affected Products: n/a
References: [{'name': '614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/614'}]
CVE State: PUBLISHED
Explain CVE-1999-0706
Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
Affected Products: n/a
References: [{'name': '583', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/583'}]
CVE State: PUBLISHED
Explain CVE-1999-0707
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
Affected Products: n/a
References: [{'name': '493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/493'}, {'name': 'J-050', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/j-050.shtml'}, {'name': 'HPSBUX9906-099', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-099'}]
CVE State: PUBLISHED
Explain CVE-1999-0710
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.
Affected Products: n/a
References: [{'name': 'FEDORA-2005-373', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'RHSA-2005:489', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-489.html'}, {'name': '2059', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2059'}, {'name': 'DSA-576', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2004/dsa-576'}, {'name': 'RHSA-1999:025', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-1999-025.html'}, {'name': 'http-cgi-cachemgr(2385)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2385'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redhat.com/support/errata/archives/rh52-errata-general.html#squid'}]
CVE State: PUBLISHED
Explain CVE-1999-0711
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
Affected Products: n/a
References: [{'name': '19990430 *Huge* security hole in Oracle 8.0.5 with Intellegent agent installed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?t=92550157100002&w=2&r=1'}, {'name': '19990506 Oracle Security Followup, patch and FAQ: setuid on oratclsh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=92609807906778&w=2'}]
CVE State: PUBLISHED