DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-0590
A system does not present an appropriate legal message or warning to a user who is accessing it.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: macos, linux_kernel, windows_2000, windows_nt, windows_98
References: http://ciac.llnl.gov/ciac/bulletins/j-043.shtml, http://ciac.llnl.gov/ciac/bulletins/j-043.shtml
CVE-1999-0285
Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0285, https://www.cve.org/CVERecord?id=CVE-1999-0285
CVE-1999-0382
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-008, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-008
CVE-1999-1516
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tfs_gateway_smtp
References: http://marc.info/?l=bugtraq&m=93677241318492&w=2, http://marc.info/?l=bugtraq&m=93677241318492&w=2
CVE-1999-1327
Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=90221103125826&w=2, http://www.iss.net/security_center/static/7239.php, http://www.osvdb.org/6065
CVE-1999-1441
Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=90221103126047&w=2, http://www.securityfocus.com/bid/111, http://marc.info/?l=bugtraq&m=90221103126047&w=2
CVE-1999-0351
FTP PASV "Pizza Thief" denial of service and unauthorized data access.  Attackers can steal data by connecting to a port that was intended for use by a client.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: ftp_pasv
References: http://attrition.org/security/advisory/misc/infowar/iw_sec_01.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/3389, http://attrition.org/security/advisory/misc/infowar/iw_sec_01.txt
CVE-1999-0899
The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649, http://www.securityfocus.com/bid/769, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047
CWE: CWE-264
CVE-1999-0155
The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ghostscript
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0155, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0155
CVE-1999-1129
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios, catalyst_2900_vlan
References: http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htm, http://www.securityfocus.com/archive/1/26008, http://www.securityfocus.com/bid/615
CVE-1999-0458
L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: l0phtcrack
References: http://www.osvdb.org/915, http://www.osvdb.org/915
CVE-1999-0186
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
References: http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm, https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-238/
CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: virus_scanner
References: http://marc.info/?l=bugtraq&m=93219846414732&w=2, http://www.amavis.org/ChangeLog.txt, http://www.securityfocus.com/bid/527
CVE-1999-1349
NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag set, to port 111.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: omni-nfs_x_enterprise
References: http://marc.info/?l=bugtraq&m=93923679004325&w=2, http://marc.info/?l=bugtraq&m=93923679004325&w=2
CVE-1999-0946
Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: midiplug
References: http://marc.info/?l=bugtraq&m=94157187815629&w=2, http://www.securityfocus.com/bid/760, http://marc.info/?l=bugtraq&m=94157187815629&w=2
CVE-1999-0443
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: patrol_agent
References: http://www.securityfocus.com/archive/1/13204, http://www.securityfocus.com/archive/1/13204
CVE-1999-0239
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: fasttrack_server
Related CWEs: CWE-178
References: http://www.osvdb.org/122, https://exchange.xforce.ibmcloud.com/vulnerabilities/1731, http://www.osvdb.org/122
CWE: CWE-178
CVE-1999-1455
RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q158/3/20.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/7422, http://support.microsoft.com/support/kb/articles/q158/3/20.asp
CVE-1999-0895
Firewall-1 does not properly restrict access to LDAP attributes.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://www.osvdb.org/1117, http://www.securityfocus.com/bid/725, http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991020150002.21047.qmail%40tarjan.mediaways.net
CVE-1999-1430
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: davinci
References: http://marc.info/?l=bugtraq&m=91540043723185&w=2, http://www.securityfocus.com/bid/185, http://marc.info/?l=bugtraq&m=91540043723185&w=2
CVE-1999-1453
Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=ntbugtraq&m=91979439932341&w=2, http://www.securityfocus.com/bid/215, http://marc.info/?l=ntbugtraq&m=91979439932341&w=2
CVE-1999-0881
Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: falcon_web_server
References: http://www.osvdb.org/1127, http://www.securityfocus.com/bid/743, http://www.osvdb.org/1127
CVE-1999-0093
AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0093, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0093
CVE-1999-0373
Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0373, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0373
CVE-1999-0698
Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0698, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0698
CVE-1999-0766
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: java_virtual_machine, internet_explorer
Related CWEs: CWE-16
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240346, http://www.securityfocus.com/bid/600, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-031
CWE: CWE-16
CVE-1999-0816
The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: motorola_cablerouter
References: http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621, http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621
CVE-1999-1148
FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://support.microsoft.com/support/kb/articles/Q189/2/62.ASP, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006, https://exchange.xforce.ibmcloud.com/vulnerabilities/1215
CVE-1999-0728
A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: windows_nt
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ236359, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-024, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ236359
CWE: CWE-264
CVE-1999-0247
Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inn
References: http://www.nai.com/nai_labs/asp_set/advisory/17_inn_avd.asp, http://www.securityfocus.com/bid/1443, http://www.nai.com/nai_labs/asp_set/advisory/17_inn_avd.asp
CVE-1999-0432
ftp on HP-UX 11.00 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-094, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-094
CVE-1999-0872
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, vixie_cron, openlinux, linux
References: http://www.securityfocus.com/bid/611, http://www.securityfocus.com/bid/759, http://www.securityfocus.com/bid/611
CVE-1999-0403
A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=91821080015725&w=2, http://marc.info/?l=bugtraq&m=91821080015725&w=2
CVE-1999-1185
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, openserver_enterprise_system, openserver, cmw, internet_faststart
References: http://marc.info/?l=bugtraq&m=90686250717719&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1379, http://marc.info/?l=bugtraq&m=90686250717719&w=2
CVE-1999-1226
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: communicator
References: http://www.securiteam.com/exploits/Netscape_4_7_and_earlier_vulnerable_to__Huge_Key__DoS.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/3436, http://www.securiteam.com/exploits/Netscape_4_7_and_earlier_vulnerable_to__Huge_Key__DoS.html
CVE-1999-0974
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/190, http://www.securityfocus.com/bid/864, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/190
CVE-1999-1290
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: nftp
References: http://marc.info/?l=bugtraq&m=91127951426494&w=2, http://www.ayukov.com/nftp/history.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/1397
CVE-1999-0661
A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://marc.info/?l=bugtraq&m=102820843403741&w=2, http://marc.info/?l=bugtraq&m=102821663814127&w=2, http://online.securityfocus.com/archive/1/294539
CVE-1999-0877
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243638, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-042, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243638
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-0300
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/155, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/155
CVE-1999-0983
Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: whois_lookup
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0983, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0983
CVE-1999-1029
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh2
References: http://marc.info/?l=bugtraq&m=92663402004280&w=2, http://www.securityfocus.com/bid/277, https://exchange.xforce.ibmcloud.com/vulnerabilities/2193
CVE-1999-1233
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server
References: http://support.microsoft.com/support/kb/articles/Q241/5/62.asp, http://www.securityfocus.com/bid/657, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
CVE-1999-1473
When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://support.microsoft.com/support/kb/articles/q176/6/97.asp, http://www.iss.net/security_center/static/7426.php, http://www.osvdb.org/7818
CVE-1999-1246
Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: site_server
References: http://support.microsoft.com/support/kb/articles/Q229/9/72.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/2068, http://support.microsoft.com/support/kb/articles/Q229/9/72.asp
CVE-1999-0780
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel, freebsd, kde
References: http://marc.info/?l=bugtraq&m=91141486301691&w=2, http://marc.info/?l=bugtraq&m=91141486301691&w=2
CVE-1999-0190
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/167, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/167
CVE-1999-0185
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/156, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/156
CVE-1999-0533
A DNS server allows inverse queries.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0533, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0533
CVE-1999-1197
TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1990-12.html, http://www.iss.net/security_center/static/7140.php, http://www.securityfocus.com/bid/14
CVE-1999-0469
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0469, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0469
CVE-1999-1287
Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: analog
References: http://www.statslab.cam.ac.uk/~sret1/analog/security.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/1410, http://www.statslab.cam.ac.uk/~sret1/analog/security.html
CVE-1999-0470
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware
References: http://www.securityfocus.com/bid/482, http://www.securityfocus.com/bid/482
CVE-1999-1205
nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=87602167419195&w=2, http://packetstormsecurity.org/advisories/ibm-ers/96-08, https://exchange.xforce.ibmcloud.com/vulnerabilities/414
CVE-1999-1224
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P
Affected Products: imapd
References: http://marc.info/?l=bugtraq&m=87635124302928&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/349, http://marc.info/?l=bugtraq&m=87635124302928&w=2
CVE-1999-0031
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: communicator, internet_explorer
References: http://www.codetalker.com/advisories/vendor/hp/hpsbux9707-065.html, http://www.codetalker.com/advisories/vendor/hp/hpsbux9707-065.html
CVE-1999-0144
Denial of service in Qmail by specifying a large number of recipients with the RCPT command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: qmail
References: http://cr.yp.to/qmail/venema.html, http://marc.info/?l=bugtraq&m=87602558319024&w=2, http://marc.info/?l=bugtraq&m=87602558319029&w=2
CVE-1999-0290
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wingate
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0290, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0290
CVE-1999-1317
Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://marc.info/?l=ntbugtraq&m=92127046701349&w=2, http://marc.info/?l=ntbugtraq&m=92162979530341&w=2, http://support.microsoft.com/support/kb/articles/q222/1/59.asp
CVE-1999-1282
RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: realsystem_g2_server
References: http://www.securityfocus.com/archive/1/11543, https://exchange.xforce.ibmcloud.com/vulnerabilities/1542, http://www.securityfocus.com/archive/1/11543
CVE-1999-0624
The rstat/rstatd service is running.
References: https://www.cve.org/CVERecord?id=CVE-1999-0624, https://www.cve.org/CVERecord?id=CVE-1999-0624
CVE-1999-0343
A malicious Palace server can force a client to execute arbitrary programs.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: palace_client
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0343, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0343
CVE-1999-1009
The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: go_express_search
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1009, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1009
CVE-1999-0465
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0465, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0465
CVE-1999-1254
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt, windows_95, windows_98
References: http://marc.info/?l=ntbugtraq&m=92099515709467&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1947, http://marc.info/?l=ntbugtraq&m=92099515709467&w=2
CVE-1999-0063
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0063, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0063
CVE-1999-0604
An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: selena_sol_webstore
References: http://marc.info/?l=bugtraq&m=92462991805485&w=2, http://marc.info/?l=bugtraq&m=92462991805485&w=2
CVE-1999-0688
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www.securityfocus.com/bid/545, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-101, http://www.securityfocus.com/bid/545
CVE-1999-0400
Denial of service in Linux 2.2.0 running the ldd command on a core file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://www.securityfocus.com/bid/344, http://www.securityfocus.com/bid/344
CVE-1999-0048
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netkit, aix, up-ux_v, ews-ux_v, asl_ux_4800
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/147, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/147
CVE-1999-0520
A system-critical NETBIOS/SMB share has inappropriate access control.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/3, https://exchange.xforce.ibmcloud.com/vulnerabilities/3
CVE-1999-1425
Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: solstice_adminsuite
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145, http://www.securityfocus.com/bid/208, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145
CVE-1999-1080
rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://marc.info/?l=bugtraq&m=92633694100270&w=2, http://marc.info/?l=bugtraq&m=93971288323395&w=2, http://www.securityfocus.com/bid/250
CVE-1999-0912
FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: http://www.osvdb.org/1079, http://www.securityfocus.com/bid/653, http://www.osvdb.org/1079
CVE-1999-0204
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0204, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0204
CVE-1999-1572
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: enterprise_linux, debian_linux, mandrake_linux, freebsd, enterprise_linux_desktop
References: http://marc.info/?l=bugtraq&m=110763404701519&w=2, http://secunia.com/advisories/14357, http://secunia.com/advisories/17063
CVE-1999-0156
wu-ftpd FTP daemon allows any user and password combination.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wu-ftpd
References: https://www.cve.org/CVERecord?id=CVE-1999-0156, https://www.cve.org/CVERecord?id=CVE-1999-0156
CVE-1999-0936
BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0936, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0936
CVE-1999-0265
ICMP redirect messages may crash or lock up a host.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netware, os-9
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154174, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154174
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-0226
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-19
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0226, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0226
CWE: CWE-19
CVE-1999-0716
Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231605, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231605
CVE-1999-1324
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openvms_vax
Related CWEs: CWE-307
Related CAPECs: CAPEC-560, CAPEC-653, CAPEC-600
MITRE ATT&CK Techniques: T1110.004, T1110.001, T1558
MITRE ATT&CK Tactics: T1110
References: http://ciac.llnl.gov/ciac/bulletins/d-06.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/7225, http://ciac.llnl.gov/ciac/bulletins/d-06.shtml
CWE: CWE-307
MITRE ATT&CK techniques: T1110.004, T1110.001, T1558, T1110.003, T1078
MITRE ATT&CK tactics: T1110
CVE-1999-0223
Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos
References: http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?patchid=103291&collection=fpatches, http://www.securityfocus.com/bid/1878, http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?patchid=103291&collection=fpatches
CVE-1999-0580
The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0580, https://www.cve.org/CVERecord?id=CVE-1999-0580
CVE-1999-1438
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/105, http://www.cert.org/advisories/CA-91.01a.SunOS.mail.vulnerability, http://www.securityfocus.com/bid/15
CVE-1999-0989
Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ie
References: http://www.securityfocus.com/bid/861, http://www.securityfocus.com/bid/861
CVE-1999-1178
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sambar_server
References: http://www.securityfocus.com/archive/1/9505, https://exchange.xforce.ibmcloud.com/vulnerabilities/3223, http://www.securityfocus.com/archive/1/9505
CVE-1999-0038
Buffer overflow in xlock program allows local users to execute commands as root.
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, aix, hp-ux, bsd_os, solaris
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038
CWE: CWE-120
CVE-1999-0135
admintool in Solaris allows a local user to write to arbitrary files and gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0135, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0135
CVE-1999-0630
The NT Alerter and Messenger services are running.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://support.microsoft.com/support/kb/articles/q189/2/71.asp, http://support.microsoft.com/support/kb/articles/q189/2/71.asp
CVE-1999-1518
Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, freebsd
References: http://marc.info/?l=bugtraq&m=93207728118694&w=2, http://www.securityfocus.com/bid/526, https://exchange.xforce.ibmcloud.com/vulnerabilities/2351
CVE-1999-0372
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt, backoffice
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-1045
pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: realserver
References: http://marc.info/?l=bugtraq&m=88490880523890&w=2, http://marc.info/?l=bugtraq&m=88492978527261&w=2, http://marc.info/?l=bugtraq&m=90338245305236&w=2
CVE-1999-1184
Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: elm
References: http://marc.info/?l=bugtraq&m=87602167420967&w=2, http://marc.info/?l=bugtraq&m=87602167420970&w=2, http://marc.info/?l=bugtraq&m=87602167420967&w=2
CVE-1999-0257
Nestea variation of teardrop IP fragmentation denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0257, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0257
CVE-1999-0672
Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: chocoa
References: http://www.securityfocus.com/bid/573, http://www.securityfocus.com/bid/573
CVE-1999-1579
The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B242366, http://www.kb.cert.org/vuls/id/3062, http://www.securityfocus.com/bid/6827
CVE-1999-0028
root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0028, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0028
CVE-1999-1084
The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://marc.info/?l=ntbugtraq&m=90222453431604&w=2, http://support.microsoft.com/support/kb/articles/q103/8/61.asp, http://www.ciac.org/ciac/bulletins/k-029.shtml
CVE-1999-0577
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0577, https://www.cve.org/CVERecord?id=CVE-1999-0577
CVE-1999-1352
mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=93855134409747&w=2, http://marc.info/?l=bugtraq&m=93855134409747&w=2
CVE-1999-0853
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_server, fasttrack_server
References: http://www.securityfocus.com/bid/847, http://www.securityfocus.com/bid/847
CVE-1999-0939
Denial of service in Debian IRC Epic/epic4 client via a long string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux
References: http://www.securityfocus.com/bid/605, http://www.securityfocus.com/bid/605
CVE-1999-0003
Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, hp-ux, solaris, sunos, irix
References: ftp://patches.sgi.com/support/free/security/advisories/19981101-01-A, ftp://patches.sgi.com/support/free/security/advisories/19981101-01-PX, http://www.securityfocus.com/bid/122
CVE-1999-1257
Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: maxserver_xyplex_terminal_server
References: http://www.securityfocus.com/archive/1/8134, https://exchange.xforce.ibmcloud.com/vulnerabilities/1825, https://exchange.xforce.ibmcloud.com/vulnerabilities/1826
CVE-1999-0468
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
CVSS v3.1 Score: 8.2 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-1229
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quake_2_server
References: http://www.securityfocus.com/archive/1/8590, https://exchange.xforce.ibmcloud.com/vulnerabilities/733, http://www.securityfocus.com/archive/1/8590
CVE-1999-0883
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zeus_web_server
References: http://www.osvdb.org/1126, http://www.securityfocus.com/bid/742, https://exchange.xforce.ibmcloud.com/vulnerabilities/3380
CVE-1999-1434
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux
References: http://marc.info/?l=bugtraq&m=90221104525951&w=2, http://www.securityfocus.com/bid/155, http://marc.info/?l=bugtraq&m=90221104525951&w=2
CVE-1999-0589
A system-critical Windows NT registry key has inappropriate permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0589, https://www.cve.org/CVERecord?id=CVE-1999-0589
CVE-1999-1211
Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1991-02.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/574, http://www.cert.org/advisories/CA-1991-02.html
CVE-1999-1531
Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: homepageprint
References: http://marc.info/?l=bugtraq&m=94157187815629&w=2, http://www.iss.net/security_center/static/7767.php, http://www.securityfocus.com/bid/763
CVE-1999-0177
The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: website
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0177, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0177