DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-1510
Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bisonware_ftp_server
References: http://marc.info/?l=ntbugtraq&m=92697301706956&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/3234, http://marc.info/?l=ntbugtraq&m=92697301706956&w=2
CVE-1999-0022
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, hp-ux, bsd_os, freebsd, solaris
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/179, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/179
CWE: CWE-125
CVE-1999-1320
Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware
References: http://ciac.llnl.gov/ciac/bulletins/d-01.shtml, http://www.iss.net/security_center/static/7213.php, http://ciac.llnl.gov/ciac/bulletins/d-01.shtml
CVE-1999-1012
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino
References: http://www.securityfocus.com/archive/1/13527, http://www.securityfocus.com/bid/173, http://www.securityfocus.com/archive/1/13527
CVE-1999-0565
A Sendmail alias allows input to be piped to a program.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0565, https://www.cve.org/CVERecord?id=CVE-1999-0565
CVE-1999-1569
Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake
References: http://marc.info/?l=bugtraq&m=90221101925989&w=2, http://marc.info/?l=bugtraq&m=91012172524181&w=2, http://www.securityfocus.com/archive/1/197268
CVE-1999-0845
Buffer overflow in SCO su program allows local users to gain root access via a long username.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0845, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0845
CVE-1999-0668
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://ciac.llnl.gov/ciac/bulletins/j-064.shtml, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308, http://www.securityfocus.com/bid/598
CVE-1999-1186
rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rxvt, slackware_linux, linux
References: http://marc.info/?l=bugtraq&m=87602167418966&w=2, http://marc.info/?l=bugtraq&m=87602167418966&w=2
CVE-1999-1429
DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: transferpro
References: http://marc.info/?l=bugtraq&m=88419633507543&w=2, http://www.securityfocus.com/bid/204, http://marc.info/?l=bugtraq&m=88419633507543&w=2
CVE-1999-1533
Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_viruswall
References: http://marc.info/?l=bugtraq&m=93846522511387&w=2, http://www.securityfocus.com/bid/665, https://exchange.xforce.ibmcloud.com/vulnerabilities/3317
CVE-1999-0841
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.securiteam.com/exploits/3J5QQPPQ0O.html, http://www.security-express.com/archives/bugtraq/1999-q4/0122.html, http://www.securityfocus.com/bid/832
CVE-1999-0099
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: convexos, aix, bsd_os, unicos, solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0099, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0099
CVE-1999-0675
Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firewall-1
References: http://www.osvdb.org/1038, http://www.securityfocus.com/archive/1/23615, http://www.securityfocus.com/bid/576
CVE-1999-0298
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: slackware_linux, sunos
References: http://www.nai.com/nai_labs/asp_set/advisory/06_ypbindsetme_adv.asp, http://www.nai.com/nai_labs/asp_set/advisory/06_ypbindsetme_adv.asp
CVE-1999-0886
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-16
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242294, http://www.securityfocus.com/bid/645, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-041
CWE: CWE-16
CVE-1999-0918
Denial of service in various Windows systems via malformed, fragmented IGMP packets.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: windows_2000, windows_nt, windows_95, windows_98
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238329, http://www.securityfocus.com/bid/514, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-034
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-0399
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mirc
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0399, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0399
CVE-1999-0629
The ident/identd service is running.
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0629, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0629
CVE-1999-0597
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/1343, https://exchange.xforce.ibmcloud.com/vulnerabilities/1343
CVE-1999-0578
A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/228, https://exchange.xforce.ibmcloud.com/vulnerabilities/228
CVE-1999-0790
A remote attacker can read information from a Netscape user's cache via JavaScript.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: http://home.netscape.com/security/notes/jscachebrowsing.html, http://home.netscape.com/security/notes/jscachebrowsing.html
CVE-1999-1388
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.dataguard.no/bugtraq/1994_4/0755.html, http://www2.dataguard.no/bugtraq/1994_2/0197.html, http://www2.dataguard.no/bugtraq/1994_2/0207.html
CVE-1999-1157
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/Q192/7/74.ASP, https://exchange.xforce.ibmcloud.com/vulnerabilities/3894, http://support.microsoft.com/support/kb/articles/Q192/7/74.ASP
CVE-1999-0729
Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lotus_domino_server
References: http://www.ciac.org/ciac/bulletins/j-061.shtml, http://www.osvdb.org/1057, http://www.securityfocus.com/bid/601
CVE-1999-0707
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, visualize_conference_ftp
References: http://www.ciac.org/ciac/bulletins/j-050.shtml, http://www.securityfocus.com/bid/493, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-099
CVE-1999-0180
in.rshd allows users to login with a NULL username and execute commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0180, https://www.cve.org/CVERecord?id=CVE-1999-0180
CVE-1999-0496
A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ146965, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ146965
CWE: CWE-264
CVE-1999-1575
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.kb.cert.org/vuls/id/23412, http://www.kb.cert.org/vuls/id/24839, http://www.kb.cert.org/vuls/id/26924
CVE-1999-0208
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, up-ux_v, ews-ux_v, asl_ux_4800, irix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0208, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0208
CVE-1999-1568
Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ncftpd_server
Related CWEs: CWE-193
References: http://marc.info/?l=bugtraq&m=91981352617720&w=2, http://www.securityfocus.com/archive/1/12699, https://exchange.xforce.ibmcloud.com/vulnerabilities/1833
CWE: CWE-193
CVE-1999-0871
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.osvdb.org/7837, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-013, https://exchange.xforce.ibmcloud.com/vulnerabilities/3668
CVE-1999-1384
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.08.SGI.systour.vul, ftp://patches.sgi.com/support/free/security/advisories/19961101-01-I, http://marc.info/?l=bugtraq&m=87602167420095&w=2
CVE-1999-0310
SSH 1.2.25 on HP-UX allows access to new user accounts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0310, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0310
CVE-1999-0354
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content.  Also applies to Outlook when the client views a malicious email message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: word, internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002
CVE-1999-1221
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: unix
References: http://marc.info/?l=bugtraq&m=87602167420141&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/399, http://marc.info/?l=bugtraq&m=87602167420141&w=2
CVE-1999-0903
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0903, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0903
CVE-1999-1048
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, linux
References: http://marc.info/?l=bugtraq&m=87602746719555&w=2, http://www.debian.org/security/1998/19980909, http://www.osvdb.org/8345
CVE-1999-1307
Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: http://ciac.llnl.gov/ciac/bulletins/f-06.shtml, http://www.dataguard.no/bugtraq/1994_4/0676.html, http://ciac.llnl.gov/ciac/bulletins/f-06.shtml
CVE-1999-0582
A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0582, https://www.cve.org/CVERecord?id=CVE-1999-0582
CVE-1999-0061
File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel, openbsd, bsd_os, freebsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0061, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0061
CVE-1999-1179
Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: man.sh
References: http://www.securityfocus.com/archive/1/9330, http://www.securityfocus.com/archive/1/9330
CVE-1999-0258
Bonk variation of teardrop IP fragmentation denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt, windows_95
References: https://marc.info/?l=ntbugtraq&m=88901842000424&w=2, https://marc.info/?l=ntbugtraq&m=88901842000424&w=2
CVE-1999-1309
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail
References: http://www.cert.org/advisories/CA-94.12.sendmail.vulnerabilities, http://www.dataguard.no/bugtraq/1994_1/0040.html, http://www.dataguard.no/bugtraq/1994_1/0042.html
CVE-1999-1433
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jetadmin
References: http://marc.info/?l=bugtraq&m=90221104525988&w=2, http://marc.info/?l=bugtraq&m=90221104526067&w=2, http://www.securityfocus.com/bid/157
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0506, https://www.cve.org/CVERecord?id=CVE-1999-0506
CVE-1999-1164
Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook, outlook_express
References: http://marc.info/?l=bugtraq&m=93041631215856&w=2, http://marc.info/?l=bugtraq&m=93041631215856&w=2
CVE-1999-0092
Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0092, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0092
CVE-1999-0601
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html, http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html
CVE-1999-1364
Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q142/6/53.asp, http://www.iss.net/security_center/static/7421.php, http://support.microsoft.com/support/kb/articles/q142/6/53.asp
CVE-1999-0850
The default permissions for Endymion MailMan allow local users to read email or modify files.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mailman_webmail
References: http://www.securityfocus.com/bid/845, http://www.securityfocus.com/bid/845
CVE-1999-1227
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ethereal
References: http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.html, http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/3334
CVE-1999-1454
Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: matrix_screen_saver
References: http://marc.info/?l=bugtraq&m=93915027622690&w=2, http://marc.info/?l=bugtraq&m=93915027622690&w=2
CVE-1999-0076
Buffer overflow in wu-ftp from PASV command causes a core dump.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wu-ftpd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0076, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0076
CVE-1999-0817
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lynx
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0817, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0817
CVE-1999-1275
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_cc_mail
References: http://www.securityfocus.com/archive/1/9478, https://exchange.xforce.ibmcloud.com/vulnerabilities/1619, http://www.securityfocus.com/archive/1/9478
CVE-1999-0394
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://marc.info/?l=bugtraq&m=91651770630788&w=2, https://marc.info/?l=bugtraq&m=91651770630788&w=2
CVE-1999-0749
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: windows_95, windows_98
References: http://www.securityfocus.com/bid/586, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-033, http://www.securityfocus.com/bid/586
CVE-1999-0518
A NETBIOS/SMB share password is guessable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_95
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0518, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0518
CVE-1999-1559
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: omniswitch
References: http://marc.info/?l=bugtraq&m=92299263017061&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/2064, http://marc.info/?l=bugtraq&m=92299263017061&w=2
CVE-1999-1051
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: formhandler.cgi
References: http://www.securityfocus.com/archive/1/34939, http://www.securityfocus.com/archive/1/34939
CVE-1999-0438
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webramp_200i, webramp_m3
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0438, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0438
CVE-1999-0539
A trust relationship exists between two Unix hosts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/723, https://exchange.xforce.ibmcloud.com/vulnerabilities/723
CVE-1999-0948
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: turbolinux, sunos, irix, solaris
References: http://www.securityfocus.com/bid/757, http://www.securityfocus.com/bid/757
CVE-1999-0840
Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.securiteam.com/exploits/3J5QQPPQ0O.html, http://www.security-express.com/archives/bugtraq/1999-q4/0122.html, http://www.securityfocus.com/bid/832
CVE-1999-1077
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: macos
References: http://marc.info/?l=bugtraq&m=94149318124548&w=2, http://www.securityfocus.com/bid/756, http://marc.info/?l=bugtraq&m=94149318124548&w=2
CVE-1999-1508
Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phaser_network_printer_930, phaser_network_printer_740, phaser_network_printer_750dp, phaser_network_printer_840, phaser_network_printer_750
References: http://marc.info/?l=bugtraq&m=94286041430870&w=2, http://www.securityfocus.com/bid/806, http://marc.info/?l=bugtraq&m=94286041430870&w=2
CVE-1999-1175
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.ciac.org/ciac/bulletins/i-054.shtml, http://www.cisco.com/warp/public/770/wccpauth-pub.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/1577
CVE-1999-1456
thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: thttpd_http_server
References: http://www.acme.com/software/thttpd/thttpd.html#releasenotes, http://www.securityfocus.com/archive/1/10368, https://exchange.xforce.ibmcloud.com/vulnerabilities/1809
CVE-1999-1046
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: imail
References: http://marc.info/?l=bugtraq&m=92038879607336&w=2, http://www.securityfocus.com/bid/504, https://exchange.xforce.ibmcloud.com/vulnerabilities/1897
CVE-1999-0086
AIX routed allows remote users to modify sensitive files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0086, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0086
CVE-1999-0762
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: navigator, communicator
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0762, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0762
CVE-1999-1004
Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_antivirus
References: http://service1.symantec.com/SUPPORT/nav.nsf/df0a595864594c86852567ac0063608c/6206f660a1f2516a882568660082c930?OpenDocument&Highlight=0%2Cpoproxy, http://www.osvdb.org/6267, http://www.securityfocus.com/archive/1/38970
CVE-1999-1326
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wu-ftpd
References: http://marc.info/?l=bugtraq&m=87602167420401&w=2, http://marc.info/?l=bugtraq&m=87602167420408&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/7169
CVE-1999-1481
Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: squid_web_proxy
References: http://www.securityfocus.com/archive/1/33295, http://www.securityfocus.com/bid/741, http://www.squid-cache.org/Versions/v2/2.2/bugs/
CVE-1999-0121
Buffer overflow in dtaction command gives root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0121, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0121
CVE-1999-1366
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: pegasus_mail
References: http://marc.info/?l=bugtraq&m=92714118829880&w=2, http://marc.info/?l=bugtraq&m=92714118829880&w=2
CVE-1999-0768
Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, linux
References: http://www.securityfocus.com/bid/602, http://www.securityfocus.com/bid/602
CVE-1999-0980
Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246045, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-055, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246045
CVE-1999-1578
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.kb.cert.org/vuls/id/37556, http://www.securityfocus.com/archive/1/28719, http://www.securityfocus.com/bid/671
CVE-1999-0756
ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?ID=10968&Method=Full, https://exchange.xforce.ibmcloud.com/vulnerabilities/2207, http://www.allaire.com/handlers/index.cfm?ID=10968&Method=Full
CVE-1999-0914
Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: http://www.securityfocus.com/bid/324, http://www.securityfocus.com/bid/324
CVE-1999-0365
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sendmail, metaip
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0365, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0365
CVE-1999-0096
Sendmail decode alias can be used to overwrite sensitive files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_faststart, openserver, bsd_os, freebsd
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba
CVE-1999-0417
64 bit Solaris 7 procfs allows local users to perform a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos
References: http://www.osvdb.org/1001, http://www.securityfocus.com/bid/448, http://www.osvdb.org/1001
CVE-1999-0473
The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: rsync
References: http://www.securityfocus.com/bid/145, http://www.securityfocus.com/bid/145
CVE-1999-1450
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware, openserver
References: ftp://ftp.sco.COM/SSE/sse020.ltr, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.03b, ftp://ftp.sco.com/SSE/security_bulletins/SB-99.06b
CVE-1999-0482
OpenBSD kernel crash through TSS handling, as caused by the crashme program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://www.osvdb.org/7557, http://www.osvdb.org/7557
CVE-1999-0735
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: k-mail
References: http://www.redhat.com/support/errata/RHSA1999015_01.html, http://www.securityfocus.com/bid/300, http://www.redhat.com/support/errata/RHSA1999015_01.html
CVE-1999-0023
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, aix, unixware, openserver, bsd_os
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0023, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0023
CVE-1999-1520
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: site_server
References: http://marc.info/?l=bugtraq&m=92647407227303&w=2, http://www.securityfocus.com/bid/256, https://exchange.xforce.ibmcloud.com/vulnerabilities/2270
CVE-1999-0101
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://ciac.llnl.gov/ciac/bulletins/h-13.shtml, http://ciac.llnl.gov/ciac/bulletins/h-13.shtml
CVE-1999-1240
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cddbd
References: http://www.securityfocus.com/archive/1/5784, https://exchange.xforce.ibmcloud.com/vulnerabilities/2203, http://www.securityfocus.com/archive/1/5784
CVE-1999-0236
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ncsa_httpd, http_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0236, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0236
CVE-1999-1590
Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021.
CVSS v2.0 Score: 3.5 (LOW)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N
Affected Products: wwwcount
References: http://seclists.org/bugtraq/1997/Oct/0058.html, http://seclists.org/bugtraq/1997/Oct/0058.html
CVE-1999-1543
MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: macos
References: http://marc.info/?l=bugtraq&m=93188174906513&w=2, http://marc.info/?l=bugtraq&m=93736667813924&w=2, http://www.securityfocus.com/bid/519
CVE-1999-0220
Attackers can do a denial of service of IRC by crashing the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0220, https://www.cve.org/CVERecord?id=CVE-1999-0220
CVE-1999-0460
Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://www.securityfocus.com/bid/312, http://www.securityfocus.com/bid/312
CVE-1999-1263
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: metamail
References: http://marc.info/?l=bugtraq&m=87773365324657&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1677, http://marc.info/?l=bugtraq&m=87773365324657&w=2
CVE-1999-1267
KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: kde
References: http://marc.info/?l=bugtraq&m=87602167420906&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1646, http://marc.info/?l=bugtraq&m=87602167420906&w=2
CVE-1999-0178
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oreilly_website
References: http://archives.neohapsis.com/archives/bugtraq/1997_1/0021.html, http://www.osvdb.org/8, http://www.securityfocus.com/bid/2078
CVE-1999-0687
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix, solaris, cde, unix, sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192, http://www.ciac.org/ciac/bulletins/k-001.shtml, http://www.securityfocus.com/bid/637
CVE-1999-0875
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: solaris, windows_2000, windows_98se, sunos, windows_95
Related CWEs: CWE-16
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ216141, http://www.securityfocus.com/bid/578, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ216141
CWE: CWE-16
CVE-1999-0397
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0397, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0397
CVE-1999-0158
Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pix_firewall_software
References: http://www.cisco.com/warp/public/770/pixmgrfile-pub.shtml, http://www.osvdb.org/685, http://www.cisco.com/warp/public/770/pixmgrfile-pub.shtml
CVE-1999-0133
fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: framemaker
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0133, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0133
CVE-1999-1480
(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: aix
References: http://www.securityfocus.com/bid/429, http://www.securityfocus.com/bid/429
CVE-1999-0954
WWWBoard has a default username and default password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wwwboard
References: http://www.securityfocus.com/bid/649, http://www.securityfocus.com/bid/649
CVE-1999-1593
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server.  NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_95, windows_98
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html, http://seclists.org/bugtraq/2001/Jan/0264.html, http://seclists.org/bugtraq/2001/Jan/0269.html
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-1999-0201
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: ftp
References: https://www.cve.org/CVERecord?id=CVE-1999-0201, https://www.cve.org/CVERecord?id=CVE-1999-0201
CVE-1999-0612
A version of finger is running that exposes valid user information to any entity on the network.
Affected Products: windows_nt, windows_2000, fingerd, finger_service
References: https://www.cve.org/CVERecord?id=CVE-1999-0612, https://www.cve.org/CVERecord?id=CVE-1999-0612
CVE-1999-1293
mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=88413292830649&w=2, http://www.apache.org/info/security_bulletin_1.2.5.html, http://marc.info/?l=bugtraq&m=88413292830649&w=2
CVE-1999-0314
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P, http://www.osvdb.org/6788, http://www.securityfocus.com/bid/213
CVE-1999-1269
Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: kde_beta_3
References: http://www.securityfocus.com/archive/1/8506, https://exchange.xforce.ibmcloud.com/vulnerabilities/1641, http://www.securityfocus.com/archive/1/8506
CVE-1999-1511
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xtramail
References: http://marc.info/?l=bugtraq&m=94226003804744&w=2, http://www.securityfocus.com/bid/791, https://exchange.xforce.ibmcloud.com/vulnerabilities/3488
CVE-1999-0361
NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0361, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0361
CVE-1999-0230
Buffer overflow in Cisco 7xx routers through the telnet service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://www.osvdb.org/1102, http://www.osvdb.org/1102
CVE-1999-1347
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=93942774609925&w=2, http://marc.info/?l=bugtraq&m=93942774609925&w=2