DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-0961
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=87602167419906&w=2, http://marc.info/?l=bugtraq&m=87602167419906&w=2
CVE-1999-0017
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wu-ftpd, open_desktop, aix, netbsd, unixware
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017
CVE-1999-0206
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0206, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0206
CVE-1999-0115
AIX bugfiler program allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.securityfocus.com/bid/1800, http://www.securityfocus.com/bid/1800
CVE-1999-0423
Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-093, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-093
CVE-1999-0605
An incorrect configuration of the Order Form 1.0 shopping cart  CGI program could disclose private information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: merchant_order_form
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://marc.info/?l=bugtraq&m=92462991805485&w=2, http://marc.info/?l=bugtraq&m=92462991805485&w=2
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-0433
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, netbsd, linux, x11r6, slackware_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433
CVE-1999-0167
In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0167, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0167
CVE-1999-1305
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, open_desktop_lite, openserver_enterprise_system, unix, openserver_network_system
References: http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ciac.llnl.gov/ciac/bulletins/f-05.shtml
CVE-1999-0684
Denial of service in Sendmail 8.8.6 in HPUX.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0684, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0684
CVE-1999-0700
Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237185, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-026, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237185
CWE: CWE-119
CVE-1999-0849
Denial of service in BIND named via maxdname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bind
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194, http://www.securityfocus.com/bid/788
CVE-1999-0734
A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ciscosecure
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/3133, https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990819-dbaccess, https://exchange.xforce.ibmcloud.com/vulnerabilities/3133
CVE-1999-0442
Solaris ff.core allows local users to modify files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/327, http://www.securityfocus.com/bid/327
CVE-1999-0089
Buffer overflow in AIX libDtSvc library can allow local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0089, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0089
CVE-1999-0324
ppl program in HP-UX allows local users to create root files through symlinks.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-053, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-053
CVE-1999-1583
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY02120&apar=only, http://www.kb.cert.org/vuls/id/872443, https://exchange.xforce.ibmcloud.com/vulnerabilities/8031
CVE-1999-1170
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail, ws_ftp_server
References: http://marc.info/?l=ntbugtraq&m=91816507920544&w=2, http://www.securityfocus.com/bid/218, http://marc.info/?l=ntbugtraq&m=91816507920544&w=2
CVE-1999-0950
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via	a series of MKD and CWD commands that create nested directories.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wftpd
References: http://www.securityfocus.com/bid/747, http://www.securityfocus.com/bid/747
CVE-1999-0125
Buffer overflow in SGI IRIX mailx program.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, irix, solaris, linux
References: ftp://patches.sgi.com/support/free/security/advisories/19980605-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19980605-01-PX
CVE-1999-0585
A Windows NT administrator account has the default name of Administrator.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0585, https://www.cve.org/CVERecord?id=CVE-1999-0585
CVE-1999-0124
Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gopherd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0124, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0124
CVE-1999-1408
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux, aix
References: http://marc.info/?l=bugtraq&m=87602167420641&w=2, http://www.securityfocus.com/bid/352, http://marc.info/?l=bugtraq&m=87602167420641&w=2
CVE-1999-0218
Livingston portmaster machines could be rebooted via a series of commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: portmaster
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0218, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0218
CVE-1999-0243
Linux cfingerd could be exploited to gain root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://www.geocrawler.com/archives/3/92/1996/9/0/2217716/, http://www.geocrawler.com/archives/3/92/1996/9/0/2217716/
CVE-1999-0212
Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/168, http://www.ciac.org/ciac/bulletins/i-048.shtml, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/168
CVE-1999-0674
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd, sunos, netbsd, solaris
References: http://www.ciac.org/ciac/bulletins/j-067.shtml, http://www.securityfocus.com/bid/570, http://www.ciac.org/ciac/bulletins/j-067.shtml
CVE-1999-0662
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0662, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0662
CVE-1999-1182
Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, suse_linux, linux, lst_power_linux, dld
References: http://marc.info/?l=bugtraq&m=87602661419318&w=2, http://marc.info/?l=bugtraq&m=87602661419351&w=2, http://marc.info/?l=bugtraq&m=88661732807795&w=2
CVE-1999-1487
Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/servlet/support/manager?rt=0&rs=0&org=apars&doc=41D8B61D1E1C4FAB852567C9002C546C, http://www.iss.net/security_center/static/7477.php, http://www.securityfocus.com/bid/405
CVE-1999-0396
A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: openbsd, netbsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0396, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0396
CVE-1999-0105
finger allows recursive searches by using a long string of @ symbols.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0105, https://www.cve.org/CVERecord?id=CVE-1999-0105
CVE-1999-1102
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: a_ux, sunos, bsd, irix
References: http://ciac.llnl.gov/ciac/bulletins/e-25.shtml, http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm, http://www.phreak.org/archives/security/8lgm/8lgm.lpr
CVE-1999-0221
Denial of service of Ascend routers through port 150 (remote administration).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ascend_routers
References: https://www.cve.org/CVERecord?id=CVE-1999-0221, https://www.cve.org/CVERecord?id=CVE-1999-0221
CVE-1999-1194
chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ultrix
References: http://www.cert.org/advisories/CA-1991-05.html, http://www.securityfocus.com/bid/17, https://exchange.xforce.ibmcloud.com/vulnerabilities/577
CVE-1999-0669
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Affected Products: internet_explorer
References: http://ciac.llnl.gov/ciac/bulletins/j-064.shtml, http://ciac.llnl.gov/ciac/bulletins/j-064.shtml
CVE-1999-1580
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail, sunos
References: http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html, http://www.auscert.org.au/render.html?it=1853&cid=1978, http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul
CVE-1999-0024
DNS cache poisoning via BIND, by predictable query IDs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: open_desktop, aix, unixware, openserver, bsd_os
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0024, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0024
CVE-1999-0485
Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://www.osvdb.org/7558, http://www.osvdb.org/7558
CVE-1999-1053
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server, matt_wright_guestbook
References: http://www.securityfocus.com/archive/1/33674, http://www.securityfocus.com/archive/82/27296, http://www.securityfocus.com/archive/82/27560
CVE-1999-1335
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: linux
References: http://www.redhat.com/support/errata/rh40-errata-general.html#cmu-snmp, https://exchange.xforce.ibmcloud.com/vulnerabilities/7251, http://www.redhat.com/support/errata/rh40-errata-general.html#cmu-snmp
CVE-1999-1439
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gcc
References: http://marc.info/?l=bugtraq&m=88419592307388&w=2, http://marc.info/?l=bugtraq&m=88492937727193&w=2, http://marc.info/?l=bugtraq&m=88524071002939&w=2
CVE-1999-1222
Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/Q188/5/71.ASP, https://exchange.xforce.ibmcloud.com/vulnerabilities/3893, http://support.microsoft.com/support/kb/articles/Q188/5/71.ASP
CVE-1999-0015
Teardrop IP denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, hp-ux, windows_nt, sunos, windows_95
References: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5579, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5579
CVE-1999-0963
FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://www.osvdb.org/6088, http://www.osvdb.org/6088
CVE-1999-0942
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0942, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0942
CVE-1999-0988
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0988, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0988
CVE-1999-0653
A component service related to NIS+ is running.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0653, https://www.cve.org/CVERecord?id=CVE-1999-0653
CVE-1999-1336
3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hiperarc
References: http://marc.info/?l=bugtraq&m=93458364903256&w=2, http://marc.info/?l=bugtraq&m=93492615408725&w=2, http://www.osvdb.org/6057
CVE-1999-1057
VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vms
References: http://ciac.llnl.gov/ciac/bulletins/b-04.shtml, http://www.cert.org/advisories/CA-1990-07.html, http://www.iss.net/security_center/static/7137.php
CVE-1999-1002
Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: http://marc.info/?l=bugtraq&m=94536309217214&w=2, http://marc.info/?l=bugtraq&m=94570673523998&w=2, http://www.rstcorp.com/news/bad-crypto.html
CVE-1999-1079
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=92601792420088&w=2, http://marc.info/?l=bugtraq&m=93587956513233&w=2, http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36
CVE-1999-0901
ypserv allows a local user to modify the GECOS and login shells of other users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ypserv
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0901, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0901
CVE-1999-0311
fpkg2swpk in HP-UX allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9612-042, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9612-042
CVE-1999-0743
Trn allows local users to overwrite other users' files via symlinks.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debian_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/3144, https://exchange.xforce.ibmcloud.com/vulnerabilities/3144
CVE-1999-0930
wwwboard allows a remote attacker to delete message board articles via a malformed argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wwwboard
References: http://www.securityfocus.com/bid/1795, http://www.worldwidemart.com/scripts/faq/wwwboard/q5.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/2344
CVE-1999-0131
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, linux, hp-ux, openserver, bsd_os
References: http://www.securityfocus.com/bid/717, http://www.securityfocus.com/bid/717
CVE-1999-1217
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://marc.info/?l=ntbugtraq&m=87602726319426&w=2, http://marc.info/?l=ntbugtraq&m=87602726319435&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/526
CVE-1999-1381
Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dbadmin
References: http://marc.info/?l=bugtraq&m=90786656409618&w=2, http://marc.info/?l=bugtraq&m=90786656409618&w=2
CVE-1999-0277
The WorkMan program can be used to overwrite any file to get root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0277, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0277
CVE-1999-1001
Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: cache_engine
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1001, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1001
CVE-1999-0575
A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0575, https://www.cve.org/CVERecord?id=CVE-1999-0575
CVE-1999-0053
TCP RST denial of service in FreeBSD.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: http://www.osvdb.org/6094, http://www.osvdb.org/6094
CVE-1999-0778
Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: accelerated-x_server
References: http://www.securityfocus.com/bid/488, http://www.securityfocus.com/bid/488
CVE-1999-1536
.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: salesbuilder
References: http://marc.info/?l=bugtraq&m=93347785827287&w=2, http://www.osvdb.org/13557, http://www.securityfocus.com/bid/560
CVE-1999-0695
The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: powerdynamo
References: http://www.osvdb.org/1064, http://www.securityfocus.com/bid/620, http://www.osvdb.org/1064
CVE-1999-1203
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: multilink_ppp_for_isdn
References: http://marc.info/?l=bugtraq&m=91868964203769&w=2, http://marc.info/?l=bugtraq&m=91888117502765&w=2, http://www.iss.net/security_center/static/7498.php
CVE-1999-1387
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://marc.info/?l=bugtraq&m=87602167420731&w=2, http://marc.info/?l=bugtraq&m=87602167420732&w=2, http://marc.info/?l=bugtraq&m=87602167420741&w=2
CVE-1999-0406
Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0406, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0406
CVE-1999-1156
BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bisonware_ftp_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/2254, https://exchange.xforce.ibmcloud.com/vulnerabilities/2254
CVE-1999-0032
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd_os, nextstep, freebsd, sunos, irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX, http://www.ciac.org/ciac/bulletins/i-042.shtml, http://www.securityfocus.com/bid/707
CVE-1999-1359
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q163/8/75.asp, http://www.iss.net/security_center/static/7401.php, http://support.microsoft.com/support/kb/articles/q163/8/75.asp
CVE-1999-1085
SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: secure_shell
References: http://marc.info/?l=bugtraq&m=90221103125884&w=2, http://marc.info/?l=bugtraq&m=90221104525878&w=2, http://www.iss.net/security_center/static/1126.php
CVE-1999-0161
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.osvdb.org/797, http://www.osvdb.org/797
CVE-1999-0483
OpenBSD crash using nlink value in FFS and EXT2FS filesystems.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://www.osvdb.org/6129, http://www.osvdb.org/6129
CVE-1999-0592
The Logon box of a Windows NT system displays the name of the last user who logged in.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/1353, https://exchange.xforce.ibmcloud.com/vulnerabilities/1353
CVE-1999-1124
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion
References: http://packetstorm.securify.com/mag/phrack/phrack54/P54-08, http://packetstorm.securify.com/mag/phrack/phrack54/P54-08
CVE-1999-1292
Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webcam32
References: http://xforce.iss.net/alerts/advise7.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/1366, http://xforce.iss.net/alerts/advise7.php
CVE-1999-0408
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cobalt_raq
References: http://www.securityfocus.com/bid/337, http://www.securityfocus.com/bid/337
CVE-1999-0308
HP-UX gwind program allows users to modify arbitrary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9410-018, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9410-018
CVE-1999-1380
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: norton_utilities
References: http://mlarchive.ima.com/win95/1997/May/0342.html, http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html, http://www.iss.net/security_center/static/7188.php
CVE-1999-0922
An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full, http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full
CVE-1999-1199
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=90252779826784&w=2, http://marc.info/?l=bugtraq&m=90276683825862&w=2, http://marc.info/?l=bugtraq&m=90280517007869&w=2
CVE-1999-0279
Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ews
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0279, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0279
CVE-1999-0348
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ197003, http://www.osvdb.org/930, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ197003
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-0773
Buffer overflow in Solaris lpset program allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.netspace.org/cgi-bin/wa?A2=ind9905B&L=bugtraq&P=R2017, http://www.netspace.org/cgi-bin/wa?A2=ind9905B&L=bugtraq&P=R2017
CVE-1999-1505
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quakeworld
References: http://marc.info/?l=bugtraq&m=89200537415923&w=2, http://www.securityfocus.com/bid/60, http://marc.info/?l=bugtraq&m=89200537415923&w=2
CVE-1999-1527
Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: forte, netbeans_developer
References: http://marc.info/?l=bugtraq&m=94338883114254&w=2, http://www.securityfocus.com/bid/816, http://marc.info/?l=bugtraq&m=94338883114254&w=2
CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware, macos, aix, hp-ux, ios
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://descriptions.securescout.com/tc/11010, http://descriptions.securescout.com/tc/11011, http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-0869
Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: navigator, internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-020, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-020
CVE-1999-1338
Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: delegate
References: http://marc.info/?l=bugtraq&m=93259112204664&w=2, http://marc.info/?l=bugtraq&m=93259112204664&w=2
CVE-1999-0008
Buffer overflow in NIS+, in Sun's rpc.nisd program.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/170, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/170
CVE-1999-1466
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.cert.org/advisories/CA-1992-20.html, http://www.securityfocus.com/bid/53, http://www.cert.org/advisories/CA-1992-20.html
CVE-1999-0884
The Zeus web server administrative interface uses weak encryption for its passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zeus_web_server
References: http://www.osvdb.org/8186, http://www.securityfocus.com/bid/742, https://exchange.xforce.ibmcloud.com/vulnerabilities/3833
CVE-1999-0829
HP Secure Web Console uses weak encryption.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: secure_web_console
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0829, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0829
CVE-1999-0445
In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ios
References: http://www.osvdb.org/1104, http://www.osvdb.org/1104
CVE-1999-1483
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: svgalib
References: http://www.securityfocus.com/archive/1/7041, http://www.securityfocus.com/archive/1/7041
CVE-1999-1294
Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q146/6/04.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/562, http://support.microsoft.com/support/kb/articles/q146/6/04.asp
CVE-1999-0813
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cfingerd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0813, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0813
CVE-1999-1535
Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aspupload
References: http://marc.info/?l=ntbugtraq&m=93256878011447&w=2, http://marc.info/?l=ntbugtraq&m=93501427820328&w=2, http://www.securityfocus.com/bid/592
CVE-1999-0837
Denial of service in BIND by improperly closing TCP sessions via so_linger.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bind, sunos, solaris
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194, http://www.securityfocus.com/bid/788
CVE-1999-1283
Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: opera_web_browser
References: http://www.securityfocus.com/archive/1/10320, https://exchange.xforce.ibmcloud.com/vulnerabilities/1541, http://www.securityfocus.com/archive/1/10320
CVE-1999-1280
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exceed
References: http://www.securityfocus.com/archive/1/11512, https://exchange.xforce.ibmcloud.com/vulnerabilities/1547, http://www.securityfocus.com/archive/1/11512
CVE-1999-1090
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: telnet
References: http://www.cert.org/advisories/CA-1991-15.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/1844, http://www.cert.org/advisories/CA-1991-15.html
CVE-1999-0745
Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.ciac.org/ciac/bulletins/j-059.shtml, http://www.securityfocus.com/bid/590, http://www.ciac.org/ciac/bulletins/j-059.shtml
CVE-1999-0932
Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: statistics_server
References: http://www.securityfocus.com/bid/735, http://www.securityfocus.com/bid/735
CVE-1999-1379
DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dnstools
References: ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos, http://ciac.llnl.gov/ciac/bulletins/j-063.shtml, http://marc.info/?l=bugtraq&m=93348057829957&w=2
CVE-1999-0945
Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174, http://www.ciac.org/ciac/bulletins/i-080.shtml, http://xforce.iss.net/alerts/advise4.php
CWE: CWE-120
CVE-1999-1477
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gnome_libs, mandrake_linux
References: http://www.securityfocus.com/archive/1/28717, http://www.securityfocus.com/bid/663, https://exchange.xforce.ibmcloud.com/vulnerabilities/3349
CVE-1999-1348
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=93220073515880&w=2, http://marc.info/?l=bugtraq&m=93220073515880&w=2
CVE-1999-1304
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, open_desktop_lite, openserver_enterprise_system, unix, openserver_network_system
References: http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ciac.llnl.gov/ciac/bulletins/f-05.shtml
CVE-1999-0235
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ncsa_web_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0235, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0235
CVE-1999-0095
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail
References: http://seclists.org/fulldisclosure/2019/Jun/16, http://www.openwall.com/lists/oss-security/2019/06/05/4, http://www.openwall.com/lists/oss-security/2019/06/06/1
CVE-1999-0858
Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_explorer
Related CWEs: CWE-16
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ247333, http://www.securityfocus.com/bid/846, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-054
CWE: CWE-16
CVE-1999-0181
The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: rpc.walld
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0181, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0181
CVE-1999-1346
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=93942774609925&w=2, http://marc.info/?l=bugtraq&m=93942774609925&w=2
CVE-1999-1128
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://members.tripod.com/~unibyte/iebug3.htm, http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html, http://members.tripod.com/~unibyte/iebug3.htm
CVE-1999-0855
Buffer overflow in FreeBSD gdc program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://www.securityfocus.com/bid/834, http://www.securityfocus.com/bid/834
CVE-1999-0274
Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0274, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0274