DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-1353
Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: msgcore
References: http://marc.info/?l=ntbugtraq&m=93698162708211&w=2, http://marc.info/?l=ntbugtraq&m=93698162708211&w=2
CVE-1999-0338
AIX Licensed Program Product performance tools allow local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0338, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0338
CVE-1999-0055
Buffer overflows in Sun libnsl allow root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, aix, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/172, http://www-1.ibm.com/support/search.wss?rs=0&q=IX80543&apar=only, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/172
CVE-1999-1573
Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.auscert.org.au/render.html?it=490, http://www.ciac.org/ciac/bulletins/j-022.shtml, http://www.kb.cert.org/vuls/id/13217
CVE-1999-1563
Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: d445, d435
References: http://www.securityfocus.com/archive/1/30849, http://www.securityfocus.com/archive/1/35075, http://www.securityfocus.com/archive/1/30849
CVE-1999-0210
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=88053459921223&w=2, http://marc.info/?l=bugtraq&m=91547759121289&w=2, http://www.cert.org/advisories/CA-99-05-statd-automountd.html
CVE-1999-0446
Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd
References: http://www.osvdb.org/7051, http://www.osvdb.org/7051
CVE-1999-1122
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1989-02.html, http://www.ciac.org/ciac/bulletins/ciac-08.shtml, http://www.securityfocus.com/bid/3
CVE-1999-0051
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris, license_oeo, sunos, irix, flexlm
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0051, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0051
CVE-1999-0120
Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/126, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/126
CVE-1999-0611
A system-critical Windows NT registry key has an inappropriate value.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0611, https://www.cve.org/CVERecord?id=CVE-1999-0611
CVE-1999-0715
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230677, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-016, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230677
CVE-1999-0618
The rexec service is running.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0618, https://www.cve.org/CVERecord?id=CVE-1999-0618
CVE-1999-1556
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sql_server
References: http://marc.info/?l=ntbugtraq&m=90222453431645&w=2, http://www.securityfocus.com/bid/109, https://exchange.xforce.ibmcloud.com/vulnerabilities/7354
CVE-1999-0876
Buffer overflow in Internet Explorer 4.0 via EMBED tag.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ie, internet_explorer
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ185959, http://support.microsoft.com/support/kb/articles/q176/6/97.asp, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ185959
CWE: CWE-119
CVE-1999-0815
Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q196/2/70.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/1974, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A952
CVE-1999-1428
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: solstice_adminsuite
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145, http://www.securityfocus.com/bid/208, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145
CVE-1999-0733
Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: workstation
References: http://www.securityfocus.com/bid/490, http://www.securityfocus.com/bid/490
CVE-1999-1083
Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jana_web_server
References: http://marc.info/?l=bugtraq&m=95730430727064&w=2, http://www.securityfocus.com/bid/699, http://marc.info/?l=bugtraq&m=95730430727064&w=2
CVE-1999-1435
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: socks_5
References: http://marc.info/?l=bugtraq&m=90221104525933&w=2, http://www.securityfocus.com/bid/154, http://marc.info/?l=bugtraq&m=90221104525933&w=2
CVE-1999-0034
Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd_os, freeware, perl, linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0034, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0034
CVE-1999-0523
ICMP echo (ping) is allowed from arbitrary hosts.
References: https://www.cve.org/CVERecord?id=CVE-1999-0523, https://www.cve.org/CVERecord?id=CVE-1999-0523
CVE-1999-0320
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/166, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/166
CVE-1999-0844
Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://www.securityfocus.com/bid/820, http://www.securityfocus.com/bid/823, http://www.securityfocus.com/bid/820
CVE-1999-0997
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wu-ftpd, linux, anonftp
References: http://www.debian.org/security/2003/dsa-377, http://www.debian.org/security/2003/dsa-377
CVE-1999-0428
OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openssl
Related CWEs: CWE-384
Related CAPECs: CAPEC-31, CAPEC-21, CAPEC-59
MITRE ATT&CK Techniques: T1134, T1539, T1550.004
MITRE ATT&CK Tactics: T1134, T1550
References: http://www.osvdb.org/3936, http://www.osvdb.org/3936
CWE: CWE-384
MITRE ATT&CK techniques: T1134, T1539, T1550.004, T1134.003, T1134.001, T1134.002, T1606, T1528
MITRE ATT&CK tactics: T1134, T1550
CVE-1999-1392
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nex, next
References: http://ciac.llnl.gov/ciac/bulletins/b-01.shtml, http://www.cert.org/advisories/CA-1990-06.html, http://www.iss.net/security_center/static/7144.php
CVE-1999-1560
Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tiger
References: http://marc.info/?l=bugtraq&m=93252050203589&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/2369, http://marc.info/?l=bugtraq&m=93252050203589&w=2
CVE-1999-0139
Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.osvdb.org/8205, http://www.osvdb.org/8205
CVE-1999-0931
Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: statistics_server
References: http://www.securityfocus.com/bid/734, http://www.securityfocus.com/bid/734
CVE-1999-0570
Windows NT is not using a password filter utility, e.g. PASSFILT.DLL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0570, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0570
CVE-1999-1092
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tin
References: http://marc.info/?l=bugtraq&m=94286179032648&w=2, http://marc.info/?l=bugtraq&m=94286179032648&w=2
CVE-1999-1165
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fingerd
References: http://marc.info/?l=bugtraq&m=93268249021561&w=2, http://www.securityfocus.com/archive/1/2478, http://www.securityfocus.com/bid/535
CVE-1999-1532
Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: messaging_server
References: http://marc.info/?l=bugtraq&m=94117465014255&w=2, http://www.securityfocus.com/bid/748, http://marc.info/?l=bugtraq&m=94117465014255&w=2
CVE-1999-1343
HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: docucolor_4lp
References: http://marc.info/?l=bugtraq&m=93986405412867&w=2, http://marc.info/?l=bugtraq&m=93986405412867&w=2
CVE-1999-0045
List of arbitrary files on Web host via nph-test-cgi script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_server, communications_server, http_server, commerce_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0045, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0045
CVE-1999-0788
Arkiea nlservd allows remote attackers to conduct a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: arkeia
References: http://marc.info/?l=bugtraq&m=93837184228248&w=2, http://www.securityfocus.com/bid/662, http://marc.info/?l=bugtraq&m=93837184228248&w=2
CVE-1999-0350
Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: clearcase
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0350, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0350
CVE-1999-0227
Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154087, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154087
CWE: CWE-264
CVE-1999-0920
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pop2d, imap
References: http://www.securityfocus.com/bid/283, http://www.securityfocus.com/bid/283
CVE-1999-0596
A Windows NT log file has an inappropriate maximum size or retention period.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/2577, https://exchange.xforce.ibmcloud.com/vulnerabilities/2577
CVE-1999-1493
Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk().
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: apollo_domain_os
References: http://www.cert.org/advisories/CA-1991-23.html, http://www.securityfocus.com/bid/34, https://exchange.xforce.ibmcloud.com/vulnerabilities/7158
CVE-1999-1538
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: http://marc.info/?l=bugtraq&m=91638375309890&w=2, http://marc.info/?l=ntbugtraq&m=91632724913080&w=2, http://www.securityfocus.com/bid/189
CVE-1999-0812
Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: samba
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0812, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0812
CVE-1999-1260
mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: msql
References: http://marc.info/?l=bugtraq&m=91910115718150&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1777, http://marc.info/?l=bugtraq&m=91910115718150&w=2
CVE-1999-1181
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980901-01-PX, http://ciac.llnl.gov/ciac/bulletins/j-003.shtml, http://www.iss.net/security_center/static/7441.php
CVE-1999-0805
Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netware
References: http://archives.neohapsis.com/archives/bugtraq/1999_2/0439.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/2184, http://archives.neohapsis.com/archives/bugtraq/1999_2/0439.html
CVE-1999-1127
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
Related CWEs: CWE-772
Related CAPECs: CAPEC-469
MITRE ATT&CK Techniques: T1499.002
MITRE ATT&CK Tactics: T1499
References: http://support.microsoft.com/support/kb/articles/Q195/7/33.asp, http://www.iss.net/security_center/static/523.php, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017
CWE: CWE-772
MITRE ATT&CK techniques: T1499.002
MITRE ATT&CK tactics: T1499
CVE-1999-0770
Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firewall-1
References: http://www.osvdb.org/1027, http://www.securityfocus.com/bid/549, http://www.osvdb.org/1027
CVE-1999-0719
The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gnumeric
References: http://www.securityfocus.com/bid/563, http://www.securityfocus.com/bid/563
CVE-1999-1558
Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: digital_openvms, digital_openvms_axp
References: http://ciac.llnl.gov/ciac/bulletins/i-071a.shtml, http://www.iss.net/security_center/static/7151.php, http://www.securityfocus.com/bid/161
CVE-1999-0686
Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_server, hp-ux
References: http://www.ciac.org/ciac/bulletins/j-046.shtml, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-098, http://www.ciac.org/ciac/bulletins/j-046.shtml
CVE-1999-0782
KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel, freebsd, kde
References: http://marc.info/?l=bugtraq&m=91141486301691&w=2, http://marc.info/?l=bugtraq&m=91141486301691&w=2
CVE-1999-0385
The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: exchange_server
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-009, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-009
CWE: CWE-120
CVE-1999-0975
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt, windows_95, windows_98
References: http://www.securityfocus.com/bid/868, http://www.securityfocus.com/bid/868
CVE-1999-1201
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_95, windows_98
References: http://marc.info/?l=ntbugtraq&m=91849617221319&w=2, http://www.securityfocus.com/bid/225, https://exchange.xforce.ibmcloud.com/vulnerabilities/7542
CVE-1999-0237
Remote execution of arbitrary commands through Guestbook CGI program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cgi_guestbook
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0237, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0237
CVE-1999-0079
Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bisonware_ftp_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0079, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0079
CVE-1999-0519
A NETBIOS/SMB share password is the default, null, or missing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt, windows_2000, outlook, windows_95
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0519, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0519
CVE-1999-0309
HP-UX vgdisplay program gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-056, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-056
CVE-1999-0486
Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: instant_messenger
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0486, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0486
CVE-1999-0266
The info2www CGI script allows remote file access or remote command execution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: info2www
References: http://www.securityfocus.com/bid/1995, http://www.securityfocus.com/bid/1995
CVE-1999-0503
A Windows NT local user or administrator account has a guessable password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0503, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0503
CVE-1999-0783
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://www.ciac.org/ciac/bulletins/i-057.shtml, http://www.osvdb.org/6090, http://www.ciac.org/ciac/bulletins/i-057.shtml
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-1999-0595
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/216, https://exchange.xforce.ibmcloud.com/vulnerabilities/216
CVE-1999-1150
Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: portmaster
References: http://www.securityfocus.com/archive/1/9723, https://exchange.xforce.ibmcloud.com/vulnerabilities/1882, http://www.securityfocus.com/archive/1/9723
CVE-1999-0087
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: aix
References: http://www.osvdb.org/7992, http://www.osvdb.org/7992
CVE-1999-1274
iPass RoamServer 3.1 creates temporary files with world-writable permissions.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: roamserver
References: http://www.securityfocus.com/archive/1/8307, https://exchange.xforce.ibmcloud.com/vulnerabilities/1625, http://www.securityfocus.com/archive/1/8307
CVE-1999-1587
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos, solaris
References: http://secunia.com/advisories/19426, http://securitytracker.com/id?1015833, http://sunsolve.sun.com/search/document.do?assetkey=1-26-102215-1
CVE-1999-1268
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: http://lists.kde.org/?l=kde-devel&m=91560433413263&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1645, http://lists.kde.org/?l=kde-devel&m=91560433413263&w=2
CVE-1999-1125
Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=87602880019796&w=2, http://marc.info/?l=bugtraq&m=87602880019796&w=2
CVE-1999-0384
The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: project, windows_2000, office, outlook, windows_nt
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-001, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-001
CVE-1999-0163
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail
References: https://www.cve.org/CVERecord?id=CVE-1999-0163, https://www.cve.org/CVERecord?id=CVE-1999-0163
CVE-1999-1202
StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: telnet_server, pop3_proxy_server
References: http://marc.info/?l=bugtraq&m=90221104525873&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/2088, http://marc.info/?l=bugtraq&m=90221104525873&w=2
CVE-1999-0784
Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: database_server
References: http://archives.neohapsis.com/archives/bugtraq/1998_4/0764.html, http://archives.neohapsis.com/archives/bugtraq/1999_1/0056.html, http://archives.neohapsis.com/archives/ntbugtraq/1998/msg00536.html
CVE-1999-0046
Buffer overflow of rlogin program using TERM environmental variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, ultrix, aix, netbsd, hp-ux
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046
CWE: CWE-120
CVE-1999-0958
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sudo
References: http://marc.info/?l=bugtraq&m=88465708614896&w=2, http://marc.info/?l=bugtraq&m=88465708614896&w=2
CVE-1999-0809
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0809, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0809
CVE-1999-1445
Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: slackware_linux
References: http://marc.info/?l=bugtraq&m=88637951600184&w=2, http://marc.info/?l=bugtraq&m=88637951600184&w=2
CVE-1999-1018
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=93312523904591&w=2, http://www.securityfocus.com/bid/543, http://marc.info/?l=bugtraq&m=93312523904591&w=2
CVE-1999-0739
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013
CVE-1999-1414
IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netfinity_remote_control
References: http://marc.info/?l=ntbugtraq&m=92765856706547&w=2, http://marc.info/?l=ntbugtraq&m=92902484317769&w=2, http://www.securityfocus.com/bid/284
CVE-1999-0012
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
CVSS v3.1 Score: 7.0 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: personal_web_server, frontpage, internet_information_server, enterprise_server, fasttrack_server
Related CWEs: CWE-290
Related CAPECs: CAPEC-21, CAPEC-459, CAPEC-94
MITRE ATT&CK Techniques: T1134, T1553.002, T1539
MITRE ATT&CK Tactics: T1134, T1550, T1553
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0012, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0012
CWE: CWE-290
MITRE ATT&CK techniques: T1134, T1553.002, T1539, T1550.004, T1557, T1134.001, T1036.001, T1528
MITRE ATT&CK tactics: T1134, T1550, T1553, T1036
CVE-1999-0085
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netbsd, aix, freebsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/118, https://exchange.xforce.ibmcloud.com/vulnerabilities/119, https://exchange.xforce.ibmcloud.com/vulnerabilities/118
CVE-1999-1298
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-97:03.sysinstall.asc, http://www.iss.net/security_center/static/7537.php, http://www.osvdb.org/6087
CVE-1999-0670
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Affected Products: internet_explorer
References: http://ciac.llnl.gov/ciac/bulletins/j-064.shtml, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032, http://ciac.llnl.gov/ciac/bulletins/j-064.shtml
CVE-1999-0359
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ptylogin
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0359, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0359
CVE-1999-0259
cfingerd lists all users on a system via search.**@target.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cfingerd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0259, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0259
CVE-1999-1214
The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, openbsd, freebsd, bsd, irix
Related CWEs: CWE-255
References: http://www.openbsd.com/advisories/signals.txt, http://www.openbsd.com/advisories/signals.txt, http://www.osvdb.org/11062
CWE: CWE-255
CVE-1999-1196
Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exceed
References: http://www.securityfocus.com/archive/1/13451, http://www.securityfocus.com/bid/158, http://www.securityfocus.com/archive/1/13451
CVE-1999-0453
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: router
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0453, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0453
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-0502
A Unix account has a default, null, blank, or missing password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, sunos, solaris, linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0502, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0502
CVE-1999-1047
When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gauntlet
References: http://marc.info/?l=bugtraq&m=94026690521279&w=2, http://marc.info/?l=bugtraq&m=94036662326185&w=2, http://www.iss.net/security_center/static/3397.php
CVE-1999-1119
FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.cert.org/advisories/CA-1992-09.html, http://www.securityfocus.com/bid/41, https://exchange.xforce.ibmcloud.com/vulnerabilities/3154
CVE-1999-0807
The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: directory_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0807, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0807
CVE-1999-0889
Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 675_router
References: http://www.osvdb.org/39, http://www.osvdb.org/39
CVE-1999-0065
Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/181, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/181
CVE-1999-0466
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd
References: http://www.osvdb.org/905, http://www.osvdb.org/905
CVE-1999-1231
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ssh2
References: http://www.securityfocus.com/archive/1/14758, https://exchange.xforce.ibmcloud.com/vulnerabilities/2276, http://www.securityfocus.com/archive/1/14758
CVE-1999-0747
Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bsd_os
References: http://www.securityfocus.com/bid/589, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSI.4.10.9908170253560.19291-100000%40saturn.psn.net, http://www.securityfocus.com/bid/589
CVE-1999-1549
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lynx
Related CWEs: CWE-346
Related CAPECs: CAPEC-388, CAPEC-142, CAPEC-160
MITRE ATT&CK Techniques: T1134, T1539, T1550.004
MITRE ATT&CK Tactics: T1134, T1584, T1550
References: http://marc.info/?l=bugtraq&m=94286509804526&w=2, http://www.securityfocus.com/bid/804, http://marc.info/?l=bugtraq&m=94286509804526&w=2
CWE: CWE-346
MITRE ATT&CK techniques: T1134, T1539, T1550.004, T1557.002, T1134.001, T1584.002, T1528
MITRE ATT&CK tactics: T1134, T1584, T1550, T1557
CVE-1999-1253
Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_faststart, openserver
References: ftp://ftp.sco.com/SSE/security_bulletins/SB.96:01a, http://www.cert.org/vendor_bulletins/VB-96.10.sco, https://exchange.xforce.ibmcloud.com/vulnerabilities/1965
CVE-1999-0248
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ssh
References: http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html, http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1, http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html
CVE-1999-1517
runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://marc.info/?l=bugtraq&m=94148942818975&w=2, http://www.securityfocus.com/bid/750, http://marc.info/?l=bugtraq&m=94148942818975&w=2
CVE-1999-0923
Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full, http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full
CVE-1999-0334
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0334, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0334
CVE-1999-0721
Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: windows_2000, windows_nt
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231457, http://www.ciac.org/ciac/bulletins/j-049.shtml, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-020
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-0114
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: elm
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0114, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0114
CVE-1999-1113
Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_mail_server
References: http://marc.info/?l=bugtraq&m=89258194718577&w=2, http://www.securityfocus.com/bid/75, http://marc.info/?l=bugtraq&m=89258194718577&w=2
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sapphire_web
References: http://www.securityfocus.com/bid/623, http://www.securityfocus.com/bid/623
CVE-1999-0736
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013
CVE-1999-1043
Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-007, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-007
CVE-1999-0421
During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux
References: http://www.osvdb.org/981, http://www.securityfocus.com/bid/338, http://www.osvdb.org/981
CVE-1999-0834
Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rsaref
References: http://www.securityfocus.com/bid/843, http://www.securityfocus.com/bid/843