DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-0234
Bash treats any character with a value of 255 as a command separator.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, irix, openlinux, linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0234, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0234
CVE-1999-0149
The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX, http://www.osvdb.org/247, http://www.securityfocus.com/bid/373
CVE-1999-1031
counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: web_page_counter
References: http://marc.info/?l=bugtraq&m=92713790426690&w=2, http://marc.info/?l=ntbugtraq&m=92707671717292&w=2, http://www.securityfocus.com/bid/267
CVE-1999-1382
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netware
References: http://marc.info/?l=bugtraq&m=88427711321769&w=2, http://marc.info/?l=bugtraq&m=90295697702474&w=2, http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551
CVE-1999-0576
A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0576, https://www.cve.org/CVERecord?id=CVE-1999-0576
CVE-1999-0255
Buffer overflow in ircd allows arbitrary command execution.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0255, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0255
CVE-1999-1424
Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: solstice_adminsuite
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145, http://www.securityfocus.com/bid/208, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145
CVE-1999-0228
Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ162567, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ162567
CVE-1999-0021
Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wwwcount
References: http://www.securityfocus.com/bid/128, http://www.securityfocus.com/bid/128
CVE-1999-0368
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wu-ftpd, debian_linux, linux, unixware, openserver
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368
CVE-1999-0322
The open() function in FreeBSD allows local attackers to write to arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: freebsd
References: http://www.osvdb.org/6092, http://www.osvdb.org/6092
CVE-1999-0112
Buffer overflow in AIX dtterm program for the CDE.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, cde
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/878, https://exchange.xforce.ibmcloud.com/vulnerabilities/878
CVE-1999-1116
Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19970503-01-PX, http://www.osvdb.org/1009, http://www.securityfocus.com/bid/462
CVE-1999-0878
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wu-ftpd, beroftpd
References: http://www.securityfocus.com/bid/599, http://www.securityfocus.com/bid/599
CVE-1999-0019
Delete or create a file via rpc.statd, due to invalid information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: open_desktop, aix, mp-ras, cx_ux, unixware
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/135, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/135
CVE-1999-0603
In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0603, https://www.cve.org/CVERecord?id=CVE-1999-0603
CVE-1999-1281
Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: breeze_network_server
References: http://www.securityfocus.com/archive/1/11720, https://exchange.xforce.ibmcloud.com/vulnerabilities/1544, http://www.securityfocus.com/archive/1/11720
CVE-1999-0708
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cfingerd
References: http://www.securityfocus.com/bid/651, http://www.securityfocus.com/bid/651
CVE-1999-0757
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?ID=10969&Method=Full, https://exchange.xforce.ibmcloud.com/vulnerabilities/2208, http://www.allaire.com/handlers/index.cfm?ID=10969&Method=Full
CVE-1999-0307
Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0307, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0307
CVE-1999-0291
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wingate
References: https://www.cve.org/CVERecord?id=CVE-1999-0291, https://www.cve.org/CVERecord?id=CVE-1999-0291
CVE-1999-0424
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0424, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0424
CVE-1999-1365
Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: http://marc.info/?l=ntbugtraq&m=93069418400856&w=2, http://marc.info/?l=ntbugtraq&m=93127894731200&w=2, http://www.securityfocus.com/bid/515
CVE-1999-1017
Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: emurl
References: http://marc.info/?l=ntbugtraq&m=93316253431588&w=2, http://www.securityfocus.com/bid/544, http://marc.info/?l=ntbugtraq&m=93316253431588&w=2
CVE-1999-1251
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://packetstormsecurity.org/advisories/hpalert/043, https://exchange.xforce.ibmcloud.com/vulnerabilities/2010, http://packetstormsecurity.org/advisories/hpalert/043
CVE-1999-0609
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: softcart
References: http://marc.info/?l=bugtraq&m=92462991805485&w=2, http://marc.info/?l=bugtraq&m=92462991805485&w=2
CVE-1999-1442
Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://uwsg.iu.edu/hypermail/linux/kernel/9805.3/0855.html, http://www.cs.helsinki.fi/linux/linux-kernel/Year-1998/1998-25/0816.html, http://www.securityfocus.com/bid/105
CVE-1999-0831
Denial of service in Linux syslogd via a large number of connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, suse_linux, cobalt_raq_2, cobalt_raq_3i, cobalt_raq
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-035.0.txt, http://www.securityfocus.com/bid/809, ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-035.0.txt
CVE-1999-0701
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-16
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ173039, http://www.securityfocus.com/bid/626, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-036
CWE: CWE-16
CVE-1999-1446
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=ntbugtraq&m=87602837719654&w=2, http://marc.info/?l=ntbugtraq&m=87602837719655&w=2, http://marc.info/?l=ntbugtraq&m=87602837719654&w=2
CVE-1999-1177
Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: nph-publish
References: http://www-genome.wi.mit.edu/WWW/tools/CGI_scripts/server_publish/nph-publish, http://www.w3.org/Security/Faq/wwwsf4.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/2055
CVE-1999-0764
NetBSD allows ARP packets to overwrite static ARP entries.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: netbsd
References: http://www.osvdb.org/6539, http://www.osvdb.org/6539
CVE-1999-1272
Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX, https://exchange.xforce.ibmcloud.com/vulnerabilities/1635, ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX
CVE-1999-0851
Denial of service in BIND named via naptr.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unixware, sunos, openserver, aix
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194, http://www.securityfocus.com/bid/788
CVE-1999-0429
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_notes
References: http://marc.info/?l=bugtraq&m=92221437025743&w=2, http://marc.info/?l=bugtraq&m=92241547418689&w=2, http://marc.info/?l=bugtraq&m=92246997917866&w=2
CVE-1999-0427
Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eudora, eudora_light, eudora_pro
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0427, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0427
CVE-1999-1110
Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.securityfocus.com/archive/1/34675, http://www.securityfocus.com/bid/793, http://www.securityfocus.com/archive/1/34675
CVE-1999-1220
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: majordomo
References: http://www.securityfocus.com/archive/1/7527, https://exchange.xforce.ibmcloud.com/vulnerabilities/502, http://www.securityfocus.com/archive/1/7527
CVE-1999-0929
Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netware, http_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0929, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0929
CVE-1999-0036
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
Related CWEs: CWE-434
Related CAPECs: CAPEC-1
MITRE ATT&CK Techniques: T1574.010
MITRE ATT&CK Tactics: T1574
References: ftp://patches.sgi.com/support/free/security/advisories/19970508-02-PX, http://www.ciac.org/ciac/bulletins/h-106.shtml, http://www.osvdb.org/990
CWE: CWE-434
MITRE ATT&CK techniques: T1574.010
MITRE ATT&CK tactics: T1574
CVE-1999-0541
A password for accessing a WWW URL is guessable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0541, https://www.cve.org/CVERecord?id=CVE-1999-0541
CVE-1999-0435
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0435, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0435
CVE-1999-0891
The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242542, http://www.ciac.org/ciac/bulletins/k-002.shtml, http://www.kb.cert.org/vuls/id/37828
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-1999-0510
A router or firewall allows source routed packets from arbitrary hosts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0510, https://www.cve.org/CVERecord?id=CVE-1999-0510
CVE-1999-0129
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix, hp-ux, openserver, bsd_os, freebsd
References: http://www.cert.org/advisories/CA-1996-25.html, http://www.cert.org/advisories/CA-1996-25.html
CVE-1999-0724
Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: http://www.osvdb.org/6128, http://www.osvdb.org/6128
CVE-1999-0640
The Gopher service is running.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0640, https://www.cve.org/CVERecord?id=CVE-1999-0640
CVE-1999-1209
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver, open_desktop
References: http://marc.info/?l=bugtraq&m=88131151000069&w=2, http://www.cert.org/vendor_bulletins/VB-97.14.scoterm, https://exchange.xforce.ibmcloud.com/vulnerabilities/690
CVE-1999-0376
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-006, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-006
CVE-1999-0467
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cgi_guestbook
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0467, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0467
CVE-1999-1333
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=89042322924057&w=2, http://www.iss.net/security_center/static/7240.php, http://www.osvdb.org/6111
CVE-1999-0213
libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.securityfocus.com/archive/1/9749, http://www.securityfocus.com/archive/1/9749
CVE-1999-0494
Denial of service in WinGate proxy through a buffer overflow in POP3.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wingate
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0494, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0494
CVE-1999-1489
Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux
References: http://www.securityfocus.com/archive/1/6384, http://www.securityfocus.com/bid/364, http://www.securityfocus.com/archive/1/6384
CVE-1999-1417
Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: answerbook2
References: http://www.securityfocus.com/archive/1/10383, http://www.securityfocus.com/bid/253, http://www.securityfocus.com/archive/1/10383
CVE-1999-1407
ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=88950856416985&w=2, http://www.iss.net/security_center/static/7294.php, http://www.redhat.com/support/errata/rh50-errata-general.html#initscripts
CVE-1999-0389
Buffer overflow in the bootp server in the Debian Linux netstd package.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: http://www.securityfocus.com/bid/324, http://www.securityfocus.com/bid/324
CVE-1999-0478
Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9904-097, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9904-097
CVE-1999-1370
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer
References: http://marc.info/?l=ntbugtraq&m=92220197414799&w=2, http://marc.info/?l=ntbugtraq&m=92220197414799&w=2
CVE-1999-0001
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd, bsd_os, freebsd
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.openbsd.org/errata23.html#tcpfix, http://www.osvdb.org/5707, http://www.openbsd.org/errata23.html#tcpfix
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-1237
Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://www.securityfocus.com/archive/1/14384, https://exchange.xforce.ibmcloud.com/vulnerabilities/2272, http://www.securityfocus.com/archive/1/14384
CWE: CWE-120
CVE-1999-1244
IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ipfilter
References: http://www.securityfocus.com/archive/1/13303, https://exchange.xforce.ibmcloud.com/vulnerabilities/2087, http://www.securityfocus.com/archive/1/13303
CVE-1999-1584
Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, openwindows
References: http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1, http://www.cert.org/advisories/CA-1993-18.html, http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1
CVE-1999-0994
Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
Related CWEs: CWE-255
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248183, http://www.securityfocus.com/bid/873, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-056
CWE: CWE-255
CVE-1999-0166
NFS allows users to use a "cd .." command to access other directories besides the exported file system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nfs
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0166, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0166
CVE-1999-1228
Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: supra, us_robotics, quicktel
References: http://marc.info/?l=bugtraq&m=90695973308453&w=2, http://www.macintouch.com/modemsecurity.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/3320
CVE-1999-1034
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: svr4
References: http://www.cert.org/advisories/CA-1991-08.html, http://www.ciac.org/ciac/bulletins/b-28.shtml, http://www.securityfocus.com/bid/23
CVE-1999-1460
BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: patrol_agent
References: http://marc.info/?l=bugtraq&m=93198293132463&w=2, http://marc.info/?l=bugtraq&m=93372579004129&w=2, http://www.securityfocus.com/bid/525
CVE-1999-1162
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: unix, open_desktop
References: http://www.cert.org/advisories/CA-1993-08.html, http://www.iss.net/security_center/static/542.php, http://www.cert.org/advisories/CA-1993-08.html
CVE-1999-0857
FreeBSD gdc program allows local users to modify files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: freebsd
References: http://www.securityfocus.com/bid/835, http://www.securityfocus.com/bid/835
CVE-1999-0452
A service or application has a backdoor password that was placed there by the developer.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0452, https://www.cve.org/CVERecord?id=CVE-1999-0452
CVE-1999-0306
buffer overflow in HP xlock program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vvos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0306, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0306
CVE-1999-0059
IRIX fam service allows an attacker to obtain a list of all files on the server.
CVSS v3.1 Score: 7.3 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N
Affected Products: irix
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://www.osvdb.org/164, http://www.securityfocus.com/bid/353, https://exchange.xforce.ibmcloud.com/vulnerabilities/325
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-0910
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: site_server_commerce, site_server, commercial_internet_system
References: http://www.securityfocus.com/bid/625, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-035, http://www.securityfocus.com/bid/625
CVE-1999-0447
Local users can gain privileges using the debug utility in the MPE/iX operating system.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mpe_ix
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMP9904-006, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMP9904-006
CVE-1999-1245
vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ucd-snmp
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/2086, https://exchange.xforce.ibmcloud.com/vulnerabilities/2086
CVE-1999-0137
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dip
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0137, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0137
CVE-1999-0360
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: site_server
References: http://marc.info/?l=bugtraq&m=91763097004101&w=2, http://marc.info/?l=bugtraq&m=91763097004101&w=2
CVE-1999-0534
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0534, https://www.cve.org/CVERecord?id=CVE-1999-0534
CVE-1999-0798
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux, unixware, openbsd, openserver, bsd_os
References: http://marc.info/?l=bugtraq&m=91278867118128&w=2, http://marc.info/?l=bugtraq&m=91278867118128&w=2
CVE-1999-0879
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd_os, openlinux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0879, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0879
CVE-1999-1322
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inoculan, arcserve_backup, exchange_server
References: http://marc.info/?l=ntbugtraq&m=91096758513985&w=2, http://marc.info/?l=ntbugtraq&m=91133714919229&w=2, http://marc.info/?l=ntbugtraq&m=91096758513985&w=2
CVE-1999-1521
Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cmail
References: http://marc.info/?l=bugtraq&m=93720402717560&w=2, http://marc.info/?l=bugtraq&m=94121824921783&w=2, http://www.securityfocus.com/bid/633
CVE-1999-1519
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: g6_ftp_server
References: http://marc.info/?l=bugtraq&m=94286244700573&w=2, http://www.securityfocus.com/bid/805, https://exchange.xforce.ibmcloud.com/vulnerabilities/3513
CVE-1999-0713
The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: afs, kerberos_5, unix, cde
References: http://www.ciac.org/ciac/bulletins/j-044.shtml, http://www.ciac.org/ciac/bulletins/j-044.shtml
CVE-1999-0436
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, desms
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-095, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-095
CVE-1999-0846
Denial of service in MDaemon 2.7 via a large number of connection attempts.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: https://marc.info/?l=bugtraq&m=94398020817351&w=2, https://marc.info/?l=bugtraq&m=94398020817351&w=2
CVE-1999-1440
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: icq_98a
References: http://marc.info/?l=bugtraq&m=91522424302962&w=2, http://www.securityfocus.com/bid/132, http://marc.info/?l=bugtraq&m=91522424302962&w=2
CVE-1999-1243
SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19950301-01-P373, http://ciac.llnl.gov/ciac/bulletins/f-16.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/2113
CVE-1999-0319
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0319, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0319
CVE-1999-0410
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.securityfocus.com/bid/293, http://www.securityfocus.com/bid/293
CVE-1999-0628
The rwho/rwhod service is running, which exposes machine status and user information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel, netbsd, aix, freebsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0628, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0628
CVE-1999-0273
Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0273, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0273
CVE-1999-1190
Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: emailclub
References: http://www.securiteam.com/exploits/E-MailClub__FROM__remote_buffer_overflow.html, http://www.securityfocus.com/bid/801, http://www.securiteam.com/exploits/E-MailClub__FROM__remote_buffer_overflow.html
CVE-1999-0732
The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debian_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0732, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0732
CVE-1999-1557
Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://marc.info/?l=bugtraq&m=92038879607336&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1895, http://marc.info/?l=bugtraq&m=92038879607336&w=2
CVE-1999-0990
Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gdm
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0990, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0990
CVE-1999-0387
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected Products: windows_95, windows_98
Related CWEs: CWE-255
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ168115, http://www.securityfocus.com/bid/829, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-052
CWE: CWE-255
CVE-1999-0157
Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios, pix_firewall_software
References: http://www.osvdb.org/1097, http://www.osvdb.org/1097
CVE-1999-1252
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: ftp://ftp.sco.COM/SSE/security_bulletins/SB.96:02a, http://www.cert.org/vendor_bulletins/VB-96.15.sco, https://exchange.xforce.ibmcloud.com/vulnerabilities/1966
CVE-1999-0268
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: metaweb
References: http://www.osvdb.org/110, http://www.osvdb.org/3969, http://www.osvdb.org/110
CVE-1999-0122
Buffer overflow in AIX lchangelv gives root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0122, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0122
CVE-1999-1082
Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jana_web_server
References: http://marc.info/?l=bugtraq&m=93941794201059&w=2, http://www.securityfocus.com/bid/699, http://marc.info/?l=bugtraq&m=93941794201059&w=2
CVE-1999-0142
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: navigator, java
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0142, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0142
CVE-1999-0921
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: patrol_agent
References: http://www.iss.net/security_center/static/4291.php, http://www.securityfocus.com/archive/1/13204, http://www.securityfocus.com/bid/1879
CVE-1999-1591
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, visual_interdev
References: http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00276.html, http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00277.html, http://www.securityfocus.com/bid/190
CVE-1999-1153
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hamcards_postcard_cgi
References: http://www.securityfocus.com/archive/1/11175, https://exchange.xforce.ibmcloud.com/vulnerabilities/1400, http://www.securityfocus.com/archive/1/11175
CVE-1999-1530
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: cobalt_raq_3i, cobalt_raq_2
References: http://marc.info/?l=bugtraq&m=94209954200450&w=2, http://marc.info/?l=bugtraq&m=94225629200045&w=2, http://www.iss.net/security_center/static/7764.php
CVE-1999-0952
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=91759216618637&w=2, http://marc.info/?l=bugtraq&m=91759216618637&w=2
CVE-1999-1404
IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtracker client port (5011), which prevents the connection from being closed properly.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tivoli_opc_tracker_agent
References: http://www.securityfocus.com/archive/1/10771, http://www.securityfocus.com/bid/382, http://www.securityfocus.com/archive/1/10771
CVE-1999-1067
SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: http://marc.info/?l=bugtraq&m=87602167420919&w=2, http://marc.info/?l=bugtraq&m=87602167420919&w=2
CVE-1999-1247
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://packetstormsecurity.org/advisories/hpalert/006, https://exchange.xforce.ibmcloud.com/vulnerabilities/2061, http://packetstormsecurity.org/advisories/hpalert/006
CVE-1999-1503
Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nfr
References: http://www.securityfocus.com/bid/63, http://www.securityfocus.com/bid/63
CVE-1999-1339
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, freebsd
References: http://marc.info/?l=bugtraq&m=93277426802802&w=2, http://marc.info/?l=bugtraq&m=93277766505061&w=2, http://www.iss.net/security_center/static/7257.php
CVE-1999-0169
NFS allows attackers to read and write any file on the system by specifying a false UID.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nfs
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0169, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0169
CVE-1999-0209
The SunView (SunTools) selection_svc facility allows remote users to read files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos
References: http://www.securityfocus.com/bid/8, http://www.securityfocus.com/bid/8
CVE-1999-0791
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hsmp, cable_modem
References: http://www.securityfocus.com/bid/695, http://www.securityfocus.com/bid/695