DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-0451
Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://www.securityfocus.com/bid/343, http://www.securityfocus.com/bid/343
CVE-1999-0315
Buffer overflow in Solaris fdformat command gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/138, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/138
CVE-1999-1451
The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, site_server
References: http://support.microsoft.com/support/kb/articles/q231/3/68.asp, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013, https://exchange.xforce.ibmcloud.com/vulnerabilities/3271
CVE-1999-0388
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suguard
References: http://www.osvdb.org/3186, http://www.osvdb.org/3186
CVE-1999-1259
Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: office
References: http://support.microsoft.com/support/kb/articles/q189/5/29.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/1780, http://support.microsoft.com/support/kb/articles/q189/5/29.asp
CVE-1999-1134
Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/e-23.shtml, http://packetstorm.securify.com/advisories/hpalert/008, http://www.iss.net/security_center/static/2284.php
CVE-1999-0819
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt
References: http://marc.info/?l=bugtraq&m=94398141118586&w=2, http://marc.info/?l=bugtraq&m=94398141118586&w=2
CVE-1999-1528
ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware_client
References: http://marc.info/?l=bugtraq&m=94261444428430&w=2, http://www.securityfocus.com/bid/794, http://marc.info/?l=bugtraq&m=94261444428430&w=2
CVE-1999-0164
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.osvdb.org/8346, http://www.osvdb.org/8346
CVE-1999-1118
ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/165&type=0&nav=sec.sba, http://www.securityfocus.com/bid/433, https://exchange.xforce.ibmcloud.com/vulnerabilities/817
CVE-1999-0049
Csetup under IRIX allows arbitrary file creation or overwriting.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0049, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0049
CVE-1999-0070
test-cgi program allows an attacker to list files on the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: http_server
References: https://lists.apache.org/thread.html/rc5d27fc1e76dc5650e1a3f1db1de403120f4c2d041cb7352850455c2%40%3Cusers.httpd.apache.org%3E, https://lists.apache.org/thread.html/rc5d27fc1e76dc5650e1a3f1db1de403120f4c2d041cb7352850455c2%40%3Cusers.httpd.apache.org%3E
CVE-1999-0252
Buffer overflow in listserv allows arbitrary command execution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: listserv
References: https://www.cve.org/CVERecord?id=CVE-1999-0252, https://www.cve.org/CVERecord?id=CVE-1999-0252
CVE-1999-1154
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: filemail_cgi_script
References: http://lakeweb.com/scripts/, http://www.securityfocus.com/archive/1/11175, https://exchange.xforce.ibmcloud.com/vulnerabilities/1400
CVE-1999-0471
The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: winroute
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0471, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0471
CVE-1999-1485
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: irix
References: http://marc.info/?l=bugtraq&m=92818552106912&w=2, http://www.osvdb.org/8564, http://www.securityfocus.com/bid/412
CVE-1999-1316
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/Q247/9/75.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/7391, http://support.microsoft.com/support/kb/articles/Q247/9/75.asp
CVE-1999-0043
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux, bsd_os, news_server, openlinux, goah_intrasv
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043
CWE: CWE-78
CVE-1999-1403
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tivoli_opc_tracker_agent
References: http://www.securityfocus.com/archive/1/10771, http://www.securityfocus.com/bid/382, http://www.securityfocus.com/archive/1/10771
CVE-1999-0537
A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: communicator, internet_explorer
References: https://www.cve.org/CVERecord?id=CVE-1999-0537, https://www.cve.org/CVERecord?id=CVE-1999-0537
CVE-1999-1362
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q160/6/01.asp, http://www.iss.net/security_center/static/7403.php, http://support.microsoft.com/support/kb/articles/q160/6/01.asp
CVE-1999-0937
BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0937, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0937
CVE-1999-0999
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: sql_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248749, http://www.securityfocus.com/bid/817, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-059
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-0827
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: navigator, ie, internet_explorer
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0827, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0827
CVE-1999-0014
Unauthorized privileged access or denial of service via dtappgather program in CDE.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vvos, hp-ux, aix, cde
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/185, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-075, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/185
CVE-1999-0654
The OS/2 or POSIX subsystem in NT is enabled.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0654, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0654
CVE-1999-0491
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bash
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-008.0.txt, http://www.securityfocus.com/bid/119, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9904202114070.6623-100000%40smooth.Operator.org
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-1999-0702
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241361, http://www.securityfocus.com/bid/627, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-1999-1341
Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=94061108411308&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/7858, http://marc.info/?l=bugtraq&m=94061108411308&w=2
CVE-1999-1378
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dbmlparser.exe
References: http://marc.info/?l=bugtraq&m=93250710625956&w=2, http://marc.info/?l=bugtraq&m=93250710625956&w=2
CVE-1999-0182
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: samba
References: http://www.ciac.org/ciac/bulletins/h-110.shtml, http://www.ciac.org/ciac/bulletins/h-110.shtml
CVE-1999-1571
Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/sse/security_bulletins/SB-99.17c, ftp://stage.caldera.com/pub/security/sse/sse037c/sse037c.ltr, http://marc.info/?l=bugtraq&m=93762097815861&w=2
CVE-1999-0374
Debian GNU/Linux cfengine package is susceptible to a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: debian_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0374, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0374
CVE-1999-0984
Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: matts_whois
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0984, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0984
CVE-1999-0864
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: http://marc.info/?l=bugtraq&m=94530783815434&w=2, http://marc.info/?l=bugtraq&m=94581379905584&w=2, http://marc.info/?l=bugtraq&m=94606167110764&w=2
CVE-1999-0584
A Windows NT file system is not NTFS.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/195, https://exchange.xforce.ibmcloud.com/vulnerabilities/195
CVE-1999-0256
Buffer overflow in War FTP allows remote execution of commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt, windows_95, warftpd
References: http://www.osvdb.org/875, http://www.osvdb.org/875
CVE-1999-1525
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: shockwave_flash_plugin
References: http://marc.info/?l=bugtraq&m=87602167420670&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1585, https://exchange.xforce.ibmcloud.com/vulnerabilities/1586
CVE-1999-0905
Denial of service in Axent Raptor firewall via malformed zero-length IP options.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: raptor_firewall
References: http://www.osvdb.org/1121, http://www.securityfocus.com/bid/736, http://www.osvdb.org/1121
CVE-1999-0484
Buffer overflow in OpenBSD ping.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openbsd
References: http://www.osvdb.org/6130, http://www.osvdb.org/6130
CVE-1999-1570
Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17/CSSA-2002-SCO.17.txt, http://marc.info/?l=vuln-dev&m=102098949103708&w=2, http://online.securityfocus.com/archive/1/27074
CVE-1999-0294
All records in a WINS database can be deleted through SNMP for a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wins
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0294, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0294
CVE-1999-0949
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: turbolinux, sunos, irix, solaris
References: http://www.securityfocus.com/bid/757, http://www.securityfocus.com/bid/757
CVE-1999-0312
HP ypbind allows attackers with root privileges to modify NIS data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0312, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0312
CVE-1999-1104
Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_95
References: http://marc.info/?l=bugtraq&m=87602167418931&w=2, http://marc.info/?l=bugtraq&m=88536273725787&w=2, http://marc.info/?l=ntbugtraq&m=88540877601866&w=2
CVE-1999-0499
NETBIOS share information may be published through SNMP registry keys in NT.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0499, https://www.cve.org/CVERecord?id=CVE-1999-0499
CVE-1999-1340
Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hylafax
References: http://marc.info/?l=bugtraq&m=94173799532589&w=2, http://www.securityfocus.com/bid/765, http://marc.info/?l=bugtraq&m=94173799532589&w=2
CVE-1999-0859
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos, solaris
References: http://www.osvdb.org/6994, http://www.securityfocus.com/bid/837, http://www.osvdb.org/6994
CVE-1999-0786
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/659, http://www.securityfocus.com/bid/659
CVE-1999-1236
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_anywhere_mail_server
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662, http://www.securityfocus.com/bid/731, https://exchange.xforce.ibmcloud.com/vulnerabilities/3285
CVE-1999-0058
Buffer overflow in PHP cgi program, php.cgi allows shell access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php
References: http://www.securityfocus.com/bid/712, http://www.securityfocus.com/bid/712
CVE-1999-0978
htdig allows remote attackers to execute commands via filenames with shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux
References: http://www.securityfocus.com/bid/867, http://www.securityfocus.com/bid/867
CVE-1999-1121
The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.cert.org/advisories/CA-1992-06.html, http://www.osvdb.org/891, http://www.securityfocus.com/bid/38
CVE-1999-0375
Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: network_flight_recorder
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0375, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0375
CVE-1999-0495
A remote attacker can gain access to a file system using ..  (dot dot) when accessing SMB shares.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/837, https://exchange.xforce.ibmcloud.com/vulnerabilities/837
CVE-1999-1488
sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: system_data_repository
References: http://ciac.llnl.gov/ciac/bulletins/i-079a.shtml, http://www.iss.net/security_center/static/7217.php, http://www.securityfocus.com/bid/371
CVE-1999-1386
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: perl
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://marc.info/?l=bugtraq&m=88932165406213&w=2, http://www.iss.net/security_center/static/7243.php, http://www.redhat.com/support/errata/rh50-errata-general.html#perl
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-1999-1146
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.securityfocus.com/advisories/1555, https://exchange.xforce.ibmcloud.com/vulnerabilities/2060, http://www.securityfocus.com/advisories/1555
CVE-1999-0535
A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0535, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0535
CVE-1999-0302
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/176, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/176
CVE-1999-0504
A Windows NT local user or administrator account has a default, null, blank, or missing password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0504, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0504
CVE-1999-0947
AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: an-httpd
References: http://marc.info/?l=bugtraq&m=94157187815629&w=2, http://www.securityfocus.com/bid/762, http://marc.info/?l=bugtraq&m=94157187815629&w=2
CVE-1999-0760
Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?ID=11714&Method=Full, http://www.securityfocus.com/bid/550, https://exchange.xforce.ibmcloud.com/vulnerabilities/3288
CVE-1999-0077
Predictable TCP sequence numbers allow spoofing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/139, https://exchange.xforce.ibmcloud.com/vulnerabilities/139
CVE-1999-0987
Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237923, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237923
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-1999-0340
Buffer overflow in Linux Slackware crond program allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0340, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0340
CVE-1999-0691
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, solaris, cde, unix, sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192, http://www.securityfocus.com/bid/635, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103
CVE-1999-1443
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CTRL><ALT><DEL> and kill the process using the task manager, (2) booting the system from a separate disk, or (3) interrupting certain processes that execute while the system is booting.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: full_armor
References: http://marc.info/?l=bugtraq&m=90221103125869&w=2, http://marc.info/?l=bugtraq&m=90221103125889&w=2, http://www.securityfocus.com/bid/103
CVE-1999-1101
Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lydia
References: http://www.securityfocus.com/archive/1/12618, http://www.securityfocus.com/archive/1/12618
CVE-1999-1432
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=90221104525997&w=2, http://www.securityfocus.com/bid/160, http://marc.info/?l=bugtraq&m=90221104525997&w=2
CVE-1999-0073
Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix, unix, osf_1
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0073, http://www.openwall.com/lists/oss-security/2026/02/24/3, http://www.openwall.com/lists/oss-security/2026/03/07/3
CVE-1999-1081
Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_server
References: http://www.roxanne.org/faqs/www-secure/wwwsf4.html#Q35, http://www.w3.org/Security/Faq/wwwsf8.html#Q87, https://exchange.xforce.ibmcloud.com/vulnerabilities/2054
CVE-1999-0977
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191, http://www.osvdb.org/2558, http://www.securityfocus.com/bid/2354
CVE-1999-0448
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0448, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0448
CVE-1999-1266
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: metamail
References: http://www.securityfocus.com/archive/1/6978, https://exchange.xforce.ibmcloud.com/vulnerabilities/1660, http://www.securityfocus.com/archive/1/6978
CVE-1999-0818
Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/831, http://www.securityfocus.com/templates/archive.pike?list=1&msg=38433B7F5A.53F4SHADOWPENGUIN%40fox.nightland.net, http://www.securityfocus.com/bid/831
CVE-1999-1308
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/h-09.shtml, http://ciac.llnl.gov/ciac/bulletins/h-91.shtml, http://ciac.llnl.gov/ciac/bulletins/h-91.shtml
CVE-1999-0326
Vulnerability in HP-UX mediainit program.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9710-071, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9710-071
CVE-1999-1358
When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: http://support.microsoft.com/support/kb/articles/q157/6/73.asp, http://www.iss.net/security_center/static/7400.php, http://support.microsoft.com/support/kb/articles/q157/6/73.asp
CVE-1999-1492
Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030, http://www.securityfocus.com/bid/348, https://exchange.xforce.ibmcloud.com/vulnerabilities/2103
CVE-1999-1097
Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: netmeeting
References: http://marc.info/?l=bugtraq&m=92586457816446&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/2187, http://marc.info/?l=bugtraq&m=92586457816446&w=2
CVE-1999-0054
Sun's ftpd daemon can be subjected to a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/171, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/171
CVE-1999-0097
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, sunos, aix, solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0097, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0097
CVE-1999-1484
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: msn_setup_bulletin_board_services
References: http://www.securityfocus.com/archive/1/28719, http://www.securityfocus.com/bid/668, https://exchange.xforce.ibmcloud.com/vulnerabilities/3310
CVE-1999-0972
Buffer overflow in Xshipwars xsw program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xshipwars
References: http://www.securityfocus.com/bid/863, http://www.securityfocus.com/bid/863
CVE-1999-0044
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19970301-01-P, ftp://patches.sgi.com/support/free/security/advisories/19970301-01-P
CVE-1999-1173
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wordperfect
References: http://marc.info/?l=bugtraq&m=91404045014047&w=2, http://marc.info/?l=bugtraq&m=91404045014047&w=2
CVE-1999-0522
The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0522, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0522
CVE-1999-0867
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, site_server, commercial_internet_system
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349, http://www.ciac.org/ciac/bulletins/j-058.shtml, http://www.securityfocus.com/bid/579
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-0042
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, imap, linux, pop, bsd_os
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0042, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0042
CVE-1999-0074
Listening TCP ports are sequentially allocated, allowing spoofing attacks.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: linux_kernel, windows_nt, netbsd, freebsd
References: https://www.cve.org/CVERecord?id=CVE-1999-0074, https://www.cve.org/CVERecord?id=CVE-1999-0074
CVE-1999-0117
AIX passwd allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0117, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0117
CVE-1999-0638
The daytime service is running.
References: https://www.cve.org/CVERecord?id=CVE-1999-0638, https://www.cve.org/CVERecord?id=CVE-1999-0638
CVE-1999-0727
A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openbsd
References: http://www.osvdb.org/6127, http://www.osvdb.org/6127
CVE-1999-0203
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0203, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0203
CVE-1999-0826
Buffer overflow in FreeBSD angband allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://www.osvdb.org/1151, http://www.securityfocus.com/bid/840, http://www.osvdb.org/1151
CVE-1999-0358
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unix
References: http://www.ciac.org/ciac/bulletins/j-027.shtml, http://www.securityfocus.com/archive/1/12121, http://www.ciac.org/ciac/bulletins/j-027.shtml
CVE-1999-0548
A superfluous NFS server is running, but it is not importing or exporting any file systems.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0548, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0548
CVE-1999-1357
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: communicator
References: http://marc.info/?l=bugtraq&m=93915331626185&w=2, http://marc.info/?l=bugtraq&m=93915331626185&w=2
CVE-1999-0191
IIS newdsn.exe CGI script allows remote users to overwrite files.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: internet_information_server
References: http://www.osvdb.org/275, http://www.osvdb.org/275
CVE-1999-1459
BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: patrol_agent
References: http://www.securityfocus.com/bid/534, http://xforce.iss.net/alerts/advise10.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/1388
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, linux, hp-ux, bsd_os, freebsd
References: http://www.securityfocus.com/bid/716, http://www.securityfocus.com/bid/716
CVE-1999-1328
linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=90383955231511&w=2, http://www.iss.net/security_center/static/7232.php, http://www.osvdb.org/6068
CVE-1999-0411
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0411, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0411
CVE-1999-1015
Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: appleshare_mail_server
References: http://marc.info/?l=bugtraq&m=89200657216213&w=2, http://www.securityfocus.com/bid/61, http://marc.info/?l=bugtraq&m=89200657216213&w=2
CVE-1999-0547
An SSH server allows authentication through the .rhosts file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/315, https://exchange.xforce.ibmcloud.com/vulnerabilities/315
CVE-1999-1223
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://support.microsoft.com/support/kb/articles/q187/5/03.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/3892, http://support.microsoft.com/support/kb/articles/q187/5/03.asp
CVE-1999-0197
finger 0@host on some systems may print information on some user accounts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/8378, https://exchange.xforce.ibmcloud.com/vulnerabilities/8378
CVE-1999-1315
Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dec_openvms
References: http://ciac.llnl.gov/ciac/bulletins/f-04.shtml, http://ciac.llnl.gov/ciac/bulletins/f-04.shtml
CVE-1999-0039
webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.
CVSS v3.1 Score: 7.3 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
Related CWEs: CWE-77
Related CAPECs: CAPEC-43, CAPEC-183, CAPEC-76
References: ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX, http://www.cert.org/advisories/CA-1997-12.html, http://www.osvdb.org/235
CWE: CWE-77
CVE-1999-1541
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: shell-lock
References: http://marc.info/?l=bugtraq&m=93916168802365&w=2, http://www.atstake.com/research/advisories/1999/shell-lock.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/3358
CVE-1999-0367
NetBSD netstat command allows local users to access kernel memory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netbsd
References: http://www.osvdb.org/7571, http://www.osvdb.org/7571
CVE-1999-1188
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: http://marc.info/?l=bugtraq&m=91479159617803&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1568, http://marc.info/?l=bugtraq&m=91479159617803&w=2
CVE-1999-1007
Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: vdolive_player
References: http://marc.info/?l=bugtraq&m=94512259331599&w=2, http://www.securityfocus.com/bid/872, http://marc.info/?l=bugtraq&m=94512259331599&w=2
CVE-1999-0175
The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: web_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0175, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0175
CVE-1999-0214
Denial of service by sending forged ICMP unreachable packets.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: https://www.cve.org/CVERecord?id=CVE-1999-0214, https://www.cve.org/CVERecord?id=CVE-1999-0214
CVE-1999-0238
php.cgi allows attackers to read any file on the system.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: php
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0238, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0238
CVE-1999-1270
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kde
References: http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1639, http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2
CVE-1999-0890
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ihtml_merchant
References: http://www.ihtmlmerchant.com/support_patches_feedback.htm, http://www.securityfocus.com/bid/694, http://www.ihtmlmerchant.com/support_patches_feedback.htm