DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-0455
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion_server
References: http://www.securityfocus.com/bid/115, http://www.securityfocus.com/bid/115
CVE-1999-1566
Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: iparty
References: http://www.securityfocus.com/archive/1/13600, http://www.securityfocus.com/archive/1/13600
CVE-1999-1248
Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://packetstormsecurity.org/advisories/hpalert/019, https://exchange.xforce.ibmcloud.com/vulnerabilities/2058, http://packetstormsecurity.org/advisories/hpalert/019
CVE-1999-0896
Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: realserver_g2
References: http://service.real.com/help/faq/servg260.html, http://www.securityfocus.com/bid/767, http://service.real.com/help/faq/servg260.html
CVE-1999-0081
wu-ftp allows files to be overwritten via the rnfr command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wu-ftpd
References: https://www.cve.org/CVERecord?id=CVE-1999-0081, https://www.cve.org/CVERecord?id=CVE-1999-0081
CVE-1999-0005
Arbitrary command execution via IMAP buffer overflow in authenticate command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: messaging_server, imap
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/177, http://www.securityfocus.com/bid/130, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/177
CVE-1999-1389
US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: total_control_netserver_card
References: http://marc.info/?l=bugtraq&m=90221101925916&w=2, http://www.securityfocus.com/bid/99, http://marc.info/?l=bugtraq&m=90221101925916&w=2
CVE-1999-0272
Denial of service in Slmail v2.5 through the POP3 port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: slmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0272, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0272
CVE-1999-0801
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: patrol_agent
References: http://www.iss.net/security_center/static/2075.php, http://www.securityfocus.com/archive/1/13204, http://www.iss.net/security_center/static/2075.php
CVE-1999-1302
Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, open_desktop_lite, openserver_enterprise_system, unix, openserver_network_system
References: http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ftp.cerias.purdue.edu/pub/advisories/cert/cert_bulletins/VB-94:01.sco
CVE-1999-0450
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.securityfocus.com/bid/194, http://www.securityfocus.com/bid/194
CVE-1999-1235
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179, http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/3289
CVE-1999-0037
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd, linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0037, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0037
CVE-1999-0072
Buffer overflow in AIX xdat gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0072, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0072
CVE-1999-0386
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: frontpage, personal_web_server
References: http://www.osvdb.org/111, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-010, http://www.osvdb.org/111
CVE-1999-1025
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=90831127921062&w=2, http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20, http://www.securityfocus.com/bid/294
CVE-1999-1306
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.cert.org/advisories/CA-1992-20.html, http://www.cert.org/advisories/CA-1992-20.html
CVE-1999-0267
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ncsa_httpd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0267, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0267
CVE-1999-0301
Buffer overflow in SunOS/Solaris ps command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/149, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/149
CVE-1999-1271
Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dreamweaver
References: http://www.securityfocus.com/archive/1/9511, https://exchange.xforce.ibmcloud.com/vulnerabilities/1636, http://www.securityfocus.com/archive/1/9511
CVE-1999-0927
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ntmail
References: http://www.eeye.com/html/Research/Advisories/AD05261999.html, http://www.securityfocus.com/bid/279, http://www.eeye.com/html/Research/Advisories/AD05261999.html
CVE-1999-1152
Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: microcom_6000, microcom_6000_firmware
Related CWEs: CWE-307
Related CAPECs: CAPEC-560, CAPEC-653, CAPEC-600
MITRE ATT&CK Techniques: T1110.004, T1110.001, T1558
MITRE ATT&CK Tactics: T1110
References: http://marc.info/?l=bugtraq&m=90296493106214&w=2, http://marc.info/?l=bugtraq&m=90296493106214&w=2
CWE: CWE-307
MITRE ATT&CK techniques: T1110.004, T1110.001, T1558, T1110.003, T1078
MITRE ATT&CK tactics: T1110
CVE-1999-1345
Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: auto_ftp
References: http://marc.info/?l=bugtraq&m=93923873006014&w=2, http://marc.info/?l=bugtraq&m=93923873006014&w=2
CVE-1999-1089
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/h-16.shtml, http://ciac.llnl.gov/ciac/bulletins/h-21.shtml, http://marc.info/?l=bugtraq&m=87602167420285&w=2
CVE-1999-1278
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nlog
References: http://marc.info/?l=bugtraq&m=91470326629357&w=2, http://marc.info/?l=bugtraq&m=91471400632145&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1549
CVE-1999-0602
A network intrusion detection system (IDS) does not properly reassemble fragmented packets.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html, http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html
CVE-1999-1436
Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: www_authorization_gateway
References: http://marc.info/?l=bugtraq&m=90221104525905&w=2, http://www.securityfocus.com/bid/152, http://marc.info/?l=bugtraq&m=90221104525905&w=2
CVE-1999-0331
Buffer overflow in Internet Explorer 4.0(1).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0331, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0331
CVE-1999-0134
vold in Solaris 2.x allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.osvdb.org/8159, http://www.osvdb.org/8159
CVE-1999-1400
The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: the_economist_1999_screen_saver
References: http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0007.html, http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0009.html, http://marc.info/?l=ntbugtraq&m=92851653600852&w=2
CVE-1999-0172
FormMail CGI program allows remote execution of commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: formmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0172, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0172
CVE-1999-1021
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sba, http://www.cert.org/advisories/CA-1992-15.html, http://www.securityfocus.com/bid/47
CVE-1999-1006
Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise
References: http://marc.info/?l=bugtraq&m=94571433731824&w=2, http://marc.info/?l=bugtraq&m=94571433731824&w=2
CVE-1999-1548
Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: smartswitch_router_8000_firmware
References: http://razor.bindview.com/publish/advisories/adv_Cabletron.html, http://www.securityfocus.com/bid/821, http://razor.bindview.com/publish/advisories/adv_Cabletron.html
CVE-1999-0481
Denial of service in "poll" in OpenBSD.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://www.osvdb.org/7556, http://www.osvdb.org/7556
CVE-1999-0971
Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: exim
References: http://www.securityfocus.com/archive/1/7301, http://www.securityfocus.com/archive/1/7301
CVE-1999-1133
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=87602880019776&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/499, http://marc.info/?l=bugtraq&m=87602880019776&w=2
CVE-1999-1242
Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://packetstormsecurity.org/advisories/hpalert/003, https://exchange.xforce.ibmcloud.com/vulnerabilities/2162, http://packetstormsecurity.org/advisories/hpalert/003
CVE-1999-1273
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: squid_web_proxy
References: http://www.securityfocus.com/archive/1/8551, https://exchange.xforce.ibmcloud.com/vulnerabilities/1627, http://www.securityfocus.com/archive/1/8551
CVE-1999-0608
An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pdg_shopping_cart
References: http://marc.info/?l=bugtraq&m=92462991805485&w=2, http://www.pdgsoft.com/Security/security.html., https://exchange.xforce.ibmcloud.com/vulnerabilities/3857
CVE-1999-0069
Solaris ufsrestore buffer overflow.
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/169, http://www.osvdb.org/8158, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/169
CWE: CWE-119
CVE-1999-1138
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unix, openserver, open_desktop, open_desktop_lite
References: http://www.cert.org/advisories/CA-1993-13.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/546, http://www.cert.org/advisories/CA-1993-13.html
CVE-1999-1169
nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nobo
References: http://www.securityfocus.com/archive/1/12284, http://www.securityfocus.com/archive/1/12284
CVE-1999-0521
An NIS domain name is easily guessable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
References: http://www.cert.org/advisories/CA-1992-13.html, http://www.cert.org/advisories/CA-1992-13.html
CVE-1999-0449
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: internet_information_server
References: http://www.osvdb.org/2, http://www.osvdb.org/3, http://www.osvdb.org/4
CVE-1999-0289
The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows, http_server
References: https://www.cve.org/CVERecord?id=CVE-1999-0289, https://www.cve.org/CVERecord?id=CVE-1999-0289
CVE-1999-0814
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.redhat.com/support/errata/RHSA-1999-027.html, http://www.redhat.com/support/errata/RHSA-1999-027.html
CVE-1999-1411
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux
References: http://lists.debian.org/debian-security-announce/debian-security-announce-1998/msg00033.html, http://marc.info/?l=bugtraq&m=91228908407679&w=2, http://marc.info/?l=bugtraq&m=91244712808780&w=2
CVE-1999-0693
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware, hp-ux, aix
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192, http://www.securityfocus.com/bid/641, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103
CVE-1999-0943
Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openlink
References: http://www.securityfocus.com/bid/720, http://www.securityfocus.com/bid/720
CVE-1999-0246
HP Remote Watch allows a remote user to gain root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0246, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0246
CVE-1999-0607
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quikstore
References: http://marc.info/?l=bugtraq&m=92462991805485&w=2, http://marc.info/?l=bugtraq&m=92462991805485&w=2
CVE-1999-1469
Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: w3-auth
References: http://marc.info/?l=bugtraq&m=93871926821410&w=2, http://marc.info/?l=bugtraq&m=93871926821410&w=2
CVE-1999-0377
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unix
References: http://www.securitytracker.com/id/1033881, http://www.securitytracker.com/id/1033881
CVE-1999-0588
A filter in a router or firewall allows unusual fragmented packets.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0588, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0588
CVE-1999-0508
An account on a router, firewall, or other network device has a default, null, blank, or missing password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0508, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0508
CVE-1999-1276
fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, debian_linux
References: http://www.debian.org/security/1998/19981207, https://exchange.xforce.ibmcloud.com/vulnerabilities/1609, http://www.debian.org/security/1998/19981207
CVE-1999-1189
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: navigator, communicator
References: http://www.securityfocus.com/archive/1/36306, http://www.securityfocus.com/archive/1/36608, http://www.securityfocus.com/bid/822
CVE-1999-1311
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/h-21.shtml, http://ciac.llnl.gov/ciac/bulletins/h-21.shtml, http://ciac.llnl.gov/ciac/bulletins/h-21.shtml
CVE-1999-1030
counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: web_page_counter
References: http://marc.info/?l=bugtraq&m=92713790426690&w=2, http://marc.info/?l=ntbugtraq&m=92707671717292&w=2, http://www.securityfocus.com/bid/267
CVE-1999-0068
CGI PHP mylog script allows an attacker to read any file on the target server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php
References: http://www.osvdb.org/3396, http://www.securityfocus.com/bid/713, http://www.osvdb.org/3396
CVE-1999-1300
Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: unicos
References: http://ciac.llnl.gov/ciac/bulletins/b-31.shtml, http://ciac.llnl.gov/ciac/bulletins/b-31.shtml
CVE-1999-1106
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: http://www.securityfocus.com/archive/1/9121, http://www.securityfocus.com/bid/92, https://exchange.xforce.ibmcloud.com/vulnerabilities/1643
CVE-1999-0416
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cisco_7xx_routers
References: http://ciac.llnl.gov/ciac/bulletins/j-034.shtml, http://www.cisco.com/warp/public/770/7xxconn-pub.shtml, http://ciac.llnl.gov/ciac/bulletins/j-034.shtml
CVE-1999-0697
SCO Doctor allows local users to gain root privileges through a Tools option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: http://www.securityfocus.com/bid/621, http://www.securityfocus.com/bid/621
CVE-1999-0956
The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nextstep
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0956, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0956
CVE-1999-0295
Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/157, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/157
CVE-1999-0107
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0107, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0107
CVE-1999-1506
Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: http://www.cert.org/advisories/CA-90.01.sun.sendmail.vulnerability, http://www.securityfocus.com/bid/6, http://www.cert.org/advisories/CA-90.01.sun.sendmail.vulnerability
CVE-1999-0613
The rpc.sprayd service is running.
References: https://www.cve.org/CVERecord?id=CVE-1999-0613, https://www.cve.org/CVERecord?id=CVE-1999-0613
CVE-1999-0090
Buffer overflow in AIX rcp command allows local users to obtain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0090, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0090
CVE-1999-0128
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: open_desktop, aix, openserver, tcp_ip, linux_kernel
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0128, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0128
CVE-1999-0870
Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-015, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-015
CVE-1999-0843
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: router
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0843, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0843
CVE-1999-0741
QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: crownnet_unix_utilities
References: http://www.securityfocus.com/bid/593, http://www.securityfocus.com/bid/593
CVE-1999-0330
Linux bdash game has a buffer overflow that allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: https://marc.info/?l=bugtraq&m=87602558319119&w=2, https://marc.info/?l=bugtraq&m=87602558319119&w=2
CVE-1999-0153
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt, openserver, windows_95
References: http://www.osvdb.org/1666, http://www.osvdb.org/1666
CVE-1999-0296
Solaris volrmmount program allows attackers to read any file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/162, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/162
CVE-1999-0313
disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P, http://www.osvdb.org/936, http://www.securityfocus.com/bid/213/exploit
CVE-1999-1071
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ews
References: http://marc.info/?l=bugtraq&m=91248445931140&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1417, http://marc.info/?l=bugtraq&m=91248445931140&w=2
CVE-1999-0706
Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inn, linux
References: http://www.securityfocus.com/bid/583, http://www.securityfocus.com/bid/583
CVE-1999-0404
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailmax
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0404, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0404
CVE-1999-0426
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
Related CWEs: CWE-276
Related CAPECs: CAPEC-127, CAPEC-1, CAPEC-81
MITRE ATT&CK Techniques: T1083, T1574.010
MITRE ATT&CK Tactics: T1574
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0426, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0426
CWE: CWE-276
MITRE ATT&CK techniques: T1083, T1574.010
MITRE ATT&CK tactics: T1574
CVE-1999-0746
A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: slackware_linux, suse_linux
References: http://www.securityfocus.com/bid/587, http://www.securityfocus.com/bid/587
CVE-1999-1312
Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dec_openvms_vax, dec_openvms_axp
References: http://www.cert.org/advisories/CA-1993-05.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7142, http://www.cert.org/advisories/CA-1993-05.html
CVE-1999-0554
NFS exports system-critical data to the world, e.g. / or a password file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0554, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0554
CVE-1999-0967
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_explorer, outlook_express, internet_explorer
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0967, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0967
CVE-1999-0587
A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0587, https://www.cve.org/CVERecord?id=CVE-1999-0587
CVE-1999-1285
Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=91495921611500&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1472, http://marc.info/?l=bugtraq&m=91495921611500&w=2
CVE-1999-1103
dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: osf_1
References: http://ciac.llnl.gov/ciac/bulletins/g-18.shtml, http://www.cert.org/vendor_bulletins/VB-96.05.dec, http://www.iss.net/security_center/static/7138.php
CVE-1999-0407
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_information_server
References: http://marc.info/?l=bugtraq&m=91983486431506&w=2, http://marc.info/?l=bugtraq&m=92000623021036&w=2, http://marc.info/?l=bugtraq&m=91983486431506&w=2
CVE-1999-0119
Windows NT 4.0 beta allows users to read and delete shares.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/11, https://exchange.xforce.ibmcloud.com/vulnerabilities/11
CVE-1999-0792
ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: routermate
References: http://www2.merton.ox.ac.uk/~security/rootshell/0022.html, http://www2.merton.ox.ac.uk/~security/rootshell/0022.html
CVE-1999-0232
Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ncsa_httpd
References: https://www.cve.org/CVERecord?id=CVE-1999-0232, https://www.cve.org/CVERecord?id=CVE-1999-0232
CVE-1999-1000
The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cache_engine
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1000, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1000
CVE-1999-0080
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wu-ftpd
References: https://archive.nanog.org/mailinglist/mailarchives/old_archive/1995-11/msg00385.html, https://archive.nanog.org/mailinglist/mailarchives/old_archive/1995-11/msg00385.html
CVE-1999-0225
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://www.microsoft.com/technet/support/kb.asp?ID=180963, http://www.nai.com/nai_labs/asp_set/advisory/25_windows_nt_dos_adv.asp, http://www.microsoft.com/technet/support/kb.asp?ID=180963
CVE-1999-1565
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: man2html, debian_linux
References: http://www.osvdb.org/6291, http://www.securityfocus.com/archive/1/24784, http://www.osvdb.org/6291
CVE-1999-0011
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
CVSS v3.1 Score: 5.4 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, netbsd, aix, linux, unixware
Related CWEs: CWE-1067
References: ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083
CWE: CWE-1067
CVE-1999-0278
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, windows_nt
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-003, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A913, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-003
CVE-1999-1513
Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: superstack_ii_hub
References: http://marc.info/?l=bugtraq&m=93616983223090&w=2, http://marc.info/?l=bugtraq&m=93616983223090&w=2
CVE-1999-1394
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: bsd
References: http://marc.info/?l=bugtraq&m=93094058620450&w=2, http://www.securityfocus.com/bid/510, http://marc.info/?l=bugtraq&m=93094058620450&w=2
CVE-1999-1005
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise, enterprise_server
References: http://marc.info/?l=bugtraq&m=94571433731824&w=2, http://www.osvdb.org/3413, http://www.securityfocus.com/bid/879
CVE-1999-0722
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cobalt_raq_2
References: http://www.securityfocus.com/bid/558, http://www.securityfocus.com/bid/558
CVE-1999-1215
LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware
References: http://ciac.llnl.gov/ciac/bulletins/d-21.shtml, http://www.cert.org/advisories/CA-1993-12.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/545
CVE-1999-1061
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jetdirect
References: http://marc.info/?l=bugtraq&m=87602248518480&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1876, http://marc.info/?l=bugtraq&m=87602248518480&w=2
CVE-1999-0627
The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0627, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0627
CVE-1999-0555
A Unix account with a name other than "root" has UID 0, i.e. root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0555, https://www.cve.org/CVERecord?id=CVE-1999-0555
CVE-1999-0908
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/655, http://www.securityfocus.com/bid/655
CVE-1999-0094
AIX piodmgrsu command allows local users to gain additional group privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0094, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0094
CVE-1999-1107
Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: http://marc.info/?l=bugtraq&m=91141486301691&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1650, http://marc.info/?l=bugtraq&m=91141486301691&w=2
CVE-1999-1091
UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: rtin, tin
References: http://marc.info/?l=bugtraq&m=87602167419835&w=2, http://marc.info/?l=bugtraq&m=87602167419839&w=2, http://marc.info/?l=bugtraq&m=87602167420726&w=2
CVE-1999-1553
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xcmail
References: http://www.securityfocus.com/archive/1/12730, http://www.securityfocus.com/bid/311, https://exchange.xforce.ibmcloud.com/vulnerabilities/1859
CVE-1999-1539
Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: qvt_net, qvt_term_plus
References: http://marc.info/?l=bugtraq&m=94225924803704&w=2, http://marc.info/?l=ntbugtraq&m=94223972910670&w=2, http://www.securityfocus.com/bid/796
CVE-1999-1550
bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tmos
References: http://marc.info/?l=bugtraq&m=94217006208374&w=2, http://marc.info/?l=bugtraq&m=94217879020184&w=2, http://marc.info/?l=bugtraq&m=94225879703021&w=2
CVE-1999-1299
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux, linux
References: http://marc.info/?l=bugtraq&m=87602167420509&w=2, http://marc.info/?l=bugtraq&m=87602167420509&w=2
CVE-1999-0009
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, aix, netbsd, linux, unixware
References: ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180, http://www.securityfocus.com/bid/134
CVE-1999-1232
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://marc.info/?l=bugtraq&m=87602167420994&w=2, http://www.osvdb.org/8559, https://exchange.xforce.ibmcloud.com/vulnerabilities/3316
CVE-1999-1137
The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba, http://www.ciac.org/ciac/bulletins/e-01.shtml, http://www.osvdb.org/6436
CVE-1999-0730
The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0730, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0730