DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-1504
Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: stalker_internet_mail_server
References: http://www.securityfocus.com/archive/1/8951, http://www.securityfocus.com/bid/62, http://www.securityfocus.com/archive/1/8951
CVE-1999-0026
root privileges via buffer overflow in pset command on SGI IRIX systems.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0026, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0026
CVE-1999-0799
Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bootpd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0799, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0799
CVE-1999-0414
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0414, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0414
CVE-1999-0863
Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0863, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0863
CVE-1999-0897
iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ichat_server
References: http://marc.info/?l=bugtraq&m=90538488231977&w=2, http://marc.info/?l=bugtraq&m=90538488231977&w=2
CVE-1999-0823
Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://www.osvdb.org/1150, http://www.securityfocus.com/bid/839, http://www.osvdb.org/1150
CVE-1999-1447
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=90221104526169&w=2, http://marc.info/?l=bugtraq&m=90221104526188&w=2, http://marc.info/?l=bugtraq&m=90221104526169&w=2
CVE-1999-1059
Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: svr4
References: http://www.cert.org/advisories/CA-1992-04.html, http://www.iss.net/security_center/static/3159.php, http://www.securityfocus.com/bid/36
CVE-1999-0216
Denial of service of inetd on Linux through SYN and RST packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, hp-ux, inet
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0216, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0216
CVE-1999-1371
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://marc.info/?l=bugtraq&m=92100752221493&w=2, http://www.securiteam.com/exploits/5ZP0O1P35O.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7546
CVE-1999-1331
netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://www.iss.net/security_center/static/7245.php, http://www.redhat.com/support/errata/rh42-errata-general.html#netcfg, http://www.iss.net/security_center/static/7245.php
CVE-1999-0551
HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openmail
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9804-078, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9804-078
CVE-1999-1437
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eperl
References: http://marc.info/?l=bugtraq&m=90221104525890&w=2, http://marc.info/?l=bugtraq&m=90221104525927&w=2, http://www.securityfocus.com/bid/151
CVE-1999-1219
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://ciac.llnl.gov/ciac/bulletins/e-33.shtml, http://www.cert.org/advisories/CA-1994-13.html, http://www.securityfocus.com/bid/468
CVE-1999-0924
The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full, http://www.osvdb.org/3236, https://exchange.xforce.ibmcloud.com/vulnerabilities/1742
CVE-1999-0052
IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd, bsd_os, freebsd
Related CWEs: CWE-476
References: http://www.osvdb.org/908, https://exchange.xforce.ibmcloud.com/vulnerabilities/1389, http://www.osvdb.org/908
CWE: CWE-476
CVE-1999-0030
root privileges via buffer overflow in xlock command on SGI IRIX systems.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0030, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0030
CVE-1999-0919
A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: motorola_cablerouter
References: http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621, https://exchange.xforce.ibmcloud.com/vulnerabilities/2004, http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621
CVE-1999-1423
ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=87602558319160&w=2, http://marc.info/?l=bugtraq&m=87602558319171&w=2, http://marc.info/?l=bugtraq&m=87602558319180&w=2
CVE-1999-0106
Finger redirection allows finger bombs.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0106, https://www.cve.org/CVERecord?id=CVE-1999-0106
CVE-1999-1099
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: kth_kerberos
References: http://marc.info/?l=bugtraq&m=87602167420184&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/65, http://marc.info/?l=bugtraq&m=87602167420184&w=2
CVE-1999-1419
Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/148, http://www.iss.net/security_center/static/7535.php, http://www.securityfocus.com/bid/219
CVE-1999-1551
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://marc.info/?l=bugtraq&m=92038879607336&w=2, http://www.securityfocus.com/bid/505, https://exchange.xforce.ibmcloud.com/vulnerabilities/1898
CVE-1999-1060
Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tetrinet
References: http://marc.info/?l=bugtraq&m=91937090211855&w=2, http://www.securityfocus.com/bid/340, http://marc.info/?l=bugtraq&m=91937090211855&w=2
CVE-1999-1369
Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: realserver
References: http://marc.info/?l=bugtraq&m=92411181619110&w=2, http://marc.info/?l=bugtraq&m=92411181619110&w=2
CVE-1999-0712
A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coas, openlinux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0712, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0712
CVE-1999-1555
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inoculan_anti-virus_server
References: http://www.securityfocus.com/archive/1/9515, http://www.securityfocus.com/bid/106, https://exchange.xforce.ibmcloud.com/vulnerabilities/1536
CVE-1999-0018
Buffer overflow in statd allows root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, irix, aix, solaris
References: http://www.securityfocus.com/bid/127, http://www.securityfocus.com/bid/127
CVE-1999-1213
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://www2.dataguard.no/bugtraq/1997_4/0001.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/571, http://www2.dataguard.no/bugtraq/1997_4/0001.html
CVE-1999-0737
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013
CVE-1999-1261
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: metamail
References: http://www.securityfocus.com/archive/1/12433, https://exchange.xforce.ibmcloud.com/vulnerabilities/1772, http://www.securityfocus.com/archive/1/12433
CVE-1999-0405
A buffer overflow in lsof allows local users to obtain root privilege.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, suse_linux, freebsd, linux
References: http://www.osvdb.org/3163, http://www.osvdb.org/3163
CVE-1999-0689
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris, cde
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192, http://www.securityfocus.com/bid/636, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103
CVE-1999-1042
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N
Affected Products: resource_manager
References: http://www.cisco.com/warp/public/770/crmtmp-pub.shtml, http://www.cisco.com/warp/public/770/crmtmp-pub.shtml
CVE-1999-0821
FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://www.securityfocus.com/bid/838, http://www.securityfocus.com/bid/838
CVE-1999-1363
Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q163/1/43.asp, http://www.iss.net/security_center/static/7405.php, http://support.microsoft.com/support/kb/articles/q163/1/43.asp
CVE-1999-0641
The UUCP service is running.
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0641, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0641
CVE-1999-1135
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://packetstorm.securify.com/advisories/hpalert/027, https://exchange.xforce.ibmcloud.com/vulnerabilities/2284, http://packetstorm.securify.com/advisories/hpalert/027
CVE-1999-0951
Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: omnihttpd
References: http://www.osvdb.org/3380, http://www.securityfocus.com/bid/739, http://www.osvdb.org/3380
CVE-1999-0010
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: open_desktop, netbsd, aix, linux, unixware
References: ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083, ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX
CVE-1999-1395
Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dec_openvms
References: http://osvdb.org/59332, http://www.cert.org/advisories/CA-1992-18.html, http://www.cert.org/advisories/CA-92.16.VMS.Monitor.vulnerability
CVE-1999-0635
The echo service is running.
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html, http://secunia.com/advisories/18514, http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html
CVE-1999-0355
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: controlit
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0355, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0355
CVE-1999-0173
FormMail CGI program can be used by web servers other than the host server that the program resides on.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: formmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0173, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0173
CVE-1999-0938
MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sdr
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0938, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0938
CVE-1999-0925
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unitymail
References: http://marc.info/?l=bugtraq&m=90486243124867&w=2, http://marc.info/?l=bugtraq&m=90486243124867&w=2
CVE-1999-1567
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: testtrack
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9903&L=NTBUGTRAQ&P=R1215, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9906&L=NTBUGTRAQ&P=R1680, https://exchange.xforce.ibmcloud.com/vulnerabilities/1948
CVE-1999-1475
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proftpd
References: http://www.securityfocus.com/archive/1/35483, http://www.securityfocus.com/bid/812, http://www.securityfocus.com/archive/1/35483
CVE-1999-0066
AnyForm CGI remote execution.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: anyform
References: http://www.securityfocus.com/bid/719, http://www.securityfocus.com/bid/719
CVE-1999-0126
SGI IRIX buffer overflow in xterm and Xaw allows root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xfree86
References: http://www.ciac.org/ciac/bulletins/j-010.shtml, http://www.ciac.org/ciac/bulletins/j-010.shtml
CVE-1999-0084
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nfs
Related CWEs: CWE-269
Related CAPECs: CAPEC-122, CAPEC-233, CAPEC-58
MITRE ATT&CK Techniques: T1548
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/78, https://exchange.xforce.ibmcloud.com/vulnerabilities/78
CWE: CWE-269
MITRE ATT&CK techniques: T1548
CVE-1999-1497
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: imail
References: http://www.securityfocus.com/archive/1/39329, http://www.securityfocus.com/bid/880, http://www.securityfocus.com/archive/1/39329
CVE-1999-1112
Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irfanview
References: http://stud4.tuwien.ac.at/~e9227474/main2.html, http://www.securityfocus.com/archive/1/34066, http://www.securityfocus.com/bid/781
CVE-1999-0464
Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tripwire
References: http://marc.info/?l=bugtraq&m=91553066310826&w=2, http://marc.info/?l=bugtraq&m=91592136122066&w=2, http://www.osvdb.org/6609
CVE-1999-1367
Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp, http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp
CVE-1999-1036
COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cops
References: http://marc.info/?l=bugtraq&m=90221103125976&w=2, http://marc.info/?l=bugtraq&m=90221103125976&w=2
CVE-1999-1576
Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: acrobat_reader
References: http://www.kb.cert.org/vuls/id/25919, http://www.securityfocus.com/archive/1/28719, http://www.securityfocus.com/bid/666
CVE-1999-0263
Solaris SUNWadmap can be exploited to obtain root access.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/173, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/173
CVE-1999-1490
xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=90221101926021&w=2, http://marc.info/?l=bugtraq&m=90221101926034&w=2, http://www.iss.net/security_center/static/8787.php
CVE-1999-1206
SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: systemwizard
References: http://marc.info/?l=bugtraq&m=93336970231857&w=2, http://www.securityfocus.com/bid/555, http://www.systemsoft.com/l-2/l-3/support-systemwizard.htm
CVE-1999-0379
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: backoffice_resource_kit
References: http://www.osvdb.org/1019, http://www.securityfocus.com/bid/498, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-007
CVE-1999-1033
Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook_express
References: http://marc.info/?l=bugtraq&m=92647407427342&w=2, http://marc.info/?l=bugtraq&m=92663402004275&w=2, http://www.securityfocus.com/bid/252
CVE-1999-1426
Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: solstice_adminsuite
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145, http://www.securityfocus.com/bid/208, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145
CVE-1999-0159
Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login).  This applies to some IOS 9.x, 10.x, and 11.x releases.
CVSS v3.1 Score: 3.5 (LOW)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
Related CWEs: CWE-400
Related CAPECs: CAPEC-147, CAPEC-492, CAPEC-227
MITRE ATT&CK Techniques: T1499
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0159, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0159
CWE: CWE-400
MITRE ATT&CK techniques: T1499
CVE-1999-0317
Buffer overflow in Linux su command gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0317, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0317
CVE-1999-0767
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: https://marc.info/?l=bugtraq&m=87602167420557&w=2, https://marc.info/?l=bugtraq&m=87602167420557&w=2
CVE-1999-1332
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=88603844115233&w=2, http://www.debian.org/security/2003/dsa-308, http://www.iss.net/security_center/static/7241.php
CVE-1999-1457
Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thttpd_http_server
References: http://www.novell.com/linux/security/advisories/suse_security_announce_30.html, http://www.novell.com/linux/security/advisories/suse_security_announce_30.html
CVE-1999-0102
Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: slmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0102, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0102
CVE-1999-1577
Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.kb.cert.org/vuls/id/29795, http://www.securityfocus.com/archive/1/28719, http://www.securityfocus.com/bid/669
CVE-1999-0838
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: serv-u_ftp-server
References: http://www.securityfocus.com/bid/859, http://www.securityfocus.com/bid/859
CVE-1999-0968
Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bnc_irc
References: http://www.securityfocus.com/archive/1/11711, http://www.securityfocus.com/bid/1927, https://exchange.xforce.ibmcloud.com/vulnerabilities/1546
CVE-1999-0606
An incorrect configuration of the EZMall 2000 shopping cart  CGI program "mall2000.cgi" could disclose private information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ezmall
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://marc.info/?l=bugtraq&m=92462991805485&w=2, http://marc.info/?l=bugtraq&m=92462991805485&w=2
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-0777
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, commercial_internet_system
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242559, http://www.securityfocus.com/bid/658
CWE: CWE-264
CVE-1999-0215
Routed allows attackers to append data to files.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19981004-01-PX, http://www.ciac.org/ciac/bulletins/j-012.shtml, ftp://patches.sgi.com/support/free/security/advisories/19981004-01-PX
CVE-1999-0694
Denial of service in AIX ptrace system call allows local users to crash the system.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: aix
References: http://www.ciac.org/ciac/bulletins/j-055.shtml, http://www.ciac.org/ciac/bulletins/j-055.shtml
CVE-1999-0318
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, linux, hp-ux, solaris, sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0318, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0318
CVE-1999-0189
Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/142, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/142
CVE-1999-0057
Vacation program allows command execution by remote users through a sendmail command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix, hp-ux, vacation, freebsd, solaris
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9811-087, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9811-087
CVE-1999-0321
Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0321, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0321
CVE-1999-0796
FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://www.osvdb.org/6089, http://www.osvdb.org/6089
CVE-1999-1546
netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: navio_nc_browser
References: http://www.securityfocus.com/archive/1/12217, https://exchange.xforce.ibmcloud.com/vulnerabilities/1724, http://www.securityfocus.com/archive/1/12217
CVE-1999-0866
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.24a, http://marc.info/?l=bugtraq&m=94530783815434&w=2, http://marc.info/?l=bugtraq&m=94581379905584&w=2
CVE-1999-1465
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://ciac.llnl.gov/ciac/bulletins/j-016.shtml, http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/1401
CVE-1999-0568
rpc.admind in Solaris is not running in a secure mode.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0568, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0568
CVE-1999-0928
Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: websuite
References: http://www.securityfocus.com/bid/278, http://www.securityfocus.com/bid/278
CVE-1999-0198
finger .@host on some systems may print information on some user accounts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/8378, https://exchange.xforce.ibmcloud.com/vulnerabilities/8378
CVE-1999-1216
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: router
References: http://ciac.llnl.gov/ciac/bulletins/d-15.shtml, http://www.cert.org/advisories/CA-1993-07.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/541
CVE-1999-1158
Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/139&type=0&nav=sec.sba, ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul
CVE-1999-0288
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://safenetworks.com/Windows/wins.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/1233, http://safenetworks.com/Windows/wins.html
CVE-1999-0610
An incorrect configuration of the Webcart CGI program could disclose private information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webcart
References: http://marc.info/?l=bugtraq&m=92462991805485&w=2, http://marc.info/?l=bugtraq&m=92462991805485&w=2
CVE-1999-0530
A system is operating in "promiscuous" mode which allows it to perform packet sniffing.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/778, https://exchange.xforce.ibmcloud.com/vulnerabilities/778
CVE-1999-1474
PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerpoint
References: http://www.microsoft.com/windows/ie/security/powerpoint.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/179, http://www.microsoft.com/windows/ie/security/powerpoint.asp
CVE-1999-1552
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://lists.insecure.org/lists/bugtraq/1994/Jul/0038.html, http://www.securityfocus.com/bid/358, http://lists.insecure.org/lists/bugtraq/1994/Jul/0038.html
CVE-1999-0264
htmlscript CGI program allows remote read access to files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: htmlscript
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0264, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0264
CVE-1999-1111
Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack which directly modifies a pointer to a return address instead of using a buffer overflow to reach the return address entry itself.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: stackguard
References: http://marc.info/?l=bugtraq&m=94218618329838&w=2, http://www.securityfocus.com/bid/786, https://exchange.xforce.ibmcloud.com/vulnerabilities/3524
CVE-1999-0833
Buffer overflow in BIND 8.2 via NXT records.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bind, sunos, solaris
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt, http://www.securityfocus.com/bid/788, ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt
CVE-1999-0639
The chargen service is running.
References: https://www.cve.org/CVERecord?id=CVE-1999-0639, https://www.cve.org/CVERecord?id=CVE-1999-0639
CVE-1999-0860
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/837, http://www.securityfocus.com/bid/837
CVE-1999-0566
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0566, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0566
CVE-1999-1176
Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jidentd, cidentd
References: http://marc.info/?l=bugtraq&m=88466930416716&w=2, http://marc.info/?l=bugtraq&m=90554230925545&w=2, http://spisa.act.uji.es/spi/progs/codigo/www.hack.co.za/exploits/daemon/ident/cidentd.c
CVE-1999-0262
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: faxsurvey
References: http://www.securityfocus.com/bid/2056, https://exchange.xforce.ibmcloud.com/vulnerabilities/1532, http://www.securityfocus.com/bid/2056
CVE-1999-1087
Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://support.microsoft.com/support/kb/articles/q168/6/17.asp, http://www.microsoft.com/Windows/Ie/security/dotless.asp, http://www.osvdb.org/7828
CVE-1999-1093
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://support.microsoft.com/support/kb/articles/q191/2/00.asp, http://www.iss.net/security_center/static/1276.php, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011
CVE-1999-1329
Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.iss.net/security_center/static/7250.php, http://www.redhat.com/support/errata/rh50-errata-general.html#SysVinit, http://www.iss.net/security_center/static/7250.php
CVE-1999-0461
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, irix
References: https://www.cve.org/CVERecord?id=CVE-1999-0461, https://www.cve.org/CVERecord?id=CVE-1999-0461
CVE-1999-1318
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20, http://www.iss.net/security_center/static/7480.php, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20
CVE-1999-1013
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=93837026726954&w=2, http://www.securityfocus.com/bid/673, http://marc.info/?l=bugtraq&m=93837026726954&w=2
CVE-1999-0966
Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0966, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0966
CVE-1999-1255
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: hyperseek_search_engine
References: http://www.rootshell.com/archive-j457nxiqi3gq59dv/199902/hyperseek.txt.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/1914, http://www.rootshell.com/archive-j457nxiqi3gq59dv/199902/hyperseek.txt.html
CVE-1999-0152
The DG/UX finger daemon allows remote command execution through shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dg_ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0152, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0152
CVE-1999-0062
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd
References: http://www.osvdb.org/7559, http://www.osvdb.org/7559
CVE-1999-0151
The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: satan
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0151, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0151
CVE-1999-0888
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i, database_server
References: http://www.securityfocus.com/bid/585, http://www.securityfocus.com/bid/585
CVE-1999-0517
An SNMP community name is the default (e.g. public), null, or missing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0517, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0517, https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-244
CVE-1999-1026
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
References: http://marc.info/?l=bugtraq&m=87602167420343&w=2, http://www.securityfocus.com/bid/292, http://marc.info/?l=bugtraq&m=87602167420343&w=2
CVE-1999-1003
War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: warftpd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1003, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1003
CVE-1999-0944
IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0944, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0944
CVE-1999-0333
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0333, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0333