DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-0393
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: http://marc.info/?l=bugtraq&m=91694391227372&w=2, http://marc.info/?l=bugtraq&m=91694391227372&w=2
CVE-1999-1303
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, open_desktop_lite, openserver_enterprise_system, unix, openserver_network_system
References: http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ciac.llnl.gov/ciac/bulletins/f-05.shtml, http://ciac.llnl.gov/ciac/bulletins/f-05.shtml
CVE-1999-1166
Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://www.securityfocus.com/archive/1/18156, http://www.securityfocus.com/bid/523, http://www.securityfocus.com/archive/1/18156
CVE-1999-0179
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt, windows_95
Related CWEs: CWE-17
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ140818, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ140818
CWE: CWE-17
CVE-1999-0586
A network service is running on a nonstandard port.
References: https://www.cve.org/CVERecord?id=CVE-1999-0586, https://www.cve.org/CVERecord?id=CVE-1999-0586
CVE-1999-0742
The Debian mailman package uses weak authentication, which allows attackers to gain privileges.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: debian_linux
References: http://www.securityfocus.com/bid/480, http://www.securityfocus.com/bid/480
CVE-1999-0752
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0752, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0752
CVE-1999-0123
Race condition in Linux mailx command allows local users to read user files.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: slackware_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0123, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0123
CVE-1999-0861
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, site_server, site_server_commerce, commercial_internet_system
Related CWEs: CWE-362
Related CAPECs: CAPEC-29, CAPEC-26
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ244613, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-053, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ244613
CWE: CWE-362
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate.  For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/6253, https://exchange.xforce.ibmcloud.com/vulnerabilities/6253
CVE-1999-0516
An SNMP community name is guessable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0516, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0516, https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-243
CVE-1999-0677
The WebRamp web administration utility has a default password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webramp_200i, webramp_m3
References: http://www.securityfocus.com/bid/577, http://www.securityfocus.com/bid/577
CVE-1999-1448
Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are 100 years after the current date, which causes a segmentation fault.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: eudora, eudora_light
References: http://marc.info/?l=bugtraq&m=90221104526168&w=2, http://marc.info/?l=bugtraq&m=90221104526168&w=2
CVE-1999-0192
Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux, linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0192, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0192
CVE-1999-1052
Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: frontpage
References: http://marc.info/?l=bugtraq&m=93582550911564&w=2, http://marc.info/?l=bugtraq&m=93582550911564&w=2
CVE-1999-0434
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, suse_linux, netbsd, linux, openlinux
References: http://www.securityfocus.com/bid/359, http://www.securityfocus.com/bid/359
CVE-1999-1373
FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via nmap.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: powerhub_software
References: http://marc.info/?l=bugtraq&m=91651770130771&w=2, http://marc.info/?l=bugtraq&m=91651770130771&w=2
CVE-1999-1295
Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dce_distributed_file_system
References: http://www.cert.org/vendor_bulletins/VB-96.16.transarc, https://exchange.xforce.ibmcloud.com/vulnerabilities/7154, http://www.cert.org/vendor_bulletins/VB-96.16.transarc
CVE-1999-0154
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, internet_information_services
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0154, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0154
CVE-1999-0795
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0795, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0795
CVE-1999-1210
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unix
References: http://marc.info/?l=bugtraq&m=87936891504885&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/613, http://marc.info/?l=bugtraq&m=87936891504885&w=2
CVE-1999-0802
Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231450, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231450
CWE: CWE-119
CVE-1999-0224
Denial of service in Windows NT messenger service through a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0224, https://www.cve.org/CVERecord?id=CVE-1999-0224
CVE-1999-0098
Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mercury_mail_server, slmail, appleshare
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0098, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0098
CVE-1999-0280
Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0280, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0280
CVE-1999-0138
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, hp-ux, up-ux_v, freebsd, a_ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0138, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0138
CVE-1999-0549
Windows NT automatically logs in an administrator upon rebooting.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0549, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0549
CVE-1999-1208
Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=87602661419330&w=2, http://marc.info/?l=bugtraq&m=87602661419337&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/803
CVE-1999-1393
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: macos
References: http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html, http://www.securityfocus.com/bid/532, http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html
CVE-1999-0088
IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/services/brs/brspwhub.nsf/advisories/852567CC004F9038852566BF007B6393/%24file/ERS-SVA-E01-1998_004_1.txt, http://www-1.ibm.com/services/brs/brspwhub.nsf/advisories/852567CC004F9038852566BF007B6393/%24file/ERS-SVA-E01-1998_004_1.txt
CVE-1999-0493
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=91547759121289&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba, http://www.cert.org/advisories/CA-99-05-statd-automountd.html
CVE-1999-0457
Linux ftpwatch program allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: http://www.securityfocus.com/bid/317, http://www.securityfocus.com/bid/317
CVE-1999-0205
Denial of service in Sendmail 8.6.11 and 8.6.12.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0205, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0205
CVE-1999-1413
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=87602167419549&w=2, http://www.securityfocus.com/bid/296, http://marc.info/?l=bugtraq&m=87602167419549&w=2
CVE-1999-0725
When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N
Affected Products: internet_information_server
Related CWEs: CWE-16
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335, http://www.securityfocus.com/bid/477, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022
CWE: CWE-16
CVE-1999-1529
A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_viruswall
References: http://marc.info/?l=bugtraq&m=94201512111092&w=2, http://marc.info/?l=bugtraq&m=94204166130782&w=2, http://marc.info/?l=bugtraq&m=94210427406568&w=2
CVE-1999-0381
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, debian_linux
References: http://www.securityfocus.com/bid/342, http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.990225011801.12757A-100000%40eleet, http://www.securityfocus.com/bid/342
CVE-1999-0526
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: x11
References: http://www.kb.cert.org/vuls/id/704969, http://www.kb.cert.org/vuls/id/704969
CVE-1999-1350
ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: arcad
References: http://marc.info/?l=bugtraq&m=93871933521519&w=2, http://marc.info/?l=bugtraq&m=93871933521519&w=2
CVE-1999-0260
The jj CGI program allows command execution via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jj
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0260, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0260
CVE-1999-0759
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fusemail
References: http://www.crosswinds.net/~fuseware/faq.html#8, http://www.securityfocus.com/bid/634, http://www.crosswinds.net/~fuseware/faq.html#8
CVE-1999-1337
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: midnight_commander
References: http://marc.info/?l=bugtraq&m=93370073207984&w=2, http://www.iss.net/security_center/static/9873.php, http://www.osvdb.org/5921
CVE-1999-0425
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: communicator
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0425, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0425
CVE-1999-0060
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ascend_pipeline_router, ascend_tnt_router, ascend_max_router
References: http://www.ascend.com/2695.html, http://www.ascend.com/2695.html
CVE-1999-0717
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: excel, windows_2000, windows_nt, windows_98, windows_95
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-014, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304
CVE-1999-0632
The RPC portmapper service is running.
References: https://www.cve.org/CVERecord?id=CVE-1999-0632, https://www.cve.org/CVERecord?id=CVE-1999-0632
CVE-1999-1421
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: nh215, nh208
References: http://marc.info/?l=bugtraq&m=90221104526016&w=2, http://marc.info/?l=bugtraq&m=90221104526065&w=2, http://www.securityfocus.com/bid/212
CVE-1999-1114
Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.17.suid_exec.vul, ftp://patches.sgi.com/support/free/security/advisories/19980405-01-I, http://ciac.llnl.gov/ciac/bulletins/h-15a.shtml
CVE-1999-0111
RIP v1 is susceptible to spoofing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aix
References: https://www.cve.org/CVERecord?id=CVE-1999-0111, https://www.cve.org/CVERecord?id=CVE-1999-0111
CVE-1999-1040
Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980501-01-P2869, http://ciac.llnl.gov/ciac/bulletins/i-055.shtml, http://marc.info/?l=bugtraq&m=89217373930054&w=2
CVE-1999-1351
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irc_client
References: http://marc.info/?l=bugtraq&m=93845560631314&w=2, http://www.iss.net/security_center/static/7761.php, http://marc.info/?l=bugtraq&m=93845560631314&w=2
CVE-1999-0371
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N
Affected Products: lynx
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0371, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0371
CVE-1999-0982
The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris, web-based_enterprise_management
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0982, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0982
CVE-1999-0710
The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://fedoranews.org/updates/FEDORA--.shtml, http://www.debian.org/security/2004/dsa-576, http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html
CVE-1999-0941
Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mutt
References: http://marc.info/?l=bugtraq&m=90221104526154&w=2, http://marc.info/?l=bugtraq&m=90221104526154&w=2
CVE-1999-0771
The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: power_management, insight_management_agent
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0771, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0771
CVE-1999-0341
Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux, debian_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0341, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0341
CVE-1999-0772
Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: power_management, insight_management_agent
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0772, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0772
CVE-1999-1132
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://marc.info/?l=bugtraq&m=90763508011966&w=2, http://marc.info/?l=ntbugtraq&m=90760603030452&w=2, http://support.microsoft.com/support/kb/articles/Q179/1/57.asp
CVE-1999-0254
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0254, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0254, https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-239
CVE-1999-1522
Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: roxen_web_server
References: http://marc.info/?l=bugtraq&m=93942579008408&w=2, http://marc.info/?l=bugtraq&m=93942579008408&w=2
CVE-1999-0013
Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh
Related CWEs: CWE-522
Related CAPECs: CAPEC-560, CAPEC-644, CAPEC-653
MITRE ATT&CK Techniques: T1550.003, T1021.002, T1133
MITRE ATT&CK Tactics: T1110, T1114, T1558
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013
CWE: CWE-522
MITRE ATT&CK techniques: T1550.003, T1021.002, T1133, T1114.002, T1110.004, T1543, T1552.004, T1558.003, T1558, T1021, T1550.002, T1078
MITRE ATT&CK tactics: T1110, T1114, T1558, T1550, T1552, T1021
CVE-1999-0785
The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inn
References: http://www.securityfocus.com/bid/254, http://www.securityfocus.com/bid/254
CVE-1999-1462
Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: big_brother
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://bb4.com/README.CHANGES, http://www.securityfocus.com/archive/1/13440, http://www.securityfocus.com/bid/142
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-1486
sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: aix
References: http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info, http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only
CVE-1999-0353
rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.ciac.org/ciac/bulletins/j-026.shtml, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9902-091, http://www.ciac.org/ciac/bulletins/j-026.shtml
CVE-1999-1075
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=89025820612530&w=2, http://marc.info/?l=bugtraq&m=89025820612530&w=2
CVE-1999-1167
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: third_voice_web
References: http://www.iss.net/security_center/static/7252.php, http://www.wired.com/news/technology/0%2C1282%2C20636%2C00.html, http://www.wired.com/news/technology/0%2C1282%2C20677%2C00.html
CVE-1999-0270
Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980401-01-P, http://www.ciac.org/ciac/bulletins/i-041.shtml, http://www.osvdb.org/134
CVE-1999-1191
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.18.solaris.chkey.buffer.overflow.vul, http://marc.info/?l=bugtraq&m=87602167418335&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/144
CVE-1999-0488
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012
CVE-1999-0344
NT users can gain debug-level access on a system process using the Sechole exploit.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ190288, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-009, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ190288
CWE: CWE-264
CVE-1999-0964
Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://www.osvdb.org/6086, http://www.osvdb.org/6086
CVE-1999-0562
The registry in Windows NT can be accessed remotely by users who are not administrators.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1023, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1023
CVE-1999-0419
When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0419, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0419
CVE-1999-0459
Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0459, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0459
CVE-1999-0650
The netstat service is running, which provides sensitive information to remote attackers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/72, https://exchange.xforce.ibmcloud.com/vulnerabilities/72
CVE-1999-0148
The handler CGI program in IRIX allows arbitrary command execution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX, http://www.securityfocus.com/bid/380, ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX
CVE-1999-0439
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openlinux, procmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0439, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0439
CVE-1999-0103
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01, http://www.securityfocus.com/bid/80171, https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01
CVE-1999-1461
inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I, http://marc.info/?l=bugtraq&m=87602167420921&w=2, http://www.securityfocus.com/bid/381
CVE-1999-0047
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail, bsd_os, openlinux
References: http://www.securityfocus.com/bid/685, http://www.securityfocus.com/bid/685
CVE-1999-1055
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: excel
References: http://www.securityfocus.com/bid/179, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018, https://exchange.xforce.ibmcloud.com/vulnerabilities/1737
CVE-1999-1498
Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: slackware_linux
References: http://www.securityfocus.com/bid/82, http://www.securityfocus.com/bid/82
CVE-1999-0718
IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: gina
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=&S=&P=5534, http://www.securityfocus.com/bid/608, https://exchange.xforce.ibmcloud.com/vulnerabilities/3166
CVE-1999-0800
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: forums
References: http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00332.html, http://www.allaire.com/handlers/index.cfm?ID=9602&Method=Full, http://www.osvdb.org/944
CVE-1999-0118
AIX infod allows local users to gain root access through an X display.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=91158980826979&w=2, http://marc.info/?l=bugtraq&m=91158980826979&w=2
CVE-1999-0933
TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: teamtrack
References: http://www.osvdb.org/1096, http://www.securityfocus.com/bid/689, http://www.osvdb.org/1096
CVE-1999-0704
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: bsd_os, freebsd, linux
References: http://www.securityfocus.com/bid/614, http://www.securityfocus.com/bid/614
CVE-1999-1383
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tcsh, bash
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=87602167419868&w=2, http://www.dataguard.no/bugtraq/1996_3/0503.html, http://marc.info/?l=bugtraq&m=87602167419868&w=2
CWE: CWE-264
CVE-1999-0412
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.securityfocus.com/bid/501, http://www.securityfocus.com/bid/501
CVE-1999-0571
A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0571, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0571
CVE-1999-1372
Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: remote_management
References: http://marc.info/?l=bugtraq&m=91966339502073&w=2, http://marc.info/?l=bugtraq&m=91966339502073&w=2
CVE-1999-1301
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.asc, http://ciac.llnl.gov/ciac/bulletins/g-31.shtml, http://www.iss.net/security_center/static/7540.php
CVE-1999-0874
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_information_server, windows_2000, windows_nt
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905, http://www.ciac.org/ciac/bulletins/j-048.shtml, http://www.eeye.com/html/Research/Advisories/AD06081999.html
CWE: CWE-119
CVE-1999-0104
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux, openlinux, windows_nt, sunos, windows_95
References: http://www.securityfocus.com/bid/80175, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5743, http://www.securityfocus.com/bid/80175
CVE-1999-0505
A Windows NT domain user or administrator account has a guessable password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0505, https://www.cve.org/CVERecord?id=CVE-1999-0505
CVE-1999-0287
Vulnerability in the Wguest CGI program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cgi_guestbook
References: https://marc.info/?l=ntbugtraq&m=92368828704896&w=2, https://marc.info/?l=ntbugtraq&m=92368828704896&w=2
CVE-1999-0345
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: open_desktop, aix, openserver, freebsd, sunos
References: http://www.securityfocus.com/archive/1/62170, http://www.securityfocus.com/archive/1/62170
CVE-1999-1562
gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp_client
References: http://www.debian.org/security/2001/dsa-084, http://www.securityfocus.com/archive/1/26915, http://www.securityfocus.com/bid/3446
CVE-1999-0781
KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, freebsd, kde
References: http://marc.info/?l=bugtraq&m=91141486301691&w=2, http://marc.info/?l=bugtraq&m=91141486301691&w=2
CVE-1999-0398
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh, ssh2
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0398, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0398
CVE-1999-0016
Land IP denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, hp-ux, ios, windows_nt, inet
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-076, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-076, https://security.netapp.com/advisory/ntap-20170815-0001/
CVE-1999-1168
install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_security_scanner
References: http://www.securityfocus.com/archive/1/12640, http://www.securityfocus.com/archive/1/12640
CVE-1999-0067
phf CGI program allows remote command execution through shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ncsa_httpd, http_server
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: http://www.cert.org/advisories/CA-1996-06.html, http://www.osvdb.org/136, http://www.securityfocus.com/bid/629
CWE: CWE-78
CVE-1999-1444
genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: alibaba
References: http://catless.ncl.ac.uk/Risks/20.41.html#subj4, http://catless.ncl.ac.uk/Risks/20.41.html#subj4
CVE-1999-1449
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos
References: http://oamk.fi/~jukkao/bugtraq/before-971202/0498.html, http://www.insecure.org/sploits/sunos.dev.tcx0.write.wierd.shit.to.device.bug.html, http://oamk.fi/~jukkao/bugtraq/before-971202/0498.html
CVE-1999-0625
The rpc.rquotad service is running.
References: https://www.cve.org/CVERecord?id=CVE-1999-0625, https://www.cve.org/CVERecord?id=CVE-1999-0625
CVE-1999-1418
ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist ("404 not found").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: icq_web_front
References: http://www.securityfocus.com/archive/1/13508, http://www.securityfocus.com/bid/246, http://www.securityfocus.com/archive/1/13508
CVE-1999-0269
Netscape Enterprise servers may list files through the PageServices query.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: enterprise_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0269, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0269
CVE-1999-0413
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19990301-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19990301-01-PX
CVE-1999-0219
Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: serv-u
References: http://marc.info/?l=ntbugtraq&m=92574916930144&w=2, http://marc.info/?l=ntbugtraq&m=92582581330282&w=2, http://www.securityfocus.com/bid/269
CVE-1999-1249
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-047.html, http://www.osvdb.org/8099, https://exchange.xforce.ibmcloud.com/vulnerabilities/2057
CVE-1999-0004
MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unixware, pine, dtmail
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008
CVE-1999-1054
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: flexlm
References: http://marc.info/?l=bugtraq&m=90675672323825&w=2, http://marc.info/?l=bugtraq&m=90675672323825&w=2
CVE-1999-0789
Buffer overflow in AIX ftpd in the libc library.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.ciac.org/ciac/bulletins/j-072.shtml, http://www.securityfocus.com/bid/679, http://www.ciac.org/ciac/bulletins/j-072.shtml
CVE-1999-1502
Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quake
References: http://marc.info/?l=bugtraq&m=89205623028934&w=2, http://www.securityfocus.com/bid/68, http://www.securityfocus.com/bid/69