DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-1258
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/102, https://exchange.xforce.ibmcloud.com/vulnerabilities/1782, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/102
CVE-1999-1192
Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/143, http://www.iss.net/security_center/static/7444.php, http://www.securityfocus.com/bid/206
CVE-1999-0832
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, linux
References: ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-033.0.txt, http://www.debian.org/security/1999/19991111, http://www.novell.com/linux/security/advisories/suse_security_announce_29.html
CVE-1999-0981
Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246094, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-050, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246094
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-1999-1344
Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: auto_ftp
References: http://marc.info/?l=bugtraq&m=93923873006014&w=2, http://marc.info/?l=bugtraq&m=93923873006014&w=2
CVE-1999-1094
Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=88480839506155&w=2, http://support.microsoft.com/support/kb/articles/q176/6/97.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/917
CVE-1999-0998
Cisco Cache Engine allows an attacker to replace content in the cache.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cache_engine
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0998, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0998
CVE-1999-1586
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1995-12.html, http://www.ciac.org/ciac/bulletins/g-02.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/498
CVE-1999-0391
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, terminal_server
References: https://marc.info/?l=bugtraq&m=91552769809542&w=2, https://marc.info/?l=bugtraq&m=91552769809542&w=2
CVE-1999-1491
abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=87602167418994&w=2, http://www.securityfocus.com/bid/354, http://marc.info/?l=bugtraq&m=87602167418994&w=2
CVE-1999-1163
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 9000
References: http://marc.info/?l=bugtraq&m=94347039929958&w=2, http://www.iss.net/security_center/static/7439.php, http://marc.info/?l=bugtraq&m=94347039929958&w=2
CVE-1999-1065
Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hotsync_manager
References: http://marc.info/?l=bugtraq&m=94175465525422&w=2, http://marc.info/?l=bugtraq&m=94175465525422&w=2
CVE-1999-0680
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: terminal_server
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238600, http://www.ciac.org/ciac/bulletins/j-057.shtml, http://www.securityfocus.com/bid/571
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-1999-1582
By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pix_firewall
References: http://www.cisco.com/warp/public/707/pixest-pub.shtml, http://www.kb.cert.org/vuls/id/6733, https://exchange.xforce.ibmcloud.com/vulnerabilities/8052
CVE-1999-1038
Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tiger
References: http://marc.info/?l=bugtraq&m=90221103125976&w=2, http://marc.info/?l=bugtraq&m=90221103125976&w=2
CVE-1999-1409
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix, netbsd
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc, http://marc.info/?l=bugtraq&m=90233906612929&w=2, http://www.iss.net/security_center/static/7577.php
CVE-1999-0091
Buffer overflow in AIX writesrv command allows local users to obtain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0091, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0091
CVE-1999-1145
Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/h-21.shtml, http://www.securityfocus.com/templates/advisory.html?id=1514, https://exchange.xforce.ibmcloud.com/vulnerabilities/2059
CVE-1999-1422
The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux
References: http://marc.info/?l=bugtraq&m=91540043023167&w=2, http://www.securityfocus.com/bid/211, http://marc.info/?l=bugtraq&m=91540043023167&w=2
CVE-1999-1142
SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/116, http://www.cert.org/advisories/CA-1992-11.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/3152
CVE-1999-0806
Buffer overflow in Solaris dtprintinfo program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.osvdb.org/6552, http://www.osvdb.org/6552
CVE-1999-0025
root privileges via buffer overflow in df command on SGI IRIX systems.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://www.cert.org/advisories/CA-1997-21.html, http://www.kb.cert.org/vuls/id/20851, http://www.securityfocus.com/bid/346
CVE-1999-0572
.reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/178, https://exchange.xforce.ibmcloud.com/vulnerabilities/178
CVE-1999-1284
NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nukenabber
References: http://marc.info/?l=bugtraq&m=91063407332594&w=2, http://www.dynamsol.com/puppet/text/new.txt, http://www.securityfocus.com/archive/1/11131
CVE-1999-1238
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www.securityfocus.com/advisories/1531, https://exchange.xforce.ibmcloud.com/vulnerabilities/2262, http://www.securityfocus.com/advisories/1531
CVE-1999-1478
The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://marc.info/?l=ntbugtraq&m=93138827429589&w=2, http://marc.info/?l=ntbugtraq&m=93240220324183&w=2, http://www.securityfocus.com/bid/522
CVE-1999-0885
Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: alibaba
References: http://www.securityfocus.com/bid/770, http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-11-01&msg=01BF261F.928821E0.kerb%40fnusa.com, http://www.securityfocus.com/bid/770
CVE-1999-1195
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: virusscan
References: http://marc.info/?l=bugtraq&m=92588169005196&w=2, http://marc.info/?l=ntbugtraq&m=92587579032534&w=2, http://www.securityfocus.com/bid/169
CVE-1999-0207
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: majordomo
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0207, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0207
CVE-1999-0651
The rsh/rlogin service is running.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/2995, https://exchange.xforce.ibmcloud.com/vulnerabilities/2995
CVE-1999-0579
A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/228, https://exchange.xforce.ibmcloud.com/vulnerabilities/228
CVE-1999-0145
Sendmail WIZ command enabled, allowing root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sendmail
References: http://seclists.org/fulldisclosure/2019/Jun/16, http://www.alw.nih.gov/Security/Docs/admin-guide-to-cracking.101.html, http://www.cert.org/advisories/CA-1990-11.html
CVE-1999-0193
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cascadeview_ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0193, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0193
CVE-1999-0731
The KDE klock program allows local users to unlock a session using malformed input.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openlinux
References: http://www.securityfocus.com/bid/489, https://github.com/KDE/kde1-kdebase/commit/04906bd5de2f220bf100b605dad37b4a1d9a91a6, http://www.securityfocus.com/bid/489
CVE-1999-1464
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://ciac.llnl.gov/ciac/bulletins/j-016.shtml, http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/1401
CVE-1999-0171
Denial of service in syslog by sending it a large number of superfluous messages.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: https://www.cve.org/CVERecord?id=CVE-1999-0171, https://www.cve.org/CVERecord?id=CVE-1999-0171
CVE-1999-0349
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ188348, http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-003
CWE: CWE-119
CVE-1999-0229
Denial of service in Windows NT IIS server using ..\..
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0229, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0229
CVE-1999-0868
ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux, news_server, goah_intrasv, inn, sparc
References: https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml, https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml
CVE-1999-1592
Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.  NOTE: this might overlap CVE-1999-0129.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sendmail, sunos
References: http://sunsolve.sun.com/search/document.do?assetkey=1-22-00159-1, http://www.securityfocus.com/bid/243, http://sunsolve.sun.com/search/document.do?assetkey=1-22-00159-1
CVE-1999-0894
Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0894, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0894
CVE-1999-1159
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh2
References: http://marc.info/?l=bugtraq&m=91495920911490&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1471, http://marc.info/?l=bugtraq&m=91495920911490&w=2
CVE-1999-0525
IP traceroute is allowed from arbitrary hosts.
References: https://www.cve.org/CVERecord?id=CVE-1999-0525, https://www.cve.org/CVERecord?id=CVE-1999-0525
CVE-1999-1230
Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake_2
References: http://www.securityfocus.com/archive/1/8282, https://exchange.xforce.ibmcloud.com/vulnerabilities/698, http://www.securityfocus.com/archive/1/8282
CVE-1999-0479
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_server, hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-092, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-092
CVE-1999-0793
Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-043, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-043
CVE-1999-1476
A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pentuim, pentium
References: http://support.microsoft.com/support/kb/articles/q163/8/52.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/704, http://support.microsoft.com/support/kb/articles/q163/8/52.asp
CVE-1999-1501
(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: http://marc.info/?l=bugtraq&m=89217373930054&w=2, http://www.securityfocus.com/bid/70, http://www.securityfocus.com/bid/71
CVE-1999-0370
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/165, http://www.securityfocus.com/bid/165
CVE-1999-0304
mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd, openbsd, bsd_os, freebsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0304, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0304
CVE-1999-0775
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ios
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0775, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0775
CVE-1999-0682
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237927, http://www.ciac.org/ciac/bulletins/j-056.shtml, http://www.securityfocus.com/bid/567
CVE-1999-1325
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sas_system
References: http://ciac.llnl.gov/ciac/bulletins/c-19.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/7261, http://ciac.llnl.gov/ciac/bulletins/c-19.shtml
CVE-1999-0902
ypserv allows local administrators to modify password tables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ypserv
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0902, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0902
CVE-1999-0865
Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: communigate_pro
References: http://marc.info/?l=bugtraq&m=94426440413027&w=2, http://marc.info/?l=ntbugtraq&m=94454565726775&w=2, http://www.securityfocus.com/bid/860
CVE-1999-1589
Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.cert.org/advisories/CA-1992-10.html, http://www.securityfocus.com/bid/357, http://www.cert.org/advisories/CA-1992-10.html
CVE-1999-1096
Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kde
References: http://marc.info/?l=bugtraq&m=90221101925954&w=2, http://marc.info/?l=bugtraq&m=90221101925959&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1644
CVE-1999-0934
classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
References: http://www.securityfocus.com/bid/2020, https://exchange.xforce.ibmcloud.com/vulnerabilities/3102, http://www.securityfocus.com/bid/2020
CVE-1999-0957
MajorCool mj_key_cache program allows local users to modify files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: majorcool
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0957, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0957
CVE-1999-0418
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
References: http://marc.info/?l=bugtraq&m=92100018214316&w=2, http://marc.info/?l=bugtraq&m=92100018214316&w=2
CVE-1999-1174
ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to access the target disk.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zip_100_mb_drive
References: http://www.counterpane.com/crypto-gram-9812.html#doghouse, http://www.counterpane.com/crypto-gram-9812.html#doghouse
CVE-1999-0027
root privileges via buffer overflow in eject command on SGI IRIX systems.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0027, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0027
CWE: CWE-119
CVE-1999-0711
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i
References: http://marc.info/?l=bugtraq&m=92609807906778&w=2, http://marc.info/?t=92550157100002&w=2&r=1, http://marc.info/?l=bugtraq&m=92609807906778&w=2
CVE-1999-0569
A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0569, https://www.cve.org/CVERecord?id=CVE-1999-0569
CVE-1999-0808
Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dhcp_client
References: ftp://ftp.isc.org/isc/dhcp/dhcp-1.0-history/dhcp-1.0.0-1.0pl1.diff.gz, http://ciac.llnl.gov/ciac/bulletins/i-053.shtml, http://marc.info/?l=bugtraq&m=90221101925960&w=2
CVE-1999-0366
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ214840, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-004, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ214840
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-1999-0507
An account on a router, firewall, or other network device has a guessable password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0507, https://www.cve.org/CVERecord?id=CVE-1999-0507
CVE-1999-0041
Buffer overflow in NLS (Natural Language Service).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix, linux, libc, unicos, slackware_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0041, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0041
CVE-1999-0529
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0529, https://www.cve.org/CVERecord?id=CVE-1999-0529
CVE-1999-0685
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: communicator
References: http://www.securityfocus.com/bid/618, http://www.securityfocus.com/bid/618
CVE-1999-0281
Denial of service in IIS using long URLs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, internet_information_services
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0281, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0281
CVE-1999-0200
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://www.microsoft.com/technet/support/kb.asp?ID=137853, http://www.microsoft.com/technet/support/kb.asp?ID=137853
CVE-1999-0283
The Java Web Server would allow remote users to obtain the source code for CGI programs.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://marc.info/?l=bugtraq&m=88256790401004&w=2, http://marc.info/?l=bugtraq&m=88256790401004&w=2
CVE-1999-0636
The discard service is running.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0636, https://www.cve.org/CVERecord?id=CVE-1999-0636
CVE-1999-1377
Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: download.cgi
References: http://pulhas.org/phrack/55/P55-07.html, http://pulhas.org/phrack/55/P55-07.html
CVE-1999-0286
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0286, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0286
CVE-1999-0690
HP CDE program includes the current directory in root's PATH variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, cde
References: http://www.ciac.org/ciac/bulletins/j-053.shtml, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-100, http://www.ciac.org/ciac/bulletins/j-053.shtml
CVE-1999-1256
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: database_assistant
References: http://marc.info/?l=ntbugtraq&m=92056752115116&w=2, http://www.securityfocus.com/archive/1/12744, https://exchange.xforce.ibmcloud.com/vulnerabilities/1902
CVE-1999-0006
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: qpopper
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: ftp://patches.sgi.com/support/free/security/advisories/19980801-01-I, http://www.securityfocus.com/bid/133, ftp://patches.sgi.com/support/free/security/advisories/19980801-01-I
CWE: CWE-125
CVE-1999-0337
AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0337, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0337
CVE-1999-0559
A system-critical Unix file or directory has inappropriate permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0559, https://www.cve.org/CVERecord?id=CVE-1999-0559
CVE-1999-0472
The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netcache, snmp
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0472, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0472, https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-240
CVE-1999-0593
The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: windows_nt
References: http://osvdb.org/59333, http://technet.microsoft.com/en-us/library/cc722469.aspx, http://www.microsoft.com/technet/archive/winntas/deploy/confeat/06wntpcc.mspx?mfr=true
CVE-1999-1073
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ews
References: http://marc.info/?l=bugtraq&m=91248445931140&w=2, http://marc.info/?l=bugtraq&m=91248445931140&w=2
CVE-1999-0986
The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, debian_linux, linux
References: http://www.securityfocus.com/bid/870, http://www.securityfocus.com/bid/870
CVE-1999-0033
Command execution in Sun systems via buffer overflow in the at program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_desktop, aix, mp-ras, unixware, openserver
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0033, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0033
CVE-1999-0514
UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0514, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0514
CVE-1999-0591
An event log in Windows NT has inappropriate access permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0591, https://www.cve.org/CVERecord?id=CVE-1999-0591
CVE-1999-0071
Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0071, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0071
CVE-1999-1463
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://www.securityfocus.com/archive/1/7219, https://exchange.xforce.ibmcloud.com/vulnerabilities/528, http://www.securityfocus.com/archive/1/7219
CVE-1999-0293
AAA authentication on Cisco systems allows attackers to execute commands without authorization.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0293, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0293
CVE-1999-0325
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9406-013, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9406-013
CVE-1999-0794
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: excel, office
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241900, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241901, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241902
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-1999-1130
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: enterprise_server
References: http://marc.info/?l=bugtraq&m=93346448121208&w=2, http://marc.info/?l=ntbugtraq&m=93337389603117&w=2, http://www.securityfocus.com/bid/559
CVE-1999-0141
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: navigator
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/134, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/134
CVE-1999-0409
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux
References: http://www.securityfocus.com/bid/319, http://www.securityfocus.com/bid/319
CVE-1999-0811
Buffer overflow in Samba smbd program via a malformed message command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: samba
References: http://www.securityfocus.com/bid/536, http://www.securityfocus.com/bid/536
CVE-1999-1095
sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux, linux
References: http://marc.info/?l=bugtraq&m=87619953510834&w=2, http://marc.info/?l=bugtraq&m=88886870129518&w=2, http://marc.info/?l=bugtraq&m=88890116304676&w=2
CVE-1999-1398
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://marc.info/?l=bugtraq&m=87602167420921&w=2, http://www.insecure.org/sploits/irix.xfsdump.html, http://www.securityfocus.com/bid/472
CVE-1999-0199
manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: glibc
Related CWEs: CWE-252
References: https://ftp.gnu.org/gnu/glibc/glibc-2.2.tar.gz, https://github.com/bminor/glibc/commit/2864e767053317538feafa815046fff89e5a16be#diff-94e8c502f255fdfc346df0e29fd4ef40, https://www.cee.studio/tdelete.html
CWE: CWE-252
CVE-1999-0241
Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, x11r6, solaris, irix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0241, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0241
CVE-1999-0512
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0512, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0512
CVE-1999-1472
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=87710897923098&w=2, http://support.microsoft.com/support/kb/articles/q176/6/97.asp, http://support.microsoft.com/support/kb/articles/q176/7/94.asp
CVE-1999-1323
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: norton_antivirus
References: http://marc.info/?l=ntbugtraq&m=92370067416739&w=2, http://marc.info/?l=ntbugtraq&m=92370067416739&w=2
CVE-1999-0136
Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0136, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0136
CVE-1999-1585
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1, http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1
CVE-1999-0083
getcwd() file descriptor leak in FTP.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: https://www.cve.org/CVERecord?id=CVE-1999-0083, https://www.cve.org/CVERecord?id=CVE-1999-0083
CVE-1999-0906
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.securityfocus.com/bid/656, http://www.securityfocus.com/bid/656
CVE-1999-1115
Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: apollo_domain_os
References: http://www.cert.org/advisories/CA-1990-04.html, http://www.ciac.org/ciac/bulletins/a-30.shtml, http://www.iss.net/security_center/static/6721.php
CVE-1999-0369
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/183, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/183
CVE-1999-0720
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://www.securityfocus.com/bid/597, http://www.securityfocus.com/templates/archive.pike?list=1&msg=lcamtuf.4.05.9907041223290.355-300000%40nimue.ids.pl, http://www.securityfocus.com/bid/597
CVE-1999-0100
Remote access in AIX innd 1.5.1, using control messages.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inn
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0100, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0100
CVE-1999-0803
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aix_enetwork_firewall
References: http://marc.info/?l=bugtraq&m=92765973207648&w=2, http://www.osvdb.org/962, http://marc.info/?l=bugtraq&m=92765973207648&w=2
CVE-1999-1468
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: sunos, unicos, irix, next
References: http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html, http://www.cert.org/advisories/CA-91.20.rdist.vulnerability, http://www.iss.net/security_center/static/7160.php
CVE-1999-0880
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bsd_os, openlinux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0880, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0880
CVE-1999-1086
Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netware
References: http://marc.info/?l=bugtraq&m=93214475111651&w=2, http://www.securityfocus.com/bid/528, http://marc.info/?l=bugtraq&m=93214475111651&w=2