DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-1396
Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1992-15.html, http://www.iss.net/security_center/static/7150.php, http://www.securityfocus.com/bid/49
CVE-1999-0637
The systat service is running.
References: https://www.cve.org/CVERecord?id=CVE-1999-0637, https://www.cve.org/CVERecord?id=CVE-1999-0637
CVE-1999-1265
SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: slmail
References: http://marc.info/?l=bugtraq&m=90649892424117&w=2, http://marc.info/?l=ntbugtraq&m=90650438826447&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1664
CVE-1999-0292
Denial of service through Winpopup using large user names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0292, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0292
CVE-1999-1016
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: frontpage, outlook_express, eudora, internet_explorer
References: http://marc.info/?l=ntbugtraq&m=93578772920970&w=2, http://www.securityfocus.com/bid/606, http://marc.info/?l=ntbugtraq&m=93578772920970&w=2
CVE-1999-0581
The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0581, https://www.cve.org/CVERecord?id=CVE-1999-0581
CVE-1999-0390
Buffer overflow in Dosemu Slang library in Linux.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, linux
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-006.1.txt, http://www.securityfocus.com/bid/187, ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-006.1.txt
CVE-1999-0960
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX
CVE-1999-1581
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/kb/q178381/, http://www.kb.cert.org/vuls/id/4923, https://exchange.xforce.ibmcloud.com/vulnerabilities/8231
CVE-1999-0723
The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products: windows_2000, windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233323, http://www.ciac.org/ciac/bulletins/j-049.shtml, http://www.securityfocus.com/bid/478
CVE-1999-0454
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/2048, https://exchange.xforce.ibmcloud.com/vulnerabilities/2048
CVE-1999-0714
Vulnerability in Compaq Tru64 UNIX edauth command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: unix
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0714, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0714
CVE-1999-1076
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: macos
References: http://marc.info/?l=bugtraq&m=94096348604173&w=2, http://www.securityfocus.com/bid/745, http://marc.info/?l=bugtraq&m=94096348604173&w=2
CVE-1999-1049
ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: arcserve_backup
References: http://marc.info/?l=bugtraq&m=91972006211238&w=2, http://marc.info/?l=bugtraq&m=91972006211238&w=2
CVE-1999-0560
A system-critical Windows NT file or directory has inappropriate permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0560, https://www.cve.org/CVERecord?id=CVE-1999-0560
CVE-1999-0233
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_information_services
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188
CVE-1999-0444
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt, windows_95, windows_98
References: https://marc.info/?l=bugtraq&m=92394891221029&w=2, https://marc.info/?l=bugtraq&m=92394891221029&w=2
CVE-1999-0430
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: catalyst_5xxx_supervisor_software, catalyst_29xx_supervisor_software, catalyst_12xx_supervisor_software
References: http://www.osvdb.org/1103, http://www.osvdb.org/1103
CVE-1999-0007
Information from SSL-encrypted sessions via PKCS #1.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: directory_server, exchange_server, proxy_server, messaging_server, open_market_secure_webserver
Related CWEs: CWE-327
Related CAPECs: CAPEC-614, CAPEC-97, CAPEC-459
MITRE ATT&CK Techniques: T1553.002, T1036.001
MITRE ATT&CK Tactics: T1553, T1036
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002
CWE: CWE-327
MITRE ATT&CK techniques: T1553.002, T1036.001
MITRE ATT&CK tactics: T1553, T1036
CVE-1999-1554
/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: http://www.cert.org/advisories/CA-1990-08.html, http://www.iss.net/security_center/static/3164.php, http://www.securityfocus.com/bid/13
CVE-1999-1479
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: textcounter
References: http://www.securityfocus.com/archive/1/9609, http://www.securityfocus.com/bid/2265, https://exchange.xforce.ibmcloud.com/vulnerabilities/2052
CVE-1999-0378
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: interscan_viruswall
References: http://www.osvdb.org/6167, http://www.osvdb.org/6167
CVE-1999-1250
Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lasso_cgi
References: http://www.securityfocus.com/archive/1/7506, https://exchange.xforce.ibmcloud.com/vulnerabilities/2044, http://www.securityfocus.com/archive/1/7506
CVE-1999-0665
An application-critical Windows NT registry key has an inappropriate value.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0665, https://www.cve.org/CVERecord?id=CVE-1999-0665
CVE-1999-0364
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: access, total_vb_sourcebook
References: http://marc.info/?l=bugtraq&m=91816470220259&w=2, http://marc.info/?l=bugtraq&m=91816470220259&w=2
CVE-1999-1588
Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://lsd-pl.net/files/get?SOLARIS/solx86_nlps_server, http://security-protocols.com/sploits/unsorted_exploits/nlps_server.c, http://www.securityfocus.com/bid/2319
CWE: CWE-119
CVE-1999-0240
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0240, https://www.cve.org/CVERecord?id=CVE-1999-0240
CVE-1999-1027
Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
References: http://marc.info/?l=bugtraq&m=90221101925880&w=2, http://www.securityfocus.com/bid/290, https://exchange.xforce.ibmcloud.com/vulnerabilities/7296
CVE-1999-1180
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: website, website_pro
References: http://oliver.efri.hr/~crv/security/bugs/NT/buffer.html, http://www.tryc.on.ca/archives/bugtraq/1999_1/0612.html, http://oliver.efri.hr/~crv/security/bugs/NT/buffer.html
CVE-1999-0839
Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ie
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246972, http://www.securityfocus.com/bid/828, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-051
CWE: CWE-264
CVE-1999-0336
Buffer overflow in mstm in HP-UX allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0336, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0336
CVE-1999-1471
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd
References: http://www.cert.org/advisories/CA-1989-01.html, http://www.iss.net/security_center/static/7152.php, http://www.securityfocus.com/bid/4
CVE-1999-0150
The Perl fingerd program allows arbitrary command execution from remote users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fingerd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0150, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0150
CVE-1999-0116
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sng, aix
References: ftp://patches.sgi.com/support/free/security/advisories/19961202-01-PX, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/136, ftp://patches.sgi.com/support/free/security/advisories/19961202-01-PX
CVE-1999-1406
dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=90221104526185&w=2, http://marc.info/?l=bugtraq&m=90221104526192&w=2, http://www.securityfocus.com/bid/372
CVE-1999-0271
Progressive Networks Real Video server (pnserver) can be crashed remotely.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0271, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0271
CVE-1999-0703
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: openbsd, bsd_os, freebsd
References: http://www.ciac.org/ciac/bulletins/j-066.shtml, http://www.ciac.org/ciac/bulletins/j-066.shtml
CVE-1999-0143
Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, kerberos_5, multinet, kerberos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0143, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0143
CVE-1999-0996
Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ultraseek_server
References: http://www.eeye.com/html/Research/Advisories/AD19991215.html, http://www.osvdb.org/6490, http://www.eeye.com/html/Research/Advisories/AD19991215.html
CVE-1999-0683
Denial of service in Gauntlet Firewall via a malformed ICMP packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gauntlet_firewall
References: http://www.osvdb.org/1029, http://www.securityfocus.com/bid/556, http://www.osvdb.org/1029
CVE-1999-1014
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=93727925026476&w=2, http://marc.info/?l=bugtraq&m=93846422810162&w=2, http://www.securityfocus.com/bid/672
CVE-1999-0676
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/575, http://www.securityfocus.com/templates/archive.pike?list=1&msg=19990809134220.A1191%40hades.chaoz.org, http://www.securityfocus.com/bid/575
CVE-1999-0202
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wu-ftpd
References: https://www.cve.org/CVERecord?id=CVE-1999-0202, https://www.cve.org/CVERecord?id=CVE-1999-0202
CVE-1999-0395
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: backweb_polite_agent_protocol
References: http://xforce.iss.net/alerts/advise17.php, http://xforce.iss.net/alerts/advise17.php
CVE-1999-0147
The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: glimpse_http, webglimpse
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0147, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0147
CVE-1999-1402
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sunos, freebsd, solaris
References: http://marc.info/?l=bugtraq&m=87602167418317&w=2, http://marc.info/?l=bugtraq&m=87602248718482&w=2, http://www.iss.net/security_center/static/7172.php
CVE-1999-0970
The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: omnihttpd
References: http://www.securityfocus.com/archive/1/14311, http://www.securityfocus.com/bid/1808, https://exchange.xforce.ibmcloud.com/vulnerabilities/2271
CVE-1999-0753
The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: msql
References: http://www.securityfocus.com/bid/591, http://www.securityfocus.com/bid/591
CVE-1999-0873
Buffer overflow in Skyfull mail server via MAIL FROM command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: skyfull
References: http://www.securityfocus.com/bid/759, http://www.securityfocus.com/bid/759
CVE-1999-0323
FreeBSD mmap function allows users to modify append-only or immutable files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd, openbsd, bsd_os, freebsd
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1998-003.txt.asc, ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1998-003.txt.asc
CVE-1999-1374
perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: perlshop
References: http://marc.info/?l=bugtraq&m=92523159819402&w=2, http://marc.info/?l=bugtraq&m=92523159819402&w=2
CVE-1999-1161
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/h-32.shtml, http://marc.info/?l=bugtraq&m=87602167420102&w=2, http://marc.info/?l=bugtraq&m=87602167420103&w=2
CVE-1999-0108
The printers program in IRIX has a buffer overflow that gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://seclists.org/bugtraq/1997/May/191, http://seclists.org/bugtraq/1997/May/191
CVE-1999-0140
Denial of service in RAS/PPTP on NT systems.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0140, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0140
CVE-1999-0755
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt
Related CWEs: CWE-255
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230681, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-017, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230681
CWE: CWE-255
CVE-1999-0913
dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dragon-fire_ids
References: http://marc.info/?l=bugtraq&m=93383593909438&w=2, http://www.securityfocus.com/bid/564, http://marc.info/?l=bugtraq&m=93383593909438&w=2
CVE-1999-0583
There is a one-way or two-way trust relationship between Windows NT domains.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/1284, https://exchange.xforce.ibmcloud.com/vulnerabilities/1284
CVE-1999-0515
An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0515, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0515
CVE-1999-1141
Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: timeplex_routers
References: http://marc.info/?l=bugtraq&m=87602167420981&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1824, http://marc.info/?l=bugtraq&m=87602167420981&w=2
CVE-1999-1313
Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:11.man.asc, http://ciac.llnl.gov/ciac/bulletins/g-24.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/7348
CVE-1999-0787
The SSH authentication agent follows symlinks via a UNIX domain socket.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ssh
References: http://marc.info/?l=bugtraq&m=93760201002154&w=2, http://marc.info/?l=bugtraq&m=93832856804415&w=2, http://www.securityfocus.com/bid/660
CVE-1999-1289
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icq
References: http://www.securityfocus.com/archive/1/11233, https://exchange.xforce.ibmcloud.com/vulnerabilities/1398, http://www.securityfocus.com/archive/1/11233
CVE-1999-0546
The Windows NT guest account is enabled.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0546, https://www.cve.org/CVERecord?id=CVE-1999-0546
CVE-1999-1171
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail, ws_ftp_server
References: http://marc.info/?l=ntbugtraq&m=91816507920544&w=2, http://www.securityfocus.com/bid/218, http://marc.info/?l=ntbugtraq&m=91816507920544&w=2
CVE-1999-1109
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: http://marc.info/?l=bugtraq&m=94632241202626&w=2, http://marc.info/?l=bugtraq&m=94780566911948&w=2, http://www.iss.net/security_center/static/7760.php
CVE-1999-1218
Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: amiga_unix
References: http://www.cert.org/advisories/CA-1993-04.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/522, http://www.cert.org/advisories/CA-1993-04.html
CVE-1999-0797
NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: sunos
References: http://www.ciac.org/ciac/bulletins/i-070.shtml, http://www.ciac.org/ciac/bulletins/i-070.shtml
CVE-1999-1069
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: electronic_commerce_suite
References: http://www.securityfocus.com/archive/1/7943, http://www.securityfocus.com/bid/2126, https://exchange.xforce.ibmcloud.com/vulnerabilities/1620
CVE-1999-0168
The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place.  For example, NFS file systems could be mounted through the portmapper despite export restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0168, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0168
CVE-1999-1399
spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://marc.info/?l=bugtraq&m=87602746719552&w=2, http://www.securityfocus.com/bid/471, http://marc.info/?l=bugtraq&m=87602746719552&w=2
CVE-1999-0477
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion_server
References: http://www.securityfocus.com/bid/115, http://www.securityfocus.com/bid/115
CVE-1999-1022
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: irix
References: http://www.securityfocus.com/archive/1/930, http://www.securityfocus.com/bid/464, https://exchange.xforce.ibmcloud.com/vulnerabilities/2111
CVE-1999-0763
NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: netbsd
References: http://www.osvdb.org/6540, http://www.osvdb.org/6540
CVE-1999-0887
FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ftgate
References: http://www.eeye.com/html/Research/Advisories/AD05261999.html, http://www.osvdb.org/1137, http://www.eeye.com/html/Research/Advisories/AD05261999.html
CVE-1999-0705
Buffer overflow in INN inews program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inn, linux
References: http://www.securityfocus.com/bid/616, http://www.securityfocus.com/bid/616
CVE-1999-0692
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix, unicos
References: ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P, http://www.ciac.org/ciac/bulletins/j-052.shtml, ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P
CVE-1999-0029
root privileges via buffer overflow in ordist command on SGI IRIX systems.
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0029, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0029
CWE: CWE-125
CVE-1999-1390
suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux
References: http://darwin.bio.uci.edu/~mcoogan/bugtraq/msg00890.html, http://www.securityfocus.com/bid/94, http://darwin.bio.uci.edu/~mcoogan/bugtraq/msg00890.html
CVE-1999-0357
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_98
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0357, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0357
CVE-1999-1143
Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19970504-01-PX, http://ciac.llnl.gov/ciac/bulletins/h-65.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/2109
CVE-1999-0194
Denial of service in in.comsat allows attackers to generate messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0194, https://www.cve.org/CVERecord?id=CVE-1999-0194
CVE-1999-1098
Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bsd
References: http://www.cert.org/advisories/CA-1995-03.html, http://www.ciac.org/ciac/bulletins/f-12.shtml, http://www.iss.net/security_center/static/516.php
CVE-1999-0380
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: slmail
References: http://marc.info/?l=bugtraq&m=91996412724720&w=2, http://marc.info/?l=ntbugtraq&m=91999015212415&w=2, http://marc.info/?l=ntbugtraq&m=92110501504997&w=2
CVE-1999-1144
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-051.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/2056, http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-051.html
CVE-1999-0992
HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vvos
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9912-107, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9912-107
CVE-1999-0352
ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0352, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0352
CVE-1999-0754
The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inn
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt, http://www.redhat.com/corp/support/errata/inn99_05_22.html, http://www.securityfocus.com/bid/255
CVE-1999-1297
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100452&zone_32=10045%2A%20, https://exchange.xforce.ibmcloud.com/vulnerabilities/7482, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100452&zone_32=10045%2A%20
CVE-1999-1427
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: solstice_adminsuite
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145, http://www.securityfocus.com/bid/208, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145
CVE-1999-0275
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0275, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0275
CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX, http://www.osvdb.org/8447, http://www.securityfocus.com/bid/469
CVE-1999-0769
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, vixie_cron, openlinux, linux
References: http://www.securityfocus.com/bid/611, http://www.securityfocus.com/bid/611
CVE-1999-0673
Buffer overflow in ALMail32 POP3 client via From: or To: headers.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: almail32
References: http://www.securityfocus.com/bid/574, http://www.securityfocus.com/bid/574
CVE-1999-1507
Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1993-03.html, http://www.securityfocus.com/bid/59, https://exchange.xforce.ibmcloud.com/vulnerabilities/521
CVE-1999-1225
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netbsd, ultrix, openbsd, solaris, linux_kernel
References: http://www.securityfocus.com/archive/1/7526, https://exchange.xforce.ibmcloud.com/vulnerabilities/347, http://www.securityfocus.com/archive/1/7526
CVE-1999-0726
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: windows_2000, windows_nt
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234557, http://www.securityfocus.com/bid/499, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-023
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-0965
Race condition in xterm allows local users to modify arbitrary files via the logging option.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: x11
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0965, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0965
CVE-1999-1147
Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: policy_compliance_manager
References: http://marc.info/?l=bugtraq&m=91273739726314&w=2, http://www.osvdb.org/3164, https://exchange.xforce.ibmcloud.com/vulnerabilities/1430
CVE-1999-0165
NFS cache poisoning.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd_os, solaris, linux_kernel, nfs, sunos
References: https://www.cve.org/CVERecord?id=CVE-1999-0165, https://www.cve.org/CVERecord?id=CVE-1999-0165
CVE-1999-1008
xsoldier program allows local users to gain root access via a long argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd, mandrake_linux
References: http://marc.info/?l=freebsd-security&m=94531826621620&w=2, http://www.securityfocus.com/bid/871, http://marc.info/?l=freebsd-security&m=94531826621620&w=2
CVE-1999-0383
ACC Tigris allows public access without a login.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tigris
References: http://www.osvdb.org/267, http://www.securityfocus.com/bid/183, http://www.osvdb.org/267
CVE-1999-1131
Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980601-01-PX, http://ciac.llnl.gov/ciac/bulletins/i-060.shtml, http://www.cert.org/vendor_bulletins/VB-97.12.opengroup
CVE-1999-0303
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netbsd, openbsd, solaris, sunos, osf_1
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0303, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0303
CVE-1999-0487
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-011, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-011
CVE-1999-0740
Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: linux
References: http://www.securityfocus.com/bid/594, http://www.securityfocus.com/bid/594
CVE-1999-0188
The passwd command in Solaris can be subjected to a denial of service.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/182, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/182
CVE-1999-0392
Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cgic_library
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0392, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0392
CVE-1999-1500
Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_anywhere_mail_server
References: http://marc.info/?l=ntbugtraq&m=93880357530599&w=2, http://www.securityfocus.com/bid/733, http://marc.info/?l=ntbugtraq&m=93880357530599&w=2
CVE-1999-0911
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: proftpd
References: http://www.debian.org/security/1999/19990210, http://www.securityfocus.com/bid/612, http://www.debian.org/security/1999/19990210
CVE-1999-0489
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015
CVE-1999-0852
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: websphere_application_server
References: http://www.securityfocus.com/bid/844, http://www.securityfocus.com/bid/844
CVE-1999-0509
Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/146, https://exchange.xforce.ibmcloud.com/vulnerabilities/146
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-1999-0305
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openbsd, bsd_os, freebsd
References: http://www.openbsd.org/advisories/sourceroute.txt, http://www.osvdb.org/11502, https://exchange.xforce.ibmcloud.com/vulnerabilities/736
CVE-1999-0776
Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: alibaba
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9905&L=NTBUGTRAQ&P=R1533, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9905&L=NTBUGTRAQ&P=R1533
CVE-1999-0242
Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: slackware_linux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0242, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0242
CVE-1999-0251
Denial of service in talk program allows remote attackers to disrupt a user's display.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: talkd
References: https://www.cve.org/CVERecord?id=CVE-1999-0251, https://www.cve.org/CVERecord?id=CVE-1999-0251
CVE-1999-1063
CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cdomainfree
References: http://www.securityfocus.com/archive/1/14019, http://www.securityfocus.com/bid/304, https://exchange.xforce.ibmcloud.com/vulnerabilities/2251
CVE-1999-0492
The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0492, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0492
CVE-1999-0774
Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mars_nwe
References: http://www.securityfocus.com/bid/617, http://www.securityfocus.com/bid/617
CVE-1999-1376
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_information_server
References: http://marc.info/?l=bugtraq&m=91638375309890&w=2, http://marc.info/?l=ntbugtraq&m=91632724913080&w=2, http://marc.info/?l=bugtraq&m=91638375309890&w=2