DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-0804
Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, debian_linux, suse_linux, linux
References: http://www.securityfocus.com/bid/302, http://www.securityfocus.com/bid/302
CVE-1999-1545
Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: joe
References: http://marc.info/?l=bugtraq&m=93216103027827&w=2, http://marc.info/?l=bugtraq&m=93226771401036&w=2, http://marc.info/?l=bugtraq&m=93216103027827&w=2
CVE-1999-0882
Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: falcon_web_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0882, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0882
CVE-1999-0667
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: arp_protocol
References: https://marc.info/?l=bugtraq&m=87602880019797&w=2, https://marc.info/?l=bugtraq&m=87602880019797&w=2
CVE-1999-0848
Denial of service in BIND named via consuming more than "fdmax" file descriptors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bind, sunos, solaris
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194, http://www.securityfocus.com/bid/788
CVE-1999-0002
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd_os, openlinux, linux
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: ftp://patches.sgi.com/support/free/security/advisories/19981006-01-I, http://www.ciac.org/ciac/bulletins/j-006.shtml, http://www.securityfocus.com/bid/121
CWE: CWE-119
CVE-1999-1126
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resource_manager
References: http://ciac.llnl.gov/ciac/bulletins/i-086.shtml, http://www.cisco.com/warp/public/770/crmtmp-pub.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/1575
CVE-1999-1088
Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/h-21.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/2012, http://ciac.llnl.gov/ciac/bulletins/h-21.shtml
CVE-1999-0480
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: midnight_commander
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0480, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0480
CVE-1999-1064
Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windowmaker
References: http://marc.info/?l=bugtraq&m=93555317429630&w=2, http://marc.info/?l=bugtraq&m=93582070508957&w=2, http://www.securityfocus.com/bid/596
CVE-1999-1262
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: communicator
References: http://www.securityfocus.com/archive/1/12231, https://exchange.xforce.ibmcloud.com/vulnerabilities/1727, http://www.securityfocus.com/archive/1/12231
CVE-1999-0050
Buffer overflow in HP-UX newgrp program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0050, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0050
CVE-1999-0316
Buffer overflow in Linux splitvt command gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: splitvt
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0316, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0316
CVE-1999-0599
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html, http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html
CVE-1999-0779
Denial of service in HP-UX SharedX recserv program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9810-086, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9810-086
CVE-1999-0854
Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ultimate_bulletin_board
References: http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl, http://www.ultimatebb.com/home/versions.shtml, http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl
CVE-1999-0892
Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: communicator
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0892, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0892
CVE-1999-1355
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: management_agents_for_servers, insight_management_agent
References: http://marc.info/?l=ntbugtraq&m=93542118727732&w=2, http://marc.info/?l=ntbugtraq&m=93654336516711&w=2, http://marc.info/?l=ntbugtraq&m=93759822430801&w=2
CVE-1999-0064
Buffer overflow in AIX lquerylv program gives root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: https://marc.info/?l=bugtraq&m=87602167418428&w=2, https://marc.info/?l=bugtraq&m=87602167418428&w=2
CVE-1999-1024
ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tcpdump
References: http://marc.info/?l=bugtraq&m=92955903802773&w=2, http://marc.info/?l=bugtraq&m=92963447601748&w=2, http://marc.info/?l=bugtraq&m=92989907627051&w=2
CVE-1999-0440
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: navigator, communicator, java
References: http://java.sun.com/pr/1999/03/pr990329-01.html, http://marc.info/?l=bugtraq&m=92333596624452&w=2, http://www.securityfocus.com/bid/1939
CVE-1999-0856
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: slackware_linux
References: https://marc.info/?l=bugtraq&m=94416739411280&w=2, https://marc.info/?l=bugtraq&m=94416739411280&w=2
CVE-1999-0231
Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: slmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0231, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0231
CVE-1999-1139
Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=87602880019745&w=2, http://security-archive.merton.ox.ac.uk/bugtraq-199801/0122.html, http://www.ciac.org/ciac/bulletins/i-027b.shtml
CVE-1999-0176
The Webgais program allows a remote user to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webgais
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0176, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0176
CVE-1999-1458
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unix
References: http://ftp1.support.compaq.com/public/dunix/v4.0d/ssrt0583u.README, http://www.securityfocus.com/archive/1/12121, https://exchange.xforce.ibmcloud.com/vulnerabilities/3138
CVE-1999-0824
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://www.securityfocus.com/bid/833, http://www.securityfocus.com/bid/833
CVE-1999-0828
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: unixware
References: http://www.securityfocus.com/bid/853, http://www.securityfocus.com/bid/853
CVE-1999-0825
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: unixware
References: http://www.securityfocus.com/bid/849, http://www.securityfocus.com/bid/849
CVE-1999-0463
Remote attackers can perform a denial of service using IRIX fcagent.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: l0phtcrack
References: ftp://patches.sgi.com/support/free/security/advisories/19981201-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19981201-01-PX
CVE-1999-0328
SGI permissions program allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX
CVE-1999-1028
Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pcanywhere
References: http://marc.info/?l=ntbugtraq&m=92807524225090&w=2, http://www.iss.net/security_center/static/2256.php, http://www.securityfocus.com/bid/288
CVE-1999-1375
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: http://marc.info/?l=ntbugtraq&m=91877455626320&w=2, http://www.securityfocus.com/bid/230, http://marc.info/?l=ntbugtraq&m=91877455626320&w=2
CVE-1999-0836
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-99.22a, http://www.securityfocus.com/bid/842, http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991202160111.20553.qmail%40nwcst282.netaddress.usa.net
CVE-1999-0820
FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: http://www.osvdb.org/5996, http://www.securityfocus.com/bid/838, http://www.osvdb.org/5996
CVE-1999-0056
Buffer overflow in Sun's ping program can give root access to local users.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/174, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/174
CVE-1999-1515
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tfs_gateway
References: http://www.securityfocus.com/bid/613, https://exchange.xforce.ibmcloud.com/vulnerabilities/3290, http://www.securityfocus.com/bid/613
CVE-1999-1212
Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1991-02.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/574, http://www.cert.org/advisories/CA-1991-02.html
CVE-1999-0976
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: http://www.securityfocus.com/bid/857, http://www.securityfocus.com/bid/857
CVE-1999-0758
Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: enterprise_server, fasttrack_server
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0758, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0758
CVE-1999-1482
SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zgv
References: http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-02-15&msg=Pine.LNX.3.96.990219175605.9622A-100000%40ferret.lmh.ox.ac.uk, http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-02-15&msg=Pine.LNX.3.96.990219175605.9622A-100000%40ferret.lmh.ox.ac.uk
CVE-1999-0160
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.osvdb.org/1099, http://www.osvdb.org/1099
CVE-1999-0170
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ultrix
References: https://www.cve.org/CVERecord?id=CVE-1999-0170, https://www.cve.org/CVERecord?id=CVE-1999-0170
CVE-1999-0955
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: wu-ftpd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0955, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0955
CVE-1999-1314
Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:10.mount_union.asc, http://ciac.llnl.gov/ciac/bulletins/g-24.shtml, http://www.iss.net/security_center/static/7429.php
CVE-1999-0174
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: communicator
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0174, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0174
CVE-1999-0127
swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0127, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0127
CVE-1999-1420
NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's configuration.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nh2012, nh3012, nh2015, nh2048, nh2012r
References: http://marc.info/?l=bugtraq&m=90221104526016&w=2, http://marc.info/?l=bugtraq&m=90221104526065&w=2, http://www.securityfocus.com/bid/212
CVE-1999-0437
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webramp
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0437, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0437
CVE-1999-1204
Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://marc.info/?l=bugtraq&m=90221101925912&w=2, http://www.checkpoint.com/techsupport/config/keywords.html, http://www.osvdb.org/4416
CVE-1999-1023
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: http://marc.info/?l=bugtraq&m=92904175406756&w=2, http://www.securityfocus.com/bid/426, http://marc.info/?l=bugtraq&m=92904175406756&w=2
CVE-1999-1241
Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer
References: http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/2173, http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html
CVE-1999-1074
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webmin
References: http://www.securityfocus.com/archive/1/9138, http://www.securityfocus.com/bid/98, http://www.webmin.com/webmin/changes.html
CVE-1999-0284
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_domino_mail_server, exchange_server
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0284, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0284
CWE: CWE-120
CVE-1999-1354
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firstclass_internet_server
References: http://marc.info/?l=ntbugtraq&m=93637687305327&w=2, http://marc.info/?l=ntbugtraq&m=93698283309513&w=2, http://marc.info/?l=ntbugtraq&m=93637687305327&w=2
CVE-1999-1524
FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: flowpoint_dsl_router
References: http://marc.info/?l=bugtraq&m=93424680430460&w=2, http://marc.info/?l=bugtraq&m=93424680430460&w=2
CVE-1999-1452
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_nt
References: http://marc.info/?l=bugtraq&m=91788829326419&w=2, http://marc.info/?l=ntbugtraq&m=91764169410814&w=2, http://marc.info/?l=ntbugtraq&m=91822011021558&w=2
CVE-1999-0222
Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: router
References: http://www.securityfocus.com/archive/1/60159, http://www.securityfocus.com/archive/1/60159
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19990501-01-A, http://www.securityfocus.com/bid/262, ftp://patches.sgi.com/support/free/security/advisories/19990501-01-A
CVE-1999-0513
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: aix, netbsd, hp-ux, freebsd, solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0513, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0513
CVE-1999-1020
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netware
References: http://marc.info/?l=bugtraq&m=90613355902262&w=2, http://www.securityfocus.com/bid/484, https://exchange.xforce.ibmcloud.com/vulnerabilities/1364
CVE-1999-1547
Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_listener
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://marc.info/?l=bugtraq&m=94359982417686&w=2, http://marc.info/?l=ntbugtraq&m=94390053530890&w=2, http://www.securityfocus.com/bid/841
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-0626
A version of rusers is running that exposes valid user information to any entity on the network.
Affected Products: rpc.ruserd
References: https://www.cve.org/CVERecord?id=CVE-1999-0626, https://www.cve.org/CVERecord?id=CVE-1999-0626
CVE-1999-1540
shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shell-lock
References: http://marc.info/?l=bugtraq&m=93916168802365&w=2, http://www.atstake.com/research/advisories/1999/shell-lock.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/3356
CVE-1999-0738
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013
CVE-1999-0991
Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: telnet_server_nt
References: http://www.securityfocus.com/bid/862, http://www.securityfocus.com/bid/862
CVE-1999-1495
xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: suse_linux
References: http://www.securityfocus.com/archive/1/12580, http://www.securityfocus.com/bid/325, https://exchange.xforce.ibmcloud.com/vulnerabilities/1792
CVE-1999-0501
A Unix account has a guessable password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0501, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0501
CVE-1999-1078
WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ws_ftp_pro
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P, http://www.securityfocus.com/bid/547, http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P
CVE-1999-1120
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX, http://marc.info/?l=bugtraq&m=87602167420403&w=2
CVE-1999-1264
WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webramp
References: http://marc.info/?l=bugtraq&m=91815321510224&w=2, http://www.securityfocus.com/archive/1/12048, https://exchange.xforce.ibmcloud.com/vulnerabilities/1670
CVE-1999-0078
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
CVSS v2.0 Score: 1.9 (LOW)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
Affected Products: aix, mp-ras, unixware, hp-ux, openserver
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0078, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0078
CVE-1999-0528
A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/8372, https://exchange.xforce.ibmcloud.com/vulnerabilities/8372
CVE-1999-0075
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wu-ftpd
References: http://www.osvdb.org/5742, http://www.osvdb.org/5742
CVE-1999-0082
CWD ~root command in ftpd allows root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ftpcd, ftp
References: http://www.alw.nih.gov/Security/Docs/admin-guide-to-cracking.101.html, http://www.alw.nih.gov/Security/Docs/admin-guide-to-cracking.101.html
CVE-1999-0498
TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0498, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0498
CVE-1999-1526
Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shockwave_flash_plugin
References: http://www.securityfocus.com/archive/1/12842, https://exchange.xforce.ibmcloud.com/vulnerabilities/1931, http://www.securityfocus.com/archive/1/12842
CVE-1999-0132
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hp-ux, sunos, solaris
References: http://www.cert.org/advisories/CA-1996-19.html, http://www.osvdb.org/11723, https://exchange.xforce.ibmcloud.com/vulnerabilities/401
CVE-1999-0935
classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0935, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0935
CVE-1999-0898
Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649, http://www.securityfocus.com/bid/768, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047
CWE: CWE-119
CVE-1999-0244
Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: radius
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0244, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0244
CVE-1999-1105
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_95
References: http://www.iss.net/security_center/static/7231.php, http://www.net-security.sk/bugs/NT/netware1.html, http://www.zdnet.com/eweek/reviews/1016/tr42bug.html
CVE-1999-0211
Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos
References: http://www.securityfocus.com/bid/24, https://vuls.cert.org/confluence/pages/viewpage.action?pageId=96665790, https://vuls.cert.org/confluence/pages/viewpage.action?pageId=97124517
CVE-1999-0276
mSQL v2.0.1 and below allows remote execution through a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: msql
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0276, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0276
CVE-1999-0415
The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cisco_7xx_routers
References: http://ciac.llnl.gov/ciac/bulletins/j-034.shtml, http://www.cisco.com/warp/public/770/7xxconn-pub.shtml, http://ciac.llnl.gov/ciac/bulletins/j-034.shtml
CVE-1999-1368
AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inoculateit
References: http://marc.info/?l=ntbugtraq&m=92652152723629&w=2, http://marc.info/?l=ntbugtraq&m=97439568517355&w=2, http://marc.info/?l=ntbugtraq&m=92652152723629&w=2
CVE-1999-1415
Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ultrix
References: http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability, http://www.securityfocus.com/bid/27, http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability
CVE-1999-1066
Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake_1_server
References: http://marc.info/?l=bugtraq&m=94589559631535&w=2, http://marc.info/?l=bugtraq&m=94589559631535&w=2
CVE-1999-1342
ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: activelist_server
References: http://marc.info/?l=ntbugtraq&m=94042342010662&w=2, http://marc.info/?l=ntbugtraq&m=94042342010662&w=2
CVE-1999-1401
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19961201-01-PX, http://www.iss.net/security_center/static/7575.php, http://www.osvdb.org/8563
CVE-1999-0475
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N
Affected Products: procmail
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0475, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0475
CVE-1999-1035
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://support.microsoft.com/support/kb/articles/q192/2/96.asp, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-019, https://exchange.xforce.ibmcloud.com/vulnerabilities/1823
CVE-1999-0346
CGI PHP mlog script allows an attacker to read any file on the target server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php_fi
References: http://www.osvdb.org/3397, http://www.securityfocus.com/bid/713, http://www.osvdb.org/3397
CVE-1999-0904
Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bftelnet
References: http://www.securityfocus.com/bid/771, http://www.securityfocus.com/bid/771
CVE-1999-1356
Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (LegalNoticeCaption) and text (LegalNoticeText) in Windows NT, which could produce a legal notice that is in violation of the security policy.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smartstart
References: http://marc.info/?l=bugtraq&m=93646669500991&w=2, http://marc.info/?l=ntbugtraq&m=93637792706047&w=2, http://marc.info/?l=ntbugtraq&m=93759822830815&w=2
CVE-1999-1044
Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unix
References: http://ciac.llnl.gov/ciac/bulletins/i-050.shtml, http://ciac.llnl.gov/ciac/bulletins/i-050.shtml, http://www.iss.net/security_center/static/7431.php
CVE-1999-1010
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openssh
References: http://marc.info/?l=bugtraq&m=94519142415338&w=2, http://marc.info/?l=bugtraq&m=94519142415338&w=2
CVE-1999-1330
The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, linux
References: http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html, http://marc.info/?l=bugtraq&m=87602661419259&w=2, http://www.iss.net/security_center/static/7244.php
CVE-1999-0253
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.securityfocus.com/bid/1814, http://www.securityfocus.com/bid/1814
CVE-1999-1037
rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: satan
References: http://marc.info/?l=bugtraq&m=90221103125976&w=2, http://marc.info/?l=bugtraq&m=90221103125986&w=2, http://www.iss.net/security_center/static/7167.php
CVE-1999-1019
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: spectrum_enterprise_manager
References: http://marc.info/?l=bugtraq&m=93024398513475&w=2, http://marc.info/?l=bugtraq&m=93024398713491&w=2, http://www.securityfocus.com/bid/495
CVE-1999-0035
Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
CVSS v3.1 Score: 5.4 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: irix, inet
Related CWEs: CWE-364
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0035, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0035
CWE: CWE-364
CVE-1999-0261
Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: http://www.insecure.org/sploits/netmanage.chameleon.overflows.html, http://www.insecure.org/sploits/netmanage.chameleon.overflows.html
CVE-1999-0532
A DNS server allows zone transfers.
References: https://www.cve.org/CVERecord?id=CVE-1999-0532, http://www.us-cert.gov/ncas/alerts/TA15-103A, https://www.cve.org/CVERecord?id=CVE-1999-0532
CVE-1999-0751
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_server
References: http://www.securityfocus.com/bid/631, https://exchange.xforce.ibmcloud.com/vulnerabilities/3256, http://www.securityfocus.com/bid/631
CVE-1999-0497
Anonymous FTP is enabled.
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0497, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0497
CVE-1999-0422
In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netbsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0422, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0422
CVE-1999-1509
Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eserv
References: http://marc.info/?l=bugtraq&m=94183041514522&w=2, http://marc.info/?l=ntbugtraq&m=94177470915423&w=2, http://www.securityfocus.com/bid/773
CVE-1999-0217
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0217, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0217
CVE-1999-0297
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd, linux, bsd_os, freebsd, vixie_cron
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0297, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0297
CVE-1999-0250
Denial of service in Qmail through long SMTP commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: qmail
References: http://cr.yp.to/qmail/venema.html, http://marc.info/?l=bugtraq&m=87602558319024&w=2, http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html
CVE-1999-1397
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: index_server
References: http://marc.info/?l=bugtraq&m=92242671024118&w=2, http://marc.info/?l=ntbugtraq&m=92223293409756&w=2, http://www.iss.net/security_center/static/7559.php
CVE-1999-0810
Denial of service in Samba NETBIOS name service daemon (nmbd).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: samba
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0810, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0810
CVE-1999-0893
userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openserver
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0893, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0893
CVE-1999-1117
lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aix
References: http://ciac.llnl.gov/ciac/bulletins/h-13.shtml, http://marc.info/?l=bugtraq&m=87602167420195&w=2, http://marc.info/?l=bugtraq&m=87602167420196&w=2
CVE-1999-1160
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://ciac.llnl.gov/ciac/bulletins/h-33.shtml, http://marc.info/?l=bugtraq&m=87602167420581&w=2, http://www.iss.net/security_center/static/7437.php
CVE-1999-1068
Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=87602661419366&w=2, http://marc.info/?l=bugtraq&m=87602661419366&w=2
CVE-1999-0363
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: line_printer_control, suse_linux
References: http://www.securityfocus.com/bid/328, http://www.securityfocus.com/bid/328
CVE-1999-0600
A network intrusion detection system (IDS) does not verify the checksum on a packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html, http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html