DuyTa/cve-kgrag-db huggingface dataset:
CVE-1999-1277
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: backweb_client
References: http://marc.info/?l=ntbugtraq&m=91487886514546&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1565, http://marc.info/?l=ntbugtraq&m=91487886514546&w=2
CVE-1999-0830
Buffer overflow in SCO UnixWare Xsco command via a long argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0830, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0830
CVE-1999-0696
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/188, http://www.ciac.org/ciac/bulletins/j-051.shtml, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9908-102
CVE-1999-0979
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: http://marc.info/?l=bugtraq&m=94530783815434&w=2, http://www.securityfocus.com/bid/869, http://marc.info/?l=bugtraq&m=94530783815434&w=2
CVE-1999-0909
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt, terminal_server, windows_95, windows_98se
Related CWEs: CWE-264
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238453, http://www.securityfocus.com/bid/646, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-038
CWE: CWE-264
CVE-1999-1288
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: turbolinux, samba, openlinux, linux
References: http://www.caldera.com/support/security/advisories/SA-1998.35.txt, http://www.securityfocus.com/archive/1/11397, https://exchange.xforce.ibmcloud.com/vulnerabilities/1406
CVE-1999-0962
Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.osvdb.org/6415, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9701-045, http://www.osvdb.org/6415
CVE-1999-0664
An application-critical Windows NT registry key has inappropriate permissions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0664, https://www.cve.org/CVERecord?id=CVE-1999-0664
CVE-1999-1499
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: bind
References: http://www.securityfocus.com/archive/1/8966, http://www.securityfocus.com/bid/80, http://www.securityfocus.com/archive/1/8966
CVE-1999-0564
An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0564, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0564
CVE-1999-1070
Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: annex
References: http://www.securityfocus.com/archive/1/10021, http://www.securityfocus.com/archive/1/10021
CVE-1999-0342
Linux PAM modules allow local users to gain root access using temporary files.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: pam
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0342, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0342
CVE-1999-0329
SGI mediad program allows local users to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980602-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19980602-01-PX
CVE-1999-0678
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: debian_linux, http_server
References: http://www.securityfocus.com/bid/318, http://www.securityfocus.com/bid/318
CVE-1999-1431
ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zero_administration_kit
References: http://marc.info/?l=ntbugtraq&m=91576100022688&w=2, http://marc.info/?l=ntbugtraq&m=91606260910008&w=2, http://www.securityfocus.com/bid/181
CVE-1999-0940
Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mutt_mail_client
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0940, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0940
CVE-1999-1410
addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX, http://marc.info/?l=bugtraq&m=87602167420927&w=2, http://www.securityfocus.com/bid/330
CVE-1999-0656
The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
Related CWEs: CWE-16
References: http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638, https://exchange.xforce.ibmcloud.com/vulnerabilities/348, http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638
CWE: CWE-16
CVE-1999-0679
Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hybrid_ircd
References: http://www.efnet.org/archive/servers/hybrid/ChangeLog, http://www.securityfocus.com/bid/581, http://www.efnet.org/archive/servers/hybrid/ChangeLog
CVE-1999-0748
Buffer overflows in Red Hat net-tools package.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://www.redhat.com/support/errata/RHSA1999017_01.html, http://www.redhat.com/support/errata/RHSA1999017_01.html
CVE-1999-1405
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=91936783009385&w=2, http://marc.info/?l=bugtraq&m=91954824614013&w=2, http://www.securityfocus.com/bid/375
CVE-1999-0969
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ193233, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-014, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ193233
CVE-1999-1172
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: maximizer_enterprise
References: http://www.securityfocus.com/archive/1/11947, http://www.securityfocus.com/archive/1/11947
CVE-1999-1334
Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: elm
References: http://marc.info/?l=bugtraq&m=88609666024181&w=2, http://www.redhat.com/support/errata/rh50-errata-general.html#elm, http://marc.info/?l=bugtraq&m=88609666024181&w=2
CVE-1999-1151
Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: microcom_6000_access_integrator
References: http://marc.info/?l=bugtraq&m=90296493106214&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/2089, http://marc.info/?l=bugtraq&m=90296493106214&w=2
CVE-1999-0249
Windows NT RSHSVC program allows remote users to execute arbitrary commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0249, https://www.cve.org/CVERecord?id=CVE-1999-0249
CVE-1999-1183
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980403-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19980403-02-PX, http://www.iss.net/security_center/static/809.php
CVE-1999-0327
SGI syserr program allows local users to corrupt files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX, ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX
CVE-1999-1470
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: work_management
References: http://marc.info/?l=ntbugtraq&m=93034788412494&w=2, http://www.securityfocus.com/bid/485, https://exchange.xforce.ibmcloud.com/vulnerabilities/2303
CVE-1999-0402
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wget
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0402, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0402
CVE-1999-0195
Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, irix
References: https://www.cve.org/CVERecord?id=CVE-1999-0195, https://www.cve.org/CVERecord?id=CVE-1999-0195
CVE-1999-0862
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: postgresql
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0862, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0862
CVE-1999-0109
Buffer overflow in ffbconfig in Solaris 2.5.1.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/140, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/140
CVE-1999-0040
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, hp-ux, bsd_os, up-ux_v, freebsd
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0040, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0040
CVE-1999-1296
Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerberos_5
References: http://marc.info/?l=bugtraq&m=87602167420878&w=2, http://marc.info/?l=bugtraq&m=87602167420878&w=2
CVE-1999-0926
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
References: http://archives.neohapsis.com/archives/bugtraq/1998_3/0742.html, http://archives.neohapsis.com/archives/bugtraq/1998_3/0742.html
CVE-1999-1286
addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX, http://marc.info/?l=bugtraq&m=87602167420927&w=2, http://www.osvdb.org/8560
CVE-1999-0995
Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: windows_nt
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248185, http://www.securityfocus.com/bid/875, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-057
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-1999-1193
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: next
References: http://www.cert.org/advisories/CA-1991-06.html, http://www.securityfocus.com/bid/20, https://exchange.xforce.ibmcloud.com/vulnerabilities/581
CVE-1999-0681
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: frontpage, personal_web_server
References: http://archives.neohapsis.com/archives/bugtraq/1999-q3/0381.html, http://www.securityfocus.com/bid/568, https://exchange.xforce.ibmcloud.com/vulnerabilities/3117
CVE-1999-0462
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.securityfocus.com/bid/339, http://www.securityfocus.com/bid/339
CVE-1999-0598
A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html, http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html
CVE-1999-0822
Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: qpopper
References: http://www.securityfocus.com/bid/830, http://www.securityfocus.com/bid/830
CVE-1999-1100
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pix_private_link
References: http://ciac.llnl.gov/ciac/bulletins/i-056.shtml, http://www.cisco.com/warp/public/770/pixkey-pub.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/1579
CVE-1999-1123
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/107&type=0&nav=sec.sba, http://www.cert.org/advisories/CA-1991-07.html, http://www.securityfocus.com/bid/21
CVE-1999-1149
Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: csm_proxy
References: http://marc.info/?l=bugtraq&m=90221104525993&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1422, http://marc.info/?l=bugtraq&m=90221104525993&w=2
CVE-1999-1136
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, mpe_ix
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://cert.ip-plus.net/bulletin-archive/msg00040.html, http://marc.info/?l=bugtraq&m=90221104526177&w=2, http://www.ciac.org/ciac/bulletins/i-081.shtml
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-1999-1564
FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: http://www.securityfocus.com/archive/1/26166, http://www.securityfocus.com/archive/1/26166
CVE-1999-0842
Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mail-gear
References: http://www.osvdb.org/1144, http://www.securityfocus.com/bid/827, http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEAFCBAA.labs%40ussrback.com
CVE-1999-1385
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:20.stack-overflow.asc, http://marc.info/?l=bugtraq&m=87602167420332&w=2, http://www.iss.net/security_center/static/7465.php
CVE-1999-0835
Denial of service in BIND named via malformed SIG records.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware, sunos, openserver, aix
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt, http://www.securityfocus.com/bid/788, ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt
CVE-1999-0657
WinGate is being used.
References: https://www.cve.org/CVERecord?id=CVE-1999-0657, https://www.cve.org/CVERecord?id=CVE-1999-0657
CVE-1999-1140
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cracklib
References: http://marc.info/?l=bugtraq&m=88209041500913&w=2, http://www.cert.org/vendor_bulletins/VB-97.16.CrackLib, https://exchange.xforce.ibmcloud.com/vulnerabilities/1539
CVE-1999-1534
Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: arkeia
References: http://marc.info/?l=bugtraq&m=93837184228248&w=2, http://www.securityfocus.com/bid/661, http://marc.info/?l=bugtraq&m=93837184228248&w=2
CVE-1999-0561
IIS has the #exec function enabled for Server Side Include (SSI) files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0561, https://www.cve.org/CVERecord?id=CVE-1999-0561
CVE-1999-0431
Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0431, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0431
CVE-1999-1279
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sna_server
References: http://support.microsoft.com/support/kb/articles/q138/0/01.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/1548, http://support.microsoft.com/support/kb/articles/q138/0/01.asp
CVE-1999-0550
A router's routing tables can be obtained from arbitrary hosts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References: https://www.cve.org/CVERecord?id=CVE-1999-0550, https://www.cve.org/CVERecord?id=CVE-1999-0550
CVE-1999-1062
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jetdirect
References: http://marc.info/?l=bugtraq&m=87602248518480&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1876, http://marc.info/?l=bugtraq&m=87602248518480&w=2
CVE-1999-0401
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0401, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0401
CVE-1999-0332
Buffer overflow in NetMeeting allows denial of service and remote command execution.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netmeeting
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ184346, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ184346
CWE: CWE-119
CVE-1999-0916
WebTrends software stores account names and passwords in a file which does not have restricted access permissions.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webtrends_for_firewalls, webtrends_security_analyzer, webtrends_professional_suite, webtrends_enterprise_suite, webtrends_log_analyzer
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0916, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0916
CVE-1999-0973
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://www.securityfocus.com/bid/858, http://www.securityfocus.com/bid/858
CVE-1999-1032
Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ultrix
References: http://ciac.llnl.gov/ciac/bulletins/b-36.shtml, http://www.cert.org/advisories/CA-1991-11.html, http://www.securityfocus.com/bid/26
CVE-1999-0993
Modifications to ACLs (Access Control Lists) in Microsoft Exchange  5.5 do not take effect until the directory store cache is refreshed.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exchange_server
Related CWEs: CWE-665
Related CAPECs: CAPEC-29, CAPEC-26
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0993, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0993
CWE: CWE-665
CVE-1999-0594
A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/1294, https://exchange.xforce.ibmcloud.com/vulnerabilities/1294
CVE-1999-1544
Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://marc.info/?l=bugtraq&m=91722115016183&w=2, http://marc.info/?l=bugtraq&m=91722115016183&w=2
CVE-1999-0347
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: http://marc.info/?l=bugtraq&m=91745430007021&w=2, http://marc.info/?l=ntbugtraq&m=91756771207719&w=2, http://marc.info/?l=bugtraq&m=91745430007021&w=2
CVE-1999-1467
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.cert.org/advisories/CA-1989-07.html, http://www.securityfocus.com/bid/5, https://exchange.xforce.ibmcloud.com/vulnerabilities/3165
CVE-1999-1416
AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dwhttpd
References: http://www.securityfocus.com/archive/1/10383, http://www.securityfocus.com/bid/253, http://www.securityfocus.com/archive/1/10383
CVE-1999-0915
URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: url_live
References: http://www.osvdb.org/1129, http://www.securityfocus.com/bid/746, http://www.osvdb.org/1129
CVE-1999-0907
sccw allows local users to read arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: soundcard_cw
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0907, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0907
CVE-1999-0245
Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0245, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0245
CVE-1999-0162
The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ios
References: https://www.cve.org/CVERecord?id=CVE-1999-0162, https://www.cve.org/CVERecord?id=CVE-1999-0162
CVE-1999-0183
Linux implementations of TFTP would allow access to files outside the restricted directory.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: linux_kernel, tftp
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0183, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0183
CVE-1999-1361
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: windows_nt
References: http://marc.info/?l=bugtraq&m=90221101925891&w=2, http://marc.info/?l=bugtraq&m=90221101925891&w=2
CVE-1999-0663
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://www.cve.org/CVERecord?id=CVE-1999-0663, https://www.cve.org/CVERecord?id=CVE-1999-0663
CVE-1999-0339
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0339, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0339
CVE-1999-1391
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: next
References: http://ciac.llnl.gov/ciac/bulletins/b-01.shtml, http://www.cert.org/advisories/CA-1990-06.html, http://www.iss.net/security_center/static/7143.php
CVE-1999-0113
Some implementations of rlogin allow root access if given a -froot parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://www.securityfocus.com/bid/458, http://www.securityfocus.com/bid/458
CWE: CWE-88
CVE-1999-0917
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231452, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018, http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231452
CVE-1999-0476
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0476, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0476
CVE-1999-1011
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_information_server, site_server, index_server, data_access_components
Related CWEs: CWE-264
References: http://www.ciac.org/ciac/bulletins/j-054.shtml, http://www.osvdb.org/272, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
CWE: CWE-264
CVE-1999-1319
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19960101-01-PX, http://www.iss.net/security_center/static/7430.php, ftp://patches.sgi.com/support/free/security/advisories/19960101-01-PX
CVE-1999-0441
Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wingate
References: http://www.eeye.com/html/Research/Advisories/AD02221999.html, http://www.securityfocus.com/bid/509, http://www.eeye.com/html/Research/Advisories/AD02221999.html
CVE-1999-0196
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webgais
References: http://www.osvdb.org/237, http://www.securityfocus.com/bid/2077, http://www.osvdb.org/237
CVE-1999-0299
Buffer overflow in FreeBSD lpd through long DNS hostnames.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://www.osvdb.org/6093, http://www.osvdb.org/6093
CVE-1999-1321
Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kerberos
References: http://lists.netspace.org/cgi-bin/wa?A2=ind9811A&L=bugtraq&P=R4814, http://www.osvdb.org/4883, http://lists.netspace.org/cgi-bin/wa?A2=ind9811A&L=bugtraq&P=R4814
CVE-1999-1058
Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vermillion_ftp_daemon
References: http://marc.info/?l=bugtraq&m=94329968617085&w=2, http://marc.info/?l=ntbugtraq&m=94337185023159&w=2, http://www.securityfocus.com/bid/818
CVE-1999-1537
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://marc.info/?l=ntbugtraq&m=93138827329577&w=2, http://www.securityfocus.com/bid/521, https://exchange.xforce.ibmcloud.com/vulnerabilities/2352
CVE-1999-1039
Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030, ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030
CVE-1999-1561
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: shoutcast_server
References: http://www.securityfocus.com/archive/1/24852, http://www.securityfocus.com/archive/1/24852
CVE-1999-0847
Buffer overflow in free internet chess server (FICS) program, xboard.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fics_program
References: https://marc.info/?l=bugtraq&m=94407791819019&w=2, https://marc.info/?l=bugtraq&m=94407791819019&w=2
CVE-1999-1523
Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sambar_server
References: http://marc.info/?l=bugtraq&m=93901161727373&w=2, http://marc.info/?l=bugtraq&m=93941351229256&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/1672
CVE-1999-1291
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt, windows_95
References: http://www.securityfocus.com/archive/1/10789, https://exchange.xforce.ibmcloud.com/vulnerabilities/1383, http://www.securityfocus.com/archive/1/10789
CVE-1999-1494
colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/19950209-01-P, http://www.securityfocus.com/archive/1/675, http://www.securityfocus.com/bid/336
CVE-1999-0184
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: bind
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0184, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0184
CVE-1999-1574
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IX79909&apar=only, http://www.kb.cert.org/vuls/id/182777, https://exchange.xforce.ibmcloud.com/vulnerabilities/7867
CVE-1999-0356
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0356, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0356
CVE-1999-0761
Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://www.osvdb.org/1074, http://www.securityfocus.com/bid/644, http://www.osvdb.org/1074
CVE-1999-0420
umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: umapfs
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0420, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0420
CVE-1999-1360
Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://support.microsoft.com/support/kb/articles/q160/6/50.asp, http://www.iss.net/security_center/static/7402.php, http://support.microsoft.com/support/kb/articles/q160/6/50.asp
CVE-1999-1041
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver, unix
References: ftp://ftp.sco.com/SSE/security_bulletins/SB-98.05a, http://marc.info/?l=bugtraq&m=90686250717719&w=2, http://www.cert.org/vendor_bulletins/VB-98.10.sco.mscreen
CVE-1999-1207
Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netxray
References: http://www.efri.hr/~crv/security/bugs/NT/netxtray.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/907, http://www.efri.hr/~crv/security/bugs/NT/netxtray.html
CVE-1999-1514
Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: expressfs
References: http://marc.info/?l=bugtraq&m=94121377716133&w=2, http://marc.info/?l=ntbugtraq&m=94130292519646&w=2, http://www.securityfocus.com/bid/749
CVE-1999-1155
LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mail_list_cgi_script
References: http://lakeweb.com/scripts/, http://www.securityfocus.com/archive/1/11175, https://exchange.xforce.ibmcloud.com/vulnerabilities/1400
CVE-1999-0511
IP forwarding is enabled on a machine which is not a router or firewall.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: https://www.cve.org/CVERecord?id=CVE-1999-0511, https://www.cve.org/CVERecord?id=CVE-1999-0511
CVE-1999-0953
WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wwwboard
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0953, https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0953
CVE-1999-1239
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://www.securityfocus.com/advisories/1559, https://exchange.xforce.ibmcloud.com/vulnerabilities/2261, http://www.securityfocus.com/advisories/1559
CVE-1999-1198
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: next
References: http://ciac.llnl.gov/ciac/bulletins/b-01.shtml, http://www.cert.org/advisories/CA-1990-06.html, http://www.iss.net/security_center/static/7141.php
CVE-1999-1187
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: slackware_linux, pine, freebsd
References: http://marc.info/?l=bugtraq&m=87602167419803&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/416, http://marc.info/?l=bugtraq&m=87602167419803&w=2
CVE-1999-1072
Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ews
References: http://marc.info/?l=bugtraq&m=91248445931140&w=2, http://marc.info/?l=bugtraq&m=91248445931140&w=2
CVE-1999-0671
Buffer overflow in ToxSoft NextFTP client through CWD command.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: nextftp
References: http://www.securityfocus.com/bid/572, http://www.securityfocus.com/bid/572
CVE-1999-0490
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012, https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012
CVE-1999-0146
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: campas, servers
References: http://www.securityfocus.com/bid/1975, https://exchange.xforce.ibmcloud.com/vulnerabilities/298, http://www.securityfocus.com/bid/1975