Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-1999-1531 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:18:07.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94157187815629&w=2 - http://www.securityfocus.com/bid/763 - http://www.iss.net/security_center/static/7767.php
CVE ID: CVE-1999-1532 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94117465014255&w=2 - http://www.securityfocus.com/bid/748
CVE ID: CVE-1999-1533 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93846522511387&w=2 - http://www.securityfocus.com/bid/665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3317
CVE ID: CVE-1999-1534 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/661 - http://marc.info/?l=bugtraq&m=93837184228248&w=2
CVE ID: CVE-1999-1535 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:18:07.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/3291 - http://www.securityfocus.com/bid/592 - http://marc.info/?l=ntbugtraq&m=93256878011447&w=2 - http://marc.info/?l=ntbugtraq&m=93501427820328&w=2
CVE ID: CVE-1999-1536 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/560 - http://www.osvdb.org/13557 - http://marc.info/?l=bugtraq&m=93347785827287&w=2
CVE ID: CVE-1999-1537 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-01T17:18:07.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=93138827329577&w=2 - http://www.securityfocus.com/bid/521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2352
CVE ID: CVE-1999-1538 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91638375309890&w=2 - http://marc.info/?l=ntbugtraq&m=91632724913080&w=2 - http://www.securityfocus.com/bid/189
CVE ID: CVE-1999-1539 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94225924803704&w=2 - http://marc.info/?l=ntbugtraq&m=94223972910670&w=2 - http://www.securityfocus.com/bid/796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3491
CVE ID: CVE-1999-1540 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93916168802365&w=2 - http://www.atstake.com/research/advisories/1999/shell-lock.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/3356
CVE ID: CVE-1999-1541 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93916168802365&w=2 - http://www.atstake.com/research/advisories/1999/shell-lock.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/3358
CVE ID: CVE-1999-1542 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:18:07.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93923853105687&w=2 - http://marc.info/?l=bugtraq&m=93915641729415&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3353
CVE ID: CVE-1999-1543 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93188174906513&w=2 - http://www.securityfocus.com/bid/519 - http://marc.info/?l=bugtraq&m=93736667813924&w=2
CVE ID: CVE-1999-1544 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91722115016183&w=2
CVE ID: CVE-1999-1545 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93216103027827&w=2 - http://marc.info/?l=bugtraq&m=93226771401036&w=2
CVE ID: CVE-1999-1546 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/12217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1724
CVE ID: CVE-1999-1547 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=94390053530890&w=2 - http://marc.info/?l=bugtraq&m=94359982417686&w=2 - http://www.securityfocus.com/bid/841
CVE ID: CVE-1999-1548 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit. Additional Analyst Notes: - CVE Program Container: References: - http://razor.bindview.com/publish/advisories/adv_Cabletron.html - http://www.securityfocus.com/bid/821
CVE ID: CVE-1999-1549 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/804 - http://marc.info/?l=bugtraq&m=94286509804526&w=2
CVE ID: CVE-1999-1550 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:18:07.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7771.php - http://marc.info/?l=bugtraq&m=94225879703021&w=2 - http://www.securityfocus.com/bid/778 - http://marc.info/?l=bugtraq&m=94217006208374&w=2 - http://marc.info/?l=bugtraq&m=94217879020184&w=2
CVE ID: CVE-1999-1551 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1898 - http://www.securityfocus.com/bid/505 - http://marc.info/?l=bugtraq&m=92038879607336&w=2
CVE ID: CVE-1999-1552 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.insecure.org/lists/bugtraq/1994/Jul/0038.html - http://www.securityfocus.com/bid/358
CVE ID: CVE-1999-1553 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1859 - http://www.securityfocus.com/archive/1/12730
CVE ID: CVE-1999-1554 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-1990-08.html - http://www.securityfocus.com/bid/13 - http://www.iss.net/security_center/static/3164.php
CVE ID: CVE-1999-1555 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/9515 - http://www.securityfocus.com/bid/106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1536
CVE ID: CVE-1999-1556 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-01T17:18:07.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=90222453431645&w=2 - http://www.securityfocus.com/bid/109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7354
CVE ID: CVE-1999-1557 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1895 - http://marc.info/?l=bugtraq&m=92038879607336&w=2
CVE ID: CVE-1999-1558 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/161 - http://www.iss.net/security_center/static/7151.php - http://ciac.llnl.gov/ciac/bulletins/i-071a.shtml
CVE ID: CVE-1999-1559 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/2064 - http://marc.info/?l=bugtraq&m=92299263017061&w=2
CVE ID: CVE-1999-1560 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93252050203589&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2369
CVE ID: CVE-1999-1561 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/24852
CVE ID: CVE-1999-1562 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3446 - http://www.securityfocus.com/archive/1/26915 - http://www.debian.org/security/2001/dsa-084
CVE ID: CVE-1999-1563 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/30849 - http://www.securityfocus.com/archive/1/35075
CVE ID: CVE-1999-1564 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/26166
CVE ID: CVE-1999-1565 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:18:07.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/24784 - http://www.osvdb.org/6291
CVE ID: CVE-1999-1566 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/13600
CVE ID: CVE-1999-1567 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:18:07.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9906&L=NTBUGTRAQ&P=R1680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1948 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9903&L=NTBUGTRAQ&P=R1215
CVE ID: CVE-1999-1568 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2025-01-16T17:40:42.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/archive/1/12699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1833 - http://marc.info/?l=bugtraq&m=91981352617720&w=2
CVE ID: CVE-1999-1569 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-01T17:18:07.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91012172524181&w=2 - http://www.securityfocus.com/bid/3051 - http://marc.info/?l=bugtraq&m=90221101925989&w=2 - http://www.securityfocus.com/archive/1/197268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6871
CVE ID: CVE-1999-1570 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-01T17:18:07.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/27074 - ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17/CSSA-2002-SCO.17.txt - http://www.securityfocus.com/bid/4089 - http://www.iss.net/security_center/static/8989.php - http://marc.info/?l=vuln-dev&m=102098949103708&w=2
CVE ID: CVE-1999-1571 State: PUBLISHED Published: 2002-10-15T04:00:00 Last Updated: 2024-08-01T17:18:07.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94053017801639&w=2 - http://online.securityfocus.com/archive/1/27074 - http://marc.info/?l=bugtraq&m=94183363719024&w=2 - ftp://stage.caldera.com/pub/security/sse/sse037c/sse037c.ltr - http://www.iss.net/security_center/static/8989.php - http://marc.info/?l=
era.com/pub/security/sse/sse037c/sse037c.ltr - http://www.iss.net/security_center/static/8989.php - http://marc.info/?l=vuln-dev&m=102098949103708&w=2 - http://www.securityfocus.com/bid/643 - http://online.securityfocus.com/advisories/1843 - ftp://stage.caldera.com/pub/security/sse/security_bulletins/SB-99.17c - http://marc.info/?l=bugtraq&m=93762097815861&w=2
CVE ID: CVE-1999-1572 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-01T17:18:07.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110763404701519&w=2 - http://www.redhat.com/support/errata/RHSA-2005-073.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19167 - http://secunia.com/advisories/17063 - http:/
005-073.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19167 - http://secunia.com/advisories/17063 - http://secunia.com/advisories/17532 - http://www.trustix.org/errata/2005/0003/ - http://support.avaya.com/elmodocs2/security/ASA-2005-212.pdf - http://www.redhat.com/support/errata/RHSA-2005-080.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10888 - http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/1391 - http://secunia.com/advisories/14357 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:032 - http://www.debian.org/security/2005/dsa-664 - http://www.redhat.com/support/errata/RHSA-2005-806.html