Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-1999-1274 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: iPass RoamServer 3.1 creates temporary files with world-writable permissions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1625 - http://www.securityfocus.com/archive/1/8307
CVE ID: CVE-1999-1275 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1619 - http://www.securityfocus.com/archive/1/9478
CVE ID: CVE-1999-1276 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:01.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/1998/19981207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1609
CVE ID: CVE-1999-1277 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=91487886514546&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1565
CVE ID: CVE-1999-1278 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91471400632145&w=2 - http://marc.info/?l=bugtraq&m=91470326629357&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1549
CVE ID: CVE-1999-1279 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:01.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1548 - http://support.microsoft.com/support/kb/articles/q138/0/01.asp
CVE ID: CVE-1999-1280 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/11512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1547
CVE ID: CVE-1999-1281 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:03.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/11720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1544
CVE ID: CVE-1999-1282 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1542 - http://www.securityfocus.com/archive/1/11543
CVE ID: CVE-1999-1283 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/10320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1541
CVE ID: CVE-1999-1284 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:01.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.dynamsol.com/puppet/text/new.txt - http://marc.info/?l=bugtraq&m=91063407332594&w=2 - http://www.securityfocus.com/archive/1/11131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1540
CVE ID: CVE-1999-1285 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91495921611500&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1472
CVE ID: CVE-1999-1286 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1433 - http://www.osvdb.org/8560 - ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX - http://marc.info/?l=bugtraq&m=87602167420927&w=2 - http://www.securityfocus.com/bid/330
CVE ID: CVE-1999-1287 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.statslab.cam.ac.uk/~sret1/analog/security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/1410
CVE ID: CVE-1999-1288 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1406 - http://www.securityfocus.com/archive/1/11397 - http://www.caldera.com/support/security/advisories/SA-1998.35.txt
CVE ID: CVE-1999-1289 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/11233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1398
CVE ID: CVE-1999-1290 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91127951426494&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1397 - http://www.ayukov.com/nftp/history.html
CVE ID: CVE-1999-1291 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1383 - http://www.securityfocus.com/archive/1/10789
CVE ID: CVE-1999-1292 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/alerts/advise7.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/1366
CVE ID: CVE-1999-1293 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=88413292830649&w=2 - http://www.apache.org/info/security_bulletin_1.2.5.html
CVE ID: CVE-1999-1294 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:01.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/support/kb/articles/q146/6/04.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/562
CVE ID: CVE-1999-1295 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/vendor_bulletins/VB-96.16.transarc - https://exchange.xforce.ibmcloud.com/vulnerabilities/7154
CVE ID: CVE-1999-1296 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420878&w=2
CVE ID: CVE-1999-1297 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100452&zone_32=10045%2A%20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7482
CVE ID: CVE-1999-1298 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:01.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-97:03.sysinstall.asc - http://www.osvdb.org/6087 - http://www.iss.net/security_center/static/7537.php
CVE ID: CVE-1999-1299 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420509&w=2
CVE ID: CVE-1999-1300 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/b-31.shtml
CVE ID: CVE-1999-1301 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:01.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.asc - http://www.iss.net/security_center/static/7540.php - http://ciac.llnl.gov/ciac/bulletins/g-31.shtml
CVE ID: CVE-1999-1302 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml - http://www.osvdb.org/8797 - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/7586 - http://ftp.cerias.purdue.edu/pub/advisories/cert/cert_bulletins/VB-94:01.sco
CVE ID: CVE-1999-1303 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml
CVE ID: CVE-1999-1304 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml
CVE ID: CVE-1999-1305 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:01.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml - http://ciac.llnl.gov/ciac/bulletins/f-05.shtml
CVE ID: CVE-1999-1306 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-1992-20.html
CVE ID: CVE-1999-1307 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/f-06.shtml - http://www.dataguard.no/bugtraq/1994_4/0676.html
CVE ID: CVE-1999-1308 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7594.php - http://ciac.llnl.gov/ciac/bulletins/h-91.shtml - http://ciac.llnl.gov/ciac/bulletins/h-09.shtml - http://ciac.llnl.gov/ciac/bulletins/h-91.shtml
CVE ID: CVE-1999-1309 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:03.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-94.12.sendmail.vulnerabilities - http://www.dataguard.no/bugtraq/1994_1/0042.html - http://www.dataguard.no/bugtraq/1994_1/0048.html - http://www.dataguard.no/bugtraq/1994_1/0078.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7155 - http://www.dataguard.no/bugtraq/1994_1/0043.html - http://www.datagua
xchange.xforce.ibmcloud.com/vulnerabilities/7155 - http://www.dataguard.no/bugtraq/1994_1/0043.html - http://www.dataguard.no/bugtraq/1994_1/0040.html
CVE ID: CVE-1999-1310 State: REJECTED Published: 2001-09-12T04:00:00 Last Updated: 2005-02-04T00:00:00 Description: No description available.
CVE ID: CVE-1999-1311 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/h-21.shtml - http://ciac.llnl.gov/ciac/bulletins/h-21.shtml
CVE ID: CVE-1999-1312 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-1993-05.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7142
CVE ID: CVE-1999-1313 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:11.man.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/7348 - http://ciac.llnl.gov/ciac/bulletins/g-24.shtml
CVE ID: CVE-1999-1314 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:10.mount_union.asc - http://www.iss.net/security_center/static/7429.php - http://ciac.llnl.gov/ciac/bulletins/g-24.shtml
CVE ID: CVE-1999-1315 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:11:02.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/f-04.shtml
CVE ID: CVE-1999-1316 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:01.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/support/kb/articles/Q247/9/75.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/7391
CVE ID: CVE-1999-1317 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:03.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/support/kb/articles/q222/1/59.asp - http://marc.info/?l=ntbugtraq&m=92162979530341&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7398 - http://marc.info/?l=ntbugtraq&m=92127046701349&w=2
CVE ID: CVE-1999-1318 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:11:02.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7480.php - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20