Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-1999-1060 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:52.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/340 - http://marc.info/?l=bugtraq&m=91937090211855&w=2
CVE ID: CVE-1999-1061 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602248518480&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1876
CVE ID: CVE-1999-1062 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602248518480&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1876
CVE ID: CVE-1999-1063 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/304 - http://www.securityfocus.com/archive/1/14019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2251
CVE ID: CVE-1999-1064 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93555317429630&w=2 - http://www.securityfocus.com/bid/596 - http://marc.info/?l=bugtraq&m=93582070508957&w=2
CVE ID: CVE-1999-1065 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94175465525422&w=2
CVE ID: CVE-1999-1066 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94589559631535&w=2
CVE ID: CVE-1999-1067 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:52.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420919&w=2
CVE ID: CVE-1999-1068 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602661419366&w=2
CVE ID: CVE-1999-1069 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1620 - http://www.securityfocus.com/archive/1/7943 - http://www.securityfocus.com/bid/2126
CVE ID: CVE-1999-1070 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:52.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/10021
CVE ID: CVE-1999-1071 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1417 - http://marc.info/?l=bugtraq&m=91248445931140&w=2
CVE ID: CVE-1999-1072 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91248445931140&w=2
CVE ID: CVE-1999-1073 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=91248445931140&w=2
CVE ID: CVE-1999-1074 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/9138 - http://www.webmin.com/webmin/changes.html - http://www.securityfocus.com/bid/98
CVE ID: CVE-1999-1075 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=89025820612530&w=2
CVE ID: CVE-1999-1076 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94096348604173&w=2 - http://www.securityfocus.com/bid/745
CVE ID: CVE-1999-1077 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/756 - http://marc.info/?l=bugtraq&m=94149318124548&w=2
CVE ID: CVE-1999-1078 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/547 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P
CVE ID: CVE-1999-1079 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36 - http://www.securityfocus.com/bid/439 - http://marc.info/?l=bugtraq&m=93587956513233&w=2 - http://marc.info/?l=bugtraq&m=92601792420088&w=2
CVE ID: CVE-1999-1080 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-01T17:02:53.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=92633694100270&w=2 - http://www.securityfocus.com/bid
CVE Program Container: References: - http://marc.info/?l=bugtraq&m=92633694100270&w=2 - http://www.securityfocus.com/bid/250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8350 - http://marc.info/?l=bugtraq&m=93971288323395&w=2
CVE ID: CVE-1999-1081 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.w3.org/Security/Faq/wwwsf8.html#Q87 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2054 - http://www.roxanne.org/faqs/www-secure/wwwsf4.html#Q35
CVE ID: CVE-1999-1082 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=93941794201059&w=2 - http://www.securityfocus.com/bid/699
CVE ID: CVE-1999-1083 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=95730430727064&w=2 - http://www.securityfocus.com/bid/699
CVE ID: CVE-1999-1084 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=90222453431604&w=2 - http://www.securityfocus.com/bid/1044 - http://www.ciac.org/ciac/bulletins/k-029.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-008 - http://support.microsoft.com/support/kb/artic
ocs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-008 - http://support.microsoft.com/support/kb/articles/q103/8/61.asp
CVE ID: CVE-1999-1085 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=90221104525878&w=2 - http://www.iss.net/security_center/static/1126.php - http://www.kb
- http://marc.info/?l=bugtraq&m=90221104525878&w=2 - http://www.iss.net/security_center/static/1126.php - http://www.kb.cert.org/vuls/id/13877 - http://marc.info/?l=bugtraq&m=90221103125884&w=2
CVE ID: CVE-1999-1086 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/528 - http://marc.info/?l=bugtraq&m=93214475111651&w=2
CVE ID: CVE-1999-1087 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server. Additional Analyst Notes: - CVE Program Container: References: - http://www.microsoft.com/Windows/Ie/security/dotless.asp - http://www.osvdb.org/7828 - https://docs.microsoft.com/en-us/secu
://www.microsoft.com/Windows/Ie/security/dotless.asp - http://www.osvdb.org/7828 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016 - http://support.microsoft.com/support/kb/articles/q168/6/17.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/2209
CVE ID: CVE-1999-1088 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/h-21.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/2012
CVE ID: CVE-1999-1089 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420285&w=2 - http://ciac.llnl.gov/ciac/bulletins/h-21.shtml - http://ciac.llnl.gov/ciac/bulletins/h-16.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/2008
CVE ID: CVE-1999-1090 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1844 - http://www.cert.org/advisories/CA-1991-15.html
CVE ID: CVE-1999-1091 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167419835&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/431 - http://marc.info/?l=bugtraq&m=87602167419839&w=2 - http://marc.info/?l=bugtraq&m=87602167420726&w=2
CVE ID: CVE-1999-1092 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=94286179032648&w=2
CVE ID: CVE-1999-1093 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/support/kb/articles/q191/2/00.asp - https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011 - http://www.iss.net/security_center/static/1276.php
CVE ID: CVE-1999-1094 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/917 - http://marc.info/?l=bugtraq&m=88480839506155&w=2 - http://support.microsoft.com/support/kb/articles/q176/6/97.asp
CVE ID: CVE-1999-1095 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87619953510834&w=2 - http://marc.info/?l=bugtraq&m=88886870129518&w=2 - http://marc.info/?l=bugtraq&m=88890116304676&w=2
CVE ID: CVE-1999-1096 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=90221101925954&w=2 - http://marc.info/?l=bugtraq&m=90221101925959&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1644
CVE ID: CVE-1999-1097 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=92586457816446&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2187
CVE ID: CVE-1999-1098 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/516.php - http://www.osvdb.org/4881 - http://www.ciac.org/ciac/bulletins/f-12.shtml - http://www.cert.org/advisories/CA-1995-03.html
CVE ID: CVE-1999-1099 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=87602167420184&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65
CVE ID: CVE-1999-1100 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-01T17:02:53.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://ciac.llnl.gov/ciac/bulletins/i-056.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/1579 - http://www.cisco.com/warp/public/770/pixkey-pub.shtml
CVE ID: CVE-1999-1101 State: PUBLISHED Published: 2001-09-12T04:00:00 Last Updated: 2024-08-01T17:02:53.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/12618