morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0454.

assistant: A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0455.

assistant: The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0457.

assistant: Linux ftpwatch program allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0458.

assistant: L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0459.

assistant: Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0460.

assistant: Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0461.

assistant: Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0462.

assistant: suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0463.

assistant: Remote attackers can perform a denial of service using IRIX fcagent.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0464.

assistant: Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0465.

assistant: Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0466.

assistant: The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0467.

assistant: The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0468.

assistant: Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0469.

assistant: Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0470.

assistant: A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0471.

assistant: The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0472.

assistant: The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0473.

assistant: The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0474.

assistant: The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0475.

assistant: A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0476.

assistant: A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0477.

assistant: The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0478.

assistant: Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0479.

assistant: Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0480.

assistant: Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0481.

assistant: Denial of service in "poll" in OpenBSD.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0482.

assistant: OpenBSD kernel crash through TSS handling, as caused by the crashme program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0483.

assistant: OpenBSD crash using nlink value in FFS and EXT2FS filesystems.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0484.

assistant: Buffer overflow in OpenBSD ping.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0485.

assistant: Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0486.

assistant: Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0487.

assistant: The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0488.

assistant: Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0489.

assistant: MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0490.

assistant: MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0491.

assistant: The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0492.

assistant: The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0493.

assistant: rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0494.

assistant: Denial of service in WinGate proxy through a buffer overflow in POP3.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0495.

assistant: A remote attacker can gain access to a file system using ..  (dot dot) when accessing SMB shares.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0496.

assistant: A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0497.

assistant: Anonymous FTP is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0498.

assistant: TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0499.

assistant: NETBIOS share information may be published through SNMP registry keys in NT.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0501.

assistant: A Unix account has a guessable password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0502.

assistant: A Unix account has a default, null, blank, or missing password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0503.

assistant: A Windows NT local user or administrator account has a guessable password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0504.

assistant: A Windows NT local user or administrator account has a default, null, blank, or missing password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0505.

assistant: A Windows NT domain user or administrator account has a guessable password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0506.

assistant: A Windows NT domain user or administrator account has a default, null, blank, or missing password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0507.

assistant: An account on a router, firewall, or other network device has a guessable password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0508.

assistant: An account on a router, firewall, or other network device has a default, null, blank, or missing password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0509.

assistant: Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0510.

assistant: A router or firewall allows source routed packets from arbitrary hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0511.

assistant: IP forwarding is enabled on a machine which is not a router or firewall.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0512.

assistant: A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0513.

assistant: ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0514.

assistant: UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0515.

assistant: An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0516.

assistant: An SNMP community name is guessable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0517.

assistant: An SNMP community name is the default (e.g. public), null, or missing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0518.

assistant: A NETBIOS/SMB share password is guessable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0519.

assistant: A NETBIOS/SMB share password is the default, null, or missing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0520.

assistant: A system-critical NETBIOS/SMB share has inappropriate access control.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0521.

assistant: An NIS domain name is easily guessable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0522.

assistant: The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0523.

assistant: ICMP echo (ping) is allowed from arbitrary hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0524.

assistant: ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0525.

assistant: IP traceroute is allowed from arbitrary hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0526.

assistant: An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0527.

assistant: The permissions for system-critical data in an anonymous FTP account are inappropriate.  For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0528.

assistant: A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0529.

assistant: A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0530.

assistant: A system is operating in "promiscuous" mode which allows it to perform packet sniffing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0532.

assistant: A DNS server allows zone transfers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0533.

assistant: A DNS server allows inverse queries.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0534.

assistant: A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0535.

assistant: A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0537.

assistant: A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0539.

assistant: A trust relationship exists between two Unix hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0541.

assistant: A password for accessing a WWW URL is guessable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0546.

assistant: The Windows NT guest account is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0547.

assistant: An SSH server allows authentication through the .rhosts file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0548.

assistant: A superfluous NFS server is running, but it is not importing or exporting any file systems.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0549.

assistant: Windows NT automatically logs in an administrator upon rebooting.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0550.

assistant: A router's routing tables can be obtained from arbitrary hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0551.

assistant: HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0554.

assistant: NFS exports system-critical data to the world, e.g. / or a password file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0555.

assistant: A Unix account with a name other than "root" has UID 0, i.e. root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0556.

assistant: Two or more Unix accounts have the same UID.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0559.

assistant: A system-critical Unix file or directory has inappropriate permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0560.

assistant: A system-critical Windows NT file or directory has inappropriate permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0561.

assistant: IIS has the #exec function enabled for Server Side Include (SSI) files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0562.

assistant: The registry in Windows NT can be accessed remotely by users who are not administrators.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0564.

assistant: An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0565.

assistant: A Sendmail alias allows input to be piped to a program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0566.

assistant: An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0568.

assistant: rpc.admind in Solaris is not running in a secure mode.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0569.

assistant: A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0570.

assistant: Windows NT is not using a password filter utility, e.g. PASSFILT.DLL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0571.

assistant: A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0572.

assistant: .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0575.

assistant: A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0576.

assistant: A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0577.

assistant: A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0578.

assistant: A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0579.

assistant: A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0580.

assistant: The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0581.

assistant: The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0582.

assistant: A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0583.

assistant: There is a one-way or two-way trust relationship between Windows NT domains.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0584.

assistant: A Windows NT file system is not NTFS.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0585.

assistant: A Windows NT administrator account has the default name of Administrator.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0586.

assistant: A network service is running on a nonstandard port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0587.

assistant: A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0588.

assistant: A filter in a router or firewall allows unusual fragmented packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0589.

assistant: A system-critical Windows NT registry key has inappropriate permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0590.

assistant: A system does not present an appropriate legal message or warning to a user who is accessing it.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0591.

assistant: An event log in Windows NT has inappropriate access permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0592.

assistant: The Logon box of a Windows NT system displays the name of the last user who logged in.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0593.

assistant: The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0594.

assistant: A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0595.

assistant: A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0596.

assistant: A Windows NT log file has an inappropriate maximum size or retention period.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0597.

assistant: A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0598.

assistant: A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0599.

assistant: A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0600.

assistant: A network intrusion detection system (IDS) does not verify the checksum on a packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0601.

assistant: A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0602.

assistant: A network intrusion detection system (IDS) does not properly reassemble fragmented packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0603.

assistant: In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0604.

assistant: An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0605.

assistant: An incorrect configuration of the Order Form 1.0 shopping cart  CGI program could disclose private information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0606.

assistant: An incorrect configuration of the EZMall 2000 shopping cart  CGI program "mall2000.cgi" could disclose private information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0607.

assistant: quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0608.

assistant: An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0609.

assistant: An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0610.

assistant: An incorrect configuration of the Webcart CGI program could disclose private information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0611.

assistant: A system-critical Windows NT registry key has an inappropriate value.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0612.

assistant: A version of finger is running that exposes valid user information to any entity on the network.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0613.

assistant: The rpc.sprayd service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0618.

assistant: The rexec service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0624.

assistant: The rstat/rstatd service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0625.

assistant: The rpc.rquotad service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0626.

assistant: A version of rusers is running that exposes valid user information to any entity on the network.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0627.

assistant: The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0628.

assistant: The rwho/rwhod service is running, which exposes machine status and user information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0629.

assistant: The ident/identd service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0630.

assistant: The NT Alerter and Messenger services are running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0632.

assistant: The RPC portmapper service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0635.

assistant: The echo service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0636.

assistant: The discard service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0637.

assistant: The systat service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0638.

assistant: The daytime service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0639.

assistant: The chargen service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0640.

assistant: The Gopher service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0641.

assistant: The UUCP service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0650.

assistant: The netstat service is running, which provides sensitive information to remote attackers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0651.

assistant: The rsh/rlogin service is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0653.

assistant: A component service related to NIS+ is running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0654.

assistant: The OS/2 or POSIX subsystem in NT is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0656.

assistant: The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0657.

assistant: WinGate is being used.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0661.

assistant: A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0662.

assistant: A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0663.

assistant: A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0664.

assistant: An application-critical Windows NT registry key has inappropriate permissions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0665.

assistant: An application-critical Windows NT registry key has an inappropriate value.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0667.

assistant: The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0668.

assistant: The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0669.

assistant: The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0670.

assistant: Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0671.

assistant: Buffer overflow in ToxSoft NextFTP client through CWD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0672.

assistant: Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0673.

assistant: Buffer overflow in ALMail32 POP3 client via From: or To: headers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0674.

assistant: The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0675.

assistant: Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0676.

assistant: sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0677.

assistant: The WebRamp web administration utility has a default password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0678.

assistant: A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0679.

assistant: Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0680.

assistant: Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0681.

assistant: Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0682.

assistant: Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0683.

assistant: Denial of service in Gauntlet Firewall via a malformed ICMP packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0684.

assistant: Denial of service in Sendmail 8.8.6 in HPUX.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0685.

assistant: Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0686.

assistant: Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0687.

assistant: The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0688.

assistant: Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0689.

assistant: The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0690.

assistant: HP CDE program includes the current directory in root's PATH variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0691.

assistant: Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0692.

assistant: The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0693.

assistant: Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0694.

assistant: Denial of service in AIX ptrace system call allows local users to crash the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0695.

assistant: The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0696.

assistant: Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0697.

assistant: SCO Doctor allows local users to gain root privileges through a Tools option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0698.

assistant: Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0699.

assistant: The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0700.

assistant: Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0701.

assistant: After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0702.

assistant: Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0703.

assistant: OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0704.

assistant: Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0705.

assistant: Buffer overflow in INN inews program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0706.

assistant: Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0707.

assistant: The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0708.

assistant: Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0710.

assistant: The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0711.

assistant: The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0712.

assistant: A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0713.

assistant: The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0714.

assistant: Vulnerability in Compaq Tru64 UNIX edauth command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0715.

assistant: Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0716.

assistant: Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0717.

assistant: A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0718.

assistant: IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0719.

assistant: The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0720.

assistant: The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.