morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0234.

assistant: Bash treats any character with a value of 255 as a command separator.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0235.

assistant: Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0236.

assistant: ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0237.

assistant: Remote execution of arbitrary commands through Guestbook CGI program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0238.

assistant: php.cgi allows attackers to read any file on the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0239.

assistant: Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0240.

assistant: Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0241.

assistant: Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0242.

assistant: Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0243.

assistant: Linux cfingerd could be exploited to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0244.

assistant: Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0245.

assistant: Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0246.

assistant: HP Remote Watch allows a remote user to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0247.

assistant: Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0248.

assistant: A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0249.

assistant: Windows NT RSHSVC program allows remote users to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0250.

assistant: Denial of service in Qmail through long SMTP commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0251.

assistant: Denial of service in talk program allows remote attackers to disrupt a user's display.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0252.

assistant: Buffer overflow in listserv allows arbitrary command execution.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0253.

assistant: IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0254.

assistant: A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0255.

assistant: Buffer overflow in ircd allows arbitrary command execution.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0256.

assistant: Buffer overflow in War FTP allows remote execution of commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0257.

assistant: Nestea variation of teardrop IP fragmentation denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0258.

assistant: Bonk variation of teardrop IP fragmentation denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0259.

assistant: cfingerd lists all users on a system via search.**@target.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0260.

assistant: The jj CGI program allows command execution via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0261.

assistant: Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0262.

assistant: Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0263.

assistant: Solaris SUNWadmap can be exploited to obtain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0264.

assistant: htmlscript CGI program allows remote read access to files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0265.

assistant: ICMP redirect messages may crash or lock up a host.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0266.

assistant: The info2www CGI script allows remote file access or remote command execution.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0267.

assistant: Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0268.

assistant: MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0269.

assistant: Netscape Enterprise servers may list files through the PageServices query.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0270.

assistant: Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0271.

assistant: Progressive Networks Real Video server (pnserver) can be crashed remotely.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0272.

assistant: Denial of service in Slmail v2.5 through the POP3 port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0273.

assistant: Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0274.

assistant: Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0275.

assistant: Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0276.

assistant: mSQL v2.0.1 and below allows remote execution through a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0277.

assistant: The WorkMan program can be used to overwrite any file to get root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0278.

assistant: In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0279.

assistant: Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0280.

assistant: Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0281.

assistant: Denial of service in IIS using long URLs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0283.

assistant: The Java Web Server would allow remote users to obtain the source code for CGI programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0284.

assistant: Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0285.

assistant: Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0286.

assistant: In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0287.

assistant: Vulnerability in the Wguest CGI program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0288.

assistant: The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0289.

assistant: The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0290.

assistant: The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0291.

assistant: The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0292.

assistant: Denial of service through Winpopup using large user names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0293.

assistant: AAA authentication on Cisco systems allows attackers to execute commands without authorization.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0294.

assistant: All records in a WINS database can be deleted through SNMP for a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0295.

assistant: Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0296.

assistant: Solaris volrmmount program allows attackers to read any file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0297.

assistant: Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0298.

assistant: ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0299.

assistant: Buffer overflow in FreeBSD lpd through long DNS hostnames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0300.

assistant: nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0301.

assistant: Buffer overflow in SunOS/Solaris ps command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0302.

assistant: SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0303.

assistant: Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0304.

assistant: mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0305.

assistant: The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0306.

assistant: buffer overflow in HP xlock program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0307.

assistant: Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0308.

assistant: HP-UX gwind program allows users to modify arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0309.

assistant: HP-UX vgdisplay program gives root access to local users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0310.

assistant: SSH 1.2.25 on HP-UX allows access to new user accounts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0311.

assistant: fpkg2swpk in HP-UX allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0312.

assistant: HP ypbind allows attackers with root privileges to modify NIS data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0313.

assistant: disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0314.

assistant: ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0315.

assistant: Buffer overflow in Solaris fdformat command gives root access to local users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0316.

assistant: Buffer overflow in Linux splitvt command gives root access to local users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0317.

assistant: Buffer overflow in Linux su command gives root access to local users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0318.

assistant: Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0319.

assistant: Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0320.

assistant: SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0321.

assistant: Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0322.

assistant: The open() function in FreeBSD allows local attackers to write to arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0323.

assistant: FreeBSD mmap function allows users to modify append-only or immutable files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0324.

assistant: ppl program in HP-UX allows local users to create root files through symlinks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0325.

assistant: vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0326.

assistant: Vulnerability in HP-UX mediainit program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0327.

assistant: SGI syserr program allows local users to corrupt files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0328.

assistant: SGI permissions program allows local users to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0329.

assistant: SGI mediad program allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0330.

assistant: Linux bdash game has a buffer overflow that allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0331.

assistant: Buffer overflow in Internet Explorer 4.0(1).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0332.

assistant: Buffer overflow in NetMeeting allows denial of service and remote command execution.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0333.

assistant: HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0334.

assistant: In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0336.

assistant: Buffer overflow in mstm in HP-UX allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0337.

assistant: AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0338.

assistant: AIX Licensed Program Product performance tools allow local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0339.

assistant: Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0340.

assistant: Buffer overflow in Linux Slackware crond program allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0341.

assistant: Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0342.

assistant: Linux PAM modules allow local users to gain root access using temporary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0343.

assistant: A malicious Palace server can force a client to execute arbitrary programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0344.

assistant: NT users can gain debug-level access on a system process using the Sechole exploit.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0345.

assistant: Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0346.

assistant: CGI PHP mlog script allows an attacker to read any file on the target server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0347.

assistant: Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0348.

assistant: IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0349.

assistant: A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0350.

assistant: Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0351.

assistant: FTP PASV "Pizza Thief" denial of service and unauthorized data access.  Attackers can steal data by connecting to a port that was intended for use by a client.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0352.

assistant: ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0353.

assistant: rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0354.

assistant: Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content.  Also applies to Outlook when the client views a malicious email message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0355.

assistant: Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0356.

assistant: ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0357.

assistant: Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0358.

assistant: Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0359.

assistant: ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0360.

assistant: MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0361.

assistant: NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0362.

assistant: WS_FTP server remote denial of service through cwd command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0363.

assistant: SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0364.

assistant: Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0365.

assistant: The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0366.

assistant: In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0367.

assistant: NetBSD netstat command allows local users to access kernel memory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0368.

assistant: Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0369.

assistant: The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0370.

assistant: In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0371.

assistant: Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0372.

assistant: The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0373.

assistant: Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0374.

assistant: Debian GNU/Linux cfengine package is susceptible to a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0375.

assistant: Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0376.

assistant: Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0377.

assistant: Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0378.

assistant: InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0379.

assistant: Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0380.

assistant: SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0381.

assistant: super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0382.

assistant: The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0383.

assistant: ACC Tigris allows public access without a login.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0384.

assistant: The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0385.

assistant: The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0386.

assistant: Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0387.

assistant: A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0388.

assistant: DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0389.

assistant: Buffer overflow in the bootp server in the Debian Linux netstd package.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0390.

assistant: Buffer overflow in Dosemu Slang library in Linux.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0391.

assistant: The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0392.

assistant: Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0393.

assistant: Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0394.

assistant: DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0395.

assistant: A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0396.

assistant: A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0397.

assistant: The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0398.

assistant: In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0399.

assistant: The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0400.

assistant: Denial of service in Linux 2.2.0 running the ldd command on a core file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0401.

assistant: A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0402.

assistant: wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0403.

assistant: A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0404.

assistant: Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0405.

assistant: A buffer overflow in lsof allows local users to obtain root privilege.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0406.

assistant: Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0407.

assistant: By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0408.

assistant: Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0409.

assistant: Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0410.

assistant: The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0411.

assistant: Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0412.

assistant: In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0413.

assistant: A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0414.

assistant: In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0415.

assistant: The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0416.

assistant: Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0417.

assistant: 64 bit Solaris 7 procfs allows local users to perform a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0418.

assistant: Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0419.

assistant: When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0420.

assistant: umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0421.

assistant: During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0422.

assistant: In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0423.

assistant: Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0424.

assistant: talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0425.

assistant: talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0426.

assistant: The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0427.

assistant: Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0428.

assistant: OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0429.

assistant: The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0430.

assistant: Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0431.

assistant: Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0432.

assistant: ftp on HP-UX 11.00 allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0433.

assistant: XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0434.

assistant: XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0435.

assistant: MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0436.

assistant: Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0437.

assistant: Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0438.

assistant: Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0439.

assistant: Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0440.

assistant: The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0441.

assistant: Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0442.

assistant: Solaris ff.core allows local users to modify files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0443.

assistant: Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0444.

assistant: Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0445.

assistant: In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0446.

assistant: Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0447.

assistant: Local users can gain privileges using the debug utility in the MPE/iX operating system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0448.

assistant: IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0449.

assistant: The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0450.

assistant: In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0451.

assistant: Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0452.

assistant: A service or application has a backdoor password that was placed there by the developer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-0453.

assistant: An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).