morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1434.

assistant: login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1435.

assistant: Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1436.

assistant: Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1437.

assistant: ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1438.

assistant: Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1439.

assistant: gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1440.

assistant: Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1441.

assistant: Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1442.

assistant: Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1443.

assistant: Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CTRL><ALT><DEL> and kill the process using the task manager, (2) booting the system from a separate disk, or (3) interrupting certain processes that execute while the system is booting.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1444.

assistant: genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1445.

assistant: Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1446.

assistant: Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1447.

assistant: Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1448.

assistant: Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are 100 years after the current date, which causes a segmentation fault.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1449.

assistant: SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1450.

assistant: Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1451.

assistant: The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1452.

assistant: GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1453.

assistant: Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1454.

assistant: Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1455.

assistant: RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1456.

assistant: thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1457.

assistant: Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1458.

assistant: Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1459.

assistant: BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1460.

assistant: BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1461.

assistant: inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1462.

assistant: Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1463.

assistant: Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1464.

assistant: Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1465.

assistant: Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1466.

assistant: Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1467.

assistant: Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1468.

assistant: rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1469.

assistant: Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1470.

assistant: Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1471.

assistant: Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1472.

assistant: Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1473.

assistant: When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1474.

assistant: PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1475.

assistant: ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1476.

assistant: A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1477.

assistant: Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1478.

assistant: The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1479.

assistant: The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1480.

assistant: (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1481.

assistant: Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1482.

assistant: SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1483.

assistant: Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1484.

assistant: Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1485.

assistant: nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1486.

assistant: sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1487.

assistant: Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1488.

assistant: sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1489.

assistant: Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1490.

assistant: xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1491.

assistant: abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1492.

assistant: Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1493.

assistant: Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk().
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1494.

assistant: colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1495.

assistant: xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1496.

assistant: Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1497.

assistant: Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1498.

assistant: Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1499.

assistant: named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1500.

assistant: Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1501.

assistant: (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1502.

assistant: Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1503.

assistant: Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1504.

assistant: Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1505.

assistant: Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1506.

assistant: Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1507.

assistant: Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1508.

assistant: Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1509.

assistant: Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1510.

assistant: Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1511.

assistant: Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1512.

assistant: The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1513.

assistant: Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1514.

assistant: Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1515.

assistant: A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1516.

assistant: A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1517.

assistant: runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1518.

assistant: Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1519.

assistant: Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1520.

assistant: A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1521.

assistant: Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1522.

assistant: Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1523.

assistant: Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1524.

assistant: FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1525.

assistant: Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1526.

assistant: Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1527.

assistant: Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1528.

assistant: ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1529.

assistant: A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1530.

assistant: cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1531.

assistant: Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1532.

assistant: Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1533.

assistant: Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1534.

assistant: Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1535.

assistant: Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1536.

assistant: .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1537.

assistant: IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1538.

assistant: When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1539.

assistant: Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1540.

assistant: shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1541.

assistant: shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1542.

assistant: RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1543.

assistant: MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1544.

assistant: Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1545.

assistant: Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1546.

assistant: netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1547.

assistant: Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1548.

assistant: Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1549.

assistant: Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1550.

assistant: bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1551.

assistant: Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1552.

assistant: dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1553.

assistant: Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1554.

assistant: /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1555.

assistant: Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1556.

assistant: Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1557.

assistant: Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1558.

assistant: Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1559.

assistant: Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1560.

assistant: Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1561.

assistant: Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1562.

assistant: gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1563.

assistant: Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1564.

assistant: FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1565.

assistant: Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1566.

assistant: Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1567.

assistant: Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1568.

assistant: Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1569.

assistant: Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1570.

assistant: Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1571.

assistant: Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1572.

assistant: cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1573.

assistant: Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1574.

assistant: Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1575.

assistant: The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1576.

assistant: Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1577.

assistant: Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1578.

assistant: Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1579.

assistant: The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1580.

assistant: SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1581.

assistant: Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1582.

assistant: By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1583.

assistant: Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1584.

assistant: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1585.

assistant: The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1586.

assistant: loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1587.

assistant: /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1588.

assistant: Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1589.

assistant: Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1590.

assistant: Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1591.

assistant: Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-1999-1592.

assistant: Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.  NOTE: this might overlap CVE-1999-0129.