rainbutterfly/cve_corpus huggingface dataset:
CVE-1999-1156 
BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1157 
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1158 
Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1159 
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1160 
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1161 
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1162 
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1163 
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1164 
Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1165 
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1166 
Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1167 
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1168 
install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1169 
nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1170 
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1171 
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1172 
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1173 
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1174 
ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to access the target disk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1175 
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1176 
Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1177 
Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1178 
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1179 
Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1180 
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1181 
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1182 
Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1183 
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1184 
Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1185 
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1186 
rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1187 
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1188 
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1189 
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-1999-1190 
Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1191 
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1192 
Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1193 
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1194 
chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1195 
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1196 
Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1197 
TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1198 
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1199 
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-1999-1200 
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1201 
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-1999-1202 
StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1203 
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1204 
Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1205 
nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1206 
SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1207 
Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1208 
Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1209 
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1210 
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1211 
Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1212 
Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1213 
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1214 
The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1215 
LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1216 
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1217 
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-1999-1218 
Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1219 
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1220 
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1221 
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1222 
Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1223 
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1224 
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1225 
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1226 
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1227 
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1228 
Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1229 
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1230 
Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1231 
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1232 
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1233 
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1234 
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z