rainbutterfly/cve_corpus huggingface dataset:
CVE-1999-0996 
Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-1999-0997 
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-1999-0998 
Cisco Cache Engine allows an attacker to replace content in the cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-1999-0999 
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-18T05:00:00.000Z
CVE-1999-1000 
The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-1999-1001 
Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-18T05:00:00.000Z
CVE-1999-1002 
Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-1003 
War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-1004 
Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-1999-1005 
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-1999-1006 
Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-1007 
Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-1999-1008 
xsoldier program allows local users to gain root access via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-18T04:00:00.000Z
CVE-1999-1009 
The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-1010 
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-25T04:00:00.000Z
CVE-1999-1011 
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-1999-1012 
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1013 
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1014 
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1015 
Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1016 
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1017 
Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1018 
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1019 
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1020 
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1021 
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1022 
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1023 
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1024 
ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1025 
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1026 
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1027 
Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1028 
Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1029 
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1030 
counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1031 
counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1032 
Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1033 
Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1034 
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1035 
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1036 
COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1037 
rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1038 
Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1039 
Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1040 
Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1041 
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1042 
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1043 
Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1044 
Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1045 
pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1046 
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1047 
When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1048 
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1049 
ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1050 
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1051 
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1052 
Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1053 
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1054 
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1055 
Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1057 
VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1058 
Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1059 
Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1060 
Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1061 
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1062 
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1063 
CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1064 
Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1065 
Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1066 
Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1067 
SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1068 
Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1069 
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1070 
Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1071 
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1072 
Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1073 
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1074 
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1075 
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1076 
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z