rainbutterfly/cve_corpus huggingface dataset:
CVE-1999-0548 
A superfluous NFS server is running, but it is not importing or exporting any file systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0549 
Windows NT automatically logs in an administrator upon rebooting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0550 
A router's routing tables can be obtained from arbitrary hosts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0551 
HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 1999-09-29T04:00:00.000Z
CVE-1999-0554 
NFS exports system-critical data to the world, e.g. / or a password file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0555 
A Unix account with a name other than "root" has UID 0, i.e. root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0556 
Two or more Unix accounts have the same UID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0559 
A system-critical Unix file or directory has inappropriate permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0560 
A system-critical Windows NT file or directory has inappropriate permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0561 
IIS has the #exec function enabled for Server Side Include (SSI) files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0562 
The registry in Windows NT can be accessed remotely by users who are not administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0564 
An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0565 
A Sendmail alias allows input to be piped to a program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0566 
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 1999-09-29T04:00:00.000Z
CVE-1999-0568 
rpc.admind in Solaris is not running in a secure mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0569 
A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0570 
Windows NT is not using a password filter utility, e.g. PASSFILT.DLL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0571 
A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0572 
.reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0575 
A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0576 
A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0577 
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0578 
A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0579 
A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0580 
The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0581 
The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0582 
A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0583 
There is a one-way or two-way trust relationship between Windows NT domains.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0584 
A Windows NT file system is not NTFS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0585 
A Windows NT administrator account has the default name of Administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0586 
A network service is running on a nonstandard port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0587 
A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0588 
A filter in a router or firewall allows unusual fragmented packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0589 
A system-critical Windows NT registry key has inappropriate permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0590 
A system does not present an appropriate legal message or warning to a user who is accessing it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0591 
An event log in Windows NT has inappropriate access permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0592 
The Logon box of a Windows NT system displays the name of the last user who logged in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0593 
The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0594 
A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0595 
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0596 
A Windows NT log file has an inappropriate maximum size or retention period.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0597 
A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0598 
A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0599 
A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0600 
A network intrusion detection system (IDS) does not verify the checksum on a packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0601 
A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0602 
A network intrusion detection system (IDS) does not properly reassemble fragmented packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0603 
In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0604 
An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0605 
An incorrect configuration of the Order Form 1.0 shopping cart  CGI program could disclose private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0606 
An incorrect configuration of the EZMall 2000 shopping cart  CGI program "mall2000.cgi" could disclose private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0607 
quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0608 
An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-1999-0609 
An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0610 
An incorrect configuration of the Webcart CGI program could disclose private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0611 
A system-critical Windows NT registry key has an inappropriate value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0612 
A version of finger is running that exposes valid user information to any entity on the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 1999-09-29T04:00:00.000Z
CVE-1999-0613 
The rpc.sprayd service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0618 
The rexec service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0624 
The rstat/rstatd service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0625 
The rpc.rquotad service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0626 
A version of rusers is running that exposes valid user information to any entity on the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 1999-09-29T04:00:00.000Z
CVE-1999-0627 
The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 1999-09-29T04:00:00.000Z
CVE-1999-0628 
The rwho/rwhod service is running, which exposes machine status and user information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 1999-09-29T04:00:00.000Z
CVE-1999-0629 
The ident/identd service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0630 
The NT Alerter and Messenger services are running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0632 
The RPC portmapper service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0635 
The echo service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0636 
The discard service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0637 
The systat service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0638 
The daytime service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0639 
The chargen service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0640 
The Gopher service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0641 
The UUCP service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0650 
The netstat service is running, which provides sensitive information to remote attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0651 
The rsh/rlogin service is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0653 
A component service related to NIS+ is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0654 
The OS/2 or POSIX subsystem in NT is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0656 
The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0657 
WinGate is being used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0661 
A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0662 
A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0663 
A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0664 
An application-critical Windows NT registry key has inappropriate permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0665 
An application-critical Windows NT registry key has an inappropriate value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0667 
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0668 
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-06-02T04:00:00.000Z
CVE-1999-0669 
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0670 
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0671 
Buffer overflow in ToxSoft NextFTP client through CWD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-1999-0672 
Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-1999-0673 
Buffer overflow in ALMail32 POP3 client via From: or To: headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0674 
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0675 
Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-1999-0676 
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-04-18T04:00:00.000Z
CVE-1999-0677 
The WebRamp web administration utility has a default password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0678 
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-03-22T05:00:00.000Z
CVE-1999-0679 
Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-10-13T04:00:00.000Z
CVE-1999-0680 
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0681 
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-05-07T04:00:00.000Z
CVE-1999-0682 
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0683 
Denial of service in Gauntlet Firewall via a malformed ICMP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-18T05:00:00.000Z
CVE-1999-0684 
Denial of service in Sendmail 8.8.6 in HPUX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-02-04T05:00:00.000Z
CVE-1999-0685 
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0686 
Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0687 
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0688 
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0689 
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z
CVE-1999-0690 
HP CDE program includes the current directory in root's PATH variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2000-01-04T05:00:00.000Z