rainbutterfly/cve_corpus huggingface dataset:
CVE-1999-1317 
Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1318 
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1319 
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1320 
Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1321 
Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1322 
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1323 
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1324 
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1325 
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1326 
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1327 
Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1328 
linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1329 
Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1330 
The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1331 
netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1332 
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1333 
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1334 
Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1335 
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1336 
3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1337 
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-1999-1338 
Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1339 
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1340 
Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1341 
Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1342 
ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1343 
HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1344 
Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1345 
Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1346 
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1347 
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1348 
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1349 
NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag set, to port 111.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1350 
ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1351 
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1352 
mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1353 
Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1354 
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1355 
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1356 
Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (LegalNoticeCaption) and text (LegalNoticeText) in Windows NT, which could produce a legal notice that is in violation of the security policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1357 
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1358 
When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1359 
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1360 
Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1361 
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1362 
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-06-25T04:00:00.000Z
CVE-1999-1363 
Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1364 
Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1365 
Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-1999-1366 
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1367 
Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1368 
AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1369 
Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1370 
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1371 
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1372 
Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1373 
FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via nmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1374 
perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1375 
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1376 
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1377 
Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1378 
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1379 
DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1380 
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1381 
Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1382 
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1383 
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1384 
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1385 
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1386 
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-03-09T05:00:00.000Z
CVE-1999-1387 
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1388 
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1389 
US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1390 
suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z
CVE-1999-1391 
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2001-09-12T04:00:00.000Z