stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-1999-0168 (severity: HIGH, weakness: NVD-CWE-Other)
The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export restrictions.
CVE-1999-0169 (severity: HIGH, weakness: NVD-CWE-Other)
NFS allows attackers to read and write any file on the system by specifying a false UID.
CVE-1999-0170 (severity: HIGH, weakness: NVD-CWE-Other)
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
CVE-1999-0171 (severity: LOW, weakness: NVD-CWE-Other)
Denial of service in syslog by sending it a large number of superfluous messages.
CVE-1999-0172 (severity: HIGH, weakness: NVD-CWE-Other)
FormMail CGI program allows remote execution of commands.
CVE-1999-0173 (severity: MEDIUM, weakness: NVD-CWE-Other)
FormMail CGI program can be used by web servers other than the host server that the program resides on.
CVE-1999-0174 (severity: MEDIUM, weakness: NVD-CWE-Other)
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-1999-0175 (severity: MEDIUM, weakness: NVD-CWE-Other)
The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
CVE-1999-0176 (severity: HIGH, weakness: NVD-CWE-Other)
The Webgais program allows a remote user to execute arbitrary commands.
CVE-1999-0177 (severity: HIGH, weakness: NVD-CWE-Other)
The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
CVE-1999-0178 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
CVE-1999-0179 (severity: MEDIUM, weakness: CWE-17)
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
CVE-1999-0180 (severity: HIGH, weakness: NVD-CWE-Other)
in.rshd allows users to login with a NULL username and execute commands.
CVE-1999-0181 (severity: MEDIUM, weakness: NVD-CWE-Other)
The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
CVE-1999-0182 (severity: HIGH, weakness: NVD-CWE-Other)
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
CVE-1999-0183 (severity: MEDIUM, weakness: NVD-CWE-Other)
Linux implementations of TFTP would allow access to files outside the restricted directory.
CVE-1999-0184 (severity: MEDIUM, weakness: NVD-CWE-Other)
When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
CVE-1999-0185 (severity: HIGH, weakness: NVD-CWE-Other)
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
CVE-1999-0186 (severity: HIGH, weakness: NVD-CWE-Other)
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
CVE-1999-0188 (severity: HIGH, weakness: NVD-CWE-Other)
The passwd command in Solaris can be subjected to a denial of service.
CVE-1999-0189 (severity: HIGH, weakness: NVD-CWE-Other)
Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
CVE-1999-0190 (severity: HIGH, weakness: NVD-CWE-Other)
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
CVE-1999-0191 (severity: MEDIUM, weakness: NVD-CWE-Other)
IIS newdsn.exe CGI script allows remote users to overwrite files.
CVE-1999-0192 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
CVE-1999-0193 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
CVE-1999-0194 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in in.comsat allows attackers to generate messages.
CVE-1999-0195 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
CVE-1999-0196 (severity: MEDIUM, weakness: NVD-CWE-Other)
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
CVE-1999-0197 (severity: HIGH, weakness: NVD-CWE-Other)
finger 0@host on some systems may print information on some user accounts.
CVE-1999-0198 (severity: HIGH, weakness: NVD-CWE-Other)
finger .@host on some systems may print information on some user accounts.
CVE-1999-0199 (severity: CRITICAL, weakness: CWE-252)
manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.
CVE-1999-0200 (severity: HIGH, weakness: NVD-CWE-Other)
Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
CVE-1999-0201 (severity: MEDIUM, weakness: NVD-CWE-Other)
A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
CVE-1999-0202 (severity: HIGH, weakness: NVD-CWE-Other)
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
CVE-1999-0203 (severity: HIGH, weakness: NVD-CWE-Other)
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
CVE-1999-0204 (severity: HIGH, weakness: NVD-CWE-Other)
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
CVE-1999-0205 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Sendmail 8.6.11 and 8.6.12.
CVE-1999-0206 (severity: HIGH, weakness: NVD-CWE-Other)
MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
CVE-1999-0207 (severity: HIGH, weakness: NVD-CWE-Other)
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
CVE-1999-0208 (severity: HIGH, weakness: NVD-CWE-Other)
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
CVE-1999-0209 (severity: MEDIUM, weakness: NVD-CWE-Other)
The SunView (SunTools) selection_svc facility allows remote users to read files.
CVE-1999-0210 (severity: HIGH, weakness: NVD-CWE-Other)
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
CVE-1999-0211 (severity: MEDIUM, weakness: NVD-CWE-Other)
Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
CVE-1999-0212 (severity: HIGH, weakness: NVD-CWE-Other)
Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
CVE-1999-0213 (severity: HIGH, weakness: NVD-CWE-Other)
libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
CVE-1999-0214 (severity: HIGH, weakness: NVD-CWE-Other)
Denial of service by sending forged ICMP unreachable packets.
CVE-1999-0215 (severity: MEDIUM, weakness: NVD-CWE-Other)
Routed allows attackers to append data to files.
CVE-1999-0216 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service of inetd on Linux through SYN and RST packets.
CVE-1999-0217 (severity: MEDIUM, weakness: NVD-CWE-Other)
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
CVE-1999-0218 (severity: MEDIUM, weakness: NVD-CWE-Other)
Livingston portmaster machines could be rebooted via a series of commands.
CVE-1999-0219 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command.
CVE-1999-0220 (severity: HIGH, weakness: NVD-CWE-Other)
Attackers can do a denial of service of IRC by crashing the server.
CVE-1999-0221 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service of Ascend routers through port 150 (remote administration).
CVE-1999-0222 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
CVE-1999-0223 (severity: LOW, weakness: NVD-CWE-Other)
Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
CVE-1999-0224 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Windows NT messenger service through a long username.
CVE-1999-0225 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
CVE-1999-0226 (severity: HIGH, weakness: CWE-19)
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
CVE-1999-0227 (severity: MEDIUM, weakness: CWE-264)
Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
CVE-1999-0228 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
CVE-1999-0229 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Windows NT IIS server using ..\..
CVE-1999-0230 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in Cisco 7xx routers through the telnet service.
CVE-1999-0231 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
CVE-1999-0232 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
CVE-1999-0233 (severity: HIGH, weakness: NVD-CWE-Other)
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
CVE-1999-0234 (severity: MEDIUM, weakness: NVD-CWE-Other)
Bash treats any character with a value of 255 as a command separator.
CVE-1999-0235 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
CVE-1999-0236 (severity: HIGH, weakness: NVD-CWE-Other)
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
CVE-1999-0237 (severity: HIGH, weakness: NVD-CWE-Other)
Remote execution of arbitrary commands through Guestbook CGI program.
CVE-1999-0238 (severity: HIGH, weakness: NVD-CWE-Other)
php.cgi allows attackers to read any file on the system.
CVE-1999-0239 (severity: HIGH, weakness: CWE-178)
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
CVE-1999-0240 (severity: HIGH, weakness: NVD-CWE-Other)
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
CVE-1999-0241 (severity: HIGH, weakness: NVD-CWE-Other)
Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
CVE-1999-0242 (severity: HIGH, weakness: NVD-CWE-Other)
Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.
CVE-1999-0243 (severity: HIGH, weakness: NVD-CWE-Other)
Linux cfingerd could be exploited to gain root access.
CVE-1999-0244 (severity: HIGH, weakness: NVD-CWE-Other)
Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
CVE-1999-0245 (severity: MEDIUM, weakness: NVD-CWE-Other)
Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
CVE-1999-0246 (severity: HIGH, weakness: NVD-CWE-Other)
HP Remote Watch allows a remote user to gain root access.
CVE-1999-0247 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
CVE-1999-0248 (severity: HIGH, weakness: NVD-CWE-Other)
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
CVE-1999-0249 (severity: HIGH, weakness: NVD-CWE-Other)
Windows NT RSHSVC program allows remote users to execute arbitrary commands.
CVE-1999-0250 (severity: HIGH, weakness: NVD-CWE-Other)
Denial of service in Qmail through long SMTP commands.
CVE-1999-0251 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in talk program allows remote attackers to disrupt a user's display.
CVE-1999-0252 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in listserv allows arbitrary command execution.
CVE-1999-0253 (severity: HIGH, weakness: NVD-CWE-Other)
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
CVE-1999-0254 (severity: HIGH, weakness: NVD-CWE-Other)
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
CVE-1999-0255 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in ircd allows arbitrary command execution.
CVE-1999-0256 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in War FTP allows remote execution of commands.
CVE-1999-0257 (severity: MEDIUM, weakness: NVD-CWE-Other)
Nestea variation of teardrop IP fragmentation denial of service.
CVE-1999-0258 (severity: MEDIUM, weakness: NVD-CWE-Other)
Bonk variation of teardrop IP fragmentation denial of service.
CVE-1999-0259 (severity: MEDIUM, weakness: NVD-CWE-Other)
cfingerd lists all users on a system via search.**@target.
CVE-1999-0260 (severity: HIGH, weakness: NVD-CWE-Other)
The jj CGI program allows command execution via shell metacharacters.
CVE-1999-0261 (severity: MEDIUM, weakness: NVD-CWE-Other)
Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.
CVE-1999-0262 (severity: HIGH, weakness: NVD-CWE-Other)
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
CVE-1999-0263 (severity: MEDIUM, weakness: NVD-CWE-Other)
Solaris SUNWadmap can be exploited to obtain root access.
CVE-1999-0264 (severity: MEDIUM, weakness: NVD-CWE-Other)
htmlscript CGI program allows remote read access to files.
CVE-1999-0265 (severity: MEDIUM, weakness: CWE-20)
ICMP redirect messages may crash or lock up a host.
CVE-1999-0266 (severity: HIGH, weakness: NVD-CWE-Other)
The info2www CGI script allows remote file access or remote command execution.
CVE-1999-0267 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
CVE-1999-0268 (severity: HIGH, weakness: NVD-CWE-Other)
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
CVE-1999-0269 (severity: MEDIUM, weakness: NVD-CWE-Other)
Netscape Enterprise servers may list files through the PageServices query.
CVE-1999-0270 (severity: MEDIUM, weakness: NVD-CWE-Other)
Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.
CVE-1999-0271 (severity: MEDIUM, weakness: NVD-CWE-Other)
Progressive Networks Real Video server (pnserver) can be crashed remotely.
CVE-1999-0272 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Slmail v2.5 through the POP3 port.
CVE-1999-0273 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
CVE-1999-0274 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
CVE-1999-0275 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
CVE-1999-0276 (severity: HIGH, weakness: NVD-CWE-Other)
mSQL v2.0.1 and below allows remote execution through a buffer overflow.
CVE-1999-0277 (severity: HIGH, weakness: NVD-CWE-Other)
The WorkMan program can be used to overwrite any file to get root access.
CVE-1999-0278 (severity: MEDIUM, weakness: NVD-CWE-Other)
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
CVE-1999-0279 (severity: HIGH, weakness: NVD-CWE-Other)
Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
CVE-1999-0280 (severity: HIGH, weakness: NVD-CWE-Other)
Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
CVE-1999-0281 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in IIS using long URLs.
CVE-1999-0283 (severity: HIGH, weakness: NVD-CWE-Other)
The Java Web Server would allow remote users to obtain the source code for CGI programs.
CVE-1999-0284 (severity: HIGH, weakness: CWE-120)
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
CVE-1999-0285 (severity: HIGH, weakness: NVD-CWE-Other)
Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
CVE-1999-0286 (severity: HIGH, weakness: NVD-CWE-Other)
In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
CVE-1999-0287 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerability in the Wguest CGI program.
CVE-1999-0288 (severity: MEDIUM, weakness: NVD-CWE-Other)
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
CVE-1999-0289 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
CVE-1999-0290 (severity: MEDIUM, weakness: NVD-CWE-Other)
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
CVE-1999-0291 (severity: HIGH, weakness: NVD-CWE-Other)
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
CVE-1999-0292 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service through Winpopup using large user names.
CVE-1999-0293 (severity: HIGH, weakness: NVD-CWE-Other)
AAA authentication on Cisco systems allows attackers to execute commands without authorization.
CVE-1999-0294 (severity: MEDIUM, weakness: NVD-CWE-Other)
All records in a WINS database can be deleted through SNMP for a denial of service.
CVE-1999-0295 (severity: HIGH, weakness: NVD-CWE-Other)
Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
CVE-1999-0296 (severity: HIGH, weakness: NVD-CWE-Other)
Solaris volrmmount program allows attackers to read any file.
CVE-1999-0297 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
CVE-1999-0298 (severity: HIGH, weakness: NVD-CWE-Other)
ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
CVE-1999-0299 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in FreeBSD lpd through long DNS hostnames.
CVE-1999-0300 (severity: HIGH, weakness: NVD-CWE-Other)
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
CVE-1999-0301 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in SunOS/Solaris ps command.
CVE-1999-0302 (severity: HIGH, weakness: NVD-CWE-Other)
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
CVE-1999-0303 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
CVE-1999-0304 (severity: HIGH, weakness: NVD-CWE-Other)
mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
CVE-1999-0305 (severity: MEDIUM, weakness: NVD-CWE-Other)
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
CVE-1999-0306 (severity: HIGH, weakness: NVD-CWE-Other)
buffer overflow in HP xlock program.
CVE-1999-0307 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
CVE-1999-0308 (severity: MEDIUM, weakness: NVD-CWE-Other)
HP-UX gwind program allows users to modify arbitrary files.
CVE-1999-0309 (severity: HIGH, weakness: NVD-CWE-Other)
HP-UX vgdisplay program gives root access to local users.
CVE-1999-0310 (severity: HIGH, weakness: NVD-CWE-Other)
SSH 1.2.25 on HP-UX allows access to new user accounts.
CVE-1999-0311 (severity: HIGH, weakness: NVD-CWE-Other)
fpkg2swpk in HP-UX allows local users to gain root access.
CVE-1999-0312 (severity: MEDIUM, weakness: NVD-CWE-Other)
HP ypbind allows attackers with root privileges to modify NIS data.
CVE-1999-0313 (severity: HIGH, weakness: NVD-CWE-Other)
disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
CVE-1999-0314 (severity: HIGH, weakness: NVD-CWE-Other)
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
CVE-1999-0315 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Solaris fdformat command gives root access to local users.
CVE-1999-0316 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Linux splitvt command gives root access to local users.
CVE-1999-0317 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Linux su command gives root access to local users.
CVE-1999-0318 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
CVE-1999-0319 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
CVE-1999-0320 (severity: HIGH, weakness: NVD-CWE-Other)
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
CVE-1999-0321 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
CVE-1999-0322 (severity: LOW, weakness: NVD-CWE-Other)
The open() function in FreeBSD allows local attackers to write to arbitrary files.
CVE-1999-0323 (severity: HIGH, weakness: NVD-CWE-Other)
FreeBSD mmap function allows users to modify append-only or immutable files.
CVE-1999-0324 (severity: HIGH, weakness: NVD-CWE-Other)
ppl program in HP-UX allows local users to create root files through symlinks.
CVE-1999-0325 (severity: HIGH, weakness: NVD-CWE-Other)
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
CVE-1999-0326 (severity: MEDIUM, weakness: NVD-CWE-Other)
Vulnerability in HP-UX mediainit program.
CVE-1999-0327 (severity: LOW, weakness: NVD-CWE-Other)
SGI syserr program allows local users to corrupt files.
CVE-1999-0328 (severity: HIGH, weakness: NVD-CWE-Other)
SGI permissions program allows local users to gain root privileges.
CVE-1999-0329 (severity: HIGH, weakness: NVD-CWE-Other)
SGI mediad program allows local users to gain root access.
CVE-1999-0330 (severity: HIGH, weakness: NVD-CWE-Other)
Linux bdash game has a buffer overflow that allows local users to gain root access.