stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-1999-0331 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Internet Explorer 4.0(1).
CVE-1999-0332 (severity: HIGH, weakness: CWE-119)
Buffer overflow in NetMeeting allows denial of service and remote command execution.
CVE-1999-0333 (severity: HIGH, weakness: NVD-CWE-Other)
HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
CVE-1999-0334 (severity: HIGH, weakness: NVD-CWE-Other)
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
CVE-1999-0336 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in mstm in HP-UX allows local users to gain root access.
CVE-1999-0337 (severity: HIGH, weakness: NVD-CWE-Other)
AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
CVE-1999-0338 (severity: HIGH, weakness: NVD-CWE-Other)
AIX Licensed Program Product performance tools allow local users to gain root access.
CVE-1999-0339 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
CVE-1999-0340 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Linux Slackware crond program allows local users to gain root access.
CVE-1999-0341 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
CVE-1999-0342 (severity: MEDIUM, weakness: NVD-CWE-Other)
Linux PAM modules allow local users to gain root access using temporary files.
CVE-1999-0343 (severity: MEDIUM, weakness: NVD-CWE-Other)
A malicious Palace server can force a client to execute arbitrary programs.
CVE-1999-0344 (severity: HIGH, weakness: CWE-264)
NT users can gain debug-level access on a system process using the Sechole exploit.
CVE-1999-0345 (severity: MEDIUM, weakness: NVD-CWE-Other)
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
CVE-1999-0346 (severity: MEDIUM, weakness: NVD-CWE-Other)
CGI PHP mlog script allows an attacker to read any file on the target server.
CVE-1999-0347 (severity: HIGH, weakness: NVD-CWE-Other)
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
CVE-1999-0348 (severity: MEDIUM, weakness: CWE-200)
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVE-1999-0349 (severity: HIGH, weakness: CWE-119)
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
CVE-1999-0350 (severity: MEDIUM, weakness: NVD-CWE-Other)
Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
CVE-1999-0351 (severity: MEDIUM, weakness: NVD-CWE-Other)
FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client.
CVE-1999-0352 (severity: HIGH, weakness: NVD-CWE-Other)
ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.
CVE-1999-0353 (severity: HIGH, weakness: NVD-CWE-Other)
rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
CVE-1999-0354 (severity: HIGH, weakness: NVD-CWE-Other)
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.
CVE-1999-0355 (severity: MEDIUM, weakness: NVD-CWE-Other)
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
CVE-1999-0356 (severity: HIGH, weakness: NVD-CWE-Other)
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
CVE-1999-0357 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
CVE-1999-0358 (severity: HIGH, weakness: NVD-CWE-Other)
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
CVE-1999-0359 (severity: HIGH, weakness: NVD-CWE-Other)
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.
CVE-1999-0360 (severity: HIGH, weakness: NVD-CWE-Other)
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
CVE-1999-0361 (severity: HIGH, weakness: NVD-CWE-Other)
NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
CVE-1999-0362 (severity: MEDIUM, weakness: NVD-CWE-Other)
WS_FTP server remote denial of service through cwd command.
CVE-1999-0363 (severity: HIGH, weakness: NVD-CWE-Other)
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
CVE-1999-0364 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
CVE-1999-0365 (severity: HIGH, weakness: NVD-CWE-Other)
The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
CVE-1999-0366 (severity: HIGH, weakness: CWE-287)
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
CVE-1999-0367 (severity: LOW, weakness: NVD-CWE-Other)
NetBSD netstat command allows local users to access kernel memory.
CVE-1999-0368 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
CVE-1999-0369 (severity: HIGH, weakness: NVD-CWE-Other)
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
CVE-1999-0370 (severity: MEDIUM, weakness: NVD-CWE-Other)
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
CVE-1999-0371 (severity: LOW, weakness: NVD-CWE-Other)
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
CVE-1999-0372 (severity: LOW, weakness: CWE-200)
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
CVE-1999-0373 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
CVE-1999-0374 (severity: LOW, weakness: NVD-CWE-Other)
Debian GNU/Linux cfengine package is susceptible to a symlink attack.
CVE-1999-0375 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
CVE-1999-0376 (severity: MEDIUM, weakness: NVD-CWE-Other)
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
CVE-1999-0377 (severity: MEDIUM, weakness: NVD-CWE-Other)
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
CVE-1999-0378 (severity: MEDIUM, weakness: NVD-CWE-Other)
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
CVE-1999-0379 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
CVE-1999-0380 (severity: MEDIUM, weakness: NVD-CWE-Other)
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
CVE-1999-0381 (severity: HIGH, weakness: NVD-CWE-Other)
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
CVE-1999-0382 (severity: HIGH, weakness: NVD-CWE-Other)
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
CVE-1999-0383 (severity: HIGH, weakness: NVD-CWE-Other)
ACC Tigris allows public access without a login.
CVE-1999-0384 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
CVE-1999-0385 (severity: HIGH, weakness: CWE-120)
The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
CVE-1999-0386 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
CVE-1999-0387 (severity: HIGH, weakness: CWE-255)
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
CVE-1999-0388 (severity: MEDIUM, weakness: NVD-CWE-Other)
DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
CVE-1999-0389 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the bootp server in the Debian Linux netstd package.
CVE-1999-0390 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Dosemu Slang library in Linux.
CVE-1999-0391 (severity: HIGH, weakness: NVD-CWE-Other)
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
CVE-1999-0392 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
CVE-1999-0393 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
CVE-1999-0394 (severity: HIGH, weakness: NVD-CWE-Other)
DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
CVE-1999-0395 (severity: MEDIUM, weakness: NVD-CWE-Other)
A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
CVE-1999-0396 (severity: LOW, weakness: NVD-CWE-Other)
A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
CVE-1999-0397 (severity: HIGH, weakness: NVD-CWE-Other)
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
CVE-1999-0398 (severity: MEDIUM, weakness: NVD-CWE-Other)
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
CVE-1999-0399 (severity: HIGH, weakness: NVD-CWE-Other)
The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
CVE-1999-0400 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in Linux 2.2.0 running the ldd command on a core file.
CVE-1999-0401 (severity: LOW, weakness: NVD-CWE-Other)
A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
CVE-1999-0402 (severity: MEDIUM, weakness: NVD-CWE-Other)
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
CVE-1999-0403 (severity: MEDIUM, weakness: NVD-CWE-Other)
A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
CVE-1999-0404 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
CVE-1999-0405 (severity: HIGH, weakness: NVD-CWE-Other)
A buffer overflow in lsof allows local users to obtain root privilege.
CVE-1999-0406 (severity: HIGH, weakness: NVD-CWE-Other)
Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
CVE-1999-0407 (severity: HIGH, weakness: NVD-CWE-Other)
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
CVE-1999-0408 (severity: HIGH, weakness: NVD-CWE-Other)
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
CVE-1999-0409 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
CVE-1999-0410 (severity: HIGH, weakness: NVD-CWE-Other)
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
CVE-1999-0411 (severity: HIGH, weakness: NVD-CWE-Other)
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
CVE-1999-0412 (severity: HIGH, weakness: NVD-CWE-Other)
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
CVE-1999-0413 (severity: HIGH, weakness: NVD-CWE-Other)
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
CVE-1999-0414 (severity: MEDIUM, weakness: NVD-CWE-Other)
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
CVE-1999-0415 (severity: HIGH, weakness: NVD-CWE-Other)
The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
CVE-1999-0416 (severity: MEDIUM, weakness: NVD-CWE-Other)
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
CVE-1999-0417 (severity: LOW, weakness: NVD-CWE-Other)
64 bit Solaris 7 procfs allows local users to perform a denial of service.
CVE-1999-0418 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
CVE-1999-0419 (severity: MEDIUM, weakness: NVD-CWE-Other)
When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.
CVE-1999-0420 (severity: HIGH, weakness: NVD-CWE-Other)
umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
CVE-1999-0421 (severity: HIGH, weakness: NVD-CWE-Other)
During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
CVE-1999-0422 (severity: MEDIUM, weakness: NVD-CWE-Other)
In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
CVE-1999-0423 (severity: MEDIUM, weakness: NVD-CWE-Other)
Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
CVE-1999-0424 (severity: LOW, weakness: NVD-CWE-Other)
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
CVE-1999-0425 (severity: MEDIUM, weakness: NVD-CWE-Other)
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
CVE-1999-0426 (severity: CRITICAL, weakness: CWE-276)
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
CVE-1999-0427 (severity: HIGH, weakness: NVD-CWE-Other)
Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
CVE-1999-0428 (severity: HIGH, weakness: CWE-384)
OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
CVE-1999-0429 (severity: HIGH, weakness: NVD-CWE-Other)
The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
CVE-1999-0430 (severity: MEDIUM, weakness: NVD-CWE-Other)
Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload.
CVE-1999-0431 (severity: MEDIUM, weakness: NVD-CWE-Other)
Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
CVE-1999-0432 (severity: MEDIUM, weakness: NVD-CWE-Other)
ftp on HP-UX 11.00 allows local users to gain privileges.
CVE-1999-0433 (severity: MEDIUM, weakness: NVD-CWE-Other)
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVE-1999-0434 (severity: HIGH, weakness: NVD-CWE-Other)
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
CVE-1999-0435 (severity: HIGH, weakness: NVD-CWE-Other)
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
CVE-1999-0436 (severity: MEDIUM, weakness: NVD-CWE-Other)
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
CVE-1999-0437 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
CVE-1999-0438 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
CVE-1999-0439 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
CVE-1999-0440 (severity: HIGH, weakness: NVD-CWE-Other)
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVE-1999-0441 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.
CVE-1999-0442 (severity: LOW, weakness: NVD-CWE-Other)
Solaris ff.core allows local users to modify files.
CVE-1999-0443 (severity: HIGH, weakness: NVD-CWE-Other)
Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
CVE-1999-0444 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
CVE-1999-0445 (severity: MEDIUM, weakness: NVD-CWE-Other)
In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
CVE-1999-0446 (severity: LOW, weakness: NVD-CWE-Other)
Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
CVE-1999-0447 (severity: MEDIUM, weakness: NVD-CWE-Other)
Local users can gain privileges using the debug utility in the MPE/iX operating system.
CVE-1999-0448 (severity: MEDIUM, weakness: NVD-CWE-Other)
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
CVE-1999-0449 (severity: HIGH, weakness: NVD-CWE-Other)
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
CVE-1999-0450 (severity: HIGH, weakness: NVD-CWE-Other)
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
CVE-1999-0451 (severity: LOW, weakness: NVD-CWE-Other)
Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
CVE-1999-0452 (severity: HIGH, weakness: NVD-CWE-Other)
A service or application has a backdoor password that was placed there by the developer.
CVE-1999-0453 (severity: MEDIUM, weakness: CWE-200)
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
CVE-1999-0454 (severity: HIGH, weakness: NVD-CWE-Other)
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
CVE-1999-0455 (severity: HIGH, weakness: NVD-CWE-Other)
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
CVE-1999-0457 (severity: HIGH, weakness: NVD-CWE-Other)
Linux ftpwatch program allows local users to gain root privileges.
CVE-1999-0458 (severity: LOW, weakness: NVD-CWE-Other)
L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
CVE-1999-0459 (severity: MEDIUM, weakness: NVD-CWE-Other)
Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
CVE-1999-0460 (severity: LOW, weakness: NVD-CWE-Other)
Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
CVE-1999-0461 (severity: HIGH, weakness: NVD-CWE-Other)
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
CVE-1999-0462 (severity: HIGH, weakness: NVD-CWE-Other)
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
CVE-1999-0463 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can perform a denial of service using IRIX fcagent.
CVE-1999-0464 (severity: LOW, weakness: NVD-CWE-Other)
Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
CVE-1999-0465 (severity: HIGH, weakness: NVD-CWE-Other)
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
CVE-1999-0466 (severity: HIGH, weakness: NVD-CWE-Other)
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
CVE-1999-0467 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
CVE-1999-0468 (severity: LOW, weakness: NVD-CWE-Other)
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
CVE-1999-0469 (severity: MEDIUM, weakness: NVD-CWE-Other)
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.