stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-1999-0001 (severity: MEDIUM, weakness: CWE-20)
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
CVE-1999-0002 (severity: HIGH, weakness: CWE-119)
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
CVE-1999-0003 (severity: HIGH, weakness: NVD-CWE-Other)
Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
CVE-1999-0004 (severity: MEDIUM, weakness: NVD-CWE-Other)
MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.
CVE-1999-0005 (severity: HIGH, weakness: NVD-CWE-Other)
Arbitrary command execution via IMAP buffer overflow in authenticate command.
CVE-1999-0006 (severity: CRITICAL, weakness: CWE-125)
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CVE-1999-0007 (severity: MEDIUM, weakness: CWE-327)
Information from SSL-encrypted sessions via PKCS #1.
CVE-1999-0008 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in NIS+, in Sun's rpc.nisd program.
CVE-1999-0009 (severity: HIGH, weakness: NVD-CWE-Other)
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVE-1999-0010 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
CVE-1999-0011 (severity: MEDIUM, weakness: CWE-1067)
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
CVE-1999-0012 (severity: HIGH, weakness: CWE-290)
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
CVE-1999-0013 (severity: HIGH, weakness: CWE-522)
Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.
CVE-1999-0014 (severity: HIGH, weakness: NVD-CWE-Other)
Unauthorized privileged access or denial of service via dtappgather program in CDE.
CVE-1999-0015 (severity: MEDIUM, weakness: NVD-CWE-Other)
Teardrop IP denial of service.
CVE-1999-0016 (severity: MEDIUM, weakness: NVD-CWE-Other)
Land IP denial of service.
CVE-1999-0017 (severity: HIGH, weakness: NVD-CWE-Other)
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVE-1999-0018 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in statd allows root privileges.
CVE-1999-0019 (severity: MEDIUM, weakness: NVD-CWE-Other)
Delete or create a file via rpc.statd, due to invalid information.
CVE-1999-0021 (severity: HIGH, weakness: NVD-CWE-Other)
Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
CVE-1999-0022 (severity: HIGH, weakness: CWE-125)
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
CVE-1999-0023 (severity: HIGH, weakness: NVD-CWE-Other)
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
CVE-1999-0024 (severity: MEDIUM, weakness: NVD-CWE-Other)
DNS cache poisoning via BIND, by predictable query IDs.
CVE-1999-0025 (severity: HIGH, weakness: NVD-CWE-Other)
root privileges via buffer overflow in df command on SGI IRIX systems.
CVE-1999-0026 (severity: MEDIUM, weakness: NVD-CWE-Other)
root privileges via buffer overflow in pset command on SGI IRIX systems.
CVE-1999-0027 (severity: HIGH, weakness: CWE-119)
root privileges via buffer overflow in eject command on SGI IRIX systems.
CVE-1999-0028 (severity: HIGH, weakness: NVD-CWE-Other)
root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
CVE-1999-0029 (severity: HIGH, weakness: CWE-125)
root privileges via buffer overflow in ordist command on SGI IRIX systems.
CVE-1999-0030 (severity: HIGH, weakness: NVD-CWE-Other)
root privileges via buffer overflow in xlock command on SGI IRIX systems.
CVE-1999-0031 (severity: LOW, weakness: NVD-CWE-Other)
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
CVE-1999-0032 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
CVE-1999-0033 (severity: HIGH, weakness: NVD-CWE-Other)
Command execution in Sun systems via buffer overflow in the at program.
CVE-1999-0034 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
CVE-1999-0035 (severity: MEDIUM, weakness: NVD-CWE-Other)
Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
CVE-1999-0036 (severity: HIGH, weakness: CWE-434)
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
CVE-1999-0037 (severity: HIGH, weakness: NVD-CWE-Other)
Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
CVE-1999-0038 (severity: HIGH, weakness: CWE-120)
Buffer overflow in xlock program allows local users to execute commands as root.
CVE-1999-0039 (severity: HIGH, weakness: CWE-77)
webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.
CVE-1999-0040 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
CVE-1999-0041 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in NLS (Natural Language Service).
CVE-1999-0042 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
CVE-1999-0043 (severity: CRITICAL, weakness: CWE-78)
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVE-1999-0044 (severity: HIGH, weakness: NVD-CWE-Other)
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
CVE-1999-0045 (severity: HIGH, weakness: NVD-CWE-Other)
List of arbitrary files on Web host via nph-test-cgi script.
CVE-1999-0046 (severity: HIGH, weakness: CWE-120)
Buffer overflow of rlogin program using TERM environmental variable.
CVE-1999-0047 (severity: HIGH, weakness: NVD-CWE-Other)
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
CVE-1999-0048 (severity: HIGH, weakness: NVD-CWE-Other)
Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
CVE-1999-0049 (severity: HIGH, weakness: NVD-CWE-Other)
Csetup under IRIX allows arbitrary file creation or overwriting.
CVE-1999-0050 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in HP-UX newgrp program.
CVE-1999-0051 (severity: HIGH, weakness: NVD-CWE-Other)
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
CVE-1999-0052 (severity: HIGH, weakness: CWE-476)
IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
CVE-1999-0053 (severity: MEDIUM, weakness: NVD-CWE-Other)
TCP RST denial of service in FreeBSD.
CVE-1999-0054 (severity: MEDIUM, weakness: NVD-CWE-Other)
Sun's ftpd daemon can be subjected to a denial of service.
CVE-1999-0055 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflows in Sun libnsl allow root access.
CVE-1999-0056 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Sun's ping program can give root access to local users.
CVE-1999-0057 (severity: HIGH, weakness: NVD-CWE-Other)
Vacation program allows command execution by remote users through a sendmail command.
CVE-1999-0058 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in PHP cgi program, php.cgi allows shell access.
CVE-1999-0059 (severity: HIGH, weakness: CWE-200)
IRIX fam service allows an attacker to obtain a list of all files on the server.
CVE-1999-0060 (severity: MEDIUM, weakness: NVD-CWE-Other)
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
CVE-1999-0061 (severity: MEDIUM, weakness: NVD-CWE-Other)
File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
CVE-1999-0062 (severity: HIGH, weakness: NVD-CWE-Other)
The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
CVE-1999-0063 (severity: MEDIUM, weakness: NVD-CWE-Other)
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
CVE-1999-0064 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX lquerylv program gives root access to local users.
CVE-1999-0065 (severity: HIGH, weakness: NVD-CWE-Other)
Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
CVE-1999-0066 (severity: CRITICAL, weakness: NVD-CWE-Other)
AnyForm CGI remote execution.
CVE-1999-0067 (severity: HIGH, weakness: CWE-78)
phf CGI program allows remote command execution through shell metacharacters.
CVE-1999-0068 (severity: HIGH, weakness: NVD-CWE-Other)
CGI PHP mylog script allows an attacker to read any file on the target server.
CVE-1999-0069 (severity: HIGH, weakness: CWE-119)
Solaris ufsrestore buffer overflow.
CVE-1999-0070 (severity: MEDIUM, weakness: NVD-CWE-Other)
test-cgi program allows an attacker to list files on the server.
CVE-1999-0071 (severity: HIGH, weakness: NVD-CWE-Other)
Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
CVE-1999-0072 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX xdat gives root access to local users.
CVE-1999-0073 (severity: HIGH, weakness: NVD-CWE-Other)
Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
CVE-1999-0074 (severity: MEDIUM, weakness: NVD-CWE-Other)
Listening TCP ports are sequentially allocated, allowing spoofing attacks.
CVE-1999-0075 (severity: MEDIUM, weakness: NVD-CWE-Other)
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
CVE-1999-0076 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in wu-ftp from PASV command causes a core dump.
CVE-1999-0077 (severity: MEDIUM, weakness: NVD-CWE-Other)
Predictable TCP sequence numbers allow spoofing.
CVE-1999-0078 (severity: LOW, weakness: NVD-CWE-Other)
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
CVE-1999-0079 (severity: MEDIUM, weakness: NVD-CWE-Other)
Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.
CVE-1999-0080 (severity: HIGH, weakness: NVD-CWE-Other)
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
CVE-1999-0081 (severity: MEDIUM, weakness: NVD-CWE-Other)
wu-ftp allows files to be overwritten via the rnfr command.
CVE-1999-0082 (severity: HIGH, weakness: NVD-CWE-Other)
CWD ~root command in ftpd allows root access.
CVE-1999-0083 (severity: MEDIUM, weakness: NVD-CWE-Other)
getcwd() file descriptor leak in FTP.
CVE-1999-0084 (severity: HIGH, weakness: CWE-269)
Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.
CVE-1999-0085 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
CVE-1999-0086 (severity: MEDIUM, weakness: NVD-CWE-Other)
AIX routed allows remote users to modify sensitive files.
CVE-1999-0087 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
CVE-1999-0088 (severity: HIGH, weakness: NVD-CWE-Other)
IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.
CVE-1999-0089 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX libDtSvc library can allow local users to gain root access.
CVE-1999-0090 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX rcp command allows local users to obtain root access.
CVE-1999-0091 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX writesrv command allows local users to obtain root access.
CVE-1999-0092 (severity: HIGH, weakness: NVD-CWE-Other)
Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
CVE-1999-0093 (severity: HIGH, weakness: NVD-CWE-Other)
AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.
CVE-1999-0094 (severity: MEDIUM, weakness: NVD-CWE-Other)
AIX piodmgrsu command allows local users to gain additional group privileges.
CVE-1999-0095 (severity: HIGH, weakness: NVD-CWE-Other)
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
CVE-1999-0096 (severity: MEDIUM, weakness: NVD-CWE-Other)
Sendmail decode alias can be used to overwrite sensitive files.
CVE-1999-0097 (severity: HIGH, weakness: NVD-CWE-Other)
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
CVE-1999-0098 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.
CVE-1999-0099 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
CVE-1999-0100 (severity: HIGH, weakness: NVD-CWE-Other)
Remote access in AIX innd 1.5.1, using control messages.
CVE-1999-0101 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
CVE-1999-0102 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
CVE-1999-0103 (severity: MEDIUM, weakness: NVD-CWE-Other)
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.
CVE-1999-0104 (severity: MEDIUM, weakness: NVD-CWE-Other)
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
CVE-1999-0105 (severity: LOW, weakness: NVD-CWE-Other)
finger allows recursive searches by using a long string of @ symbols.
CVE-1999-0106 (severity: LOW, weakness: NVD-CWE-Other)
Finger redirection allows finger bombs.
CVE-1999-0107 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
CVE-1999-0108 (severity: HIGH, weakness: NVD-CWE-Other)
The printers program in IRIX has a buffer overflow that gives root access to local users.
CVE-1999-0109 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in ffbconfig in Solaris 2.5.1.
CVE-1999-0111 (severity: MEDIUM, weakness: NVD-CWE-Other)
RIP v1 is susceptible to spoofing.
CVE-1999-0112 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX dtterm program for the CDE.
CVE-1999-0113 (severity: HIGH, weakness: CWE-88)
Some implementations of rlogin allow root access if given a -froot parameter.
CVE-1999-0114 (severity: MEDIUM, weakness: NVD-CWE-Other)
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
CVE-1999-0115 (severity: HIGH, weakness: NVD-CWE-Other)
AIX bugfiler program allows local users to gain root access.
CVE-1999-0116 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
CVE-1999-0117 (severity: HIGH, weakness: NVD-CWE-Other)
AIX passwd allows local users to gain root access.
CVE-1999-0118 (severity: HIGH, weakness: NVD-CWE-Other)
AIX infod allows local users to gain root access through an X display.
CVE-1999-0119 (severity: HIGH, weakness: NVD-CWE-Other)
Windows NT 4.0 beta allows users to read and delete shares.
CVE-1999-0120 (severity: HIGH, weakness: NVD-CWE-Other)
Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root.
CVE-1999-0121 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in dtaction command gives root access.
CVE-1999-0122 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in AIX lchangelv gives root access.
CVE-1999-0123 (severity: LOW, weakness: NVD-CWE-Other)
Race condition in Linux mailx command allows local users to read user files.
CVE-1999-0124 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon.
CVE-1999-0125 (severity: MEDIUM, weakness: NVD-CWE-Other)
Buffer overflow in SGI IRIX mailx program.
CVE-1999-0126 (severity: HIGH, weakness: NVD-CWE-Other)
SGI IRIX buffer overflow in xterm and Xaw allows root access.
CVE-1999-0127 (severity: HIGH, weakness: NVD-CWE-Other)
swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access.
CVE-1999-0128 (severity: MEDIUM, weakness: NVD-CWE-Other)
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
CVE-1999-0129 (severity: MEDIUM, weakness: NVD-CWE-Other)
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
CVE-1999-0130 (severity: HIGH, weakness: NVD-CWE-Other)
Local users can start Sendmail in daemon mode and gain root privileges.
CVE-1999-0131 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
CVE-1999-0132 (severity: LOW, weakness: NVD-CWE-Other)
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
CVE-1999-0133 (severity: LOW, weakness: NVD-CWE-Other)
fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
CVE-1999-0134 (severity: HIGH, weakness: NVD-CWE-Other)
vold in Solaris 2.x allows local users to gain root access.
CVE-1999-0135 (severity: HIGH, weakness: NVD-CWE-Other)
admintool in Solaris allows a local user to write to arbitrary files and gain root access.
CVE-1999-0136 (severity: HIGH, weakness: NVD-CWE-Other)
Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
CVE-1999-0137 (severity: HIGH, weakness: NVD-CWE-Other)
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
CVE-1999-0138 (severity: HIGH, weakness: NVD-CWE-Other)
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
CVE-1999-0139 (severity: HIGH, weakness: NVD-CWE-Other)
Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.
CVE-1999-0140 (severity: MEDIUM, weakness: NVD-CWE-Other)
Denial of service in RAS/PPTP on NT systems.
CVE-1999-0141 (severity: LOW, weakness: NVD-CWE-Other)
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
CVE-1999-0142 (severity: HIGH, weakness: NVD-CWE-Other)
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
CVE-1999-0143 (severity: MEDIUM, weakness: NVD-CWE-Other)
Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
CVE-1999-0144 (severity: LOW, weakness: NVD-CWE-Other)
Denial of service in Qmail by specifying a large number of recipients with the RCPT command.
CVE-1999-0145 (severity: HIGH, weakness: NVD-CWE-Other)
Sendmail WIZ command enabled, allowing root access.
CVE-1999-0146 (severity: HIGH, weakness: NVD-CWE-Other)
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
CVE-1999-0147 (severity: HIGH, weakness: NVD-CWE-Other)
The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
CVE-1999-0148 (severity: HIGH, weakness: NVD-CWE-Other)
The handler CGI program in IRIX allows arbitrary command execution.
CVE-1999-0149 (severity: HIGH, weakness: NVD-CWE-Other)
The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
CVE-1999-0150 (severity: HIGH, weakness: NVD-CWE-Other)
The Perl fingerd program allows arbitrary command execution from remote users.
CVE-1999-0151 (severity: HIGH, weakness: NVD-CWE-Other)
The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
CVE-1999-0152 (severity: HIGH, weakness: NVD-CWE-Other)
The DG/UX finger daemon allows remote command execution through shell metacharacters.
CVE-1999-0153 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
CVE-1999-0154 (severity: MEDIUM, weakness: NVD-CWE-Other)
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
CVE-1999-0155 (severity: HIGH, weakness: NVD-CWE-Other)
The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
CVE-1999-0156 (severity: MEDIUM, weakness: NVD-CWE-Other)
wu-ftpd FTP daemon allows any user and password combination.
CVE-1999-0157 (severity: MEDIUM, weakness: NVD-CWE-Other)
Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
CVE-1999-0158 (severity: MEDIUM, weakness: NVD-CWE-Other)
Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.
CVE-1999-0159 (severity: MEDIUM, weakness: NVD-CWE-Other)
Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases.
CVE-1999-0160 (severity: HIGH, weakness: NVD-CWE-Other)
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
CVE-1999-0161 (severity: HIGH, weakness: NVD-CWE-Other)
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
CVE-1999-0162 (severity: MEDIUM, weakness: NVD-CWE-Other)
The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
CVE-1999-0163 (severity: HIGH, weakness: NVD-CWE-Other)
In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
CVE-1999-0164 (severity: MEDIUM, weakness: NVD-CWE-Other)
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
CVE-1999-0165 (severity: HIGH, weakness: NVD-CWE-Other)
NFS cache poisoning.
CVE-1999-0166 (severity: MEDIUM, weakness: NVD-CWE-Other)
NFS allows users to use a "cd .." command to access other directories besides the exported file system.
CVE-1999-0167 (severity: MEDIUM, weakness: NVD-CWE-Other)
In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.