yahoo-inc/cve-impacts huggingface dataset:
CVE-1999-0925: UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
Key phrases: conduct a denial of service via a large, mime headers
CVE-1999-0926: Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
Key phrases: conduct a denial of service via a large, mime headers
CVE-1999-0927: NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, ntmail, .. (dot dot), dot dot attack
CVE-1999-0928: Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-1999-0929: Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
Key phrases: conduct a denial of service via a large, http get requests
CVE-1999-0930: wwwboard allows a remote attacker to delete message board articles via a malformed argument.
Key phrases: delete message board articles via a malformed argument
CVE-1999-0931: Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
Key phrases: execute commands, buffer overflow
CVE-1999-0932: Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.
Key phrases: read the administrator password, cleartext
CVE-1999-0933: TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-1999-0934: classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
Key phrases: read arbitrary files, read arbitrary files via shell metacharacters
CVE-1999-0935: classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
Key phrases: execute arbitrary commands, execute arbitrary commands by specifying them in a, hidden variable
CVE-1999-0936: BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
Key phrases: execute commands via shell metacharacters
CVE-1999-0937: BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
Key phrases: read arbitrary files, read arbitrary files via the automessage hidden form, bnbform
CVE-1999-0938: MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.
Key phrases: execute commands via shell metacharacters in Session Initiation
CVE-1999-0939: Denial of service in Debian IRC Epic/epic4 client via a long string.
Key phrases: denial of service, long string
CVE-1999-0940: Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
Key phrases: execute commands via malformed MIME messages, buffer overflow
CVE-1999-0941: Mutt mail client allows a remote attacker to execute commands via shell metacharacters.
Key phrases: execute commands via shell metacharacters
CVE-1999-0942: UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
Key phrases: gain root privileges, gain root privileges by using the STATICMERGE environmental, staticmerge environmental variable
CVE-1999-0943: Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.
Key phrases: gain privileges, gain privileges via a long GET request to, buffer overflow
CVE-1999-0944: IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.
Key phrases: weak encryption
CVE-1999-0945: Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands.
Key phrases: conduct a denial of service via AUTH or, buffer overflow
CVE-1999-0946: Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.
Key phrases: buffer overflow
CVE-1999-0947: AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.
Key phrases: execute commands via shell metacharacters
CVE-1999-0948: Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-1999-0949: Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-1999-0950: Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via	a series of MKD and CWD commands that create nested directories.
Key phrases: gain root access, gain root access via\ta series of, buffer overflow
CVE-1999-0951: Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
Key phrases: execute commands, buffer overflow
CVE-1999-0952: Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0953: WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
Key phrases: web root
CVE-1999-0954: WWWBoard has a default username and default password.
Key phrases: default username, default password
CVE-1999-0955: Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
Key phrases: gain root access, gain root access via the SITE EXEC command, race condition
CVE-1999-0956: The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
Key phrases: gain root privileges, gain root privileges or conduct a denial of, next netinfo _writers, denial of service
CVE-1999-0957: MajorCool mj_key_cache program allows local users to modify files via a symlink attack.
Key phrases: modify files via a symlink attack
CVE-1999-0958: sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
Key phrases: execute arbitrary commands, execute arbitrary commands via a .. (dot, dot dot attack
CVE-1999-0959: IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
Key phrases: modify arbitrary files, modify arbitrary files via a symlink attack
CVE-1999-0960: IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
Key phrases: create directories in arbitrary locations via a command
CVE-1999-0961: HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
Key phrases: gain root privileges, gain root privileges via a symlink attack during
CVE-1999-0962: Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
Key phrases: gain root privileges, gain root privileges via a command line option, buffer overflow
CVE-1999-0963: FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
Key phrases: gain root privileges, gain root privileges via a symlink attack
CVE-1999-0964: Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long PATH_LOCALE environment, buffer overflow
CVE-1999-0965: Race condition in xterm allows local users to modify arbitrary files via the logging option.
Key phrases: modify arbitrary files, modify arbitrary files via the logging option, race condition
CVE-1999-0966: Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
Key phrases: gain root privileges, gain root privileges via a long argv[0], buffer overflow
CVE-1999-0967: Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
Key phrases: buffer overflow
CVE-1999-0968: Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-1999-0969: The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork.
Key phrases: conduct a denial of service using spoofed malformed, loop, snork, spoofing
CVE-1999-0970: The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.
Key phrases: conduct a denial of service via a malformed, malformed url, temporary files
CVE-1999-0971: Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.
Key phrases: gain root privileges, gain root privileges via a long :include, buffer overflow
CVE-1999-0972: Buffer overflow in Xshipwars xsw program.
Key phrases: buffer overflow
CVE-1999-0973: Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
Key phrases: gain root privileges, gain root privileges via a long domain name, buffer overflow
CVE-1999-0974: Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
Key phrases: gain root privileges, gain root privileges via GETQUOTA requests to the, buffer overflow
CVE-1999-0975: The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
Key phrases: execute commands as another user by editing a
CVE-1999-0976: Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
Key phrases: reinitialize the aliases database via the newaliases command, denial of service
CVE-1999-0977: Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
Key phrases: gain root privileges, gain root privileges using a NETMGT_PROC_SERVICE request, buffer overflow
CVE-1999-0978: htdig allows remote attackers to execute commands via filenames with shell metacharacters.
Key phrases: execute commands via filenames with shell metacharacters, htdig
CVE-1999-0979: The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
Key phrases: gain root privileges, gain root privileges by using a debugger such, traps
CVE-1999-0980: Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request.
Key phrases: cause a denial of service via a malformed, malformed argument
CVE-1999-0981: Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
Key phrases: create a reference to a client window and, server-side page reference redirect
CVE-1999-0982: The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.
Key phrases: world readable file
CVE-1999-0983: Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
Key phrases: execute commands via shell metacharacters in the domain
CVE-1999-0984: Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
Key phrases: execute commands via shell metacharacters in the domain
CVE-1999-0985: CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
Key phrases: execute commands via shell metacharacters in the domain
CVE-1999-0986: The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
Key phrases: cause a denial of service by sending large
CVE-1999-0987: Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.
CVE-1999-0988: UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
Key phrases: read arbitrary files, read arbitrary files via a symlink attack
CVE-1999-0989: Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.
Key phrases: execute commands via the vnd.ms.radio protocol, buffer overflow
CVE-1999-0990: Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
Key phrases: identify valid users on a system
CVE-1999-0991: Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-1999-0992: HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
Key phrases: bypass access restrictions, bypass access restrictions via the Trusted Gateway Proxy, unprivileged processes
CVE-1999-0993: Modifications to ACLs (Access Control Lists) in Microsoft Exchange  5.5 do not take effect until the directory store cache is refreshed.
CVE-1999-0994: Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
Key phrases: crack passwords
CVE-1999-0995: Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
Key phrases: cause a denial of service via malformed arguments, malformed security identifier request
CVE-1999-0996: Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
Key phrases: execute commands via a long GET request, buffer overflow
CVE-1999-0997: wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Key phrases: execute commands via a malformed file name that
CVE-1999-0998: Cisco Cache Engine allows an attacker to replace content in the cache.
Key phrases: replace content in the cache
CVE-1999-0999: Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
Key phrases: cause a denial of service via a malformed, malformed tds packet
CVE-1999-1000: The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
Key phrases: view performance statistics
CVE-1999-1001: Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
Key phrases: gain access, gain access via a null username and password
CVE-1999-1002: Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
Key phrases: weak encryption
CVE-1999-1003: War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
Key phrases: cause a denial of service by flooding it
CVE-1999-1004: Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
Key phrases: buffer overflow
CVE-1999-1005: Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
Key phrases: read arbitrary files, read arbitrary files with .htm extensions via a, help parameter, dot dot attack
CVE-1999-1006: Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
Key phrases: determine the real path of the web server, help parameter
CVE-1999-1007: Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
Key phrases: execute commands on the VDO client via a, buffer overflow
CVE-1999-1008: xsoldier program allows local users to gain root access via a long argument.
Key phrases: gain root access, gain root access via a long argument
CVE-1999-1009: The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
Key phrases: access and modify search information for users by
CVE-1999-1010: An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
Key phrases: use the "none" cipher
CVE-1999-1011: The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, unsafe methods
CVE-1999-1012: SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.
Key phrases: crash the mail server via a long string
CVE-1999-1013: named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.
Key phrases: gain root access, overwrite system files to gain root access via, named-xfer, malformed zone file
CVE-1999-1014: Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
Key phrases: gain privileges, gain privileges via a long -m argument, buffer overflow
CVE-1999-1015: Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-1999-1016: Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
Key phrases: denial of service (100% CPU consumption), cause a denial of service (100%, text inputs
CVE-1999-1017: Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message.
Key phrases: execute when the recipient opens the message
CVE-1999-1018: IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.
Key phrases: bypass the filtering, bypass the filtering rules using several fragments with
CVE-1999-1019: SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.
Key phrases: replace a privileged executable (processd) with, insecure permissions, administrator compromise
CVE-1999-1020: The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Key phrases: access sensitive information such as users, unauthenticated client, read access
CVE-1999-1021: NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
Key phrases: gain root access, gain root access if the lower 16 bits
CVE-1999-1022: serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
Key phrases: gain root privileges, gain root privileges via a Trojan horse ls
CVE-1999-1023: useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.
Key phrases: login after their accounts have expired
CVE-1999-1024: ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.
Key phrases: cause a denial of service via a packet, zero length header, infinite loop, core dump
CVE-1999-1025: CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
Key phrases: login with any string, physical access
CVE-1999-1026: aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.
Key phrases: modify arbitrary files, gain root privileges, modify arbitrary files and gain root privileges via, symlink
CVE-1999-1027: Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program.
Key phrases: gain privileges, gain privileges by replacing it with a Trojan, world-writable permissions
CVE-1999-1028: Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631.
Key phrases: denial of service (CPU utilization), cause a denial of service (CPU utilization
CVE-1999-1029: SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
Key phrases: guess the password without showing up in the
CVE-1999-1030: counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation.
Key phrases: denial of service (hang), cause a denial of service (hang), access violation
CVE-1999-1031: counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.
Key phrases: denial of service (hang), cause a denial of service (hang), long argument
CVE-1999-1032: Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
Key phrases: gain root privileges
CVE-1999-1033: Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.
Key phrases: send a message that contains a .., command mode, hang
CVE-1999-1034: Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
Key phrases: gain privileges
CVE-1999-1035: IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability.
Key phrases: denial of service (hang), cause a denial of service (hang), malformed get request, iis get
CVE-1999-1036: COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk.
Key phrases: create arbitrary files, overwrite or create arbitrary files via a symlink
CVE-1999-1037: rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-1999-1038: Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-1999-1039: Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise.
Key phrases: create root-owned files leading to a, diskalign, diskperf, root compromise
CVE-1999-1040: Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.
Key phrases: gain root access, gain root access via a modified IFS environmental, ipxchk, ipxlink
CVE-1999-1041: Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
Key phrases: gain root access, gain root access via (1) a, buffer overflow
CVE-1999-1042: Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.
Key phrases: world-readable log files, temporary files, sensitive information
CVE-1999-1043: Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).
Key phrases: denial of service (application error), cause a denial of service (application error, malformed nntp data, malformed smtp data
CVE-1999-1044: Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.
Key phrases: gain privileges
CVE-1999-1045: pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request.
Key phrases: cause a denial of service by sending a, pnserver
CVE-1999-1046: Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-1999-1047: When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities.
Key phrases: bypass firewall access restrictions, activities
CVE-1999-1048: Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \\\\w option in the PS1 environmental variable when another user changes into that directory.
Key phrases: gain privileges, gain privileges by creating an extremely large directory, buffer overflow
CVE-1999-1049: ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.
Key phrases: sniff the authentication request to port 6050 and, weak encryption (xor), decrypt password
CVE-1999-1050: Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.
Key phrases: read arbitrary files, read arbitrary files via (1) a, directory traversal
CVE-1999-1051: Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
Key phrases: allows arbitrary directories, be used for attachments, read arbitrary files via the reply_message_attach attachment parameter
CVE-1999-1052: Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.
Key phrases: read possibly sensitive information submitted by other users, world-readable
CVE-1999-1053: guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".
Key phrases: execute arbitrary commands, execute arbitrary commands when guestbook.pl is run on, other closing sequences besides "-->"
CVE-1999-1054: The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
Key phrases: shut down the server via the lmdown command
CVE-1999-1055: Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel "CALL Vulnerability."
Key phrases: execute arbitrary commands, execute arbitrary commands by using the CALL function, excel call
CVE-1999-1057: VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.
Key phrases: gain privileges, gain privileges via the ANALYZE/PROCESS_DUMP dcl
CVE-1999-1058: Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-1999-1059: Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-1999-1060: Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflow
CVE-1999-1061: HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging.
Key phrases: connect to the printer and change its IP, password
CVE-1999-1062: HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100.
Key phrases: bypass print filters, bypass print filters by directly sending PostScript documents
CVE-1999-1063: CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-1999-1064: Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, buffer overflows
CVE-1999-1065: Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode.
Key phrases: execute arbitrary commands, cause a denial of service
CVE-1999-1066: Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.
Key phrases: use the server as an amplifier in a, spoofing
CVE-1999-1067: SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities.
CVE-1999-1068: Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.
Key phrases: cause a denial of service via a long
CVE-1999-1069: Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-1999-1070: Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-1999-1071: Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file.
Key phrases: gain access, gain access to Excite accounts by modifying the, world-writeable permissions
CVE-1999-1072: Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
Key phrases: gain privileges, gain privileges by obtaining the encrypted password from
CVE-1999-1073: Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack.
Key phrases: dictionary attack
CVE-1999-1074: Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
Key phrases: gain privileges, gain privileges via brute force password cracking, invalid passwords
CVE-1999-1075: inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd.
Key phrases: cause a denial of service via a large
CVE-1999-1076: Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.
Key phrases: bypass the password protection, bypass the password protection of idled sessions by
CVE-1999-1077: Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.
Key phrases: bypass the password protection, bypass the password protection of idled sessions via, idle locking function
CVE-1999-1078: WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.
Key phrases: gain privileges, easily decrypt the passwords and gain privileges, weak encryption, decrypt password
CVE-1999-1079: Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
Key phrases: gain privileges, gain privileges by attaching to a setgid program, vulnerability in ptrace in aix
CVE-1999-1080: rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf.
Key phrases: gain root privileges, gain root privileges by mounting a floppy or
CVE-1999-1081: Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files
CVE-1999-1082: Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.
Key phrases: ready arbitrary files, ready arbitrary files via a "......", directory traversal, dot dot attack
CVE-1999-1083: Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.
Key phrases: ready arbitrary files, ready arbitrary files via a .. (dot, directory traversal, .. (dot dot), dot dot attack
CVE-1999-1084: The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.
Key phrases: modify the key to specify a Trojan Horse, insecure permissions, system crash
CVE-1999-1085: SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack."
Key phrases: insert arbitrary data, insert arbitrary data into an existing stream between, known plaintext, ssh insertion
CVE-1999-1086: Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.
Key phrases: gain administrator privileges, gain administrator privileges by spoofing the MAC address, packet signature level, ipc fragmented packets
CVE-1999-1087: Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.
Key phrases: conduct unauthorized activities by using URLs that contain
CVE-1999-1088: Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
Key phrases: gain privileges, vulnerability in chsh command
CVE-1999-1089: Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
Key phrases: gain privileges, gain privileges via a long command line argument, buffer overflow
CVE-1999-1090: The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.
Key phrases: modify arbitrary files, read and modify arbitrary files
CVE-1999-1091: UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.
Key phrases: modify the permissions of files writable by the, insecure permissions, symlink
CVE-1999-1092: tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
Key phrases: read passwords from the .inputhistory file, insecure permissions
CVE-1999-1093: Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.
Key phrases: execute arbitrary commands, execute arbitrary commands via a malicious web page, buffer overflow
CVE-1999-1094: Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."
Key phrases: execute arbitrary commands, execute arbitrary commands via a long URL with, buffer overflow, mk overrun security issue
CVE-1999-1095: sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort.
Key phrases: modify arbitrary files, modify arbitrary files that are writable by the
CVE-1999-1096: Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable.
Key phrases: gain root privileges, gain root privileges via a long HOME environmental, buffer overflow
CVE-1999-1097: Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.
Key phrases: read the contents of another client's clipboard
CVE-1999-1098: Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.
Key phrases: decrypt the session via sniffing
CVE-1999-1099: Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
Key phrases: obtain sensitive information, obtain sensitive information via a malformed UDP packet, malformed udp packet, error string
CVE-1999-1100: Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
Key phrases: brute force
CVE-1999-1101: Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges.
Key phrases: gain privileges, easily decrypt the passwords and gain privileges, weak encryption, decrypt password
CVE-1999-1102: lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
Key phrases: overwrite arbitrary files, create or overwrite arbitrary files via a symlink
CVE-1999-1103: dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.
Key phrases: read arbitrary files, read arbitrary files by specifying the file with
CVE-1999-1104: Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.
Key phrases: gain privileges, gain privileges by decrypting the passwords, weak encryption, decrypt password
CVE-1999-1105: Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.
Key phrases: read arbitrary files, read arbitrary files by mapping the network drive, share (c$)
CVE-1999-1106: Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument.
Key phrases: gain root access, gain root access via a long -c (, buffer overflow
CVE-1999-1107: Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
Key phrases: gain root access, gain root access via a long PATH environmental, buffer overflow
CVE-1999-1109: Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
Key phrases: cause a denial of service by sending a, etrn commands
CVE-1999-1110: Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.
Key phrases: determine the existence of files on the client
CVE-1999-1111: Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack which directly modifies a pointer to a return address instead of using a buffer overflow to reach the return address entry itself.
Key phrases: bypass the Random and Terminator Canary security mechanisms, non-linear, buffer overflow
CVE-1999-1112: Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long string after, buffer overflow
CVE-1999-1113: Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-1999-1114: Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-1999-1115: Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh).
CVE-1999-1116: Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges.
Key phrases: gain root privileges, vulnerability in runpriv
CVE-1999-1117: lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.
Key phrases: read arbitrary files, read arbitrary files by specifying the file in
CVE-1999-1118: ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
Key phrases: cause a denial of service by modifying certain
CVE-1999-1119: FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, insecurely configures
CVE-1999-1120: netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
Key phrases: gain privileges
CVE-1999-1121: The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.
Key phrases: gain root privileges
CVE-1999-1122: Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
Key phrases: gain privileges, vulnerability in restore