yahoo-inc/cve-impacts huggingface dataset:
CVE-1999-0001: ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
Key phrases: denial of service (crash or hang), cause a denial of service (crash or
CVE-1999-0002: Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
Key phrases: buffer overflow, root access
CVE-1999-0003: Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
Key phrases: buffer overflow, execute commands
CVE-1999-0004: MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.
Key phrases: mime buffer overflow
CVE-1999-0005: Arbitrary command execution via IMAP buffer overflow in authenticate command.
Key phrases: imap buffer overflow, arbitrary commands, arbitrary command execution
CVE-1999-0006: Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
Key phrases: gain root access, gain root access using a long PASS command, buffer overflow
CVE-1999-0007: Information from SSL-encrypted sessions via PKCS #1.
CVE-1999-0008: Buffer overflow in NIS+, in Sun's rpc.nisd program.
Key phrases: buffer overflow
CVE-1999-0009: Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
Key phrases: inverse query buffer overflow
CVE-1999-0010: Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
Key phrases: denial of service
CVE-1999-0011: Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
Key phrases: denial of service
CVE-1999-0012: Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
Key phrases: bypass access restrictions, bypass access restrictions for files with long file
CVE-1999-0013: Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.
Key phrases: access remote accounts belonging to the ssh-, stolen credentials
CVE-1999-0014: Unauthorized privileged access or denial of service via dtappgather program in CDE.
Key phrases: unauthorized privileged access, denial of service
CVE-1999-0015: Teardrop IP denial of service.
Key phrases: teardrop, denial of service
CVE-1999-0016: Land IP denial of service.
Key phrases: ip denial of service
CVE-1999-0017: FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
Key phrases: connect to arbitrary ports on machines other than, ftp bounce
CVE-1999-0018: Buffer overflow in statd allows root privileges.
Key phrases: root privileges, buffer overflow
CVE-1999-0019: Delete or create a file via rpc.statd, due to invalid information.
Key phrases: invalid information
CVE-1999-0021: Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
Key phrases: arbitrary command execution, buffer overflow, arbitrary commands
CVE-1999-0022: Local user gains root privileges via buffer overflow in rdist, via expstr() function.
Key phrases: root privileges, buffer overflow, gain root privilege
CVE-1999-0023: Local user gains root privileges via buffer overflow in rdist, via lookup() function.
Key phrases: buffer overflow, gain root privilege
CVE-1999-0024: DNS cache poisoning via BIND, by predictable query IDs.
Key phrases: dns cache poisoning, predictable query ids
CVE-1999-0025: root privileges via buffer overflow in df command on SGI IRIX systems.
Key phrases: buffer overflow, root privilege
CVE-1999-0026: root privileges via buffer overflow in pset command on SGI IRIX systems.
Key phrases: buffer overflow, root privilege
CVE-1999-0027: root privileges via buffer overflow in eject command on SGI IRIX systems.
Key phrases: buffer overflow, root privilege
CVE-1999-0028: root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
Key phrases: buffer overflow, root privilege
CVE-1999-0029: root privileges via buffer overflow in ordist command on SGI IRIX systems.
Key phrases: buffer overflow, root privilege
CVE-1999-0030: root privileges via buffer overflow in xlock command on SGI IRIX systems.
Key phrases: buffer overflow, root privilege
CVE-1999-0031: JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
Key phrases: monitor a user's web activities, bell labs
CVE-1999-0032: Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
Key phrases: execute arbitrary code, execute arbitrary code as root via a long, buffer overflow
CVE-1999-0033: Command execution in Sun systems via buffer overflow in the at program.
Key phrases: buffer overflow, command execution
CVE-1999-0034: Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
Key phrases: buffer overflow
CVE-1999-0035: Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
Key phrases: write arbitrary files, read/write arbitrary files, race condition
CVE-1999-0036: IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
Key phrases: files, nonzero lockout parameter, damage to files
CVE-1999-0037: Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
Key phrases: arbitrary command execution, arbitrary commands
CVE-1999-0038: Buffer overflow in xlock program allows local users to execute commands as root.
Key phrases: execute commands as root, buffer overflow
CVE-1999-0039: webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-1999-0040: Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Key phrases: execute commands with root privileges, buffer overflow
CVE-1999-0041: Buffer overflow in NLS (Natural Language Service).
Key phrases: buffer overflow
CVE-1999-0042: Buffer overflow in University of Washington's implementation of IMAP and POP servers.
Key phrases: buffer overflow
CVE-1999-0043: Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
Key phrases: command execution, shell metachars
CVE-1999-0044: fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
Key phrases: obtain root access, obtain root access by modifying sensitive files
CVE-1999-0045: List of arbitrary files on Web host via nph-test-cgi script.
Key phrases: arbitrary files
CVE-1999-0046: Buffer overflow of rlogin program using TERM environmental variable.
Key phrases: buffer overflow
CVE-1999-0047: MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
Key phrases: mime conversion buffer overflow
CVE-1999-0048: Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
Key phrases: execute arbitrary commands, corrupt dns information, root privilege
CVE-1999-0049: Csetup under IRIX allows arbitrary file creation or overwriting.
Key phrases: allows arbitrary file creation or overwriting
CVE-1999-0050: Buffer overflow in HP-UX newgrp program.
Key phrases: buffer overflow
CVE-1999-0051: Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
Key phrases: arbitrary file creation, program execution
CVE-1999-0052: IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
Key phrases: cause a crash, ip fragmentation denial of service
CVE-1999-0053: TCP RST denial of service in FreeBSD.
Key phrases: tcp rst, denial of service
CVE-1999-0054: Sun's ftpd daemon can be subjected to a denial of service.
Key phrases: denial of service
CVE-1999-0055: Buffer overflows in Sun libnsl allow root access.
Key phrases: root access, buffer overflows
CVE-1999-0056: Buffer overflow in Sun's ping program can give root access to local users.
Key phrases: buffer overflow, root access
CVE-1999-0057: Vacation program allows command execution by remote users through a sendmail command.
Key phrases: command execution by remote users through a sendmail
CVE-1999-0058: Buffer overflow in PHP cgi program, php.cgi allows shell access.
Key phrases: shell access, buffer overflow
CVE-1999-0059: IRIX fam service allows an attacker to obtain a list of all files on the server.
Key phrases: obtain a list of all files on the server, irix fam service
CVE-1999-0060: Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
Key phrases: denial of service, malformed packet, discard port
CVE-1999-0061: File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
Key phrases: file creation and deletion, remote execution
CVE-1999-0062: The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
Key phrases: gain root access, gain root access through file descriptor leakage
CVE-1999-0063: Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
Key phrases: crashed, syslog port
CVE-1999-0064: Buffer overflow in AIX lquerylv program gives root access to local users.
Key phrases: buffer overflow, root access
CVE-1999-0065: Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
Key phrases: execute commands, buffer overflows
CVE-1999-0066: AnyForm CGI remote execution.
Key phrases: anyform cgi remote execution
CVE-1999-0067: phf CGI program allows remote command execution through shell metacharacters.
Key phrases: remote command execution through shell metacharacters
CVE-1999-0068: CGI PHP mylog script allows an attacker to read any file on the target server.
Key phrases: read any file on the target server, cgi php mylog script
CVE-1999-0069: Solaris ufsrestore buffer overflow.
Key phrases: buffer overflow
CVE-1999-0070: test-cgi program allows an attacker to list files on the server.
Key phrases: list files on the server
CVE-1999-0071: Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
Key phrases: cookie buffer overflow
CVE-1999-0072: Buffer overflow in AIX xdat gives root access to local users.
Key phrases: buffer overflow, root access
CVE-1999-0073: Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
Key phrases: bypass the normal system libraries and gain root access, specify environment variables including LD_LIBRARY_PATH
CVE-1999-0074: Listening TCP ports are sequentially allocated, allowing spoofing attacks.
Key phrases: spoofing attacks
CVE-1999-0075: PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
Key phrases: pasv core dump
CVE-1999-0076: Buffer overflow in wu-ftp from PASV command causes a core dump.
Key phrases: buffer overflow, core dump
CVE-1999-0077: Predictable TCP sequence numbers allow spoofing.
Key phrases: spoofing, predictable tcp sequence numbers
CVE-1999-0078: pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
Key phrases: execute arbitrary commands, change file permissions
CVE-1999-0079: Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.
Key phrases: denial of service, pasv commands
CVE-1999-0080: Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
Key phrases: gain root access, gain root access via the "site exec, dangerous commands
CVE-1999-0081: wu-ftp allows files to be overwritten via the rnfr command.
Key phrases: be overwritten via the rnfr command, wu-ftp
CVE-1999-0082: CWD ~root command in ftpd allows root access.
Key phrases: root access
CVE-1999-0083: getcwd() file descriptor leak in FTP.
Key phrases: file descriptor leak
CVE-1999-0084: Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.
Key phrases: gain privileges, use mknod to gain privileges by creating a, writable kmem device
CVE-1999-0085: Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname.
Key phrases: execute arbitrary code, execute arbitrary code via a UDP packet with, buffer overflow
CVE-1999-0086: AIX routed allows remote users to modify sensitive files.
Key phrases: modify sensitive files
CVE-1999-0087: Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
Key phrases: denial of service, freeze a system
CVE-1999-0088: IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.
Key phrases: execute root commands
CVE-1999-0089: Buffer overflow in AIX libDtSvc library can allow local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0090: Buffer overflow in AIX rcp command allows local users to obtain root access.
Key phrases: obtain root access, buffer overflow
CVE-1999-0091: Buffer overflow in AIX writesrv command allows local users to obtain root access.
Key phrases: obtain root access, buffer overflow
CVE-1999-0092: Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
Key phrases: obtain root access
CVE-1999-0093: AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.
Key phrases: obtain root access, obtain root access by not dropping privileges correctly
CVE-1999-0094: AIX piodmgrsu command allows local users to gain additional group privileges.
Key phrases: gain additional group privileges
CVE-1999-0095: The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
Key phrases: execute commands as root, debug command
CVE-1999-0096: Sendmail decode alias can be used to overwrite sensitive files.
Key phrases: sendmail decode alias, overwrite sensitive files
CVE-1999-0097: The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
Key phrases: shell metacharacters, execute commands
CVE-1999-0098: Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.
Key phrases: hide activities, buffer overflow
CVE-1999-0099: Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-1999-0100: Remote access in AIX innd 1.5.1, using control messages.
Key phrases: remote access
CVE-1999-0101: Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
Key phrases: root access through corrupt DNS host names, buffer overflow
CVE-1999-0102: Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
Key phrases: execute commands using a large FROM line, buffer overflow
CVE-1999-0103: Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.
CVE-1999-0104: A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
Key phrases: denial of service
CVE-1999-0105: finger allows recursive searches by using a long string of @ symbols.
Key phrases: recursive searches by using a long string of
CVE-1999-0106: Finger redirection allows finger bombs.
Key phrases: finger bombs, finger redirection
CVE-1999-0107: Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
Key phrases: cause a denial of service with a large, buffer overflow
CVE-1999-0108: The printers program in IRIX has a buffer overflow that gives root access to local users.
Key phrases: buffer overflow, root access
CVE-1999-0109: Buffer overflow in ffbconfig in Solaris 2.5.1.
Key phrases: buffer overflow
CVE-1999-0111: RIP v1 is susceptible to spoofing.
Key phrases: spoofing
CVE-1999-0112: Buffer overflow in AIX dtterm program for the CDE.
Key phrases: buffer overflow
CVE-1999-0113: Some implementations of rlogin allow root access if given a -froot parameter.
Key phrases: root access if given a -froot parameter
CVE-1999-0114: Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
Key phrases: symlink, execute commands
CVE-1999-0115: AIX bugfiler program allows local users to gain root access.
Key phrases: gain root access
CVE-1999-0116: Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
Key phrases: denial of service, syn flood
CVE-1999-0117: AIX passwd allows local users to gain root access.
Key phrases: gain root access
CVE-1999-0118: AIX infod allows local users to gain root access through an X display.
Key phrases: gain root access, gain root access through an X display
CVE-1999-0119: Windows NT 4.0 beta allows users to read and delete shares.
Key phrases: read and delete shares
CVE-1999-0120: Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root.
Key phrases: gain root access, gain root access if it is writable by
CVE-1999-0121: Buffer overflow in dtaction command gives root access.
Key phrases: buffer overflow, root access
CVE-1999-0122: Buffer overflow in AIX lchangelv gives root access.
Key phrases: buffer overflow, root access
CVE-1999-0123: Race condition in Linux mailx command allows local users to read user files.
Key phrases: read user files, race condition
CVE-1999-0124: Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon.
Key phrases: read any files that can be accessed by
CVE-1999-0125: Buffer overflow in SGI IRIX mailx program.
Key phrases: buffer overflow
CVE-1999-0126: SGI IRIX buffer overflow in xterm and Xaw allows root access.
Key phrases: root access, buffer overflow
CVE-1999-0127: swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access.
Key phrases: overwrite arbitrary files, gain root access, create or overwrite arbitrary files to gain root
CVE-1999-0128: Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
Key phrases: oversized icmp ping packets, denial of service, ping o death
CVE-1999-0129: Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
Key phrases: gain group permissions, write to a file and gain group permissions, to write files
CVE-1999-0130: Local users can start Sendmail in daemon mode and gain root privileges.
Key phrases: gain root privileges, daemon mode
CVE-1999-0131: Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
Key phrases: buffer overflow, denial of service, root access
CVE-1999-0132: Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
Key phrases: overwrite arbitrary files, gain root access, overwrite arbitrary files and gain root access, expreserve
CVE-1999-0133: fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
Key phrases: overwrite arbitrary files, gain root access, overwrite arbitrary files and gain root access, fm_fls license server
CVE-1999-0134: vold in Solaris 2.x allows local users to gain root access.
Key phrases: gain root access
CVE-1999-0135: admintool in Solaris allows a local user to write to arbitrary files and gain root access.
Key phrases: gain root access, write to arbitrary files and gain root access
CVE-1999-0136: Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
Key phrases: gain root access, write to arbitrary files and gain root access
CVE-1999-0137: The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
Key phrases: gain root access, gain root access via a buffer overflow
CVE-1999-0138: The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
Key phrases: root access, root privileges
CVE-1999-0139: Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.
Key phrases: obtain root access, buffer overflow
CVE-1999-0140: Denial of service in RAS/PPTP on NT systems.
Key phrases: denial of service
CVE-1999-0141: Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
Key phrases: execute arbitrary commands, execute arbitrary commands as the user of the
CVE-1999-0142: The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
Key phrases: connect to arbitrary hosts
CVE-1999-0143: Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
Key phrases: masquerade as another by breaking and generating session
CVE-1999-0144: Denial of service in Qmail by specifying a large number of recipients with the RCPT command.
Key phrases: denial of service
CVE-1999-0145: Sendmail WIZ command enabled, allowing root access.
Key phrases: root access
CVE-1999-0146: The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
Key phrases: execute arbitrary commands, execute arbitrary commands via encoded carriage return characters
CVE-1999-0147: The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
Key phrases: remote execution of arbitrary commands
CVE-1999-0148: The handler CGI program in IRIX allows arbitrary command execution.
Key phrases: allows arbitrary command execution, arbitrary commands
CVE-1999-0149: The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
Key phrases: view arbitrary directory listings, view arbitrary directory listings via a .. (, .. (dot dot), dot dot attack
CVE-1999-0150: The Perl fingerd program allows arbitrary command execution from remote users.
Key phrases: allows arbitrary command execution, arbitrary command execution from remote users, arbitrary commands
CVE-1999-0151: The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
Key phrases: root access
CVE-1999-0152: The DG/UX finger daemon allows remote command execution through shell metacharacters.
Key phrases: remote command execution through shell metacharacters
CVE-1999-0153: Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
Key phrases: out of band (oob), data denial of service
CVE-1999-0154: IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
Key phrases: read the source code for ASP pages by
CVE-1999-0155: The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
Key phrases: execute commands
CVE-1999-0156: wu-ftpd FTP daemon allows any user and password combination.
Key phrases: any user and password combination
CVE-1999-0157: Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
Key phrases: cbac ip fragmentation, denial of service
CVE-1999-0158: Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.
Key phrases: connect to port 8080 on the PFM server
CVE-1999-0159: Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login).  This applies to some IOS 9.x, 10.x, and 11.x releases.
Key phrases: crash, interactive prompt
CVE-1999-0160: Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
CVE-1999-0161: In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
Key phrases: bypass filtering
CVE-1999-0162: The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
Key phrases: bypass filtering
CVE-1999-0163: In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
Key phrases: pipe character, root commands
CVE-1999-0164: A race condition in the Solaris ps command allows an attacker to overwrite critical files.
Key phrases: overwrite critical files, race condition
CVE-1999-0165: NFS cache poisoning.
Key phrases: nfs cache poisoning
CVE-1999-0166: NFS allows users to use a "cd .." command to access other directories besides the exported file system.
Key phrases: use a "cd .." command to
CVE-1999-0167: In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.
Key phrases: nfs file handles, unauthorized access
CVE-1999-0168: The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place.  For example, NFS file systems could be mounted through the portmapper despite export restrictions.
Key phrases: bypass authentication
CVE-1999-0169: NFS allows attackers to read and write any file on the system by specifying a false UID.
Key phrases: read and write any file on the system, false uid, to write files
CVE-1999-0170: Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
CVE-1999-0171: Denial of service in syslog by sending it a large number of superfluous messages.
Key phrases: denial of service, superfluous messages
CVE-1999-0172: FormMail CGI program allows remote execution of commands.
Key phrases: remote execution of commands
CVE-1999-0173: FormMail CGI program can be used by web servers other than the host server that the program resides on.
CVE-1999-0174: The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, view-source cgi program, .. (dot dot), dot dot attack
CVE-1999-0175: The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
Key phrases: read any file on the system that is, internally accessible
CVE-1999-0176: The Webgais program allows a remote user to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-1999-0177: The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
Key phrases: execute arbitrary programs
CVE-1999-0178: Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
Key phrases: execute arbitrary code, execute arbitrary code via a long query string, buffer overflow
CVE-1999-0179: Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
Key phrases: crashes, locks up
CVE-1999-0180: in.rshd allows users to login with a NULL username and execute commands.
Key phrases: login with a NULL username and execute commands, null username
CVE-1999-0181: The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
Key phrases: denial of service
CVE-1999-0182: Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
Key phrases: obtain root access, obtain root access by specifying a long password, buffer overflow
CVE-1999-0183: Linux implementations of TFTP would allow access to files outside the restricted directory.
Key phrases: files outside the restricted directory
CVE-1999-0184: When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
Key phrases: the DNS server, for malicious modification of DNS records, dynamic updates
CVE-1999-0185: In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
Key phrases: remote command execution
CVE-1999-0186: In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
Key phrases: execute arbitrary commands, execute arbitrary commands as root, default community string
CVE-1999-0188: The passwd command in Solaris can be subjected to a denial of service.
Key phrases: denial of service
CVE-1999-0189: Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
CVE-1999-0190: Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
Key phrases: overwrite arbitrary files, gain root access, solaris rpcbind
CVE-1999-0191: IIS newdsn.exe CGI script allows remote users to overwrite files.
Key phrases: overwrite files
CVE-1999-0192: Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
Key phrases: gain root access, gain root access via the TERMCAP environmental variable, buffer overflow
CVE-1999-0193: Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
Key phrases: denial of service, zero length tcp option, reboot
CVE-1999-0194: Denial of service in in.comsat allows attackers to generate messages.
Key phrases: generate messages, denial of service
CVE-1999-0195: Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
Key phrases: register or unregister RPC services or spoof RPC, denial of service, spoofing
CVE-1999-0196: websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
Key phrases: access arbitrary files, access arbitrary files and execute arbitrary code via
CVE-1999-0197: finger 0@host on some systems may print information on some user accounts.
Key phrases: finger, print information
CVE-1999-0198: finger .@host on some systems may print information on some user accounts.
Key phrases: user accounts
CVE-1999-0199: manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.
Key phrases: access a dangling pointer in an application whose, unspecified
CVE-1999-0200: Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
Key phrases: log into the FTP server using any username, guest account
CVE-1999-0201: A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
CVE-1999-0202: The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-1999-0203: In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
Key phrases: gain root privileges, invalid rcpt to address, bounce
CVE-1999-0204: Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
Key phrases: execute root commands, ident
CVE-1999-0205: Denial of service in Sendmail 8.6.11 and 8.6.12.
Key phrases: denial of service
CVE-1999-0206: MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
Key phrases: mime buffer overflow, root access
CVE-1999-0207: Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
Key phrases: reply-to field, execute commands
CVE-1999-0208: rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
Key phrases: execute arbitrary commands, rpc.ypupdated (nis)
CVE-1999-0209: The SunView (SunTools) selection_svc facility allows remote users to read files.
Key phrases: read files
CVE-1999-0210: Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
Key phrases: gain privileges, gain privileges via shell metacharacters
CVE-1999-0211: Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
Key phrases: be mounted by anyone, extra long export lists
CVE-1999-0212: Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
Key phrases: determine what files are on the server
CVE-1999-0213: libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
Key phrases: denial of service
CVE-1999-0214: Denial of service by sending forged ICMP unreachable packets.
Key phrases: denial of service, icmp unreachable packets
CVE-1999-0215: Routed allows attackers to append data to files.
Key phrases: append data to files, routed
CVE-1999-0216: Denial of service of inetd on Linux through SYN and RST packets.
Key phrases: denial of service, rst packets
CVE-1999-0217: Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
Key phrases: malicious option settings, reboot
CVE-1999-0218: Livingston portmaster machines could be rebooted via a series of commands.
Key phrases: reboot
CVE-1999-0219: Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-1999-0220: Attackers can do a denial of service of IRC by crashing the server.
Key phrases: denial of service, crashing the server
CVE-1999-0221: Denial of service of Ascend routers through port 150 (remote administration).
Key phrases: denial of service, port, remote administration
CVE-1999-0222: Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
Key phrases: reboot the router using a long URL, denial of service
CVE-1999-0223: Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
Key phrases: inverse dns entry, crash
CVE-1999-0224: Denial of service in Windows NT messenger service through a long username.
Key phrases: denial of service, long username
CVE-1999-0225: Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
Key phrases: cause a denial of service via a malformed, malformed smb logon request
CVE-1999-0226: Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
Key phrases: fragmented ip packets, denial of service
CVE-1999-0227: Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
Key phrases: a denial of service, access violation
CVE-1999-0228: Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
Key phrases: denial of service
CVE-1999-0229: Denial of service in Windows NT IIS server using ..\\\\..
Key phrases: denial of service
CVE-1999-0230: Buffer overflow in Cisco 7xx routers through the telnet service.
Key phrases: buffer overflow
CVE-1999-0231: Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
Key phrases: buffer overflow, denial of service, remote access
CVE-1999-0232: Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
Key phrases: buffer overflow, remote access
CVE-1999-0233: IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
Key phrases: execute arbitrary commands, execute arbitrary commands using .bat or .cmd files
CVE-1999-0234: Bash treats any character with a value of 255 as a command separator.
CVE-1999-0235: Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
Key phrases: buffer overflow, remote access
CVE-1999-0236: ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
Key phrases: scriptalias directory
CVE-1999-0237: Remote execution of arbitrary commands through Guestbook CGI program.
Key phrases: remote execution, arbitrary commands
CVE-1999-0238: php.cgi allows attackers to read any file on the system.
Key phrases: read any file on the system
CVE-1999-0239: Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
CVE-1999-0240: Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
Key phrases: fragmented SYN packets with IP reserved bits in, fragmented syn packets
CVE-1999-0241: Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
Key phrases: execute commands, guessable magic cookies
CVE-1999-0242: Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.
Key phrases: shadow passwords
CVE-1999-0243: Linux cfingerd could be exploited to gain root access.
Key phrases: gain root access
CVE-1999-0244: Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
Key phrases: remote execution of commands as root, buffer overflow
CVE-1999-0245: Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
CVE-1999-0246: HP Remote Watch allows a remote user to gain root access.
Key phrases: gain root access
CVE-1999-0247: Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-1999-0248: A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Key phrases: steal another user's credentials, race condition
CVE-1999-0249: Windows NT RSHSVC program allows remote users to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-1999-0250: Denial of service in Qmail through long SMTP commands.
Key phrases: denial of service, long smtp commands
CVE-1999-0251: Denial of service in talk program allows remote attackers to disrupt a user's display.
Key phrases: disrupt a user's display, denial of service
CVE-1999-0252: Buffer overflow in listserv allows arbitrary command execution.
Key phrases: allows arbitrary command execution, buffer overflow, arbitrary commands
CVE-1999-0253: IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
Key phrases: read source code for ASP programs by using
CVE-1999-0254: A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
Key phrases: obtain sensitive information, modify MIB tables and obtain sensitive information, snmp community string
CVE-1999-0255: Buffer overflow in ircd allows arbitrary command execution.
Key phrases: allows arbitrary command execution, buffer overflow, arbitrary commands
CVE-1999-0256: Buffer overflow in War FTP allows remote execution of commands.
Key phrases: remote execution of commands, buffer overflow
CVE-1999-0257: Nestea variation of teardrop IP fragmentation denial of service.
Key phrases: ip fragmentation, denial of service
CVE-1999-0258: Bonk variation of teardrop IP fragmentation denial of service.
Key phrases: teardrop ip fragmentation, denial of service
CVE-1999-0259: cfingerd lists all users on a system via search.**@target.
CVE-1999-0260: The jj CGI program allows command execution via shell metacharacters.
Key phrases: command execution via shell metacharacters
CVE-1999-0261: Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.
Key phrases: buffer overflows, crash
CVE-1999-0262: Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-1999-0263: Solaris SUNWadmap can be exploited to obtain root access.
Key phrases: obtain root access, solaris sunwadmap
CVE-1999-0264: htmlscript CGI program allows remote read access to files.
Key phrases: files, remote read access
CVE-1999-0265: ICMP redirect messages may crash or lock up a host.
Key phrases: icmp redirect messages, crash, lock up
CVE-1999-0266: The info2www CGI script allows remote file access or remote command execution.
Key phrases: remote file access or remote command execution
CVE-1999-0267: Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
Key phrases: remote command execution, buffer overflow
CVE-1999-0268: MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
Key phrases: upload
CVE-1999-0269: Netscape Enterprise servers may list files through the PageServices query.
Key phrases: pageservices query
CVE-1999-0270: Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files, directory traversal
CVE-1999-0271: Progressive Networks Real Video server (pnserver) can be crashed remotely.
Key phrases: crashed remotely
CVE-1999-0272: Denial of service in Slmail v2.5 through the POP3 port.
Key phrases: denial of service, port
CVE-1999-0273: Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
Key phrases: denial of service, ^d characters
CVE-1999-0274: Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
Key phrases: denial of service, malicious packet
CVE-1999-0275: Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
Key phrases: denial of service
CVE-1999-0276: mSQL v2.0.1 and below allows remote execution through a buffer overflow.
Key phrases: remote execution through a buffer overflow
CVE-1999-0277: The WorkMan program can be used to overwrite any file to get root access.
Key phrases: root access
CVE-1999-0278: In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
Key phrases: obtain source code for ASP files by appending
CVE-1999-0279: Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
Key phrases: remote command execution via shell metacharacters
CVE-1999-0280: Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
Key phrases: remote command execution
CVE-1999-0281: Denial of service in IIS using long URLs.
Key phrases: denial of service, long urls
CVE-1999-0283: The Java Web Server would allow remote users to obtain the source code for CGI programs.
Key phrases: obtain the source code for CGI programs.
CVE-1999-0284: Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
Key phrases: denial of service, buffer overflow
CVE-1999-0285: Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
Key phrases: denial of service
CVE-1999-0286: In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
Key phrases: read source code for active pages
CVE-1999-0287: Vulnerability in the Wguest CGI program.
CVE-1999-0288: The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
Key phrases: denial of service (process termination), cause a denial of service (process termination, invalid udp frames, flood of random packets
CVE-1999-0289: The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
Key phrases: restricted files
CVE-1999-0290: The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
Key phrases: cause a denial of service via a large, wingate telnet proxy
CVE-1999-0291: The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
Key phrases: redirect connections without authentication
CVE-1999-0292: Denial of service through Winpopup using large user names.
Key phrases: denial of service, winpopup, large user names
CVE-1999-0293: AAA authentication on Cisco systems allows attackers to execute commands without authorization.
Key phrases: execute commands without authorization, aaa authentication
CVE-1999-0294: All records in a WINS database can be deleted through SNMP for a denial of service.
Key phrases: denial of service
CVE-1999-0295: Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
Key phrases: read kernel memory, root privilege
CVE-1999-0296: Solaris volrmmount program allows attackers to read any file.
Key phrases: read any file
CVE-1999-0297: Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
Key phrases: obtain root access, obtain root access via a long environmental variable, buffer overflow
CVE-1999-0298: ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
Key phrases: overwrite files via a .. (dot dot, ypbind, dot dot attack
CVE-1999-0299: Buffer overflow in FreeBSD lpd through long DNS hostnames.
Key phrases: buffer overflow
CVE-1999-0300: nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
Key phrases: add malicious NIS+ servers, nis_cachemgr
CVE-1999-0301: Buffer overflow in SunOS/Solaris ps command.
Key phrases: buffer overflow
CVE-1999-0302: SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
Key phrases: execute arbitrary commands
CVE-1999-0303: Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
Key phrases: buffer overflow
CVE-1999-0304: mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
Key phrases: modify memory through devices, mmap function
CVE-1999-0305: The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
Key phrases: spoof TCP connections, source routed packets, spoof tcp connections, spoofing
CVE-1999-0306: buffer overflow in HP xlock program.
Key phrases: buffer overflow
CVE-1999-0307: Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-1999-0308: HP-UX gwind program allows users to modify arbitrary files.
Key phrases: modify arbitrary files