yahoo-inc/cve-impacts huggingface dataset:
CVE-1999-0309: HP-UX vgdisplay program gives root access to local users.
Key phrases: root access
CVE-1999-0310: SSH 1.2.25 on HP-UX allows access to new user accounts.
Key phrases: new user accounts
CVE-1999-0311: fpkg2swpk in HP-UX allows local users to gain root access.
Key phrases: gain root access
CVE-1999-0312: HP ypbind allows attackers with root privileges to modify NIS data.
Key phrases: modify NIS data, hp ypbind, root privilege
CVE-1999-0313: disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Key phrases: gain root access, gain root access using relative pathnames, disk_bandwidth
CVE-1999-0314: ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Key phrases: gain root access, gain root access using relative pathnames
CVE-1999-0315: Buffer overflow in Solaris fdformat command gives root access to local users.
Key phrases: buffer overflow, root access
CVE-1999-0316: Buffer overflow in Linux splitvt command gives root access to local users.
Key phrases: buffer overflow, root access
CVE-1999-0317: Buffer overflow in Linux su command gives root access to local users.
Key phrases: buffer overflow, root access
CVE-1999-0318: Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
Key phrases: gain access, gain access through an environmental variable, buffer overflow
CVE-1999-0319: Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
Key phrases: gain access, gain access through a user resource setting, buffer overflow
CVE-1999-0320: SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
Key phrases: overwriting arbitrary files, obtain root access, obtain root access by overwriting arbitrary files, cmsd, overwrite arbitrary files
CVE-1999-0321: Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0322: The open() function in FreeBSD allows local attackers to write to arbitrary files.
Key phrases: write to arbitrary files
CVE-1999-0323: FreeBSD mmap function allows users to modify append-only or immutable files.
Key phrases: modify append-only or immutable files
CVE-1999-0324: ppl program in HP-UX allows local users to create root files through symlinks.
Key phrases: create root files through symlinks
CVE-1999-0325: vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
Key phrases: create root files through symlinks, vhe_u_mnt program
CVE-1999-0326: Vulnerability in HP-UX mediainit program.
CVE-1999-0327: SGI syserr program allows local users to corrupt files.
Key phrases: corrupt files, sgi syserr program
CVE-1999-0328: SGI permissions program allows local users to gain root privileges.
Key phrases: gain root privileges, sgi permissions program
CVE-1999-0329: SGI mediad program allows local users to gain root access.
Key phrases: gain root access
CVE-1999-0330: Linux bdash game has a buffer overflow that allows local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0331: Buffer overflow in Internet Explorer 4.0(1).
Key phrases: buffer overflow
CVE-1999-0332: Buffer overflow in NetMeeting allows denial of service and remote command execution.
Key phrases: denial of service and remote command execution, buffer overflow
CVE-1999-0333: HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
Key phrases: gain root access, remote execution of commands as root via spoofing, symlink
CVE-1999-0334: In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
Key phrases: obtain root access
CVE-1999-0336: Buffer overflow in mstm in HP-UX allows local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0337: AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
Key phrases: gain additional privileges, gain additional privileges when network printing is enabled
CVE-1999-0338: AIX Licensed Program Product performance tools allow local users to gain root access.
Key phrases: gain root access
CVE-1999-0339: Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
Key phrases: gain additional privileges, buffer overflow, root access
CVE-1999-0340: Buffer overflow in Linux Slackware crond program allows local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0341: Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0342: Linux PAM modules allow local users to gain root access using temporary files.
Key phrases: gain root access, gain root access using temporary files
CVE-1999-0343: A malicious Palace server can force a client to execute arbitrary programs.
Key phrases: execute arbitrary programs
CVE-1999-0344: NT users can gain debug-level access on a system process using the Sechole exploit.
Key phrases: gain debug-level access, sechole exploit
CVE-1999-0345: Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
Key phrases: jolt icmp, denial of service
CVE-1999-0346: CGI PHP mlog script allows an attacker to read any file on the target server.
Key phrases: read any file on the target server, cgi php mlog script
CVE-1999-0347: Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
Key phrases: read local files and spoof web pages via, spoofing
CVE-1999-0348: IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
Key phrases: iis asp caching problem, sensitive information
CVE-1999-0349: A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
Key phrases: execute arbitrary commands, conduct a denial of service and, buffer overflow
CVE-1999-0350: Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
Key phrases: race condition, root access
CVE-1999-0351: FTP PASV "Pizza Thief" denial of service and unauthorized data access.  Attackers can steal data by connecting to a port that was intended for use by a client.
Key phrases: denial of service, unauthorized data access, port
CVE-1999-0352: ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.
Key phrases: weak password encryption
CVE-1999-0353: rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
Key phrases: remote root access
CVE-1999-0354: Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content.  Also applies to Outlook when the client views a malicious email message.
Key phrases: allows arbitrary execution, the IE client through the Word 97 template
CVE-1999-0355: Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
Key phrases: denial of service, reboot
CVE-1999-0356: ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
Key phrases: weak encryption
CVE-1999-0357: Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
Key phrases: cause a denial of service via crafted ", invalid fragmentation offsets
CVE-1999-0358: Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
Key phrases: buffer overflow
CVE-1999-0359: ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.
Key phrases: obtain passwords, perform a denial of service by locking out
CVE-1999-0360: MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
Key phrases: upload content, execute commands remotely
CVE-1999-0361: NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
Key phrases: administrative changes without logging, unencrypted
CVE-1999-0362: WS_FTP server remote denial of service through cwd command.
Key phrases: remote denial of service, cwd command
CVE-1999-0363: SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
Key phrases: buffer overflow, root compromise
CVE-1999-0364: Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
Key phrases: data, plaintext
CVE-1999-0365: The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
Key phrases: remote command execution using shell metacharacters that are, metamail package
CVE-1999-0366: In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
Key phrases: network shares using a blank password, null nt hash value
CVE-1999-0367: NetBSD netstat command allows local users to access kernel memory.
Key phrases: access kernel memory
CVE-1999-0368: Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
Key phrases: buffer overflows, remote root access
CVE-1999-0369: The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0370: In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
Key phrases: overwriting arbitrary files, man, catman, overwrite arbitrary files
CVE-1999-0371: Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
Key phrases: overwrite sensitive files through /tmp symlinks
CVE-1999-0372: The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
CVE-1999-0373: Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
Key phrases: execute commands as root, buffer overflow
CVE-1999-0374: Debian GNU/Linux cfengine package is susceptible to a symlink attack.
Key phrases: symlink
CVE-1999-0375: Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
Key phrases: execute commands, buffer overflow
CVE-1999-0376: Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
Key phrases: obtain administrator privileges, knowndlls list
CVE-1999-0377: Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
Key phrases: perform a denial of service by filling a, process table
CVE-1999-0378: InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
CVE-1999-0379: Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
Key phrases: execute commands on the visiting user's machine
CVE-1999-0380: SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
Key phrases: access any file in the NTFS file system
CVE-1999-0381: super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0382: The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
Key phrases: run programs with elevated privileges
CVE-1999-0383: ACC Tigris allows public access without a login.
Key phrases: public access without a login
CVE-1999-0384: The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
CVE-1999-0385: The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
Key phrases: conduct a denial of service or execute commands, buffer overflow
CVE-1999-0386: Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
Key phrases: read files on the server by using a, nonstandard url
CVE-1999-0387: A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
Key phrases: read plaintext network passwords, legacy credential caching mechanism
CVE-1999-0388: DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
Key phrases: execute commands as root
CVE-1999-0389: Buffer overflow in the bootp server in the Debian Linux netstd package.
Key phrases: buffer overflow
CVE-1999-0390: Buffer overflow in Dosemu Slang library in Linux.
Key phrases: buffer overflow
CVE-1999-0391: The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
Key phrases: replay the response and impersonate a user
CVE-1999-0392: Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
Key phrases: buffer overflow
CVE-1999-0393: Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
Key phrases: denial of service, large number of headers
CVE-1999-0394: DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
Key phrases: change another user's password without knowing the
CVE-1999-0395: A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
Key phrases: spoof a BackWeb server, race condition, spoofing
CVE-1999-0396: A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, race condition
CVE-1999-0397: The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
Key phrases: plaintext
CVE-1999-0398: In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
Key phrases: login, expired accounts
CVE-1999-0399: The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
Key phrases: place a malicious file in a different location, execute commands
CVE-1999-0400: Denial of service in Linux 2.2.0 running the ldd command on a core file.
Key phrases: denial of service
CVE-1999-0401: A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
Key phrases: read arbitrary memory, read arbitrary memory from /proc files, race condition
CVE-1999-0402: wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
CVE-1999-0403: A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
Key phrases: perform a denial of service
CVE-1999-0404: Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
Key phrases: remote command execution, buffer overflow
CVE-1999-0405: A buffer overflow in lsof allows local users to obtain root privilege.
Key phrases: obtain root privilege, buffer overflow
CVE-1999-0406: Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
Key phrases: obtain root privilege, buffer overflow
CVE-1999-0407: By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
Key phrases: proxies
CVE-1999-0408: Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
Key phrases: world readable
CVE-1999-0409: Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
Key phrases: obtain root access, buffer overflow
CVE-1999-0410: The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
Key phrases: obtain root access, buffer overflow
CVE-1999-0411: Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
Key phrases: gain root access, symlink
CVE-1999-0412: In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Key phrases: system
CVE-1999-0413: A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
Key phrases: gain root access, gain root access through the X server font, buffer overflow
CVE-1999-0414: In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
Key phrases: spoofing
CVE-1999-0415: The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
Key phrases: change the router's configuration, http server
CVE-1999-0416: Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
Key phrases: cause a system reload via a TCP connection
CVE-1999-0417: 64 bit Solaris 7 procfs allows local users to perform a denial of service.
Key phrases: perform a denial of service, procfs
CVE-1999-0418: Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
Key phrases: denial of service
CVE-1999-0419: When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.
Key phrases: denial of service
CVE-1999-0420: umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
Key phrases: gain root privileges, gain root privileges by changing their uid through, umapfs
CVE-1999-0421: During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
Key phrases: obtain root access, reboot
CVE-1999-0422: In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
Key phrases: execute programs in some file systems that have
CVE-1999-0423: Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
Key phrases: gain additional privileges
CVE-1999-0424: talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
Key phrases: overwrite arbitrary files, overwrite arbitrary files of another user whose Netscape, netscape crashes
CVE-1999-0425: talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
Key phrases: kill an arbitrary process of another user whose, crashes
CVE-1999-0426: The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
Key phrases: IP spoofing, ip spoofing
CVE-1999-0427: Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
Key phrases: perform a denial of service by sending attachments, long file names
CVE-1999-0428: OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
Key phrases: bypass access controls, reuse SSL sessions and bypass access controls
CVE-1999-0429: The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
Key phrases: clear
CVE-1999-0430: Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload.
Key phrases: perform a denial of service by forcing the
CVE-1999-0431: Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
Key phrases: perform an IP fragmentation attack, ip fragmentation, denial of service
CVE-1999-0432: ftp on HP-UX 11.00 allows local users to gain privileges.
Key phrases: gain privileges, ftp
CVE-1999-0433: XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Key phrases: gain privileges, create files in restricted directories, gain privileges or cause a denial of service, symlink
CVE-1999-0434: XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Key phrases: gain privileges, create files in restricted directories, gain privileges or cause a denial of service, symlink
CVE-1999-0435: MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
Key phrases: gain privileges, gain privileges through SAM, sam
CVE-1999-0436: Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
Key phrases: gain privileges
CVE-1999-0437: Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
Key phrases: denial of service, malicious string, http port
CVE-1999-0438: Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
Key phrases: denial of service, malicious udp packet
CVE-1999-0439: Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
Key phrases: execute commands via expansions in the procmailrc configuration, buffer overflow
CVE-1999-0440: The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
Key phrases: remote execution through malicious web pages
CVE-1999-0441: Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.
Key phrases: denial of service, buffer overflow
CVE-1999-0442: Solaris ff.core allows local users to modify files.
Key phrases: modify files
CVE-1999-0443: Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
Key phrases: conduct a replay attack to steal the administrator
CVE-1999-0444: Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
Key phrases: denial of service, malicious arp packets, message box display, log files
CVE-1999-0445: In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
CVE-1999-0446: Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
Key phrases: denial of service, bug in vfs
CVE-1999-0447: Local users can gain privileges using the debug utility in the MPE/iX operating system.
Key phrases: gain privileges
CVE-1999-0448: IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
Key phrases: hide the URL they really request, http request methods
CVE-1999-0449: The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption
CVE-1999-0450: In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
Key phrases: real path, non-existent url
CVE-1999-0451: Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
Key phrases: prevent any server from listening on any non, denial of service
CVE-1999-0452: A service or application has a backdoor password that was placed there by the developer.
Key phrases: backdoor password
CVE-1999-0453: An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
CVE-1999-0454: A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
CVE-1999-0455: The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
Key phrases: read or delete files on the server via
CVE-1999-0457: Linux ftpwatch program allows local users to gain root privileges.
Key phrases: gain root privileges
CVE-1999-0458: L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
Key phrases: temporary files
CVE-1999-0459: Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
Key phrases: denial of service, milo, reboot
CVE-1999-0460: Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
Key phrases: perform a denial of service, buffer overflow
CVE-1999-0461: Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
Key phrases: insert and delete entries by spoofing a source, spoofing a source address
CVE-1999-0462: suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
Key phrases: gain root access, gain root access by placing a setuid script
CVE-1999-0463: Remote attackers can perform a denial of service using IRIX fcagent.
Key phrases: denial of service, irix fcagent
CVE-1999-0464: Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
Key phrases: denial of service, long filenames
CVE-1999-0465: Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
Key phrases: crash, img tag, large width parameter
CVE-1999-0466: The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
Key phrases: write arbitrary files, read or write arbitrary files on the disk
CVE-1999-0467: The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
Key phrases: read arbitrary files, read arbitrary files using the "template"
CVE-1999-0468: Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
Key phrases: read arbitrary files, read arbitrary files on the client's file
CVE-1999-0469: Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.
Key phrases: spoof a legitimate web site and capture information, window spoofing
CVE-1999-0470: A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
Key phrases: be easily decrypted, weak encryption
CVE-1999-0471: The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.
Key phrases: reconfigure the proxy without authentication through the "
CVE-1999-0472: The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.
Key phrases: snmp default community name public
CVE-1999-0473: The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
CVE-1999-0474: The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
Key phrases: access arbitrary files, use .. to access arbitrary files outside of
CVE-1999-0475: A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Key phrases: read arbitrary files, read arbitrary files available to the user who, race condition
CVE-1999-0476: A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
Key phrases: be easily decrypted by a local user, weak encryption
CVE-1999-0477: The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
Key phrases: upload files to the server via openfile.cfm
CVE-1999-0478: Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.
Key phrases: denial of service, accepting connections
CVE-1999-0479: Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
Key phrases: denial of service
CVE-1999-0480: Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
Key phrases: denial of service, symlink
CVE-1999-0481: Denial of service in "poll" in OpenBSD.
Key phrases: denial of service
CVE-1999-0482: OpenBSD kernel crash through TSS handling, as caused by the crashme program.
Key phrases: tss handling, crash
CVE-1999-0483: OpenBSD crash using nlink value in FFS and EXT2FS filesystems.
Key phrases: nlink value, crash
CVE-1999-0484: Buffer overflow in OpenBSD ping.
Key phrases: buffer overflow
CVE-1999-0485: Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
Key phrases: system crash, ipintr()
CVE-1999-0486: Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.
Key phrases: malicious hyperlink, system crash, denial of service
CVE-1999-0487: The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files, dhtml edit activex control
CVE-1999-0488: Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.
Key phrases: execute security scripts in a different security context
CVE-1999-0489: MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.
Key phrases: paste a file name into the file upload, untrusted scripted paste
CVE-1999-0490: MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
Key phrases: learn information about a local user's files, img src tag
CVE-1999-0491: The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
Key phrases: execute commands as another user by creating a
CVE-1999-0492: The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.
Key phrases: identify users on the target system based on, ffingerd
CVE-1999-0493: rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.
Key phrases: forward RPC calls to the local operating system, bugs
CVE-1999-0494: Denial of service in WinGate proxy through a buffer overflow in POP3.
Key phrases: denial of service, buffer overflow
CVE-1999-0495: A remote attacker can gain access to a file system using ..  (dot dot) when accessing SMB shares.
Key phrases: gain access
CVE-1999-0496: A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin.
Key phrases: gain administrative rights
CVE-1999-0497: Anonymous FTP is enabled.
Key phrases: anonymous ftp
CVE-1999-0498: TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.
Key phrases: access sensitive information such as password files
CVE-1999-0499: NETBIOS share information may be published through SNMP registry keys in NT.
Key phrases: netbios share information, snmp registry keys
CVE-1999-0501: A Unix account has a guessable password.
Key phrases: guessable password
CVE-1999-0502: A Unix account has a default, null, blank, or missing password.
CVE-1999-0503: A Windows NT local user or administrator account has a guessable password.
Key phrases: guessable password
CVE-1999-0504: A Windows NT local user or administrator account has a default, null, blank, or missing password.
Key phrases: missing password
CVE-1999-0505: A Windows NT domain user or administrator account has a guessable password.
Key phrases: guessable password
CVE-1999-0506: A Windows NT domain user or administrator account has a default, null, blank, or missing password.
Key phrases: missing password
CVE-1999-0507: An account on a router, firewall, or other network device has a guessable password.
Key phrases: guessable password
CVE-1999-0508: An account on a router, firewall, or other network device has a default, null, blank, or missing password.
CVE-1999-0509: Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-1999-0510: A router or firewall allows source routed packets from arbitrary hosts.
Key phrases: source routed packets from arbitrary hosts
CVE-1999-0511: IP forwarding is enabled on a machine which is not a router or firewall.
Key phrases: ip forwarding
CVE-1999-0512: A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
Key phrases: SMTP mail relay, abuse by spammers, smtp mail relay
CVE-1999-0513: ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
Key phrases: for a Smurf attack that can cause a, icmp messages, broadcast addresses, smurf, denial of service
CVE-1999-0514: UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target.
Key phrases: for a Fraggle attack that can cause a, broadcast addresses, denial of service, flooding
CVE-1999-0515: An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.
Key phrases: unrestricted remote trust relationship
CVE-1999-0516: An SNMP community name is guessable.
Key phrases: guessable
CVE-1999-0517: An SNMP community name is the default (e.g. public), null, or missing.
Key phrases: snmp community name
CVE-1999-0518: A NETBIOS/SMB share password is guessable.
Key phrases: guessable
CVE-1999-0519: A NETBIOS/SMB share password is the default, null, or missing.
Key phrases: default, missing
CVE-1999-0520: A system-critical NETBIOS/SMB share has inappropriate access control.
Key phrases: inappropriate access control
CVE-1999-0521: An NIS domain name is easily guessable.
Key phrases: guessable
CVE-1999-0522: The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate.
CVE-1999-0523: ICMP echo (ping) is allowed from arbitrary hosts.
Key phrases: icmp echo
CVE-1999-0524: ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
Key phrases: icmp information
CVE-1999-0525: IP traceroute is allowed from arbitrary hosts.
Key phrases: ip traceroute
CVE-1999-0526: An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
Key phrases: connect to the server
CVE-1999-0527: The permissions for system-critical data in an anonymous FTP account are inappropriate.  For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten.
CVE-1999-0528: A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.
Key phrases: external packets
CVE-1999-0529: A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.
CVE-1999-0530: A system is operating in "promiscuous" mode which allows it to perform packet sniffing.
Key phrases: perform packet sniffing
CVE-1999-0532: A DNS server allows zone transfers.
Key phrases: zone transfers
CVE-1999-0533: A DNS server allows inverse queries.
Key phrases: inverse queries
CVE-1999-0534: A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
Key phrases: unsolicited input
CVE-1999-0535: A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
CVE-1999-0537: A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.
Key phrases: execution of active content such as ActiveX
CVE-1999-0541: A password for accessing a WWW URL is guessable.
Key phrases: guessable
CVE-1999-0546: The Windows NT guest account is enabled.
Key phrases: guest account
CVE-1999-0547: An SSH server allows authentication through the .rhosts file.
Key phrases: authentication through the .rhosts file
CVE-1999-0548: A superfluous NFS server is running, but it is not importing or exporting any file systems.
CVE-1999-0549: Windows NT automatically logs in an administrator upon rebooting.
Key phrases: reboot
CVE-1999-0550: A router's routing tables can be obtained from arbitrary hosts.
CVE-1999-0551: HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
Key phrases: run arbitrary commands, run arbitrary commands using malicious print requests, misconfigured
CVE-1999-0554: NFS exports system-critical data to the world, e.g. / or a password file.
Key phrases: nfs exports, system-critical data, password file
CVE-1999-0555: A Unix account with a name other than "root" has UID 0, i.e. root privileges.
Key phrases: root privilege
CVE-1999-0559: A system-critical Unix file or directory has inappropriate permissions.
Key phrases: inappropriate permissions
CVE-1999-0560: A system-critical Windows NT file or directory has inappropriate permissions.
Key phrases: inappropriate permissions
CVE-1999-0561: IIS has the #exec function enabled for Server Side Include (SSI) files.
Key phrases: #exec function
CVE-1999-0562: The registry in Windows NT can be accessed remotely by users who are not administrators.
CVE-1999-0564: An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled.
Key phrases: print arbitrary documents, disabled
CVE-1999-0565: A Sendmail alias allows input to be piped to a program.
Key phrases: be piped to a program
CVE-1999-0566: An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
Key phrases: syslog files, denial of service
CVE-1999-0568: rpc.admind in Solaris is not running in a secure mode.
CVE-1999-0569: A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file.
Key phrases: auto-indexing
CVE-1999-0570: Windows NT is not using a password filter utility, e.g. PASSFILT.DLL.
CVE-1999-0571: A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.
Key phrases: connections from arbitrary hosts
CVE-1999-0572: .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks.
Key phrases: reg files
CVE-1999-0575: A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking.
CVE-1999-0576: A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories.
CVE-1999-0577: A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
CVE-1999-0578: A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
CVE-1999-0579: A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.
Key phrases: non-critical registry keys
CVE-1999-0580: The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.
CVE-1999-0581: The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
CVE-1999-0582: A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc.
CVE-1999-0583: There is a one-way or two-way trust relationship between Windows NT domains.
CVE-1999-0585: A Windows NT administrator account has the default name of Administrator.
CVE-1999-0586: A network service is running on a nonstandard port.
Key phrases: nonstandard port
CVE-1999-0587: A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data.
Key phrases: system-critical data
CVE-1999-0588: A filter in a router or firewall allows unusual fragmented packets.
Key phrases: unusual fragmented packets
CVE-1999-0589: A system-critical Windows NT registry key has inappropriate permissions.
Key phrases: inappropriate permissions
CVE-1999-0590: A system does not present an appropriate legal message or warning to a user who is accessing it.
CVE-1999-0591: An event log in Windows NT has inappropriate access permissions.
Key phrases: inappropriate access permissions
CVE-1999-0592: The Logon box of a Windows NT system displays the name of the last user who logged in.
CVE-1999-0593: The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
Key phrases: shut down a Windows NT system without logging, shutdownwithoutlogon
CVE-1999-0594: A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.
CVE-1999-0595: A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
Key phrases: be recorded, sensitive information
CVE-1999-0596: A Windows NT log file has an inappropriate maximum size or retention period.
CVE-1999-0597: A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.
CVE-1999-0598: A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.
Key phrases: escape detection
CVE-1999-0599: A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.
Key phrases: improper sequence numbers
CVE-1999-0600: A network intrusion detection system (IDS) does not verify the checksum on a packet.
CVE-1999-0601: A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.
CVE-1999-0602: A network intrusion detection system (IDS) does not properly reassemble fragmented packets.
Key phrases: fragmented packets
CVE-1999-0603: In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.
CVE-1999-0604: An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.
Key phrases: incorrect configuration, private information
CVE-1999-0605: An incorrect configuration of the Order Form 1.0 shopping cart  CGI program could disclose private information.
Key phrases: incorrect configuration, private information
CVE-1999-0606: An incorrect configuration of the EZMall 2000 shopping cart  CGI program "mall2000.cgi" could disclose private information.
Key phrases: incorrect configuration, private information
CVE-1999-0607: quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.
Key phrases: obtain the cleartext administrator password, gain privileges, obtain the cleartext administrator password and gain privileges, insufficient access control
CVE-1999-0608: An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
Key phrases: incorrect configuration, private information
CVE-1999-0609: An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.
Key phrases: incorrect configuration, private information
CVE-1999-0610: An incorrect configuration of the Webcart CGI program could disclose private information.
Key phrases: incorrect configuration, disclose private information
CVE-1999-0611: A system-critical Windows NT registry key has an inappropriate value.
Key phrases: inappropriate value
CVE-1999-0612: A version of finger is running that exposes valid user information to any entity on the network.
CVE-1999-0625: The rpc.rquotad service is running.
CVE-1999-0626: A version of rusers is running that exposes valid user information to any entity on the network.
CVE-1999-0627: The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.
Key phrases: execute commands, weak authentication
CVE-1999-0628: The rwho/rwhod service is running, which exposes machine status and user information.
Key phrases: machine status, user information
CVE-1999-0630: The NT Alerter and Messenger services are running.