yahoo-inc/cve-impacts huggingface dataset:
CVE-1999-1474: PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.
Key phrases: cause an application to be run automatically without
CVE-1999-1475: ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
Key phrases: obtain the passwords, gain privileges, obtain the passwords and gain privileges by reading
CVE-1999-1476: A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem.
Key phrases: denial of service (hang), cause a denial of service (hang), invalid instruction, invalid operand with locked instruction
CVE-1999-1477: Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
Key phrases: gain root access, gain root access via a long --espeaker argument, buffer overflow
CVE-1999-1478: The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.
Key phrases: cause a denial of service on any server
CVE-1999-1479: The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters
CVE-1999-1480: (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
Key phrases: create or modify files via a symlink attack
CVE-1999-1481: Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
Key phrases: bypass access controls, bypass access controls via a newline in the
CVE-1999-1482: SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.
Key phrases: gain root access, gain root access via a privilege leak of
CVE-1999-1483: Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long HOME environment, buffer overflow
CVE-1999-1484: Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.
Key phrases: execute arbitrary commands, execute arbitrary commands via the methods (1, buffer overflow
CVE-1999-1485: nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
Key phrases: view files and cause a possible denial of, denial of service
CVE-1999-1486: sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack, setgid adm
CVE-1999-1487: Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.
Key phrases: gain root privileges, gain root privileges by creating and/or modifing any, vulnerability in digest in aix
CVE-1999-1488: sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
Key phrases: read files without authentication
CVE-1999-1489: Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.
Key phrases: gain root privileges, gain root privileges via a long -nopr argument, buffer overflow
CVE-1999-1490: xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
Key phrases: gain root access, gain root access via a long HOME environmental, home environmental variable
CVE-1999-1491: abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
Key phrases: execute arbitrary commands, execute arbitrary commands via a path that points, relative pathnames
CVE-1999-1492: Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges.
Key phrases: create arbitrary root, create arbitrary root owned files, diskperf, diskalign, root privileges
CVE-1999-1493: Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk().
Key phrases: gain root privileges, gain root privileges via insecure system calls, crp
CVE-1999-1494: colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
Key phrases: read arbitrary files, read arbitrary files via the -text argument
CVE-1999-1495: xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-1999-1496: Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
Key phrases: determine the existence of arbitrary files by attempting
CVE-1999-1497: Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Key phrases: read passwords for e-mail accounts, weak encryption
CVE-1999-1498: Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.
Key phrases: read and write to arbitrary files via a, symlink
CVE-1999-1499: named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
Key phrases: destroy files via a symlink attack on (
CVE-1999-1500: Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-1999-1501: (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-1999-1502: Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.
Key phrases: execute arbitrary commands, execute arbitrary commands via long (1), buffer overflows
CVE-1999-1503: Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field.
Key phrases: cause a denial of service in nfrd (, null header, crash
CVE-1999-1504: Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
Key phrases: denial of service (crash), cause a denial of service (crash), long helo command
CVE-1999-1505: Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
Key phrases: execute arbitrary commands, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-1999-1506: Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
Key phrases: access user bin
CVE-1999-1507: Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash.
Key phrases: gain root access, gain root access via insecure permissions on files, crash
CVE-1999-1508: Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.
Key phrases: gain administrator access, gain administrator access by directly calling undocumented URLs, undocumented urls
CVE-1999-1509: Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.
Key phrases: read any file in the file system via, directory traversal
CVE-1999-1510: Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflows
CVE-1999-1511: Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.
Key phrases: execute arbitrary commands, denial of service (crash), cause a denial of service (crash), buffer overflows
CVE-1999-1512: The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.
Key phrases: execute arbitrary commands, execute arbitrary commands as root via an infected, shell metacharacters
CVE-1999-1513: Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities.
Key phrases: conduct unauthorized activities, read-only community string
CVE-1999-1514: Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-1999-1515: A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.
Key phrases: cause a denial of service via messages with, non-default configuration
CVE-1999-1516: A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
Key phrases: execute arbitrary code, crash the mail server and possibly execute arbitrary, buffer overflow
CVE-1999-1517: runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.
Key phrases: read arbitrary files, overwrite or read arbitrary files by providing the, root privilege
CVE-1999-1518: Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.
Key phrases: bypass memory limits (e.g., conduct a denial of service and bypass memory, page faults
CVE-1999-1519: Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion
CVE-1999-1520: A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
Key phrases: obtain the SITE.CSC file, which exposes sensitive SQL database information, configuration problem
CVE-1999-1521: Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.
Key phrases: execute arbitrary code, execute arbitrary code on the server, buffer overflow
CVE-1999-1522: Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.
CVE-1999-1523: Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-1999-1524: FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.
Key phrases: exploit a password recovery feature from the network, brute force password guessing
CVE-1999-1525: Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie.
Key phrases: read a user's mail box and possibly
CVE-1999-1526: Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
CVE-1999-1527: Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.
Key phrases: access the server
CVE-1999-1528: ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.
Key phrases: the unprotected NDS session, unprotected nds session
CVE-1999-1529: A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-1999-1530: cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.
Key phrases: view or modify data located at another virtual, cgiwrap
CVE-1999-1531: Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.
Key phrases: execute arbitrary code, execute arbitrary code on a viewer's system, buffer overflow
CVE-1999-1532: Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion
CVE-1999-1533: Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.
Key phrases: denial of service (hang), cause a denial of service (hang), long password argument
CVE-1999-1534: Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.
Key phrases: obtain root access, obtain root access via a long HOME environmental, buffer overflow
CVE-1999-1535: Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-1999-1536: .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.
Key phrases: gain privileges, gain privileges by appending commands to the file, world writable
CVE-1999-1537: IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion, extra work
CVE-1999-1538: When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
Key phrases: gain access, gain access to sensitive server information
CVE-1999-1539: Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.
Key phrases: execute arbitrary commands, cause a denial of service, buffer overflow
CVE-1999-1540: shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.
Key phrases: obtain the source code., easily decrypt and obtain the source code, weak encryption
CVE-1999-1541: shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.
Key phrases: read or modify decoded shell files before they, symlink
CVE-1999-1542: RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.
Key phrases: execute commands via an e-mail message, shell metacharacters
CVE-1999-1543: MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
Key phrases: weak encryption
CVE-1999-1544: Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-1999-1545: Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users.
Key phrases: read files that were being edited by other, deadjoe, crash
CVE-1999-1546: netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.
Key phrases: world-readable, world-writable
CVE-1999-1547: Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.
Key phrases: bypass access restrictions, bypass access restrictions by replacing a character in
CVE-1999-1548: Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.
Key phrases: succeed with a flood of ARP requests exceeding, denial of service, flood of arp requests
CVE-1999-1549: Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
Key phrases: read a "secure" hidden form value, secure hidden form value, execute commands
CVE-1999-1550: bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.
Key phrases: read arbitrary files, read arbitrary files by specifying the target file
CVE-1999-1551: Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
Key phrases: execute arbitrary commands, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-1999-1552: dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
Key phrases: overwrite arbitrary files, gain privileges, overwrite arbitrary files and gain privileges
CVE-1999-1553: Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long subject line, buffer overflow
CVE-1999-1554: /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.
Key phrases: read the mail of other users
CVE-1999-1555: Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll.
Key phrases: cause Inoculan's antivirus update feature to install, update directory
CVE-1999-1556: Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value.
Key phrases: gain privileges, gain privileges by reading and decrypting the CmdExecAccount, weak encryption
CVE-1999-1557: Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-1999-1558: Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled.
Key phrases: unauthorized access when external authentication is enabled, vulnerability in loginout
CVE-1999-1559: Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.
Key phrases: bypass the login prompt via a CTRL-D
CVE-1999-1560: Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root.
Key phrases: execute arbitrary commands, execute arbitrary commands as the Tiger user, vulnerability in a script
CVE-1999-1561: Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.
Key phrases: gain administrative privileges, gain administrative privileges on the server, plaintext
CVE-1999-1562: gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.
Key phrases: plaintext
CVE-1999-1563: Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.
Key phrases: cause a denial of service via ICMP redirect, icmp redirect storm
CVE-1999-1564: FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.
Key phrases: denial of service (panic), cause a denial of service (panic)
CVE-1999-1565: Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-1999-1566: Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-1999-1567: Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data.
Key phrases: denial of service (high CPU), cause a denial of service (high CPU
CVE-1999-1568: Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.
Key phrases: denial of service (crash), cause a denial of service (crash), off-by-one error
CVE-1999-1569: Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit.
Key phrases: denial of service (resource exhaustion or forced disconnection), cause a denial of service (resource exhaustion, spoofing
CVE-1999-1570: Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.
Key phrases: gain root privileges, gain root privileges via a long -o parameter, buffer overflow
CVE-1999-1571: Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.
Key phrases: gain root privileges, gain root privileges via a long -f parameter, buffer overflow
CVE-1999-1572: cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
Key phrases: read or overwrite those files
CVE-1999-1573: Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
Key phrases: gain privileges, gain privileges or access files, unknown, r-cmnds
CVE-1999-1574: Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."
Key phrases: execute arbitrary code, cause a core dump and possibly execute arbitrary, buffer overflow
CVE-1999-1575: The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.
Key phrases: execute arbitrary commands, create and modify files and execute arbitrary commands
CVE-1999-1576: Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method.
Key phrases: execute arbitrary code, execute arbitrary code via the pdf.setview method, buffer overflow
CVE-1999-1577: Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.
Key phrases: execute arbitrary commands, execute arbitrary commands via long arguments to the, buffer overflow
CVE-1999-1578: Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-1999-1579: The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.
Key phrases: denial of service (resource consumption), cause a denial of service (resource consumption, arbitrary file
CVE-1999-1580: SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option.
Key phrases: gain root privileges, gain root privileges by modifying the IFS (
CVE-1999-1581: Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption, memory leak
CVE-1999-1582: By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality.
Key phrases: arbitrary ports of a target host if an, alternative conduit
CVE-1999-1583: Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long hostname command, buffer overflow
CVE-1999-1584: Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.
Key phrases: gain root privileges, gain root privileges via environment variables, unknown, modload
CVE-1999-1585: The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
Key phrases: gain root privileges, privileged shell, physical access
CVE-1999-1586: loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
Key phrases: gain privileges
CVE-1999-1587: /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
Key phrases: view the environment variables and values of arbitrary
CVE-1999-1588: Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.
Key phrases: execute arbitrary code, execute arbitrary code as root via a long, buffer overflow
CVE-1999-1589: Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
Key phrases: gain root privileges, gain root privileges via unknown attack vectors, unspecified, unspecified vulnerability
CVE-1999-1590: Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021.
Key phrases: read arbitrary GIF files, read arbitrary GIF files via "..", directory traversal
CVE-1999-1591: Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.
Key phrases: bypass authentication, bypass authentication requirements
CVE-1999-1592: Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.  NOTE: this might overlap CVE-1999-0129.
Key phrases: unspecified, unspecified vulnerability
CVE-1999-1593: Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server.  NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
Key phrases: denial of service (connectivity loss), cause a denial of service (connectivity loss, registration
CVE-2000-0001: RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.
Key phrases: cause a denial of service via a long, long ramgen request
CVE-2000-0002: Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
Key phrases: execute commands via a long GET request, buffer overflow
CVE-2000-0003: Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
Key phrases: gain privileges, gain privileges via a long environmental variable, buffer overflow
CVE-2000-0004: ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL.
Key phrases: read source code for executable files by inserting
CVE-2000-0005: HP-UX aserver program allows local users to gain privileges via a symlink attack.
Key phrases: gain privileges, gain privileges via a symlink attack
CVE-2000-0006: strace allows local users to read arbitrary files via memory mapped file names.
Key phrases: read arbitrary files, read arbitrary files via memory mapped file names
CVE-2000-0007: Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service.
Key phrases: conduct a denial of service, internal proxy port
CVE-2000-0008: FTPPro allows local users to read sensitive information, which is stored in plain text.
Key phrases: read sensitive information, plain text
CVE-2000-0009: The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-2000-0010: WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
Key phrases: execute commands via shell metacharacters in the TLD, tld parameter
CVE-2000-0011: Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.
Key phrases: execute commands via a long GET request, buffer overflow
CVE-2000-0012: Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
Key phrases: execute commands, buffer overflow
CVE-2000-0013: IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
Key phrases: gain privileges, gain privileges by including shell metacharacters in a
CVE-2000-0014: Denial of service in Savant web server via a null character in the requested URL.
Key phrases: denial of service, null character
CVE-2000-0015: CascadeView TFTP server allows local users to gain privileges via a symlink attack.
Key phrases: gain privileges, gain privileges via a symlink attack
CVE-2000-0016: Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.
Key phrases: cause a denial of service or execute commands, buffer overflow
CVE-2000-0017: Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
Key phrases: gain root privileges, gain root privileges via a long parameter, buffer overflow
CVE-2000-0018: wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
Key phrases: gain privileges, gain privileges via the .wmmonrc configuration file
CVE-2000-0019: IMail POP3 daemon uses weak encryption, which allows local users to read files.
Key phrases: read files, weak encryption
CVE-2000-0020: DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
Key phrases: conduct a denial of service via a large, dns pro
CVE-2000-0021: Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.
Key phrases: determine the real path of the server via, non-existent script
CVE-2000-0022: Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
Key phrases: anonymous access
CVE-2000-0023: Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0024: IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
Key phrases: bypass access restrictions, bypass access restrictions in third-party software, escape character parsing
CVE-2000-0025: IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
Key phrases: read source code for ASP files if the, virtual directory naming
CVE-2000-0026: Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
Key phrases: gain root access, gain root access via a long username/, buffer overflow
CVE-2000-0027: IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
Key phrases: gain privileges, gain privileges via a symlink attack
CVE-2000-0028: Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
Key phrases: bypass the cross frame security policy, bypass the cross frame security policy and read
CVE-2000-0029: UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
Key phrases: gain privileges, gain privileges via a symlink attack
CVE-2000-0030: Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
Key phrases: fill up restricted disk space by adding files
CVE-2000-0031: The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
Key phrases: gain privileges, gain privileges via a symlink attack
CVE-2000-0032: Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
Key phrases: crash the dmispd daemon by adding a malformed, malformed file
CVE-2000-0033: InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
Key phrases: malformed attachments
CVE-2000-0034: Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."
CVE-2000-0035: resend command in Majordomo allows local users to gain privileges via shell metacharacters.
Key phrases: gain privileges, gain privileges via shell metacharacters
CVE-2000-0036: Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.
Key phrases: html mail attachment
CVE-2000-0037: Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
Key phrases: gain privileges, gain privileges by specifying an alternate configuration file, majordomo wrapper
CVE-2000-0038: glFtpD includes a default glftpd user account with a default password and a UID of 0.
Key phrases: default password
CVE-2000-0039: AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
Key phrases: read files above the document root via a
CVE-2000-0040: glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
Key phrases: gain privileges, gain privileges via metacharacters in the SITE ZIPCHK, glftpd
CVE-2000-0041: Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.
Key phrases: be used as amplifiers in a flood attack, malformed datagrams
CVE-2000-0042: Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.
Key phrases: cause a denial of service or execute commands, buffer overflow
CVE-2000-0043: Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
Key phrases: execute commands via a long GET request, buffer overflow
CVE-2000-0044: Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
Key phrases: read arbitrary files, read arbitrary files or execute commands, macros
CVE-2000-0045: MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
Key phrases: modify passwords for arbitrary MySQL users via the
CVE-2000-0046: Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.
Key phrases: execute commands via a malformed URL within an, buffer overflow
CVE-2000-0047: Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0048: get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program.
Key phrases: gain root access, gain root access by specifying an alternate PATH, alternate path
CVE-2000-0049: Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
Key phrases: execute commands via a long entry in a, buffer overflow
CVE-2000-0050: The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.
Key phrases: access other Webtop sections by specifying explicit URLs, explicit urls
CVE-2000-0051: The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.
Key phrases: cause a denial of service by repeatedly resubmitting
CVE-2000-0052: Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.
Key phrases: gain root access, gain root access via PAM and a .., .. (dot dot), dot dot attack
CVE-2000-0053: Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
Key phrases: cause a denial of service via a malformed, malformed imap request
CVE-2000-0054: search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.
Key phrases: view directories via a .. (dot dot, dot dot attack
CVE-2000-0055: Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.
Key phrases: gain root access, gain root access via a long -n option, buffer overflow
CVE-2000-0056: IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
Key phrases: cause a denial of service with many calls
CVE-2000-0057: Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information.
Key phrases: obtain sensitive system information, cold fusion cfcache tag
CVE-2000-0058: Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.
Key phrases: retrieve email and files, network hotsync program, authentication
CVE-2000-0059: PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
Key phrases: execute commands, shell metacharacters
CVE-2000-0060: Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2000-0061: Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
Key phrases: execute Javascript in a different security context while
CVE-2000-0062: The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.
Key phrases: conduct unauthorized activities
CVE-2000-0063: cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.
Key phrases: read arbitrary files, read arbitrary files by specifying the filename in
CVE-2000-0064: cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters.
Key phrases: cause a denial of service via a malformed, malformed url, shell metacharacters
CVE-2000-0065: Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
Key phrases: execute commands via a long GET request, buffer overflow
CVE-2000-0066: WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.
Key phrases: determine the real pathname of webdirectories via a, malformed url request
CVE-2000-0067: CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.
Key phrases: modify files via a symlink attack
CVE-2000-0068: daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
Key phrases: modify its configuration, daynad program, delete files, read mail, file read
CVE-2000-0069: The recover program in Solstice Backup allows local users to restore sensitive files.
Key phrases: restore sensitive files