yahoo-inc/cve-impacts huggingface dataset:
CVE-1999-0650: The netstat service is running, which provides sensitive information to remote attackers.
Key phrases: sensitive information
CVE-1999-0654: The OS/2 or POSIX subsystem in NT is enabled.
CVE-1999-0656: The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
Key phrases: specifying arbitrary UIDs, enumerate valid usernames by specifying arbitrary UIDs that, ugidd rpc interface
CVE-1999-0661: A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.
CVE-1999-0662: A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.
CVE-1999-0663: A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.
Key phrases: integrity
CVE-1999-0664: An application-critical Windows NT registry key has inappropriate permissions.
Key phrases: inappropriate permissions
CVE-1999-0665: An application-critical Windows NT registry key has an inappropriate value.
Key phrases: inappropriate value
CVE-1999-0667: The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.
Key phrases: spoof ARP replies and poison the ARP cache, denial of service, spoofing
CVE-1999-0668: The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Key phrases: execute arbitrary commands, execute arbitrary commands as demonstrated by Bubbleboy
CVE-1999-0669: The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Key phrases: execute arbitrary commands, execute arbitrary commands as demonstrated by Bubbleboy
CVE-1999-0670: Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
Key phrases: execute arbitrary commands, buffer overflow
CVE-1999-0671: Buffer overflow in ToxSoft NextFTP client through CWD command.
Key phrases: buffer overflow
CVE-1999-0672: Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.
Key phrases: buffer overflow
CVE-1999-0673: Buffer overflow in ALMail32 POP3 client via From: or To: headers.
Key phrases: buffer overflow
CVE-1999-0674: The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
Key phrases: modify the internal data space of a program
CVE-1999-0675: Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
Key phrases: denial of service
CVE-1999-0676: sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
Key phrases: overwrite sensitive files via a symlink attack, sdtcm_convert
CVE-1999-0677: The WebRamp web administration utility has a default password.
Key phrases: default password
CVE-1999-0678: A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
Key phrases: read documentation files for the entire server
CVE-1999-0679: Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.
Key phrases: execute commands via m_invite invite option, buffer overflow
CVE-1999-0680: Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
Key phrases: for a denial of service
CVE-1999-0681: Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-1999-0682: Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
Key phrases: relay email (i.e. spam) using encapsulated, encapsulated smtp addresses
CVE-1999-0683: Denial of service in Gauntlet Firewall via a malformed ICMP packet.
Key phrases: denial of service, malformed icmp packet
CVE-1999-0684: Denial of service in Sendmail 8.8.6 in HPUX.
Key phrases: denial of service
CVE-1999-0685: Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.
Key phrases: buffer overflow
CVE-1999-0686: Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
Key phrases: denial of service, long url
CVE-1999-0687: The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
Key phrases: execute commands, weak rpc authentication
CVE-1999-0688: Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
Key phrases: buffer overflows
CVE-1999-0689: The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
Key phrases: execute arbitrary commands, execute arbitrary commands via a symlink attack
CVE-1999-0690: HP CDE program includes the current directory in root's PATH variable.
CVE-1999-0691: Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
Key phrases: gain root privileges, gain root privileges via a long user name, buffer overflow
CVE-1999-0692: The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
Key phrases: gain root privileges
CVE-1999-0693: Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-1999-0694: Denial of service in AIX ptrace system call allows local users to crash the system.
Key phrases: crash the system, denial of service, crash system
CVE-1999-0695: The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files through a .. (dot, dot dot attack
CVE-1999-0696: Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
Key phrases: buffer overflow
CVE-1999-0697: SCO Doctor allows local users to gain root privileges through a Tools option.
Key phrases: gain root privileges, gain root privileges through a Tools option
CVE-1999-0698: Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
Key phrases: denial of service
CVE-1999-0699: The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
Key phrases: session hijacking via easily guessable session IDs, guessable session ids
CVE-1999-0700: Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.
Key phrases: buffer overflow
CVE-1999-0701: After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
Key phrases: sensitive information
CVE-1999-0702: Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.
Key phrases: modify or execute files via the Import/, importexportfavorites
CVE-1999-0703: OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
Key phrases: set chflags and fchflags on character and block
CVE-1999-0704: Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
Key phrases: buffer overflow
CVE-1999-0705: Buffer overflow in INN inews program.
Key phrases: buffer overflow
CVE-1999-0706: Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
Key phrases: gain root privileges, gain root privileges by modifying the IFS or
CVE-1999-0707: The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
Key phrases: send a file to other participants without authorization, ftp configuration
CVE-1999-0708: Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
Key phrases: gain root privileges, gain root privileges via a long GECOS field, buffer overflow
CVE-1999-0710: The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.
Key phrases: use it as an intermediary to connect to, public web directory
CVE-1999-0711: The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
Key phrases: execute Tcl commands as root
CVE-1999-0712: A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
Key phrases: be made world-readable
CVE-1999-0713: The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
Key phrases: gain root privileges
CVE-1999-0714: Vulnerability in Compaq Tru64 UNIX edauth command.
CVE-1999-0715: Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
Key phrases: execute commands or cause a denial of service, buffer overflow
CVE-1999-0716: Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.
Key phrases: buffer overflow
CVE-1999-0717: A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
Key phrases: virus warning mechanism
CVE-1999-0718: IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.
Key phrases: gain administrator privileges, gain administrator privileges by changing the GroupMapping registry
CVE-1999-0719: The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
Key phrases: execute arbitrary code
CVE-1999-0720: The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
Key phrases: modify TTY terminal devices that belong to other
CVE-1999-0721: Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.
Key phrases: denial of service, malformed lsa request
CVE-1999-0722: The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
Key phrases: install arbitrary software packages
CVE-1999-0723: The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.
Key phrases: denial of service
CVE-1999-0724: Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
Key phrases: buffer overflow
CVE-1999-0725: When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".
Key phrases: view the source code of certain files, double byte code page
CVE-1999-0726: An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
Key phrases: denial of service, malformed file image header
CVE-1999-0727: A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
Key phrases: be sent unencrypted, kernel leak
CVE-1999-0728: A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.
CVE-1999-0729: Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.
Key phrases: conduct a denial of service through the ldap_search, buffer overflow
CVE-1999-0730: The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
Key phrases: overwrite files via a symlink attack
CVE-1999-0731: The KDE klock program allows local users to unlock a session using malformed input.
Key phrases: unlock a session using malformed input
CVE-1999-0732: The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links.
Key phrases: delete arbitrary files, delete arbitrary files using symbolic links
CVE-1999-0733: Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.
Key phrases: buffer overflow
CVE-1999-0734: A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.
Key phrases: modify the server database without authentication
CVE-1999-0735: KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
Key phrases: gain privileges, gain privileges via a symlink attack in temporary
CVE-1999-0736: The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files
CVE-1999-0737: The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files
CVE-1999-0738: The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files
CVE-1999-0739: The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files
CVE-1999-0740: Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.
Key phrases: denial of service, malformed term environmental variable
CVE-1999-0741: QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.
Key phrases: log on without a password
CVE-1999-0742: The Debian mailman package uses weak authentication, which allows attackers to gain privileges.
Key phrases: gain privileges, weak authentication
CVE-1999-0743: Trn allows local users to overwrite other users' files via symlinks.
Key phrases: overwrite other users' files via symlinks
CVE-1999-0744: Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
Key phrases: gain privileges, gain privileges via a long HTTP GET request, buffer overflow
CVE-1999-0745: Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.
Key phrases: buffer overflow
CVE-1999-0746: A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
Key phrases: conduct a denial of service
CVE-1999-0747: Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.
Key phrases: denial of service
CVE-1999-0748: Buffer overflows in Red Hat net-tools package.
Key phrases: buffer overflows
CVE-1999-0749: Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
Key phrases: buffer overflow
CVE-1999-0750: Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
Key phrases: be executed via the HTML STYLE tag, execute commands on the user's Hotmail account
CVE-1999-0751: Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
Key phrases: buffer overflow
CVE-1999-0752: Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
Key phrases: denial of service, buffer overflow
CVE-1999-0753: The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.
Key phrases: view restricted directories, cgi script
CVE-1999-0754: The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
Key phrases: gain privileges, gain privileges by specifying an alternate configuration file
CVE-1999-0755: Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
Key phrases: cache
CVE-1999-0756: ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.
Key phrases: stop the ColdFusion server via the Start/
CVE-1999-0757: The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
Key phrases: decrypt the templates, weak encryption
CVE-1999-0758: Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.
Key phrases: view source code to scripts by appending a
CVE-1999-0759: Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
Key phrases: buffer overflow
CVE-1999-0760: Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.
Key phrases: gain additional privileges
CVE-1999-0761: Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
Key phrases: modify arbitrary files, modify arbitrary files via the periodic program, buffer overflow
CVE-1999-0762: When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.
Key phrases: gain access, use the "about" protocol to gain
CVE-1999-0763: NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.
Key phrases: modify ARP entries on another connected network, arp packets
CVE-1999-0764: NetBSD allows ARP packets to overwrite static ARP entries.
Key phrases: overwrite static ARP entries, arp packets, static arp entries
CVE-1999-0765: SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
Key phrases: modify arbitrary files, modify arbitrary files via a text editor
CVE-1999-0766: The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.
Key phrases: execute arbitrary commands, execute arbitrary commands outside of the sandbox environment
CVE-1999-0767: Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
Key phrases: buffer overflow
CVE-1999-0768: Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.
Key phrases: buffer overflow
CVE-1999-0769: Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.
Key phrases: set parameters of sendmail commands via the MAILTO
CVE-1999-0770: Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.
Key phrases: conduct a denial of service via a large, unresponsive systems
CVE-1999-0771: The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-1999-0772: Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.
Key phrases: denial of service, long string
CVE-1999-0773: Buffer overflow in Solaris lpset program allows local users to gain root access.
Key phrases: gain root access, buffer overflow
CVE-1999-0774: Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.
Key phrases: buffer overflows
CVE-1999-0775: Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list.
Key phrases: forward unauthorized packets due to improper handling of
CVE-1999-0776: Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.
Key phrases: read files via a .. (dot dot, .. (dot dot), dot dot attack
CVE-1999-0777: IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
Key phrases: read or delete files on the server
CVE-1999-0778: Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.
Key phrases: gain root access, gain root access via a long display or, buffer overflow
CVE-1999-0779: Denial of service in HP-UX SharedX recserv program.
Key phrases: denial of service
CVE-1999-0780: KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
Key phrases: kill arbitrary processes, kill arbitrary processes by specifying an arbitrary PID
CVE-1999-0781: KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables.
Key phrases: execute arbitrary commands, execute arbitrary commands by setting the KDEDIR environmental
CVE-1999-0782: KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.
Key phrases: create a directory in an arbitrary location via
CVE-1999-0783: FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.
Key phrases: conduct a denial of service by creating a, hard link, device special file
CVE-1999-0784: Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.
Key phrases: denial of service, malformed string
CVE-1999-0785: The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.
Key phrases: gain root privileges, gain root privileges via the "pathrun"
CVE-1999-0786: The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
Key phrases: create arbitrary files, create arbitrary files via the LD_PROFILE environmental variable, symlink
CVE-1999-0787: The SSH authentication agent follows symlinks via a UNIX domain socket.
Key phrases: symlinks, unix domain socket
CVE-1999-0788: Arkiea nlservd allows remote attackers to conduct a denial of service.
Key phrases: conduct a denial of service, arkiea nlservd
CVE-1999-0789: Buffer overflow in AIX ftpd in the libc library.
Key phrases: buffer overflow
CVE-1999-0790: A remote attacker can read information from a Netscape user's cache via JavaScript.
Key phrases: netscape users cache
CVE-1999-0791: Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.
Key phrases: compromise the system through the HSMP protocol
CVE-1999-0792: ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.
Key phrases: modify its configuration, snmp community name
CVE-1999-0793: Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.
Key phrases: read files by redirecting data to a Javascript
CVE-1999-0794: Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
Key phrases: macro
CVE-1999-0795: The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.
Key phrases: obtain system information, execute certain RPC calls without authentication to obtain, rpc calls, modify caches
CVE-1999-0796: FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.
Key phrases: spoofing
CVE-1999-0797: NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries.
Key phrases: conduct a denial of service via a large, nis finger
CVE-1999-0798: Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
Key phrases: buffer overflow
CVE-1999-0799: Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.
Key phrases: buffer overflow
CVE-1999-0800: The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
Key phrases: read files through a parameter to GetFile.cfm
CVE-1999-0801: BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
Key phrases: gain access, gain access to an agent by spoofing frames
CVE-1999-0802: Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
Key phrases: execute commands via a malformed Favorites icon, buffer overflow
CVE-1999-0803: The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
Key phrases: write to arbitrary files via a symlink attack
CVE-1999-0804: Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
Key phrases: denial of service, malformed icmp packets
CVE-1999-0805: Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.
Key phrases: cause a denial of service via a large
CVE-1999-0806: Buffer overflow in Solaris dtprintinfo program.
Key phrases: buffer overflow
CVE-1999-0807: The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.
Key phrases: sensitive information
CVE-1999-0808: Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
Key phrases: execute arbitrary commands, denial of service (crash), cause a denial of service (crash), buffer overflows
CVE-1999-0809: Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed".
Key phrases: cookie settings
CVE-1999-0810: Denial of service in Samba NETBIOS name service daemon (nmbd).
Key phrases: denial of service
CVE-1999-0811: Buffer overflow in Samba smbd program via a malformed message command.
Key phrases: buffer overflow
CVE-1999-0812: Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
Key phrases: mount file systems in arbitrary locations, race condition
CVE-1999-0813: Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
Key phrases: gain root privileges, allow_execution
CVE-1999-0814: Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
Key phrases: gain root access, gain root access in some configurations
CVE-1999-0815: Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.
Key phrases: denial of service (memory exhaustion), conduct a denial of service (memory exhaustion, memory leak
CVE-1999-0816: The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
Key phrases: connect to and configure the router on port
CVE-1999-0817: Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
Key phrases: specify command-line parameters which Lynx uses
CVE-1999-0818: Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
Key phrases: buffer overflow
CVE-1999-0819: NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Key phrases: vrfy command
CVE-1999-0820: FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
Key phrases: gain privileges, gain privileges via a modified PATH variable for, path variable
CVE-1999-0821: FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
Key phrases: gain privileges, gain privileges by providing a malicious program in, -emulator argument
CVE-1999-0822: Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
Key phrases: remote root access via AUTH command, buffer overflow
CVE-1999-0823: Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
Key phrases: gain privileges, gain privileges via -f argument, buffer overflow
CVE-1999-0824: A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
Key phrases: modify the location of folders accessed by later
CVE-1999-0825: The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
Key phrases: read and modify other users' mail
CVE-1999-0826: Buffer overflow in FreeBSD angband allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-1999-0827: By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
Key phrases: frame spoofing
CVE-1999-0828: UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
Key phrases: read arbitrary files, read arbitrary files via the dacread permission
CVE-1999-0829: HP Secure Web Console uses weak encryption.
Key phrases: weak encryption
CVE-1999-0830: Buffer overflow in SCO UnixWare Xsco command via a long argument.
Key phrases: buffer overflow
CVE-1999-0831: Denial of service in Linux syslogd via a large number of connections.
Key phrases: denial of service
CVE-1999-0832: Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
Key phrases: execute commands via a long pathname, buffer overflow
CVE-1999-0833: Buffer overflow in BIND 8.2 via NXT records.
Key phrases: buffer overflow
CVE-1999-0834: Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.
Key phrases: buffer overflow
CVE-1999-0835: Denial of service in BIND named via malformed SIG records.
Key phrases: denial of service, malformed sig records
CVE-1999-0836: UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
Key phrases: modify arbitrary files, modify arbitrary files via a symlink attack
CVE-1999-0837: Denial of service in BIND by improperly closing TCP sessions via so_linger.
Key phrases: denial of service, improperly closing tcp sessions, so_linger
CVE-1999-0838: Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
Key phrases: conduct a denial of service via the SITE, buffer overflow
CVE-1999-0839: Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.
Key phrases: gain privileges, gain privileges by modifying the job after it
CVE-1999-0840: Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
Key phrases: gain privileges, gain privileges via a long -f option, buffer overflow
CVE-1999-0841: Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
Key phrases: gain root privileges, gain root privileges via a long MIME Content, buffer overflow
CVE-1999-0842: Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, .. (dot dot), dot dot attack
CVE-1999-0843: Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
Key phrases: denial of service, port command
CVE-1999-0844: Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
Key phrases: denial of service, long url
CVE-1999-0845: Buffer overflow in SCO su program allows local users to gain root access via a long username.
Key phrases: gain root access, gain root access via a long username, buffer overflow
CVE-1999-0846: Denial of service in MDaemon 2.7 via a large number of connection attempts.
Key phrases: denial of service, connection attempts
CVE-1999-0847: Buffer overflow in free internet chess server (FICS) program, xboard.
Key phrases: buffer overflow
CVE-1999-0848: Denial of service in BIND named via consuming more than "fdmax" file descriptors.
Key phrases: denial of service
CVE-1999-0849: Denial of service in BIND named via maxdname.
Key phrases: denial of service, maxdname
CVE-1999-0850: The default permissions for Endymion MailMan allow local users to read email or modify files.
Key phrases: read email or modify files
CVE-1999-0851: Denial of service in BIND named via naptr.
Key phrases: denial of service, naptr
CVE-1999-0852: IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
Key phrases: modify a deinstallation script or its data files
CVE-1999-0853: Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
Key phrases: gain privileges, gain privileges via the HTTP Basic Authentication procedure, buffer overflow
CVE-1999-0854: Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.
Key phrases: view the data if an error occurs when
CVE-1999-0855: Buffer overflow in FreeBSD gdc program.
Key phrases: buffer overflow
CVE-1999-0856: login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
Key phrases: identify valid users on the system by reporting, encryption error
CVE-1999-0857: FreeBSD gdc program allows local users to modify files via a symlink attack.
Key phrases: modify files via a symlink attack
CVE-1999-0858: Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
Key phrases: modify the IE client's proxy configuration via
CVE-1999-0859: Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
Key phrases: read files via the -f parameter
CVE-1999-0860: Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
Key phrases: read files owned by bin via the VMSYS, vmsys environmental variable, symlink
CVE-1999-0861: Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
Key phrases: race condition, leak information
CVE-1999-0862: Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
Key phrases: gain privileges, gain privileges by reading a plaintext password file, insecure directory permissions
CVE-1999-0863: Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.
Key phrases: buffer overflow
CVE-1999-0864: UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
Key phrases: modify files via a symlink attack on the
CVE-1999-0865: Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
Key phrases: buffer overflow
CVE-1999-0866: Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
Key phrases: gain root privilege, buffer overflow
CVE-1999-0867: Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Key phrases: denial of service, malformed headers
CVE-1999-0868: ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
Key phrases: execute commands via shell metacharacters that are passed
CVE-1999-0869: Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
Key phrases: insert malicious content into a frame of another, frame spoofing
CVE-1999-0870: Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.
Key phrases: read arbitrary files, read arbitrary files by pasting a file name, file upload control, untrusted scripted paste
CVE-1999-0871: Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.
Key phrases: read files via IE's cross frame security, cross frame navigate
CVE-1999-0872: Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
Key phrases: gain root access, gain root access via a long MAILTO environment, buffer overflow
CVE-1999-0873: Buffer overflow in Skyfull mail server via MAIL FROM command.
Key phrases: buffer overflow
CVE-1999-0874: Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Key phrases: cause a denial of service via a malformed, buffer overflow
CVE-1999-0875: DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
Key phrases: modify their default routes, icmp router discovery protocol (irdp)
CVE-1999-0876: Buffer overflow in Internet Explorer 4.0 via EMBED tag.
Key phrases: buffer overflow
CVE-1999-0877: Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
Key phrases: read files via an ExecCommand method called on
CVE-1999-0878: Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
Key phrases: gain root privileges, gain root privileges via MAPPING_CHDIR, buffer overflow
CVE-1999-0879: Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
Key phrases: gain root privileges, gain root privileges via macro variables in a, buffer overflow
CVE-1999-0880: Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
Key phrases: denial of service, site newer command
CVE-1999-0881: Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, falcon web server, .. (dot dot), dot dot attack
CVE-1999-0882: Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.
Key phrases: determine the absolute path of the web root, long file names
CVE-1999-0883: Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
Key phrases: read arbitrary files, read arbitrary files by specifying the file name
CVE-1999-0884: The Zeus web server administrative interface uses weak encryption for its passwords.
Key phrases: weak encryption
CVE-1999-0885: Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.
Key phrases: execute commands via a pipe character in a, malformed url
CVE-1999-0886: The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
Key phrases: point to an alternate location via the Windows
CVE-1999-0887: FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
Key phrases: read files via a .. (dot dot, dot dot attack
CVE-1999-0888: dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
Key phrases: gain privileges, gain privileges by setting the ORACLE_HOME environmental variable
CVE-1999-0889: Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
Key phrases: establish telnet sessions if an exec or superuser, superuser password
CVE-1999-0890: iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
Key phrases: obtain sensitive information, obtain sensitive information or execute commands via a, code parsing error
CVE-1999-0891: The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
Key phrases: read arbitrary files, read arbitrary files via a server-side, download behavior
CVE-1999-0892: Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.
Key phrases: buffer overflow
CVE-1999-0893: userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.
Key phrases: corrupt files via a symlink attack
CVE-1999-0894: Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
Key phrases: write to other terminals, ptys
CVE-1999-0895: Firewall-1 does not properly restrict access to LDAP attributes.
CVE-1999-0896: Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
Key phrases: execute arbitrary commands, execute arbitrary commands via a long username and, buffer overflow
CVE-1999-0897: iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, webserver, dot dot attack
CVE-1999-0898: Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.
Key phrases: gain privileges, gain privileges or cause a denial of service, buffer overflows
CVE-1999-0899: The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.
Key phrases: execute arbitrary commands, execute arbitrary commands due to inappropriate permissions that, specify an alternate print provider
CVE-1999-0900: Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.
Key phrases: gain privileges, gain privileges via MD5 hash generation, buffer overflow
CVE-1999-0901: ypserv allows a local user to modify the GECOS and login shells of other users.
Key phrases: modify the GECOS and login shells of other
CVE-1999-0902: ypserv allows local administrators to modify password tables.
Key phrases: modify password tables
CVE-1999-0903: genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
CVE-1999-0904: Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-1999-0905: Denial of service in Axent Raptor firewall via malformed zero-length IP options.
Key phrases: denial of service, malformed zero-length ip options
CVE-1999-0906: Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
Key phrases: gain root access, gain root access via the HOME environmental variable, buffer overflow
CVE-1999-0907: sccw allows local users to read arbitrary files.
Key phrases: read arbitrary files, sccw
CVE-1999-0908: Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
Key phrases: denial of service, malicious connection, panic, recursive calls
CVE-1999-0909: Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
Key phrases: bypass IP source routing restrictions, bypass IP source routing restrictions via a malformed, spoofed route pointer
CVE-1999-0910: Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
CVE-1999-0911: Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
Key phrases: gain root access, gain root access via a series of MKD, buffer overflow
CVE-1999-0912: FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
Key phrases: cause a denial of service by opening a, large number of files
CVE-1999-0913: dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
Key phrases: execute commands via shell metacharacters
CVE-1999-0914: Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.
Key phrases: buffer overflow
CVE-1999-0915: URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, dot dot attack
CVE-1999-0916: WebTrends software stores account names and passwords in a file which does not have restricted access permissions.
Key phrases: restricted access permissions
CVE-1999-0917: The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files, preloader activex control
CVE-1999-0918: Denial of service in various Windows systems via malformed, fragmented IGMP packets.
Key phrases: denial of service
CVE-1999-0919: A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
Key phrases: conduct a denial of service via a large, memory leak
CVE-1999-0920: Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
Key phrases: gain privileges, gain privileges via the FOLD command, buffer overflow
CVE-1999-0921: BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
Key phrases: flood its UDP port, bmc patrol, udp port, denial of service
CVE-1999-0922: An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
Key phrases: view source code via the sourcewindow.cfm file
CVE-1999-0923: Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.
Key phrases: read files, denial of service
CVE-1999-0924: The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
Key phrases: conduct a denial of service, syntax checker