CVEs published September 29, 1999
320 CVEs were published on September 29, 1999: 3 critical, 12 high.
- Published
- 320
- Critical
- 3
- High
- 12
- Medium
- 2
- Low
- 1
- Unrated
- 302
- Now in CISA KEV
- 0
- Fix available
- 0
Critical 3
- CVE-1999-0006Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
- CVE-1999-0043Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
- CVE-1999-0066AnyForm CGI remote execution.
High 12
- CVE-1999-0012Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
- CVE-1999-0013Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent u
- CVE-1999-0022Local user gains root privileges via buffer overflow in rdist, via expstr() function.
- CVE-1999-0029root privileges via buffer overflow in ordist command on SGI IRIX systems.
- CVE-1999-0036IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
- CVE-1999-0038Buffer overflow in xlock program allows local users to execute commands as root.
- CVE-1999-0039webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc
- CVE-1999-0052IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
- CVE-1999-0059IRIX fam service allows an attacker to obtain a list of all files on the server.
- CVE-1999-0069Solaris ufsrestore buffer overflow.
- CVE-1999-0084Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.
- CVE-1999-0468Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
Medium, low and unrated 305
- CVE-1999-0073Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system l
- CVE-1999-0002Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
- CVE-1999-0003Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
- CVE-1999-0005Arbitrary command execution via IMAP buffer overflow in authenticate command.
- CVE-1999-0007Information from SSL-encrypted sessions via PKCS #1.
- CVE-1999-0008Buffer overflow in NIS+, in Sun's rpc.nisd program.
- CVE-1999-0009Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
- CVE-1999-0010Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
- CVE-1999-0011Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
- CVE-1999-0014Unauthorized privileged access or denial of service via dtappgather program in CDE.
- CVE-1999-0016Land IP denial of service.
- CVE-1999-0017FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
- CVE-1999-0018Buffer overflow in statd allows root privileges.
- CVE-1999-0019Delete or create a file via rpc.statd, due to invalid information.
- CVE-1999-0021Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
- CVE-1999-0023Local user gains root privileges via buffer overflow in rdist, via lookup() function.
- CVE-1999-0024DNS cache poisoning via BIND, by predictable query IDs.
- CVE-1999-0025root privileges via buffer overflow in df command on SGI IRIX systems.
- CVE-1999-0026root privileges via buffer overflow in pset command on SGI IRIX systems.
- CVE-1999-0027root privileges via buffer overflow in eject command on SGI IRIX systems.
- CVE-1999-0028root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
- CVE-1999-0032Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (cl
- CVE-1999-0034Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
- CVE-1999-0035Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
- CVE-1999-0037Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
- CVE-1999-0040Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
- CVE-1999-0041Buffer overflow in NLS (Natural Language Service).
- CVE-1999-0042Buffer overflow in University of Washington's implementation of IMAP and POP servers.
- CVE-1999-0044fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
- CVE-1999-0045List of arbitrary files on Web host via nph-test-cgi script.
- CVE-1999-0046Buffer overflow of rlogin program using TERM environmental variable.
- CVE-1999-0047MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
- CVE-1999-0048Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
- CVE-1999-0049Csetup under IRIX allows arbitrary file creation or overwriting.
- CVE-1999-0050Buffer overflow in HP-UX newgrp program.
- CVE-1999-0051Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
- CVE-1999-0053TCP RST denial of service in FreeBSD.
- CVE-1999-0054Sun's ftpd daemon can be subjected to a denial of service.
- CVE-1999-0055Buffer overflows in Sun libnsl allow root access.
- CVE-1999-0056Buffer overflow in Sun's ping program can give root access to local users.
- CVE-1999-0057Vacation program allows command execution by remote users through a sendmail command.
- CVE-1999-0058Buffer overflow in PHP cgi program, php.cgi allows shell access.
- CVE-1999-0060Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the
- CVE-1999-0062The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
- CVE-1999-0063Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
- CVE-1999-0064Buffer overflow in AIX lquerylv program gives root access to local users.
- CVE-1999-0065Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
- CVE-1999-0067phf CGI program allows remote command execution through shell metacharacters.
- CVE-1999-0068CGI PHP mylog script allows an attacker to read any file on the target server.
- CVE-1999-0070test-cgi program allows an attacker to list files on the server.
- CVE-1999-0071Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
- CVE-1999-0072Buffer overflow in AIX xdat gives root access to local users.
- CVE-1999-0074Listening TCP ports are sequentially allocated, allowing spoofing attacks.
- CVE-1999-0075PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
- CVE-1999-0077Predictable TCP sequence numbers allow spoofing.
- CVE-1999-0079Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.
- CVE-1999-0080Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which all
- CVE-1999-0081wu-ftp allows files to be overwritten via the rnfr command.
- CVE-1999-0082CWD ~root command in ftpd allows root access.
- CVE-1999-0083getcwd() file descriptor leak in FTP.
- CVE-1999-0085Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long h
- CVE-1999-0087Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
- CVE-1999-0090Buffer overflow in AIX rcp command allows local users to obtain root access.
- CVE-1999-0091Buffer overflow in AIX writesrv command allows local users to obtain root access.
- CVE-1999-0093AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.
- CVE-1999-0094AIX piodmgrsu command allows local users to gain additional group privileges.
- CVE-1999-0095The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
- CVE-1999-0096Sendmail decode alias can be used to overwrite sensitive files.
- CVE-1999-0097The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g.
- CVE-1999-0099Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
- CVE-1999-0100Remote access in AIX innd 1.5.1, using control messages.
- CVE-1999-0102Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
- CVE-1999-0103Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a.
- CVE-1999-0108The printers program in IRIX has a buffer overflow that gives root access to local users.
- CVE-1999-0109Buffer overflow in ffbconfig in Solaris 2.5.1.
- CVE-1999-0111RIP v1 is susceptible to spoofing.
- CVE-1999-0112Buffer overflow in AIX dtterm program for the CDE.
- CVE-1999-0113Some implementations of rlogin allow root access if given a -froot parameter.
- CVE-1999-0116Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connect
- CVE-1999-0117AIX passwd allows local users to gain root access.
- CVE-1999-0120Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root.
- CVE-1999-0122Buffer overflow in AIX lchangelv gives root access.
- CVE-1999-0125Buffer overflow in SGI IRIX mailx program.
- CVE-1999-0126SGI IRIX buffer overflow in xterm and Xaw allows root access.
- CVE-1999-0128Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
- CVE-1999-0129Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
- CVE-1999-0130Local users can start Sendmail in daemon mode and gain root privileges.
- CVE-1999-0131Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
- CVE-1999-0132Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
- CVE-1999-0133fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
- CVE-1999-0134vold in Solaris 2.x allows local users to gain root access.
- CVE-1999-0135admintool in Solaris allows a local user to write to arbitrary files and gain root access.
- CVE-1999-0136Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
- CVE-1999-0137The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
- CVE-1999-0138The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
- CVE-1999-0139Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.
- CVE-1999-0141Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
- CVE-1999-0143Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
- CVE-1999-0146The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return char
- CVE-1999-0147The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
- CVE-1999-0148The handler CGI program in IRIX allows arbitrary command execution.
- CVE-1999-0149The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a ..
- CVE-1999-0150The Perl fingerd program allows arbitrary command execution from remote users.
- CVE-1999-0152The DG/UX finger daemon allows remote command execution through shell metacharacters.
- CVE-1999-0153Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
- CVE-1999-0155The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
- CVE-1999-0157Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
- CVE-1999-0158Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name a
- CVE-1999-0159Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login).
- CVE-1999-0160Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
- CVE-1999-0161In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
- CVE-1999-0162The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
- CVE-1999-0164A race condition in the Solaris ps command allows an attacker to overwrite critical files.
- CVE-1999-0166NFS allows users to use a "cd .." command to access other directories besides the exported file system.
- CVE-1999-0167In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.
- CVE-1999-0168The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, pos
- CVE-1999-0170Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
- CVE-1999-0172FormMail CGI program allows remote execution of commands.
- CVE-1999-0173FormMail CGI program can be used by web servers other than the host server that the program resides on.
- CVE-1999-0174The view-source CGI program allows remote attackers to read arbitrary files via a ..
- CVE-1999-0175The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by t
- CVE-1999-0176The Webgais program allows a remote user to execute arbitrary commands.
- CVE-1999-0177The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
- CVE-1999-0178Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary c
- CVE-1999-0179Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
- CVE-1999-0180in.rshd allows users to login with a NULL username and execute commands.
- CVE-1999-0181The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
- CVE-1999-0182Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
- CVE-1999-0183Linux implementations of TFTP would allow access to files outside the restricted directory.
- CVE-1999-0184When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS rec
- CVE-1999-0185In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, al
- CVE-1999-0188The passwd command in Solaris can be subjected to a denial of service.
- CVE-1999-0190Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
- CVE-1999-0191IIS newdsn.exe CGI script allows remote users to overwrite files.
- CVE-1999-0192Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
- CVE-1999-0194Denial of service in in.comsat allows attackers to generate messages.
- CVE-1999-0196websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiv
- CVE-1999-0201A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
- CVE-1999-0202The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
- CVE-1999-0204Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
- CVE-1999-0206MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
- CVE-1999-0207Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
- CVE-1999-0208rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
- CVE-1999-0209The SunView (SunTools) selection_svc facility allows remote users to read files.
- CVE-1999-0214Denial of service by sending forged ICMP unreachable packets.
- CVE-1999-0215Routed allows attackers to append data to files.
- CVE-1999-0217Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
- CVE-1999-0218Livingston portmaster machines could be rebooted via a series of commands.
- CVE-1999-0219Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list)
- CVE-1999-0221Denial of service of Ascend routers through port 150 (remote administration).
- CVE-1999-0224Denial of service in Windows NT messenger service through a long username.
- CVE-1999-0227Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
- CVE-1999-0228Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
- CVE-1999-0230Buffer overflow in Cisco 7xx routers through the telnet service.
- CVE-1999-0234Bash treats any character with a value of 255 as a command separator.
- CVE-1999-0236ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
- CVE-1999-0237Remote execution of arbitrary commands through Guestbook CGI program.
- CVE-1999-0239Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
- CVE-1999-0244Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
- CVE-1999-0245Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
- CVE-1999-0251Denial of service in talk program allows remote attackers to disrupt a user's display.
- CVE-1999-0252Buffer overflow in listserv allows arbitrary command execution.
- CVE-1999-0256Buffer overflow in War FTP allows remote execution of commands.
- CVE-1999-0260The jj CGI program allows command execution via shell metacharacters.
- CVE-1999-0262Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
- CVE-1999-0263Solaris SUNWadmap can be exploited to obtain root access.
- CVE-1999-0264htmlscript CGI program allows remote read access to files.
- CVE-1999-0265ICMP redirect messages may crash or lock up a host.
- CVE-1999-0266The info2www CGI script allows remote file access or remote command execution.
- CVE-1999-0267Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
- CVE-1999-0269Netscape Enterprise servers may list files through the PageServices query.
- CVE-1999-0272Denial of service in Slmail v2.5 through the POP3 port.
- CVE-1999-0273Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
- CVE-1999-0274Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
- CVE-1999-0276mSQL v2.0.1 and below allows remote execution through a buffer overflow.
- CVE-1999-0277The WorkMan program can be used to overwrite any file to get root access.
- CVE-1999-0278In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
- CVE-1999-0279Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
- CVE-1999-0281Denial of service in IIS using long URLs.
- CVE-1999-0288The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invali
- CVE-1999-0289The Apache web server for Win32 may provide access to restricted files when a .
- CVE-1999-0292Denial of service through Winpopup using large user names.
- CVE-1999-0293AAA authentication on Cisco systems allows attackers to execute commands without authorization.
- CVE-1999-0294All records in a WINS database can be deleted through SNMP for a denial of service.
- CVE-1999-0295Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
- CVE-1999-0296Solaris volrmmount program allows attackers to read any file.
- CVE-1999-0299Buffer overflow in FreeBSD lpd through long DNS hostnames.
- CVE-1999-0300nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
- CVE-1999-0301Buffer overflow in SunOS/Solaris ps command.
- CVE-1999-0302SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
- CVE-1999-0303Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
- CVE-1999-0305The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, do
- CVE-1999-0308HP-UX gwind program allows users to modify arbitrary files.
- CVE-1999-0309HP-UX vgdisplay program gives root access to local users.
- CVE-1999-0310SSH 1.2.25 on HP-UX allows access to new user accounts.
- CVE-1999-0311fpkg2swpk in HP-UX allows local users to gain root access.
- CVE-1999-0312HP ypbind allows attackers with root privileges to modify NIS data.
- CVE-1999-0313disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
- CVE-1999-0314ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
- CVE-1999-0315Buffer overflow in Solaris fdformat command gives root access to local users.
- CVE-1999-0316Buffer overflow in Linux splitvt command gives root access to local users.
- CVE-1999-0320SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
- CVE-1999-0321Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
- CVE-1999-0324ppl program in HP-UX allows local users to create root files through symlinks.
- CVE-1999-0325vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
- CVE-1999-0326Vulnerability in HP-UX mediainit program.
- CVE-1999-0327SGI syserr program allows local users to corrupt files.
- CVE-1999-0328SGI permissions program allows local users to gain root privileges.
- CVE-1999-0329SGI mediad program allows local users to gain root access.
- CVE-1999-0332Buffer overflow in NetMeeting allows denial of service and remote command execution.
- CVE-1999-0334In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
- CVE-1999-0337AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
- CVE-1999-0338AIX Licensed Program Product performance tools allow local users to gain root access.
- CVE-1999-0339Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
- CVE-1999-0340Buffer overflow in Linux Slackware crond program allows local users to gain root access.
- CVE-1999-0341Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
- CVE-1999-0342Linux PAM modules allow local users to gain root access using temporary files.
- CVE-1999-0344NT users can gain debug-level access on a system process using the Sechole exploit.
- CVE-1999-0346CGI PHP mlog script allows an attacker to read any file on the target server.
- CVE-1999-0348IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
- CVE-1999-0349A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arb
- CVE-1999-0350Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
- CVE-1999-0351FTP PASV "Pizza Thief" denial of service and unauthorized data access.
- CVE-1999-0353rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
- CVE-1999-0355Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
- CVE-1999-0357Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving
- CVE-1999-0362WS_FTP server remote denial of service through cwd command.
- CVE-1999-0363SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
- CVE-1999-0365The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
- CVE-1999-0366In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT
- CVE-1999-0367NetBSD netstat command allows local users to access kernel memory.
- CVE-1999-0368Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.
- CVE-1999-0369The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
- CVE-1999-0371Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
- CVE-1999-0372The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
- CVE-1999-0373Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
- CVE-1999-0374Debian GNU/Linux cfengine package is susceptible to a symlink attack.
- CVE-1999-0375Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
- CVE-1999-0376Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
- CVE-1999-0377Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through m
- CVE-1999-0379Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe fo
- CVE-1999-0382The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with
- CVE-1999-0383ACC Tigris allows public access without a login.
- CVE-1999-0384The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the us
- CVE-1999-0385The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute command
- CVE-1999-0386Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server
- CVE-1999-0388DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
- CVE-1999-0391The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response an
- CVE-1999-0392Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
- CVE-1999-0396A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
- CVE-1999-0402wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
- CVE-1999-0404Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
- CVE-1999-0405A buffer overflow in lsof allows local users to obtain root privilege.
- CVE-1999-0410The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
- CVE-1999-0412In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
- CVE-1999-0413A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
- CVE-1999-0414In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing
- CVE-1999-041764 bit Solaris 7 procfs allows local users to perform a denial of service.
- CVE-1999-0420umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
- CVE-1999-0422In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
- CVE-1999-0423Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
- CVE-1999-0424talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
- CVE-1999-0425talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
- CVE-1999-0430Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the
- CVE-1999-0432ftp on HP-UX 11.00 allows local users to gain privileges.
- CVE-1999-0433XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing
- CVE-1999-0436Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
- CVE-1999-0437Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
- CVE-1999-0438Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
- CVE-1999-0441Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.
- CVE-1999-0442Solaris ff.core allows local users to modify files.
- CVE-1999-0445In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
- CVE-1999-0446Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, t
- CVE-1999-0447Local users can gain privileges using the debug utility in the MPE/iX operating system.
- CVE-1999-0448IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request
- CVE-1999-0449The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsea
- CVE-1999-0457Linux ftpwatch program allows local users to gain root privileges.
- CVE-1999-0458L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
- CVE-1999-0463Remote attackers can perform a denial of service using IRIX fcagent.
- CVE-1999-0466The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associat
- CVE-1999-0471The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.
- CVE-1999-0472The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.
- CVE-1999-0473The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the di
- CVE-1999-0474The ICQ Webserver allows remote attackers to use ..
- CVE-1999-0475A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running
- CVE-1999-0478Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.
- CVE-1999-0479Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
- CVE-1999-0481Denial of service in "poll" in OpenBSD.
- CVE-1999-0482OpenBSD kernel crash through TSS handling, as caused by the crashme program.
- CVE-1999-0483OpenBSD crash using nlink value in FFS and EXT2FS filesystems.
- CVE-1999-0484Buffer overflow in OpenBSD ping.
- CVE-1999-0485Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
- CVE-1999-0487The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
- CVE-1999-0494Denial of service in WinGate proxy through a buffer overflow in POP3.
- CVE-1999-0496A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetA
- CVE-1999-0513ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
- CVE-1999-0514UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target.
- CVE-1999-0526An X server's access control is disabled (e.g.
- CVE-1999-0551HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests.
- CVE-1999-0566An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.
- CVE-1999-0612A version of finger is running that exposes valid user information to any entity on the network.
- CVE-1999-0626A version of rusers is running that exposes valid user information to any entity on the network.
- CVE-1999-0627The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.
- CVE-1999-0628The rwho/rwhod service is running, which exposes machine status and user information.
- CVE-1999-0211Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.