# CVEs published 2000-01-04

152 CVEs were published on January 4, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0151](https://cve.now/CVE-1999-0151.md): The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access. (no CVSS)
- [CVE-1999-0212](https://cve.now/CVE-1999-0212.md): Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server. (no CVSS)
- [CVE-1999-0275](https://cve.now/CVE-1999-0275.md): Denial of service in Windows NT DNS servers by flooding port 53 with too many characters. (no CVSS)
- [CVE-1999-0280](https://cve.now/CVE-1999-0280.md): Remote command execution in Microsoft Internet Explorer using .lnk and .url files. (no CVSS)
- [CVE-1999-0290](https://cve.now/CVE-1999-0290.md): The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost. (no CVSS)
- [CVE-1999-0291](https://cve.now/CVE-1999-0291.md): The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication. (no CVSS)
- [CVE-1999-0297](https://cve.now/CVE-1999-0297.md): Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. (no CVSS)
- [CVE-1999-0304](https://cve.now/CVE-1999-0304.md): mmap function in BSD allows local attackers in the kmem group to modify memory through devices. (no CVSS)
- [CVE-1999-0318](https://cve.now/CVE-1999-0318.md): Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. (no CVSS)
- [CVE-1999-0322](https://cve.now/CVE-1999-0322.md): The open() function in FreeBSD allows local attackers to write to arbitrary files. (no CVSS)
- [CVE-1999-0343](https://cve.now/CVE-1999-0343.md): A malicious Palace server can force a client to execute arbitrary programs. (no CVSS)
- [CVE-1999-0408](https://cve.now/CVE-1999-0408.md): Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. (no CVSS)
- [CVE-1999-0409](https://cve.now/CVE-1999-0409.md): Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access. (no CVSS)
- [CVE-1999-0421](https://cve.now/CVE-1999-0421.md): During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account wit (no CVSS)
- [CVE-1999-0428](https://cve.now/CVE-1999-0428.md): OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls. (no CVSS)
- [CVE-1999-0439](https://cve.now/CVE-1999-0439.md): Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc config (no CVSS)
- [CVE-1999-0470](https://cve.now/CVE-1999-0470.md): A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted. (no CVSS)
- [CVE-1999-0674](https://cve.now/CVE-1999-0674.md): The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. (no CVSS)
- [CVE-1999-0680](https://cve.now/CVE-1999-0680.md): Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of (no CVSS)
- [CVE-1999-0682](https://cve.now/CVE-1999-0682.md): Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. (no CVSS)
- [CVE-1999-0685](https://cve.now/CVE-1999-0685.md): Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option. (no CVSS)
- [CVE-1999-0686](https://cve.now/CVE-1999-0686.md): Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL. (no CVSS)
- [CVE-1999-0687](https://cve.now/CVE-1999-0687.md): The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. (no CVSS)
- [CVE-1999-0688](https://cve.now/CVE-1999-0688.md): Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. (no CVSS)
- [CVE-1999-0689](https://cve.now/CVE-1999-0689.md): The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. (no CVSS)
- [CVE-1999-0690](https://cve.now/CVE-1999-0690.md): HP CDE program includes the current directory in root's PATH variable. (no CVSS)
- [CVE-1999-0691](https://cve.now/CVE-1999-0691.md): Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. (no CVSS)
- [CVE-1999-0692](https://cve.now/CVE-1999-0692.md): The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges. (no CVSS)
- [CVE-1999-0693](https://cve.now/CVE-1999-0693.md): Buffer overflow in TT\_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. (no CVSS)
- [CVE-1999-0695](https://cve.now/CVE-1999-0695.md): The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (no CVSS)
- [CVE-1999-0699](https://cve.now/CVE-1999-0699.md): The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs. (no CVSS)
- [CVE-1999-0700](https://cve.now/CVE-1999-0700.md): Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file. (no CVSS)
- [CVE-1999-0701](https://cve.now/CVE-1999-0701.md): After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator (no CVSS)
- [CVE-1999-0702](https://cve.now/CVE-1999-0702.md): Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportEx (no CVSS)
- [CVE-1999-0703](https://cve.now/CVE-1999-0703.md): OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. (no CVSS)
- [CVE-1999-0704](https://cve.now/CVE-1999-0704.md): Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. (no CVSS)
- [CVE-1999-0705](https://cve.now/CVE-1999-0705.md): Buffer overflow in INN inews program. (no CVSS)
- [CVE-1999-0706](https://cve.now/CVE-1999-0706.md): Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. (no CVSS)
- [CVE-1999-0707](https://cve.now/CVE-1999-0707.md): The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization. (no CVSS)
- [CVE-1999-0710](https://cve.now/CVE-1999-0710.md): The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remot (no CVSS)
- [CVE-1999-0713](https://cve.now/CVE-1999-0713.md): The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges. (no CVSS)
- [CVE-1999-0714](https://cve.now/CVE-1999-0714.md): Vulnerability in Compaq Tru64 UNIX edauth command. (no CVSS)
- [CVE-1999-0715](https://cve.now/CVE-1999-0715.md): Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed ph (no CVSS)
- [CVE-1999-0716](https://cve.now/CVE-1999-0716.md): Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. (no CVSS)
- [CVE-1999-0717](https://cve.now/CVE-1999-0717.md): A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. (no CVSS)
- [CVE-1999-0721](https://cve.now/CVE-1999-0721.md): Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. (no CVSS)
- [CVE-1999-0722](https://cve.now/CVE-1999-0722.md): The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. (no CVSS)
- [CVE-1999-0723](https://cve.now/CVE-1999-0723.md): The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user (no CVSS)
- [CVE-1999-0724](https://cve.now/CVE-1999-0724.md): Buffer overflow in OpenBSD procfs and fdescfs file systems via uio\_offset in the readdir() function. (no CVSS)
- [CVE-1999-0725](https://cve.now/CVE-1999-0725.md): When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain file (no CVSS)
- [CVE-1999-0726](https://cve.now/CVE-1999-0726.md): An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header. (no CVSS)
- [CVE-1999-0728](https://cve.now/CVE-1999-0728.md): A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them. (no CVSS)
- [CVE-1999-0730](https://cve.now/CVE-1999-0730.md): The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack. (no CVSS)
- [CVE-1999-0731](https://cve.now/CVE-1999-0731.md): The KDE klock program allows local users to unlock a session using malformed input. (no CVSS)
- [CVE-1999-0732](https://cve.now/CVE-1999-0732.md): The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links. (no CVSS)
- [CVE-1999-0735](https://cve.now/CVE-1999-0735.md): KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. (no CVSS)
- [CVE-1999-0744](https://cve.now/CVE-1999-0744.md): Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request. (no CVSS)
- [CVE-1999-0745](https://cve.now/CVE-1999-0745.md): Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. (no CVSS)
- [CVE-1999-0749](https://cve.now/CVE-1999-0749.md): Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument. (no CVSS)
- [CVE-1999-0751](https://cve.now/CVE-1999-0751.md): Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch. (no CVSS)
- [CVE-1999-0752](https://cve.now/CVE-1999-0752.md): Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. (no CVSS)
- [CVE-1999-0755](https://cve.now/CVE-1999-0755.md): Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option. (no CVSS)
- [CVE-1999-0761](https://cve.now/CVE-1999-0761.md): Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. (no CVSS)
- [CVE-1999-0762](https://cve.now/CVE-1999-0762.md): When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access (no CVSS)
- [CVE-1999-0763](https://cve.now/CVE-1999-0763.md): NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. (no CVSS)
- [CVE-1999-0764](https://cve.now/CVE-1999-0764.md): NetBSD allows ARP packets to overwrite static ARP entries. (no CVSS)
- [CVE-1999-0765](https://cve.now/CVE-1999-0765.md): SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. (no CVSS)
- [CVE-1999-0766](https://cve.now/CVE-1999-0766.md): The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment. (no CVSS)
- [CVE-1999-0769](https://cve.now/CVE-1999-0769.md): Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. (no CVSS)
- [CVE-1999-0771](https://cve.now/CVE-1999-0771.md): The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (no CVSS)
- [CVE-1999-0772](https://cve.now/CVE-1999-0772.md): Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301. (no CVSS)
- [CVE-1999-0774](https://cve.now/CVE-1999-0774.md): Buffer overflows in Mars NetWare Emulation (NWE, mars\_nwe) package via long directory names. (no CVSS)
- [CVE-1999-0777](https://cve.now/CVE-1999-0777.md): IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. (no CVSS)
- [CVE-1999-0779](https://cve.now/CVE-1999-0779.md): Denial of service in HP-UX SharedX recserv program. (no CVSS)
- [CVE-1999-0793](https://cve.now/CVE-1999-0793.md): Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet. (no CVSS)
- [CVE-1999-0794](https://cve.now/CVE-1999-0794.md): Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file. (no CVSS)
- [CVE-1999-0802](https://cve.now/CVE-1999-0802.md): Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon. (no CVSS)
- [CVE-1999-0804](https://cve.now/CVE-1999-0804.md): Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths. (no CVSS)
- [CVE-1999-0807](https://cve.now/CVE-1999-0807.md): The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users. (no CVSS)
- [CVE-1999-0809](https://cve.now/CVE-1999-0809.md): Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only ac (no CVSS)
- [CVE-1999-0810](https://cve.now/CVE-1999-0810.md): Denial of service in Samba NETBIOS name service daemon (nmbd). (no CVSS)
- [CVE-1999-0812](https://cve.now/CVE-1999-0812.md): Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations. (no CVSS)
- [CVE-1999-0814](https://cve.now/CVE-1999-0814.md): Red Hat pump DHCP client allows remote attackers to gain root access in some configurations. (no CVSS)
- [CVE-1999-0817](https://cve.now/CVE-1999-0817.md): Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain (no CVSS)
- [CVE-1999-0833](https://cve.now/CVE-1999-0833.md): Buffer overflow in BIND 8.2 via NXT records. (no CVSS)
- [CVE-1999-0835](https://cve.now/CVE-1999-0835.md): Denial of service in BIND named via malformed SIG records. (no CVSS)
- [CVE-1999-0837](https://cve.now/CVE-1999-0837.md): Denial of service in BIND by improperly closing TCP sessions via so\_linger. (no CVSS)
- [CVE-1999-0839](https://cve.now/CVE-1999-0839.md): Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been schedul (no CVSS)
- [CVE-1999-0848](https://cve.now/CVE-1999-0848.md): Denial of service in BIND named via consuming more than "fdmax" file descriptors. (no CVSS)
- [CVE-1999-0849](https://cve.now/CVE-1999-0849.md): Denial of service in BIND named via maxdname. (no CVSS)
- [CVE-1999-0851](https://cve.now/CVE-1999-0851.md): Denial of service in BIND named via naptr. (no CVSS)
- [CVE-1999-0858](https://cve.now/CVE-1999-0858.md): Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) s (no CVSS)
- [CVE-1999-0861](https://cve.now/CVE-1999-0861.md): Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext. (no CVSS)
- [CVE-1999-0867](https://cve.now/CVE-1999-0867.md): Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers. (no CVSS)
- [CVE-1999-0868](https://cve.now/CVE-1999-0868.md): ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN. (no CVSS)
- [CVE-1999-0869](https://cve.now/CVE-1999-0869.md): Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing. (no CVSS)
- [CVE-1999-0870](https://cve.now/CVE-1999-0870.md): Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted sc (no CVSS)
- [CVE-1999-0871](https://cve.now/CVE-1999-0871.md): Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerabi (no CVSS)
- [CVE-1999-0876](https://cve.now/CVE-1999-0876.md): Buffer overflow in Internet Explorer 4.0 via EMBED tag. (no CVSS)
- [CVE-1999-0877](https://cve.now/CVE-1999-0877.md): Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME. (no CVSS)
- [CVE-1999-0878](https://cve.now/CVE-1999-0878.md): Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING\_CHDIR. (no CVSS)
- [CVE-1999-0879](https://cve.now/CVE-1999-0879.md): Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file. (no CVSS)
- [CVE-1999-0880](https://cve.now/CVE-1999-0880.md): Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly. (no CVSS)
- [CVE-1999-0883](https://cve.now/CVE-1999-0883.md): Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine. (no CVSS)
- [CVE-1999-0884](https://cve.now/CVE-1999-0884.md): The Zeus web server administrative interface uses weak encryption for its passwords. (no CVSS)
- [CVE-1999-0886](https://cve.now/CVE-1999-0886.md): The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. (no CVSS)
- [CVE-1999-0887](https://cve.now/CVE-1999-0887.md): FTGate web interface server allows remote attackers to read files via a .. (no CVSS)
- [CVE-1999-0891](https://cve.now/CVE-1999-0891.md): The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. (no CVSS)
- [CVE-1999-0892](https://cve.now/CVE-1999-0892.md): Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font. (no CVSS)
- [CVE-1999-0894](https://cve.now/CVE-1999-0894.md): Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals. (no CVSS)
- [CVE-1999-0900](https://cve.now/CVE-1999-0900.md): Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation. (no CVSS)
- [CVE-1999-0901](https://cve.now/CVE-1999-0901.md): ypserv allows a local user to modify the GECOS and login shells of other users. (no CVSS)
- [CVE-1999-0902](https://cve.now/CVE-1999-0902.md): ypserv allows local administrators to modify password tables. (no CVSS)
- [CVE-1999-0907](https://cve.now/CVE-1999-0907.md): sccw allows local users to read arbitrary files. (no CVSS)
- [CVE-1999-0909](https://cve.now/CVE-1999-0909.md): Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the (no CVSS)
- [CVE-1999-0914](https://cve.now/CVE-1999-0914.md): Buffer overflow in the FTP client in the Debian GNU/Linux netstd package. (no CVSS)
- [CVE-1999-0915](https://cve.now/CVE-1999-0915.md): URL Live! web server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-1999-0917](https://cve.now/CVE-1999-0917.md): The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-0918](https://cve.now/CVE-1999-0918.md): Denial of service in various Windows systems via malformed, fragmented IGMP packets. (no CVSS)
- [CVE-1999-0933](https://cve.now/CVE-1999-0933.md): TeamTrack web server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-1999-0934](https://cve.now/CVE-1999-0934.md): classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters. (no CVSS)
- [CVE-1999-0935](https://cve.now/CVE-1999-0935.md): classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form. (no CVSS)
- [CVE-1999-0936](https://cve.now/CVE-1999-0936.md): BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters. (no CVSS)
- [CVE-1999-0937](https://cve.now/CVE-1999-0937.md): BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable. (no CVSS)
- [CVE-1999-0938](https://cve.now/CVE-1999-0938.md): MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages. (no CVSS)
- [CVE-1999-0939](https://cve.now/CVE-1999-0939.md): Denial of service in Debian IRC Epic/epic4 client via a long string. (no CVSS)
- [CVE-1999-0940](https://cve.now/CVE-1999-0940.md): Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages. (no CVSS)
- [CVE-1999-0943](https://cve.now/CVE-1999-0943.md): Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator. (no CVSS)
- [CVE-1999-0947](https://cve.now/CVE-1999-0947.md): AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via (no CVSS)
- [CVE-1999-0951](https://cve.now/CVE-1999-0951.md): Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands. (no CVSS)
- [CVE-1999-0953](https://cve.now/CVE-1999-0953.md): WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers. (no CVSS)
- [CVE-1999-0956](https://cve.now/CVE-1999-0956.md): The NeXT NetInfo \_writers property allows local users to gain root privileges or conduct a denial of service. (no CVSS)
- [CVE-1999-0960](https://cve.now/CVE-1999-0960.md): IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option. (no CVSS)
- [CVE-1999-0962](https://cve.now/CVE-1999-0962.md): Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option. (no CVSS)
- [CVE-1999-0963](https://cve.now/CVE-1999-0963.md): FreeBSD mount\_union command allows local users to gain root privileges via a symlink attack. (no CVSS)
- [CVE-1999-0965](https://cve.now/CVE-1999-0965.md): Race condition in xterm allows local users to modify arbitrary files via the logging option. (no CVSS)
- [CVE-1999-0967](https://cve.now/CVE-1999-0967.md): Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. (no CVSS)
- [CVE-1999-0969](https://cve.now/CVE-1999-0969.md): The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an erro (no CVSS)
- [CVE-1999-0972](https://cve.now/CVE-1999-0972.md): Buffer overflow in Xshipwars xsw program. (no CVSS)
- [CVE-1999-0973](https://cve.now/CVE-1999-0973.md): Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in ver (no CVSS)
- [CVE-1999-0974](https://cve.now/CVE-1999-0974.md): Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service. (no CVSS)
- [CVE-1999-0975](https://cve.now/CVE-1999-0975.md): The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT exten (no CVSS)
- [CVE-1999-0977](https://cve.now/CVE-1999-0977.md): Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT\_PROC\_SERVICE request. (no CVSS)
- [CVE-1999-0978](https://cve.now/CVE-1999-0978.md): htdig allows remote attackers to execute commands via filenames with shell metacharacters. (no CVSS)
- [CVE-1999-0979](https://cve.now/CVE-1999-0979.md): The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into \_ (no CVSS)
- [CVE-1999-0980](https://cve.now/CVE-1999-0980.md): Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumera (no CVSS)
- [CVE-1999-0981](https://cve.now/CVE-1999-0981.md): Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to acces (no CVSS)
- [CVE-1999-0982](https://cve.now/CVE-1999-0982.md): The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. (no CVSS)
- [CVE-1999-0986](https://cve.now/CVE-1999-0986.md): The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. (no CVSS)
- [CVE-1999-0987](https://cve.now/CVE-1999-0987.md): Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name. (no CVSS)
- [CVE-1999-0989](https://cve.now/CVE-1999-0989.md): Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protoc (no CVSS)
- [CVE-1999-0991](https://cve.now/CVE-1999-0991.md): Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-01-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.