# CVEs published 2001-09-12

393 CVEs were published on September 12, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0154](https://cve.now/CVE-1999-0154.md): IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (no CVSS)
- [CVE-1999-0418](https://cve.now/CVE-1999-0418.md): Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. (no CVSS)
- [CVE-1999-0808](https://cve.now/CVE-1999-0808.md): Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) a (no CVSS)
- [CVE-1999-0926](https://cve.now/CVE-1999-0926.md): Apache allows remote attackers to conduct a denial of service via a large number of MIME headers. (no CVSS)
- [CVE-1999-1012](https://cve.now/CVE-1999-1012.md): SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via (no CVSS)
- [CVE-1999-1013](https://cve.now/CVE-1999-1013.md): named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and (no CVSS)
- [CVE-1999-1015](https://cve.now/CVE-1999-1015.md): Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) (no CVSS)
- [CVE-1999-1016](https://cve.now/CVE-1999-1016.md): Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly othe (no CVSS)
- [CVE-1999-1017](https://cve.now/CVE-1999-1017.md): Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allow (no CVSS)
- [CVE-1999-1018](https://cve.now/CVE-1999-1018.md): IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote (no CVSS)
- [CVE-1999-1020](https://cve.now/CVE-1999-1020.md): The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers (no CVSS)
- [CVE-1999-1022](https://cve.now/CVE-1999-1022.md): serial\_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, wh (no CVSS)
- [CVE-1999-1023](https://cve.now/CVE-1999-1023.md): useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could all (no CVSS)
- [CVE-1999-1024](https://cve.now/CVE-1999-1024.md): ip\_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes (no CVSS)
- [CVE-1999-1025](https://cve.now/CVE-1999-1025.md): CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ c (no CVSS)
- [CVE-1999-1026](https://cve.now/CVE-1999-1026.md): aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo (no CVSS)
- [CVE-1999-1029](https://cve.now/CVE-1999-1029.md): SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, all (no CVSS)
- [CVE-1999-1030](https://cve.now/CVE-1999-1030.md): counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a (no CVSS)
- [CVE-1999-1031](https://cve.now/CVE-1999-1031.md): counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument. (no CVSS)
- [CVE-1999-1033](https://cve.now/CVE-1999-1033.md): Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause (no CVSS)
- [CVE-1999-1036](https://cve.now/CVE-1999-1036.md): COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res\_diff, (2) ca.src, and (no CVSS)
- [CVE-1999-1038](https://cve.now/CVE-1999-1038.md): Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working direc (no CVSS)
- [CVE-1999-1039](https://cve.now/CVE-1999-1039.md): Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a (no CVSS)
- [CVE-1999-1040](https://cve.now/CVE-1999-1040.md): Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modifie (no CVSS)
- [CVE-1999-1041](https://cve.now/CVE-1999-1041.md): Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmenta (no CVSS)
- [CVE-1999-1042](https://cve.now/CVE-1999-1042.md): Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to lo (no CVSS)
- [CVE-1999-1043](https://cve.now/CVE-1999-1043.md): Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote atta (no CVSS)
- [CVE-1999-1046](https://cve.now/CVE-1999-1046.md): Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (no CVSS)
- [CVE-1999-1049](https://cve.now/CVE-1999-1049.md): ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 a (no CVSS)
- [CVE-1999-1050](https://cve.now/CVE-1999-1050.md): Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (no CVSS)
- [CVE-1999-1051](https://cve.now/CVE-1999-1051.md): Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts acce (no CVSS)
- [CVE-1999-1052](https://cve.now/CVE-1999-1052.md): Microsoft FrontPage stores form results in a default location in /\_private/form\_results.txt, which is world-readable and accessible in the d (no CVSS)
- [CVE-1999-1053](https://cve.now/CVE-1999-1053.md): guestbook.pl cleanses user-inserted SSI commands by removing text between "\<!--" and "--\>" separators, which allows remote attackers to exec (no CVSS)
- [CVE-1999-1054](https://cve.now/CVE-1999-1054.md): The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via t (no CVSS)
- [CVE-1999-1058](https://cve.now/CVE-1999-1058.md): Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary com (no CVSS)
- [CVE-1999-1060](https://cve.now/CVE-1999-1060.md): Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary comman (no CVSS)
- [CVE-1999-1061](https://cve.now/CVE-1999-1061.md): HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers (no CVSS)
- [CVE-1999-1062](https://cve.now/CVE-1999-1062.md): HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending P (no CVSS)
- [CVE-1999-1063](https://cve.now/CVE-1999-1063.md): CDomain whois\_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter. (no CVSS)
- [CVE-1999-1064](https://cve.now/CVE-1999-1064.md): Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary com (no CVSS)
- [CVE-1999-1065](https://cve.now/CVE-1999-1065.md): Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands (no CVSS)
- [CVE-1999-1066](https://cve.now/CVE-1999-1066.md): Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the s (no CVSS)
- [CVE-1999-1067](https://cve.now/CVE-1999-1067.md): SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could b (no CVSS)
- [CVE-1999-1068](https://cve.now/CVE-1999-1068.md): Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET reques (no CVSS)
- [CVE-1999-1069](https://cve.now/CVE-1999-1069.md): Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-1999-1070](https://cve.now/CVE-1999-1070.md): Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query (no CVSS)
- [CVE-1999-1071](https://cve.now/CVE-1999-1071.md): Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users (no CVSS)
- [CVE-1999-1072](https://cve.now/CVE-1999-1072.md): Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext (no CVSS)
- [CVE-1999-1073](https://cve.now/CVE-1999-1073.md): Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which (no CVSS)
- [CVE-1999-1075](https://cve.now/CVE-1999-1075.md): inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 witho (no CVSS)
- [CVE-1999-1076](https://cve.now/CVE-1999-1076.md): Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option an (no CVSS)
- [CVE-1999-1077](https://cve.now/CVE-1999-1077.md): Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or C (no CVSS)
- [CVE-1999-1078](https://cve.now/CVE-1999-1078.md): WS\_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords (no CVSS)
- [CVE-1999-1079](https://cve.now/CVE-1999-1079.md): Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program. (no CVSS)
- [CVE-1999-1081](https://cve.now/CVE-1999-1081.md): Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-1082](https://cve.now/CVE-1999-1082.md): Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified do (no CVSS)
- [CVE-1999-1083](https://cve.now/CVE-1999-1083.md): Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (no CVSS)
- [CVE-1999-1084](https://cve.now/CVE-1999-1084.md): The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debu (no CVSS)
- [CVE-1999-1086](https://cve.now/CVE-1999-1086.md): Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privile (no CVSS)
- [CVE-1999-1088](https://cve.now/CVE-1999-1088.md): Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges. (no CVSS)
- [CVE-1999-1089](https://cve.now/CVE-1999-1089.md): Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument. (no CVSS)
- [CVE-1999-1091](https://cve.now/CVE-1999-1091.md): UNIX news readers tin and rtin create the /tmp/.tin\_log file with insecure permissions and follow symlinks, which allows attackers to modify (no CVSS)
- [CVE-1999-1092](https://cve.now/CVE-1999-1092.md): tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file. (no CVSS)
- [CVE-1999-1095](https://cve.now/CVE-1999-1095.md): sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user ru (no CVSS)
- [CVE-1999-1096](https://cve.now/CVE-1999-1096.md): Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable. (no CVSS)
- [CVE-1999-1097](https://cve.now/CVE-1999-1097.md): Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is e (no CVSS)
- [CVE-1999-1101](https://cve.now/CVE-1999-1101.md): Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the (no CVSS)
- [CVE-1999-1106](https://cve.now/CVE-1999-1106.md): Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account\_name) command line argument. (no CVSS)
- [CVE-1999-1107](https://cve.now/CVE-1999-1107.md): Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable. (no CVSS)
- [CVE-1999-1110](https://cve.now/CVE-1999-1110.md): Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows (no CVSS)
- [CVE-1999-1112](https://cve.now/CVE-1999-1112.md): Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type (no CVSS)
- [CVE-1999-1113](https://cve.now/CVE-1999-1113.md): Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service (no CVSS)
- [CVE-1999-1123](https://cve.now/CVE-1999-1123.md): The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) win (no CVSS)
- [CVE-1999-1124](https://cve.now/CVE-1999-1124.md): HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the ta (no CVSS)
- [CVE-1999-1125](https://cve.now/CVE-1999-1125.md): Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remo (no CVSS)
- [CVE-1999-1126](https://cve.now/CVE-1999-1126.md): Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive conf (no CVSS)
- [CVE-1999-1128](https://cve.now/CVE-1999-1128.md): Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically (no CVSS)
- [CVE-1999-1129](https://cve.now/CVE-1999-1129.md): Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identif (no CVSS)
- [CVE-1999-1130](https://cve.now/CVE-1999-1130.md): Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read (no CVSS)
- [CVE-1999-1133](https://cve.now/CVE-1999-1133.md): HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, whi (no CVSS)
- [CVE-1999-1134](https://cve.now/CVE-1999-1134.md): Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS\_4038, PHSS\_4055, and PHSS\_4066. (no CVSS)
- [CVE-1999-1135](https://cve.now/CVE-1999-1135.md): Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS\_4994 and PHSS\_5438. (no CVSS)
- [CVE-1999-1141](https://cve.now/CVE-1999-1141.md): Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode thro (no CVSS)
- [CVE-1999-1149](https://cve.now/CVE-1999-1149.md): Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port. (no CVSS)
- [CVE-1999-1150](https://cve.now/CVE-1999-1150.md): Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to (no CVSS)
- [CVE-1999-1151](https://cve.now/CVE-1999-1151.md): Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote atta (no CVSS)
- [CVE-1999-1152](https://cve.now/CVE-1999-1152.md): Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote att (no CVSS)
- [CVE-1999-1153](https://cve.now/CVE-1999-1153.md): HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email addre (no CVSS)
- [CVE-1999-1154](https://cve.now/CVE-1999-1154.md): LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. (no CVSS)
- [CVE-1999-1155](https://cve.now/CVE-1999-1155.md): LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. (no CVSS)
- [CVE-1999-1158](https://cve.now/CVE-1999-1158.md): Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix\_scheme in Solaris 2.4 and 2.3 allows loca (no CVSS)
- [CVE-1999-1164](https://cve.now/CVE-1999-1164.md): Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL header (no CVSS)
- [CVE-1999-1165](https://cve.now/CVE-1999-1165.md): GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privile (no CVSS)
- [CVE-1999-1166](https://cve.now/CVE-1999-1166.md): Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying (no CVSS)
- [CVE-1999-1168](https://cve.now/CVE-1999-1168.md): install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of (no CVSS)
- [CVE-1999-1169](https://cve.now/CVE-1999-1169.md): nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets. (no CVSS)
- [CVE-1999-1170](https://cve.now/CVE-1999-1170.md): IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920. (no CVSS)
- [CVE-1999-1171](https://cve.now/CVE-1999-1171.md): IPswitch WS\_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920 (no CVSS)
- [CVE-1999-1172](https://cve.now/CVE-1999-1172.md): By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the ca (no CVSS)
- [CVE-1999-1173](https://cve.now/CVE-1999-1173.md): Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify (no CVSS)
- [CVE-1999-1174](https://cve.now/CVE-1999-1174.md): ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known dis (no CVSS)
- [CVE-1999-1176](https://cve.now/CVE-1999-1176.md): Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script. (no CVSS)
- [CVE-1999-1178](https://cve.now/CVE-1999-1178.md): Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl scrip (no CVSS)
- [CVE-1999-1179](https://cve.now/CVE-1999-1179.md): Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-1999-1180](https://cve.now/CVE-1999-1180.md): O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to ( (no CVSS)
- [CVE-1999-1182](https://cve.now/CVE-1999-1182.md): Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid (no CVSS)
- [CVE-1999-1183](https://cve.now/CVE-1999-1183.md): System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) (no CVSS)
- [CVE-1999-1184](https://cve.now/CVE-1999-1184.md): Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable. (no CVSS)
- [CVE-1999-1185](https://cve.now/CVE-1999-1185.md): Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file. (no CVSS)
- [CVE-1999-1186](https://cve.now/CVE-1999-1186.md): rxvt, when compiled with the PRINT\_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local (no CVSS)
- [CVE-1999-1187](https://cve.now/CVE-1999-1187.md): Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new m (no CVSS)
- [CVE-1999-1190](https://cve.now/CVE-1999-1190.md): Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" hea (no CVSS)
- [CVE-1999-1195](https://cve.now/CVE-1999-1195.md): NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update (no CVSS)
- [CVE-1999-1196](https://cve.now/CVE-1999-1196.md): Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000. (no CVSS)
- [CVE-1999-1200](https://cve.now/CVE-1999-1200.md): Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN \*@" command. (no CVSS)
- [CVE-1999-1202](https://cve.now/CVE-1999-1202.md): StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command. (no CVSS)
- [CVE-1999-1206](https://cve.now/CVE-1999-1206.md): SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX (no CVSS)
- [CVE-1999-1207](https://cve.now/CVE-1999-1207.md): Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary comman (no CVSS)
- [CVE-1999-1210](https://cve.now/CVE-1999-1210.md): xterm in Digital UNIX 4.0B \*with\* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, whic (no CVSS)
- [CVE-1999-1211](https://cve.now/CVE-1999-1211.md): Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1212](https://cve.now/CVE-1999-1212.md): Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1213](https://cve.now/CVE-1999-1213.md): Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service. (no CVSS)
- [CVE-1999-1216](https://cve.now/CVE-1999-1216.md): Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should norma (no CVSS)
- [CVE-1999-1218](https://cve.now/CVE-1999-1218.md): Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files. (no CVSS)
- [CVE-1999-1219](https://cve.now/CVE-1999-1219.md): Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possib (no CVSS)
- [CVE-1999-1220](https://cve.now/CVE-1999-1220.md): Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a (no CVSS)
- [CVE-1999-1221](https://cve.now/CVE-1999-1221.md): dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file. (no CVSS)
- [CVE-1999-1224](https://cve.now/CVE-1999-1224.md): IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the serve (no CVSS)
- [CVE-1999-1225](https://cve.now/CVE-1999-1225.md): rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the serve (no CVSS)
- [CVE-1999-1227](https://cve.now/CVE-1999-1227.md): Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file. (no CVSS)
- [CVE-1999-1228](https://cve.now/CVE-1999-1228.md): Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary (no CVSS)
- [CVE-1999-1229](https://cve.now/CVE-1999-1229.md): Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to rea (no CVSS)
- [CVE-1999-1230](https://cve.now/CVE-1999-1230.md): Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which cause (no CVSS)
- [CVE-1999-1231](https://cve.now/CVE-1999-1231.md): ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts a (no CVSS)
- [CVE-1999-1232](https://cve.now/CVE-1999-1232.md): Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH e (no CVSS)
- [CVE-1999-1234](https://cve.now/CVE-1999-1234.md): LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDom (no CVSS)
- [CVE-1999-1235](https://cve.now/CVE-1999-1235.md): Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the in (no CVSS)
- [CVE-1999-1236](https://cve.now/CVE-1999-1236.md): Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges (no CVSS)
- [CVE-1999-1237](https://cve.now/CVE-1999-1237.md): Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows rem (no CVSS)
- [CVE-1999-1238](https://cve.now/CVE-1999-1238.md): Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges. (no CVSS)
- [CVE-1999-1239](https://cve.now/CVE-1999-1239.md): HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display eve (no CVSS)
- [CVE-1999-1240](https://cve.now/CVE-1999-1240.md): Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message. (no CVSS)
- [CVE-1999-1241](https://cve.now/CVE-1999-1241.md): Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that (no CVSS)
- [CVE-1999-1242](https://cve.now/CVE-1999-1242.md): Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges. (no CVSS)
- [CVE-1999-1244](https://cve.now/CVE-1999-1244.md): IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file. (no CVSS)
- [CVE-1999-1245](https://cve.now/CVE-1999-1245.md): vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers (no CVSS)
- [CVE-1999-1247](https://cve.now/CVE-1999-1247.md): Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges. (no CVSS)
- [CVE-1999-1248](https://cve.now/CVE-1999-1248.md): Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges. (no CVSS)
- [CVE-1999-1250](https://cve.now/CVE-1999-1250.md): Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read a (no CVSS)
- [CVE-1999-1251](https://cve.now/CVE-1999-1251.md): Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service. (no CVSS)
- [CVE-1999-1252](https://cve.now/CVE-1999-1252.md): Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges (no CVSS)
- [CVE-1999-1253](https://cve.now/CVE-1999-1253.md): Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to (no CVSS)
- [CVE-1999-1254](https://cve.now/CVE-1999-1254.md): Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which cause (no CVSS)
- [CVE-1999-1255](https://cve.now/CVE-1999-1255.md): Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit\_file action p (no CVSS)
- [CVE-1999-1256](https://cve.now/CVE-1999-1256.md): Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file (no CVSS)
- [CVE-1999-1257](https://cve.now/CVE-1999-1257.md): Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z (no CVSS)
- [CVE-1999-1260](https://cve.now/CVE-1999-1260.md): mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server versio (no CVSS)
- [CVE-1999-1261](https://cve.now/CVE-1999-1261.md): Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, vi (no CVSS)
- [CVE-1999-1264](https://cve.now/CVE-1999-1264.md): WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled. (no CVSS)
- [CVE-1999-1265](https://cve.now/CVE-1999-1265.md): SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with (no CVSS)
- [CVE-1999-1266](https://cve.now/CVE-1999-1266.md): rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers (no CVSS)
- [CVE-1999-1267](https://cve.now/CVE-1999-1267.md): KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a c (no CVSS)
- [CVE-1999-1268](https://cve.now/CVE-1999-1268.md): Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices. (no CVSS)
- [CVE-1999-1269](https://cve.now/CVE-1999-1269.md): Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file. (no CVSS)
- [CVE-1999-1270](https://cve.now/CVE-1999-1270.md): KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphr (no CVSS)
- [CVE-1999-1271](https://cve.now/CVE-1999-1271.md): Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other u (no CVSS)
- [CVE-1999-1272](https://cve.now/CVE-1999-1272.md): Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. (no CVSS)
- [CVE-1999-1273](https://cve.now/CVE-1999-1273.md): Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. (no CVSS)
- [CVE-1999-1274](https://cve.now/CVE-1999-1274.md): iPass RoamServer 3.1 creates temporary files with world-writable permissions. (no CVSS)
- [CVE-1999-1275](https://cve.now/CVE-1999-1275.md): Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local user (no CVSS)
- [CVE-1999-1277](https://cve.now/CVE-1999-1277.md): BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow o (no CVSS)
- [CVE-1999-1278](https://cve.now/CVE-1999-1278.md): nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute cer (no CVSS)
- [CVE-1999-1280](https://cve.now/CVE-1999-1280.md): Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in c (no CVSS)
- [CVE-1999-1281](https://cve.now/CVE-1999-1281.md): Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program (no CVSS)
- [CVE-1999-1282](https://cve.now/CVE-1999-1282.md): RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain (no CVSS)
- [CVE-1999-1283](https://cve.now/CVE-1999-1283.md): Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag. (no CVSS)
- [CVE-1999-1285](https://cve.now/CVE-1999-1285.md): Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random devi (no CVSS)
- [CVE-1999-1286](https://cve.now/CVE-1999-1286.md): addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a te (no CVSS)
- [CVE-1999-1287](https://cve.now/CVE-1999-1287.md): Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface. (no CVSS)
- [CVE-1999-1289](https://cve.now/CVE-1999-1289.md): ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address ( (no CVSS)
- [CVE-1999-1291](https://cve.now/CVE-1999-1291.md): TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing (no CVSS)
- [CVE-1999-1292](https://cve.now/CVE-1999-1292.md): Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-1999-1293](https://cve.now/CVE-1999-1293.md): mod\_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache t (no CVSS)
- [CVE-1999-1295](https://cve.now/CVE-1999-1295.md): Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a (no CVSS)
- [CVE-1999-1296](https://cve.now/CVE-1999-1296.md): Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a (no CVSS)
- [CVE-1999-1299](https://cve.now/CVE-1999-1299.md): rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, sinc (no CVSS)
- [CVE-1999-1300](https://cve.now/CVE-1999-1300.md): Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration. (no CVSS)
- [CVE-1999-1302](https://cve.now/CVE-1999-1302.md): Unspecified vulnerability in pt\_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access. (no CVSS)
- [CVE-1999-1303](https://cve.now/CVE-1999-1303.md): Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access. (no CVSS)
- [CVE-1999-1304](https://cve.now/CVE-1999-1304.md): Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access. (no CVSS)
- [CVE-1999-1305](https://cve.now/CVE-1999-1305.md): Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access. (no CVSS)
- [CVE-1999-1306](https://cve.now/CVE-1999-1306.md): Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword (no CVSS)
- [CVE-1999-1307](https://cve.now/CVE-1999-1307.md): Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1308](https://cve.now/CVE-1999-1308.md): Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to (no CVSS)
- [CVE-1999-1311](https://cve.now/CVE-1999-1311.md): Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges. (no CVSS)
- [CVE-1999-1312](https://cve.now/CVE-1999-1312.md): Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges. (no CVSS)
- [CVE-1999-1313](https://cve.now/CVE-1999-1313.md): Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands. (no CVSS)
- [CVE-1999-1314](https://cve.now/CVE-1999-1314.md): Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of (no CVSS)
- [CVE-1999-1315](https://cve.now/CVE-1999-1315.md): Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a de (no CVSS)
- [CVE-1999-1319](https://cve.now/CVE-1999-1319.md): Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations (no CVSS)
- [CVE-1999-1322](https://cve.now/CVE-1999-1322.md): The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames (no CVSS)
- [CVE-1999-1323](https://cve.now/CVE-1999-1323.md): Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, st (no CVSS)
- [CVE-1999-1334](https://cve.now/CVE-1999-1334.md): Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long R (no CVSS)
- [CVE-1999-1338](https://cve.now/CVE-1999-1338.md): Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions. (no CVSS)
- [CVE-1999-1340](https://cve.now/CVE-1999-1340.md): Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument. (no CVSS)
- [CVE-1999-1342](https://cve.now/CVE-1999-1342.md): ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port. (no CVSS)
- [CVE-1999-1343](https://cve.now/CVE-1999-1343.md): HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number (no CVSS)
- [CVE-1999-1344](https://cve.now/CVE-1999-1344.md): Auto\_FTP.pl script in Auto\_FTP 0.2 stores usernames and passwords in plaintext in the auto\_ftp.conf configuration file. (no CVSS)
- [CVE-1999-1345](https://cve.now/CVE-1999-1345.md): Auto\_FTP.pl script in Auto\_FTP 0.2 uses the /tmp/ftp\_tmp as a shared directory with insecure permissions, which allows local users to (1) se (no CVSS)
- [CVE-1999-1346](https://cve.now/CVE-1999-1346.md): PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which all (no CVSS)
- [CVE-1999-1347](https://cve.now/CVE-1999-1347.md): Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starti (no CVSS)
- [CVE-1999-1348](https://cve.now/CVE-1999-1348.md): Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users (no CVSS)
- [CVE-1999-1349](https://cve.now/CVE-1999-1349.md): NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, pos (no CVSS)
- [CVE-1999-1350](https://cve.now/CVE-1999-1350.md): ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privil (no CVSS)
- [CVE-1999-1352](https://cve.now/CVE-1999-1352.md): mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges. (no CVSS)
- [CVE-1999-1353](https://cve.now/CVE-1999-1353.md): Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in t (no CVSS)
- [CVE-1999-1354](https://cve.now/CVE-1999-1354.md): E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc f (no CVSS)
- [CVE-1999-1355](https://cve.now/CVE-1999-1355.md): BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlie (no CVSS)
- [CVE-1999-1357](https://cve.now/CVE-1999-1357.md): Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "\<" (no CVSS)
- [CVE-1999-1361](https://cve.now/CVE-1999-1361.md): Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhausti (no CVSS)
- [CVE-1999-1364](https://cve.now/CVE-1999-1364.md): Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadCont (no CVSS)
- [CVE-1999-1366](https://cve.now/CVE-1999-1366.md): Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily (no CVSS)
- [CVE-1999-1367](https://cve.now/CVE-1999-1367.md): Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could (no CVSS)
- [CVE-1999-1368](https://cve.now/CVE-1999-1368.md): AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft E (no CVSS)
- [CVE-1999-1369](https://cve.now/CVE-1999-1369.md): Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users (no CVSS)
- [CVE-1999-1370](https://cve.now/CVE-1999-1370.md): The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with phy (no CVSS)
- [CVE-1999-1371](https://cve.now/CVE-1999-1371.md): Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument (no CVSS)
- [CVE-1999-1372](https://cve.now/CVE-1999-1372.md): Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow (no CVSS)
- [CVE-1999-1373](https://cve.now/CVE-1999-1373.md): FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g (no CVSS)
- [CVE-1999-1374](https://cve.now/CVE-1999-1374.md): perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows (no CVSS)
- [CVE-1999-1375](https://cve.now/CVE-1999-1375.md): FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name i (no CVSS)
- [CVE-1999-1376](https://cve.now/CVE-1999-1376.md): Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-1999-1377](https://cve.now/CVE-1999-1377.md): Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-1999-1378](https://cve.now/CVE-1999-1378.md): dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-1381](https://cve.now/CVE-1999-1381.md): Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-1999-1383](https://cve.now/CVE-1999-1383.md): (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (\` back (no CVSS)
- [CVE-1999-1387](https://cve.now/CVE-1999-1387.md): Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those gen (no CVSS)
- [CVE-1999-1388](https://cve.now/CVE-1999-1388.md): passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. (no CVSS)
- [CVE-1999-1389](https://cve.now/CVE-1999-1389.md): US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set hos (no CVSS)
- [CVE-1999-1390](https://cve.now/CVE-1999-1390.md): suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line. (no CVSS)
- [CVE-1999-1391](https://cve.now/CVE-1999-1391.md): Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd prog (no CVSS)
- [CVE-1999-1392](https://cve.now/CVE-1999-1392.md): Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1393](https://cve.now/CVE-1999-1393.md): Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by (no CVSS)
- [CVE-1999-1394](https://cve.now/CVE-1999-1394.md): BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for file (no CVSS)
- [CVE-1999-1395](https://cve.now/CVE-1999-1395.md): Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges. (no CVSS)
- [CVE-1999-1396](https://cve.now/CVE-1999-1396.md): Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root ac (no CVSS)
- [CVE-1999-1398](https://cve.now/CVE-1999-1398.md): Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack (no CVSS)
- [CVE-1999-1399](https://cve.now/CVE-1999-1399.md): spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variabl (no CVSS)
- [CVE-1999-1400](https://cve.now/CVE-1999-1400.md): The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the (no CVSS)
- [CVE-1999-1401](https://cve.now/CVE-1999-1401.md): Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchb (no CVSS)
- [CVE-1999-1403](https://cve.now/CVE-1999-1403.md): IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readabl (no CVSS)
- [CVE-1999-1404](https://cve.now/CVE-1999-1404.md): IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed da (no CVSS)
- [CVE-1999-1405](https://cve.now/CVE-1999-1405.md): snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directo (no CVSS)
- [CVE-1999-1406](https://cve.now/CVE-1999-1406.md): dumpreg in Red Hat Linux 5.1 opens /dev/mem with O\_RDWR access, which allows local users to cause a denial of service (crash) by redirecting (no CVSS)
- [CVE-1999-1408](https://cve.now/CVE-1999-1408.md): Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to (no CVSS)
- [CVE-1999-1410](https://cve.now/CVE-1999-1410.md): addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the p (no CVSS)
- [CVE-1999-1412](https://cve.now/CVE-1999-1412.md): A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-1999-1413](https://cve.now/CVE-1999-1413.md): Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which a (no CVSS)
- [CVE-1999-1415](https://cve.now/CVE-1999-1415.md): Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges. (no CVSS)
- [CVE-1999-1416](https://cve.now/CVE-1999-1416.md): AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST reque (no CVSS)
- [CVE-1999-1417](https://cve.now/CVE-1999-1417.md): Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly (no CVSS)
- [CVE-1999-1418](https://cve.now/CVE-1999-1418.md): ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the (no CVSS)
- [CVE-1999-1420](https://cve.now/CVE-1999-1420.md): NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modif (no CVSS)
- [CVE-1999-1421](https://cve.now/CVE-1999-1421.md): NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a deni (no CVSS)
- [CVE-1999-1422](https://cve.now/CVE-1999-1422.md): The default configuration of Slackware 3.4, and possibly other versions, includes . (no CVSS)
- [CVE-1999-1424](https://cve.now/CVE-1999-1424.md): Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local us (no CVSS)
- [CVE-1999-1425](https://cve.now/CVE-1999-1425.md): Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users (no CVSS)
- [CVE-1999-1426](https://cve.now/CVE-1999-1426.md): Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arb (no CVSS)
- [CVE-1999-1427](https://cve.now/CVE-1999-1427.md): Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1428](https://cve.now/CVE-1999-1428.md): Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, whic (no CVSS)
- [CVE-1999-1429](https://cve.now/CVE-1999-1429.md): DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through t (no CVSS)
- [CVE-1999-1430](https://cve.now/CVE-1999-1430.md): PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows lo (no CVSS)
- [CVE-1999-1431](https://cve.now/CVE-1999-1431.md): ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as W (no CVSS)
- [CVE-1999-1434](https://cve.now/CVE-1999-1434.md): login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dr (no CVSS)
- [CVE-1999-1435](https://cve.now/CVE-1999-1435.md): Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables. (no CVSS)
- [CVE-1999-1436](https://cve.now/CVE-1999-1436.md): Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "us (no CVSS)
- [CVE-1999-1438](https://cve.now/CVE-1999-1438.md): Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments. (no CVSS)
- [CVE-1999-1439](https://cve.now/CVE-1999-1439.md): gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files. (no CVSS)
- [CVE-1999-1440](https://cve.now/CVE-1999-1440.md): Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send (no CVSS)
- [CVE-1999-1441](https://cve.now/CVE-1999-1441.md): Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial o (no CVSS)
- [CVE-1999-1442](https://cve.now/CVE-1999-1442.md): Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence o (no CVSS)
- [CVE-1999-1443](https://cve.now/CVE-1999-1443.md): Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protecti (no CVSS)
- [CVE-1999-1444](https://cve.now/CVE-1999-1444.md): genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext. (no CVSS)
- [CVE-1999-1445](https://cve.now/CVE-1999-1445.md): Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attac (no CVSS)
- [CVE-1999-1446](https://cve.now/CVE-1999-1446.md): Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and Histo (no CVSS)
- [CVE-1999-1447](https://cve.now/CVE-1999-1447.md): Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in a (no CVSS)
- [CVE-1999-1448](https://cve.now/CVE-1999-1448.md): Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certa (no CVSS)
- [CVE-1999-1449](https://cve.now/CVE-1999-1449.md): SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device. (no CVSS)
- [CVE-1999-1450](https://cve.now/CVE-1999-1450.md): Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows (no CVSS)
- [CVE-1999-1451](https://cve.now/CVE-1999-1451.md): The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files. (no CVSS)
- [CVE-1999-1453](https://cve.now/CVE-1999-1453.md): Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser (no CVSS)
- [CVE-1999-1454](https://cve.now/CVE-1999-1454.md): Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the (no CVSS)
- [CVE-1999-1457](https://cve.now/CVE-1999-1457.md): Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is (no CVSS)
- [CVE-1999-1458](https://cve.now/CVE-1999-1458.md): Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument. (no CVSS)
- [CVE-1999-1459](https://cve.now/CVE-1999-1459.md): BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file. (no CVSS)
- [CVE-1999-1460](https://cve.now/CVE-1999-1460.md): BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as th (no CVSS)
- [CVE-1999-1461](https://cve.now/CVE-1999-1461.md): inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which (no CVSS)
- [CVE-1999-1462](https://cve.now/CVE-1999-1462.md): Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files. (no CVSS)
- [CVE-1999-1463](https://cve.now/CVE-1999-1463.md): Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly (no CVSS)
- [CVE-1999-1464](https://cve.now/CVE-1999-1464.md): Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access (no CVSS)
- [CVE-1999-1465](https://cve.now/CVE-1999-1465.md): Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access (no CVSS)
- [CVE-1999-1466](https://cve.now/CVE-1999-1466.md): Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists (no CVSS)
- [CVE-1999-1467](https://cve.now/CVE-1999-1467.md): Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to th (no CVSS)
- [CVE-1999-1469](https://cve.now/CVE-1999-1469.md): Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) (no CVSS)
- [CVE-1999-1470](https://cve.now/CVE-1999-1470.md): Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain pr (no CVSS)
- [CVE-1999-1471](https://cve.now/CVE-1999-1471.md): Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long she (no CVSS)
- [CVE-1999-1474](https://cve.now/CVE-1999-1474.md): PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through th (no CVSS)
- [CVE-1999-1475](https://cve.now/CVE-1999-1475.md): ProFTPd 1.2 compiled with the mod\_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords (no CVSS)
- [CVE-1999-1477](https://cve.now/CVE-1999-1477.md): Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack. (no CVSS)
- [CVE-1999-1479](https://cve.now/CVE-1999-1479.md): The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-1999-1480](https://cve.now/CVE-1999-1480.md): (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. (no CVSS)
- [CVE-1999-1482](https://cve.now/CVE-1999-1482.md): SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes. (no CVSS)
- [CVE-1999-1483](https://cve.now/CVE-1999-1483.md): Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable. (no CVSS)
- [CVE-1999-1484](https://cve.now/CVE-1999-1484.md): Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the met (no CVSS)
- [CVE-1999-1485](https://cve.now/CVE-1999-1485.md): nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible d (no CVSS)
- [CVE-1999-1487](https://cve.now/CVE-1999-1487.md): Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system. (no CVSS)
- [CVE-1999-1489](https://cve.now/CVE-1999-1489.md): Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nop (no CVSS)
- [CVE-1999-1491](https://cve.now/CVE-1999-1491.md): abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary co (no CVSS)
- [CVE-1999-1492](https://cve.now/CVE-1999-1492.md): Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root priv (no CVSS)
- [CVE-1999-1493](https://cve.now/CVE-1999-1493.md): Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure sy (no CVSS)
- [CVE-1999-1495](https://cve.now/CVE-1999-1495.md): xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file. (no CVSS)
- [CVE-1999-1496](https://cve.now/CVE-1999-1496.md): Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the t (no CVSS)
- [CVE-1999-1497](https://cve.now/CVE-1999-1497.md): Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-ma (no CVSS)
- [CVE-1999-1498](https://cve.now/CVE-1999-1498.md): Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file. (no CVSS)
- [CVE-1999-1499](https://cve.now/CVE-1999-1499.md): named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named\_dump.db when root kills the process with (no CVSS)
- [CVE-1999-1500](https://cve.now/CVE-1999-1500.md): Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL com (no CVSS)
- [CVE-1999-1501](https://cve.now/CVE-1999-1501.md): (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which a (no CVSS)
- [CVE-1999-1502](https://cve.now/CVE-1999-1502.md): Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server n (no CVSS)
- [CVE-1999-1503](https://cve.now/CVE-1999-1503.md): Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null (no CVSS)
- [CVE-1999-1504](https://cve.now/CVE-1999-1504.md): Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command. (no CVSS)
- [CVE-1999-1505](https://cve.now/CVE-1999-1505.md): Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (no CVSS)
- [CVE-1999-1506](https://cve.now/CVE-1999-1506.md): Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin. (no CVSS)
- [CVE-1999-1508](https://cve.now/CVE-1999-1508.md): Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undoc (no CVSS)
- [CVE-1999-1509](https://cve.now/CVE-1999-1509.md): Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (no CVSS)
- [CVE-1999-1510](https://cve.now/CVE-1999-1510.md): Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary co (no CVSS)
- [CVE-1999-1511](https://cve.now/CVE-1999-1511.md): Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a lon (no CVSS)
- [CVE-1999-1513](https://cve.now/CVE-1999-1513.md): Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43. (no CVSS)
- [CVE-1999-1514](https://cve.now/CVE-1999-1514.md): Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary com (no CVSS)
- [CVE-1999-1515](https://cve.now/CVE-1999-1515.md): A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender an (no CVSS)
- [CVE-1999-1516](https://cve.now/CVE-1999-1516.md): A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary cod (no CVSS)
- [CVE-1999-1517](https://cve.now/CVE-1999-1517.md): runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrit (no CVSS)
- [CVE-1999-1518](https://cve.now/CVE-1999-1518.md): Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory lim (no CVSS)
- [CVE-1999-1519](https://cve.now/CVE-1999-1519.md): Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password (no CVSS)
- [CVE-1999-1521](https://cve.now/CVE-1999-1521.md): Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a re (no CVSS)
- [CVE-1999-1522](https://cve.now/CVE-1999-1522.md): Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML. (no CVSS)
- [CVE-1999-1523](https://cve.now/CVE-1999-1523.md): Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, vi (no CVSS)
- [CVE-1999-1524](https://cve.now/CVE-1999-1524.md): FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and c (no CVSS)
- [CVE-1999-1525](https://cve.now/CVE-1999-1525.md): Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetN (no CVSS)
- [CVE-1999-1526](https://cve.now/CVE-1999-1526.md): Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia. (no CVSS)
- [CVE-1999-1527](https://cve.now/CVE-1999-1527.md): Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict (no CVSS)
- [CVE-1999-1528](https://cve.now/CVE-1999-1528.md): ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, wh (no CVSS)
- [CVE-1999-1529](https://cve.now/CVE-1999-1529.md): A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to (no CVSS)
- [CVE-1999-1532](https://cve.now/CVE-1999-1532.md): Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long (no CVSS)
- [CVE-1999-1533](https://cve.now/CVE-1999-1533.md): Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login. (no CVSS)
- [CVE-1999-1534](https://cve.now/CVE-1999-1534.md): Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME (no CVSS)
- [CVE-1999-1536](https://cve.now/CVE-1999-1536.md): .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the (no CVSS)
- [CVE-1999-1538](https://cve.now/CVE-1999-1538.md): When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machin (no CVSS)
- [CVE-1999-1539](https://cve.now/CVE-1999-1539.md): Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denia (no CVSS)
- [CVE-1999-1540](https://cve.now/CVE-1999-1540.md): shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the sou (no CVSS)
- [CVE-1999-1541](https://cve.now/CVE-1999-1541.md): shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink at (no CVSS)
- [CVE-1999-1543](https://cve.now/CVE-1999-1543.md): MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File. (no CVSS)
- [CVE-1999-1544](https://cve.now/CVE-1999-1544.md): Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a lo (no CVSS)
- [CVE-1999-1545](https://cve.now/CVE-1999-1545.md): Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files t (no CVSS)
- [CVE-1999-1546](https://cve.now/CVE-1999-1546.md): netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable. (no CVSS)
- [CVE-1999-1547](https://cve.now/CVE-1999-1547.md): Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex (no CVSS)
- [CVE-1999-1548](https://cve.now/CVE-1999-1548.md): Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succ (no CVSS)
- [CVE-1999-1549](https://cve.now/CVE-1999-1549.md): Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form v (no CVSS)
- [CVE-1999-1551](https://cve.now/CVE-1999-1551.md): Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary command (no CVSS)
- [CVE-1999-1552](https://cve.now/CVE-1999-1552.md): dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to ove (no CVSS)
- [CVE-1999-1553](https://cve.now/CVE-1999-1553.md): Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line. (no CVSS)
- [CVE-1999-1554](https://cve.now/CVE-1999-1554.md): /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local (no CVSS)
- [CVE-1999-1555](https://cve.now/CVE-1999-1555.md): Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissio (no CVSS)
- [CVE-1999-1557](https://cve.now/CVE-1999-1557.md): Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of (no CVSS)
- [CVE-1999-1558](https://cve.now/CVE-1999-1558.md): Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled. (no CVSS)
- [CVE-1999-1559](https://cve.now/CVE-1999-1559.md): Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users (no CVSS)
- [CVE-1999-1560](https://cve.now/CVE-1999-1560.md): Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually r (no CVSS)
- [CVE-1999-1561](https://cve.now/CVE-1999-1561.md): Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc\_serv.conf), which could allow a local (no CVSS)
- [CVE-1999-1562](https://cve.now/CVE-1999-1562.md): gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file. (no CVSS)
- [CVE-1999-1563](https://cve.now/CVE-1999-1563.md): Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm. (no CVSS)
- [CVE-1999-1564](https://cve.now/CVE-1999-1564.md): FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 m (no CVSS)
- [CVE-1999-1566](https://cve.now/CVE-1999-1566.md): Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port (no CVSS)
- [CVE-1999-1567](https://cve.now/CVE-1999-1567.md): Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.ex (no CVSS)
- [CVE-2000-1191](https://cve.now/CVE-2000-1191.md): htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by reques (no CVSS)
- [CVE-2000-1192](https://cve.now/CVE-2000-1192.md): Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary (no CVSS)
- [CVE-2000-1194](https://cve.now/CVE-2000-1194.md): Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to (no CVSS)
- [CVE-2000-1197](https://cve.now/CVE-2000-1197.md): POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which (no CVSS)
- [CVE-2000-1198](https://cve.now/CVE-2000-1198.md): qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of (no CVSS)
- [CVE-2000-1199](https://cve.now/CVE-2000-1199.md): PostgreSQL stores usernames and passwords in plaintext in (1) pg\_shadow and (2) pg\_pwd, which allows attackers with sufficient privileges to (no CVSS)
- [CVE-2000-1201](https://cve.now/CVE-2000-1201.md): Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. (no CVSS)
- [CVE-2000-1202](https://cve.now/CVE-2000-1202.md): ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's di (no CVSS)
- [CVE-2001-0647](https://cve.now/CVE-2001-0647.md): Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not inclu (no CVSS)
- [CVE-2001-0679](https://cve.now/CVE-2001-0679.md): A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to t (no CVSS)
- [CVE-2001-0711](https://cve.now/CVE-2001-0711.md): Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interfa (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.