CVE-1999-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
980 records · Page 1 of 10
Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
UpdatedCisco Cache Engine allows an attacker to replace content in the cache.
Updatedwu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
UpdatedBuffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
UpdatedWindows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
UpdatedWindows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
UpdatedModifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
UpdatedHP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
UpdatedBuffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.
UpdatedError messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
UpdatedBuffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.
Updated- CVE-1999-0988: UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. Unscored
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
Updated Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.
UpdatedThe ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.
UpdatedCC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
UpdatedMatt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
UpdatedWhois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
UpdatedThe Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.
UpdatedInternet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
UpdatedWindows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request.
UpdatedThe SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
Updatedhtdig allows remote attackers to execute commands via filenames with shell metacharacters.
UpdatedBuffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
UpdatedSendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.
UpdatedThe Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
UpdatedBuffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
UpdatedBuffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
UpdatedBuffer overflow in Xshipwars xsw program.
UpdatedBuffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.
UpdatedThe OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.
UpdatedThe Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork.
Updated- CVE-1999-0968: Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges. Unscored
Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges.
Updated Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
UpdatedBuffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
UpdatedRace condition in xterm allows local users to modify arbitrary files via the logging option.
UpdatedBuffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.
UpdatedFreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
UpdatedBuffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
UpdatedHPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
UpdatedIRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
UpdatedIRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
Updatedsudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
UpdatedMajorCool mj_key_cache program allows local users to modify files via a symlink attack.
UpdatedThe NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service.
UpdatedRace condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
UpdatedWWWBoard has a default username and default password.
UpdatedWWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
UpdatedBuffer overflow in Solaris lpstat via class argument allows local users to gain root access.
UpdatedBuffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.
UpdatedBuffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
UpdatedBuffer overflow in canuum program for Canna input system allows local users to gain root privileges.
UpdatedBuffer overflow in uum program for Canna input system allows local users to gain root privileges.
UpdatedAN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.
UpdatedBuffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.
UpdatedBuffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands.
UpdatedIBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.
UpdatedBuffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.
UpdatedUnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
UpdatedMutt mail client allows a remote attacker to execute commands via shell metacharacters.
UpdatedBuffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
UpdatedDenial of service in Debian IRC Epic/epic4 client via a long string.
UpdatedMBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.
UpdatedBNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
UpdatedBNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters.
Updatedclassifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
Updatedclassifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
UpdatedTeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
UpdatedMediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.
UpdatedBuffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
Updatedwwwboard allows a remote attacker to delete message board articles via a malformed argument.
UpdatedNovell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
UpdatedBuffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.
Updated- CVE-1999-0927: NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack. Unscored
NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Updated Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
UpdatedUnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
UpdatedThe Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
UpdatedSample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.
UpdatedAn example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
UpdatedBMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
UpdatedBuffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
UpdatedA memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections.
Updated- CVE-1999-0918: Denial of service in various Windows systems via malformed, fragmented IGMP packets. Unscored
Denial of service in various Windows systems via malformed, fragmented IGMP packets.
Updated The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
UpdatedWebTrends software stores account names and passwords in a file which does not have restricted access permissions.
UpdatedURL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
UpdatedBuffer overflow in the FTP client in the Debian GNU/Linux netstd package.
Updateddfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
UpdatedFreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
UpdatedBuffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
UpdatedMicrosoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
UpdatedMultihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
UpdatedDenial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
Updatedsccw allows local users to read arbitrary files.
UpdatedBuffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
Updated- CVE-1999-0905: Denial of service in Axent Raptor firewall via malformed zero-length IP options. Unscored
Denial of service in Axent Raptor firewall via malformed zero-length IP options.
Updated Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.
Updatedgenfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
Updatedypserv allows local administrators to modify password tables.
Updated- CVE-1999-0901: ypserv allows a local user to modify the GECOS and login shells of other users. Unscored
ypserv allows a local user to modify the GECOS and login shells of other users.
Updated Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.
Updated