CVE-1999-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
980 records · Page 10 of 10
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
UpdatedRemote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.
Updatedpcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.
UpdatedPredictable TCP sequence numbers allow spoofing.
UpdatedBuffer overflow in wu-ftp from PASV command causes a core dump.
UpdatedPASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
UpdatedListening TCP ports are sequentially allocated, allowing spoofing attacks.
UpdatedTelnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
UpdatedBuffer overflow in AIX xdat gives root access to local users.
UpdatedApache httpd cookie buffer overflow for versions 1.1.1 and earlier.
Updatedtest-cgi program allows an attacker to list files on the server.
UpdatedSolaris ufsrestore buffer overflow.
Updated- CVE-1999-0068: CGI PHP mylog script allows an attacker to read any file on the target server. Unscored
CGI PHP mylog script allows an attacker to read any file on the target server.
Updated - CVE-1999-0067: phf CGI program allows remote command execution through shell metacharacters. Unscored
phf CGI program allows remote command execution through shell metacharacters.
Updated - CVE-1999-0066: AnyForm CGI remote execution. 9.8 Critical
AnyForm CGI remote execution.
Updated Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
UpdatedBuffer overflow in AIX lquerylv program gives root access to local users.
UpdatedCisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
UpdatedThe chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
UpdatedFile creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
UpdatedAttackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
Updated- CVE-1999-0059: IRIX fam service allows an attacker to obtain a list of all files on the server. 7.3 High
IRIX fam service allows an attacker to obtain a list of all files on the server.
Updated Buffer overflow in PHP cgi program, php.cgi allows shell access.
Updated- CVE-1999-0057: Vacation program allows command execution by remote users through a sendmail command. Unscored
Vacation program allows command execution by remote users through a sendmail command.
Updated Buffer overflow in Sun's ping program can give root access to local users.
UpdatedBuffer overflows in Sun libnsl allow root access.
UpdatedSun's ftpd daemon can be subjected to a denial of service.
UpdatedTCP RST denial of service in FreeBSD.
UpdatedIP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
UpdatedArbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
UpdatedBuffer overflow in HP-UX newgrp program.
UpdatedCsetup under IRIX allows arbitrary file creation or overwriting.
UpdatedTalkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
UpdatedMIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
UpdatedBuffer overflow of rlogin program using TERM environmental variable.
UpdatedList of arbitrary files on Web host via nph-test-cgi script.
Updatedfsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
UpdatedCommand execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
Updated- CVE-1999-0042: Buffer overflow in University of Washington's implementation of IMAP and POP servers. Unscored
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
Updated Buffer overflow in NLS (Natural Language Service).
UpdatedBuffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
Updatedwebdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.
Updated- CVE-1999-0038: Buffer overflow in xlock program allows local users to execute commands as root. 8.4 High
Buffer overflow in xlock program allows local users to execute commands as root.
Updated Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.
UpdatedIRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
UpdatedRace condition in signal handling routine in ftpd, allowing read/write arbitrary files.
UpdatedBuffer overflow in suidperl (sperl), Perl 4.x and 5.x.
UpdatedCommand execution in Sun systems via buffer overflow in the at program.
UpdatedBuffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
UpdatedJavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
Updatedroot privileges via buffer overflow in xlock command on SGI IRIX systems.
Updatedroot privileges via buffer overflow in ordist command on SGI IRIX systems.
Updated- CVE-1999-0028: root privileges via buffer overflow in login/scheme command on SGI IRIX systems. Unscored
root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
Updated root privileges via buffer overflow in eject command on SGI IRIX systems.
Updatedroot privileges via buffer overflow in pset command on SGI IRIX systems.
Updatedroot privileges via buffer overflow in df command on SGI IRIX systems.
UpdatedDNS cache poisoning via BIND, by predictable query IDs.
Updated- CVE-1999-0023: Local user gains root privileges via buffer overflow in rdist, via lookup() function. Unscored
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
Updated - CVE-1999-0022: Local user gains root privileges via buffer overflow in rdist, via expstr() function. 7.8 High
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
Updated Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Updated · Rejected recordDelete or create a file via rpc.statd, due to invalid information.
UpdatedBuffer overflow in statd allows root privileges.
UpdatedFTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
UpdatedLand IP denial of service.
UpdatedTeardrop IP denial of service.
Updated- CVE-1999-0014: Unauthorized privileged access or denial of service via dtappgather program in CDE. Unscored
Unauthorized privileged access or denial of service via dtappgather program in CDE.
Updated Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.
UpdatedSome web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
UpdatedDenial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
UpdatedDenial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
UpdatedInverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
UpdatedBuffer overflow in NIS+, in Sun's rpc.nisd program.
UpdatedInformation from SSL-encrypted sessions via PKCS #1.
UpdatedBuffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
Updated- CVE-1999-0005: Arbitrary command execution via IMAP buffer overflow in authenticate command. Unscored
Arbitrary command execution via IMAP buffer overflow in authenticate command.
Updated MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.
UpdatedExecute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
UpdatedBuffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
Updatedip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
Updated