CVE-1999-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
980 records · Page 2 of 10
The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.
UpdatedBuffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.
UpdatediChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
UpdatedBuffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.
UpdatedFirewall-1 does not properly restrict access to LDAP attributes.
UpdatedRed Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
Updated- CVE-1999-0893: userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. Unscored
userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.
Updated Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.
UpdatedThe "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
UpdatediHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
UpdatedCisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
Updateddbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
UpdatedFTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.
UpdatedThe security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
UpdatedAlibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.
Updated- CVE-1999-0884: The Zeus web server administrative interface uses weak encryption for its passwords. Unscored
The Zeus web server administrative interface uses weak encryption for its passwords.
Updated Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
UpdatedFalcon web server allows remote attackers to determine the absolute path of the web root via long file names.
UpdatedFalcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
UpdatedDenial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
UpdatedBuffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
UpdatedBuffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
UpdatedInternet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
UpdatedBuffer overflow in Internet Explorer 4.0 via EMBED tag.
UpdatedDHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
UpdatedBuffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
UpdatedBuffer overflow in Skyfull mail server via MAIL FROM command.
UpdatedBuffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.
UpdatedInternet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.
UpdatedInternet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.
UpdatedInternet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.
Updateducbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
Updated- CVE-1999-0867: Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers. Unscored
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Updated - CVE-1999-0866: Buffer overflow in UnixWare xauto program allows local users to gain root privilege. Unscored
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
Updated - CVE-1999-0865: Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port. Unscored
Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
Updated UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
UpdatedBuffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.
UpdatedInsecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
UpdatedRace condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
UpdatedSolaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
UpdatedSolaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
UpdatedInternet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.
Updated- CVE-1999-0857: FreeBSD gdc program allows local users to modify files via a symlink attack. Unscored
FreeBSD gdc program allows local users to modify files via a symlink attack.
Updated login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.
UpdatedBuffer overflow in FreeBSD gdc program.
UpdatedUltimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.
UpdatedBuffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
UpdatedIBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
UpdatedDenial of service in BIND named via naptr.
UpdatedThe default permissions for Endymion MailMan allow local users to read email or modify files.
UpdatedDenial of service in BIND named via maxdname.
Updated- CVE-1999-0848: Denial of service in BIND named via consuming more than "fdmax" file descriptors. Unscored
Denial of service in BIND named via consuming more than "fdmax" file descriptors.
Updated Buffer overflow in free internet chess server (FICS) program, xboard.
UpdatedDenial of service in MDaemon 2.7 via a large number of connection attempts.
UpdatedBuffer overflow in SCO su program allows local users to gain root access via a long username.
Updated- CVE-1999-0844: Denial of service in MDaemon WorldClient and WebConfig services via a long URL. Unscored
Denial of service in MDaemon WorldClient and WebConfig services via a long URL.
Updated Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
UpdatedSymantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
UpdatedBuffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
UpdatedBuffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.
UpdatedWindows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.
UpdatedBuffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
UpdatedDenial of service in BIND by improperly closing TCP sessions via so_linger.
Updated- CVE-1999-0836: UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. Unscored
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
Updated Denial of service in BIND named via malformed SIG records.
UpdatedBuffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.
UpdatedBuffer overflow in BIND 8.2 via NXT records.
UpdatedBuffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
UpdatedDenial of service in Linux syslogd via a large number of connections.
UpdatedBuffer overflow in SCO UnixWare Xsco command via a long argument.
UpdatedHP Secure Web Console uses weak encryption.
UpdatedUnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
UpdatedBy default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
UpdatedBuffer overflow in FreeBSD angband allows local users to gain privileges.
UpdatedThe default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
UpdatedA Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
UpdatedBuffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
Updated- CVE-1999-0822: Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. Unscored
Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
Updated FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
UpdatedFreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
UpdatedNTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
Updated- CVE-1999-0818: Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable. Unscored
Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
Updated Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
UpdatedThe Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.
UpdatedMemory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.
UpdatedRed Hat pump DHCP client allows remote attackers to gain root access in some configurations.
UpdatedCfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.
UpdatedRace condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
UpdatedBuffer overflow in Samba smbd program via a malformed message command.
UpdatedDenial of service in Samba NETBIOS name service daemon (nmbd).
UpdatedNetscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed".
UpdatedMultiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
UpdatedThe Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.
UpdatedBuffer overflow in Solaris dtprintinfo program.
UpdatedNovell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.
UpdatedDenial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.
UpdatedThe fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
UpdatedBuffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.
Updated- CVE-1999-0801: BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. Unscored
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
Updated The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
Updated