CVE-1999-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
980 records · Page 6 of 10
Denial of service in "poll" in OpenBSD.
UpdatedLocal attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
Updated- CVE-1999-0479: Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. Unscored
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
Updated Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.
UpdatedThe Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
UpdatedA weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
UpdatedA race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
UpdatedThe ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
UpdatedThe rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
UpdatedThe SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.
UpdatedThe remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.
UpdatedA weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
UpdatedInternet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.
UpdatedInternet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
UpdatedThe Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
UpdatedThe SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
UpdatedRemote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
UpdatedLocal users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
UpdatedRemote attackers can perform a denial of service using IRIX fcagent.
Updatedsuidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
UpdatedVersions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
UpdatedBuffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
UpdatedLocal users can perform a denial of service in Alpha Linux, using MILO to force a reboot.
UpdatedL0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.
UpdatedLinux ftpwatch program allows local users to gain root privileges.
UpdatedThe Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
UpdatedA remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.
UpdatedAn attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
UpdatedA service or application has a backdoor password that was placed there by the developer.
UpdatedDenial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.
UpdatedIn IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
UpdatedThe ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
UpdatedIIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
UpdatedLocal users can gain privileges using the debug utility in the MPE/iX operating system.
UpdatedLocal users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.
UpdatedIn Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.
UpdatedRemote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
UpdatedPatrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.
UpdatedSolaris ff.core allows local users to modify files.
UpdatedRemote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.
UpdatedThe byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
UpdatedBuffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
UpdatedRemote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.
UpdatedRemote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.
UpdatedDomain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
UpdatedMC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
UpdatedXFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
UpdatedXFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
Updatedftp on HP-UX 11.00 allows local users to gain privileges.
UpdatedLinux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
UpdatedCisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload.
UpdatedThe Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference.
UpdatedOpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
UpdatedEudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
UpdatedThe default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
Updatedtalkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
Updatedtalkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
UpdatedVulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
UpdatedIn some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
UpdatedDuring a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.
Updatedumapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.
UpdatedWhen the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.
UpdatedDenial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection.
Updated64 bit Solaris 7 procfs allows local users to perform a denial of service.
UpdatedVulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
UpdatedThe HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
UpdatedIn Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
UpdatedA buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
UpdatedIn IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
UpdatedSeveral startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
UpdatedThe cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
UpdatedBuffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
UpdatedFiles created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
UpdatedBy default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
UpdatedDigital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
UpdatedA buffer overflow in lsof allows local users to obtain root privilege.
UpdatedBuffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
Updated- CVE-1999-0403: A bug in Cyrix CPUs on Linux allows local users to perform a denial of service. Unscored
A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
Updated wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
UpdatedA race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
UpdatedDenial of service in Linux 2.2.0 running the ldd command on a core file.
UpdatedThe DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.
UpdatedIn some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
UpdatedThe demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.
UpdatedA race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
UpdatedA race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
UpdatedDPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
UpdatedRemote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
UpdatedBuffer overflow in Thomas Boutell's cgic library version up to 1.05.
UpdatedThe cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
UpdatedBuffer overflow in Dosemu Slang library in Linux.
UpdatedBuffer overflow in the bootp server in the Debian Linux netstd package.
UpdatedDataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.
UpdatedA legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
UpdatedMicrosoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
UpdatedThe LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands.
UpdatedThe Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
UpdatedACC Tigris allows public access without a login.
UpdatedThe screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
Updatedsuper 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
Updated