CVE-1999-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
980 records · Page 7 of 10
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.
UpdatedMicrosoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.
UpdatedInterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
UpdatedProcess table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
UpdatedLocal users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
UpdatedBuffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
UpdatedDebian GNU/Linux cfengine package is susceptible to a symlink attack.
UpdatedBuffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.
UpdatedThe installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
Updated- CVE-1999-0371: Lynx allows a local user to overwrite sensitive files through /tmp symlinks. Unscored
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
Updated In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
UpdatedThe Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
UpdatedBuffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
UpdatedNetBSD netstat command allows local users to access kernel memory.
UpdatedIn some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.
UpdatedThe metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
UpdatedMicrosoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
Updated- CVE-1999-0363: SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise. Unscored
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
Updated WS_FTP server remote denial of service through cwd command.
UpdatedNetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.
UpdatedMS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
Updatedptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.
Updated- CVE-1999-0358: Digital Unix 4.0 has a buffer overflow in the inc program of the mh package. Unscored
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
Updated Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
UpdatedControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
UpdatedLocal or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
UpdatedInternet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.
Updatedrpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
Updated- CVE-1999-0352: ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. Unscored
ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.
Updated FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client.
UpdatedRace condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
UpdatedA buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
UpdatedIIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
UpdatedInternet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
Updated- CVE-1999-0346: CGI PHP mlog script allows an attacker to read any file on the target server. Unscored
CGI PHP mlog script allows an attacker to read any file on the target server.
Updated - CVE-1999-0345: Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. Unscored
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
Updated - CVE-1999-0344: NT users can gain debug-level access on a system process using the Sechole exploit. Unscored
NT users can gain debug-level access on a system process using the Sechole exploit.
Updated A malicious Palace server can force a client to execute arbitrary programs.
Updated- CVE-1999-0342: Linux PAM modules allow local users to gain root access using temporary files. Unscored
Linux PAM modules allow local users to gain root access using temporary files.
Updated Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
UpdatedBuffer overflow in Linux Slackware crond program allows local users to gain root access.
UpdatedBuffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
Updated- CVE-1999-0338: AIX Licensed Program Product performance tools allow local users to gain root access. Unscored
AIX Licensed Program Product performance tools allow local users to gain root access.
Updated AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
UpdatedBuffer overflow in mstm in HP-UX allows local users to gain root access.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Updated · Rejected recordIn Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
UpdatedHP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.
Updated- CVE-1999-0332: Buffer overflow in NetMeeting allows denial of service and remote command execution. Unscored
Buffer overflow in NetMeeting allows denial of service and remote command execution.
Updated Buffer overflow in Internet Explorer 4.0(1).
Updated- CVE-1999-0330: Linux bdash game has a buffer overflow that allows local users to gain root access. Unscored
Linux bdash game has a buffer overflow that allows local users to gain root access.
Updated SGI mediad program allows local users to gain root access.
UpdatedSGI permissions program allows local users to gain root privileges.
UpdatedSGI syserr program allows local users to corrupt files.
UpdatedVulnerability in HP-UX mediainit program.
Updated- CVE-1999-0325: vhe_u_mnt program in HP-UX allows local users to create root files through symlinks. Unscored
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
Updated - CVE-1999-0324: ppl program in HP-UX allows local users to create root files through symlinks. Unscored
ppl program in HP-UX allows local users to create root files through symlinks.
Updated - CVE-1999-0323: FreeBSD mmap function allows users to modify append-only or immutable files. Unscored
FreeBSD mmap function allows users to modify append-only or immutable files.
Updated - CVE-1999-0322: The open() function in FreeBSD allows local attackers to write to arbitrary files. Unscored
The open() function in FreeBSD allows local attackers to write to arbitrary files.
Updated Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
Updated- CVE-1999-0320: SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files. Unscored
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
Updated Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
UpdatedBuffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
UpdatedBuffer overflow in Linux su command gives root access to local users.
UpdatedBuffer overflow in Linux splitvt command gives root access to local users.
Updated- CVE-1999-0315: Buffer overflow in Solaris fdformat command gives root access to local users. Unscored
Buffer overflow in Solaris fdformat command gives root access to local users.
Updated ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Updateddisk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
UpdatedHP ypbind allows attackers with root privileges to modify NIS data.
Updatedfpkg2swpk in HP-UX allows local users to gain root access.
UpdatedSSH 1.2.25 on HP-UX allows access to new user accounts.
UpdatedHP-UX vgdisplay program gives root access to local users.
UpdatedHP-UX gwind program allows users to modify arbitrary files.
Updated- CVE-1999-0307: Buffer overflow in HP-UX cstm program allows local users to gain root privileges. Unscored
Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
Updated buffer overflow in HP xlock program.
UpdatedThe system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
Updatedmmap function in BSD allows local attackers in the kmem group to modify memory through devices.
UpdatedBuffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
UpdatedSunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
UpdatedBuffer overflow in SunOS/Solaris ps command.
Updated- CVE-1999-0300: nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers. Unscored
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
Updated Buffer overflow in FreeBSD lpd through long DNS hostnames.
Updatedypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
UpdatedBuffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable.
UpdatedSolaris volrmmount program allows attackers to read any file.
UpdatedSolaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
Updated- CVE-1999-0294: All records in a WINS database can be deleted through SNMP for a denial of service. Unscored
All records in a WINS database can be deleted through SNMP for a denial of service.
Updated AAA authentication on Cisco systems allows attackers to execute commands without authorization.
UpdatedDenial of service through Winpopup using large user names.
UpdatedThe WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.
UpdatedThe WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
UpdatedThe Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
UpdatedThe WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
UpdatedVulnerability in the Wguest CGI program.
UpdatedIn some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
UpdatedDenial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
UpdatedDenial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.
UpdatedThe Java Web Server would allow remote users to obtain the source code for CGI programs.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1584, CVE-1999-1586. Reason: This candidate combined references from one issue with the description from another issue. Notes: Users should consult CVE-1999-1584 and CVE-1999-1586 to obtain the appropriate name. All references and descriptions in this candidate have been removed to prevent accidental usage
Updated · Rejected recordDenial of service in IIS using long URLs.
Updated