CVE-1999-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
980 records · Page 8 of 10
- CVE-1999-0280: Remote command execution in Microsoft Internet Explorer using .lnk and .url files. Unscored
Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
Updated Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
UpdatedIn IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
UpdatedThe WorkMan program can be used to overwrite any file to get root access.
UpdatedmSQL v2.0.1 and below allows remote execution through a buffer overflow.
UpdatedDenial of service in Windows NT DNS servers by flooding port 53 with too many characters.
UpdatedDenial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
UpdatedDenial of service through Solaris 2.5.1 telnet by sending ^D characters.
UpdatedDenial of service in Slmail v2.5 through the POP3 port.
UpdatedProgressive Networks Real Video server (pnserver) can be crashed remotely.
UpdatedDirectory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.
UpdatedNetscape Enterprise servers may list files through the PageServices query.
Updated- CVE-1999-0268: MetaInfo MetaWeb web server allows users to upload, execute, and read scripts. Unscored
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
Updated Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
Updated- CVE-1999-0266: The info2www CGI script allows remote file access or remote command execution. Unscored
The info2www CGI script allows remote file access or remote command execution.
Updated ICMP redirect messages may crash or lock up a host.
Updatedhtmlscript CGI program allows remote read access to files.
UpdatedSolaris SUNWadmap can be exploited to obtain root access.
UpdatedHylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
UpdatedNetmanager Chameleon SMTPd has several buffer overflows that cause a crash.
UpdatedThe jj CGI program allows command execution via shell metacharacters.
Updatedcfingerd lists all users on a system via search.**@target.
UpdatedBonk variation of teardrop IP fragmentation denial of service.
UpdatedNestea variation of teardrop IP fragmentation denial of service.
UpdatedBuffer overflow in War FTP allows remote execution of commands.
UpdatedBuffer overflow in ircd allows arbitrary command execution.
UpdatedA hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.
UpdatedIIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
UpdatedBuffer overflow in listserv allows arbitrary command execution.
UpdatedDenial of service in talk program allows remote attackers to disrupt a user's display.
UpdatedDenial of service in Qmail through long SMTP commands.
Updated- CVE-1999-0249: Windows NT RSHSVC program allows remote users to execute arbitrary commands. Unscored
Windows NT RSHSVC program allows remote users to execute arbitrary commands.
Updated A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
UpdatedBuffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
UpdatedHP Remote Watch allows a remote user to gain root access.
Updated- CVE-1999-0245: Some configurations of NIS+ in Linux allowed attackers to log in as the user "+". Unscored
Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
Updated Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
UpdatedLinux cfingerd could be exploited to gain root access.
UpdatedRemote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.
UpdatedGuessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
UpdatedSome filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
UpdatedNetscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
Updatedphp.cgi allows attackers to read any file on the system.
UpdatedRemote execution of arbitrary commands through Guestbook CGI program.
UpdatedScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
UpdatedBuffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
UpdatedBash treats any character with a value of 255 as a command separator.
Updated- CVE-1999-0233: IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. Unscored
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
Updated Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
UpdatedBuffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.
UpdatedBuffer overflow in Cisco 7xx routers through the telnet service.
UpdatedDenial of service in Windows NT IIS server using ..\..
UpdatedDenial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
UpdatedAccess violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
UpdatedWindows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
UpdatedWindows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
UpdatedDenial of service in Windows NT messenger service through a long username.
UpdatedSolaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
UpdatedDenial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
Updated- CVE-1999-0221: Denial of service of Ascend routers through port 150 (remote administration). Unscored
Denial of service of Ascend routers through port 150 (remote administration).
Updated Attackers can do a denial of service of IRC by crashing the server.
UpdatedBuffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command.
UpdatedLivingston portmaster machines could be rebooted via a series of commands.
Updated- CVE-1999-0217: Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. Unscored
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
Updated Denial of service of inetd on Linux through SYN and RST packets.
UpdatedRouted allows attackers to append data to files.
UpdatedDenial of service by sending forged ICMP unreachable packets.
Updated- CVE-1999-0213: libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. Unscored
libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
Updated Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
UpdatedExtra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
UpdatedAutomount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
Updated- CVE-1999-0209: The SunView (SunTools) selection_svc facility allows remote users to read files. Unscored
The SunView (SunTools) selection_svc facility allows remote users to read files.
Updated rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
UpdatedRemote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
UpdatedMIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
UpdatedDenial of service in Sendmail 8.6.11 and 8.6.12.
Updated- CVE-1999-0204: Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. Unscored
Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
Updated In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program.
UpdatedThe GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
UpdatedA quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
UpdatedWindows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.
Updatedmanual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.
Updatedfinger .@host on some systems may print information on some user accounts.
Updatedfinger 0@host on some systems may print information on some user accounts.
Updatedwebsendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
UpdatedDenial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
UpdatedDenial of service in in.comsat allows attackers to generate messages.
UpdatedDenial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
UpdatedBuffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
UpdatedIIS newdsn.exe CGI script allows remote users to overwrite files.
Updated- CVE-1999-0190: Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. Unscored
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
Updated Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
UpdatedThe passwd command in Solaris can be subjected to a denial of service.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of CVE-1999-0022. Notes: All CVE users should reference CVE-1999-0022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Updated · Rejected recordIn Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
UpdatedIn SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.
UpdatedWhen compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
UpdatedLinux implementations of TFTP would allow access to files outside the restricted directory.
UpdatedSamba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
UpdatedThe wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
Updated