{"version":1,"updatedAt":"2026-10-30T01:34:06.206Z","items":[{"id":"CVE-1999-0001","state":"PUBLISHED","title":"ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.","description":"ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.","publishedAt":"2000-02-04T05:00:00.000Z","updatedAt":"2024-08-01T16:03:04.917Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0002","state":"PUBLISHED","title":"Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.","description":"Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:07:57.748Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0003","state":"PUBLISHED","title":"Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).","description":"Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:11:38.579Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0004","state":"PUBLISHED","title":"MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.","description":"MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.","publishedAt":"2000-02-04T05:00:00.000Z","updatedAt":"2024-08-01T16:27:56.463Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0005","state":"PUBLISHED","title":"Arbitrary command execution via IMAP buffer overflow in authenticate command.","description":"Arbitrary command execution via IMAP buffer overflow in authenticate command.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.689Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0006","state":"PUBLISHED","title":"Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.","description":"Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-10-29T14:08:55.394Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0007","state":"PUBLISHED","title":"Information from SSL-encrypted sessions via PKCS #1.","description":"Information from SSL-encrypted sessions via PKCS #1.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.484Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0008","state":"PUBLISHED","title":"Buffer overflow in NIS+, in Sun's rpc.nisd program.","description":"Buffer overflow in NIS+, in Sun's rpc.nisd program.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.477Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0009","state":"PUBLISHED","title":"Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.","description":"Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.971Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0010","state":"PUBLISHED","title":"Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.","description":"Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.711Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0011","state":"PUBLISHED","title":"Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.","description":"Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2025-04-09T18:29:26.012Z","severity":{"score":5.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0012","state":"PUBLISHED","title":"Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.","description":"Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2025-04-09T18:30:54.684Z","severity":{"score":7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0013","state":"PUBLISHED","title":"Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.","description":"Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T19:02:44.132Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0014","state":"PUBLISHED","title":"Unauthorized privileged access or denial of service via dtappgather program in CDE.","description":"Unauthorized privileged access or denial of service via dtappgather program in CDE.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.465Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0015","state":"PUBLISHED","title":"Teardrop IP denial of service.","description":"Teardrop IP denial of service.","publishedAt":"2000-02-04T05:00:00.000Z","updatedAt":"2024-08-01T16:27:57.061Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0016","state":"PUBLISHED","title":"Land IP denial of service.","description":"Land IP denial of service.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2025-03-17T15:03:08.590Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0017","state":"PUBLISHED","title":"FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.","description":"FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.465Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0018","state":"PUBLISHED","title":"Buffer overflow in statd allows root privileges.","description":"Buffer overflow in statd allows root privileges.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.714Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0019","state":"PUBLISHED","title":"Delete or create a file via rpc.statd, due to invalid information.","description":"Delete or create a file via rpc.statd, due to invalid information.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.469Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0020","state":"REJECTED","title":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-0032.  Reason: This candidate is a duplicate of CVE-1999-0032.  Notes: All CVE users should reference CVE-1999-0032 instead ","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-0032.  Reason: This candidate is a duplicate of CVE-1999-0032.  Notes: All CVE users should reference CVE-1999-0032 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","publishedAt":"2000-02-04T05:00:00.000Z","updatedAt":"2005-02-04T00:00:00.000Z","severity":null,"assigner":"mitre","products":[]},{"id":"CVE-1999-0021","state":"PUBLISHED","title":"Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.","description":"Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.743Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0022","state":"PUBLISHED","title":"Local user gains root privileges via buffer overflow in rdist, via expstr() function.","description":"Local user gains root privileges via buffer overflow in rdist, via expstr() function.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-10-29T14:08:24.263Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0023","state":"PUBLISHED","title":"Local user gains root privileges via buffer overflow in rdist, via lookup() function.","description":"Local user gains root privileges via buffer overflow in rdist, via lookup() function.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.726Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0024","state":"PUBLISHED","title":"DNS cache poisoning via BIND, by predictable query IDs.","description":"DNS cache poisoning via BIND, by predictable query IDs.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2026-10-09T18:49:55.716Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0025","state":"PUBLISHED","title":"root privileges via buffer overflow in df command on SGI IRIX systems.","description":"root privileges via buffer overflow in df command on SGI IRIX systems.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.742Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0026","state":"PUBLISHED","title":"root privileges via buffer overflow in pset command on SGI IRIX systems.","description":"root privileges via buffer overflow in pset command on SGI IRIX systems.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.714Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0027","state":"PUBLISHED","title":"root privileges via buffer overflow in eject command on SGI IRIX systems.","description":"root privileges via buffer overflow in eject command on SGI IRIX systems.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.695Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0028","state":"PUBLISHED","title":"root privileges via buffer overflow in login/scheme command on SGI IRIX systems.","description":"root privileges via buffer overflow in login/scheme command on SGI IRIX systems.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.731Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0029","state":"PUBLISHED","title":"root privileges via buffer overflow in ordist command on SGI IRIX systems.","description":"root privileges via buffer overflow in ordist command on SGI IRIX systems.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-10-29T14:07:56.381Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0030","state":"PUBLISHED","title":"root privileges via buffer overflow in xlock command on SGI IRIX systems.","description":"root privileges via buffer overflow in xlock command on SGI IRIX systems.","publishedAt":"2000-02-04T05:00:00.000Z","updatedAt":"2024-08-01T16:27:56.667Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0031","state":"PUBLISHED","title":"JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.","description":"JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.","publishedAt":"2000-06-02T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.711Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0032","state":"PUBLISHED","title":"Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.","description":"Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.133Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0033","state":"PUBLISHED","title":"Command execution in Sun systems via buffer overflow in the at program.","description":"Command execution in Sun systems via buffer overflow in the at program.","publishedAt":"2000-02-04T05:00:00.000Z","updatedAt":"2024-08-01T16:27:57.268Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0034","state":"PUBLISHED","title":"Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.","description":"Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.611Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0035","state":"PUBLISHED","title":"Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.","description":"Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2025-10-20T17:45:44.427Z","severity":{"score":5.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0036","state":"PUBLISHED","title":"IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.","description":"IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-10-29T14:07:28.583Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0037","state":"PUBLISHED","title":"Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.","description":"Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.203Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0038","state":"PUBLISHED","title":"Buffer overflow in xlock program allows local users to execute commands as root.","description":"Buffer overflow in xlock program allows local users to execute commands as root.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-09-12T14:37:48.860Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0039","state":"PUBLISHED","title":"webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.","description":"webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-09-12T14:37:05.701Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0040","state":"PUBLISHED","title":"Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.","description":"Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.678Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0041","state":"PUBLISHED","title":"Buffer overflow in NLS (Natural Language Service).","description":"Buffer overflow in NLS (Natural Language Service).","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-09-17T14:25:15.473Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0042","state":"PUBLISHED","title":"Buffer overflow in University of Washington's implementation of IMAP and POP servers.","description":"Buffer overflow in University of Washington's implementation of IMAP and POP servers.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.030Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0043","state":"PUBLISHED","title":"Command execution via shell metachars in INN daemon (innd) 1.5 using \"newgroup\" and \"rmgroup\" control messages, and others.","description":"Command execution via shell metachars in INN daemon (innd) 1.5 using \"newgroup\" and \"rmgroup\" control messages, and others.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T20:03:35.981Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0044","state":"PUBLISHED","title":"fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.","description":"fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.595Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0045","state":"PUBLISHED","title":"List of arbitrary files on Web host via nph-test-cgi script.","description":"List of arbitrary files on Web host via nph-test-cgi script.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.679Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0046","state":"PUBLISHED","title":"Buffer overflow of rlogin program using TERM environmental variable.","description":"Buffer overflow of rlogin program using TERM environmental variable.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.114Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0047","state":"PUBLISHED","title":"MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.","description":"MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.134Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0048","state":"PUBLISHED","title":"Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.","description":"Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:57.128Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0049","state":"PUBLISHED","title":"Csetup under IRIX allows arbitrary file creation or overwriting.","description":"Csetup under IRIX allows arbitrary file creation or overwriting.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.698Z","severity":null,"assigner":"mitre","products":["n/a n/a"]},{"id":"CVE-1999-0050","state":"PUBLISHED","title":"Buffer overflow in HP-UX newgrp program.","description":"Buffer overflow in HP-UX newgrp program.","publishedAt":"1999-09-29T04:00:00.000Z","updatedAt":"2024-08-01T16:27:56.781Z","severity":null,"assigner":"mitre","products":["n/a n/a"]}],"nextCursor":"eyJraW5kIjoiZmVlZCIsInNuYXBzaG90IjoiYjQ5YzU2MTYtNmRmMy00ZDI2LWI1ZjQtYTVjMDVlODRhOThmIiwiYmF0Y2giOiIxNjRjZjliNC1hODQyLTRmNTEtOTA1YS1iYzBiYzkzODc4Y2EiLCJvZmZzZXQiOjUwfQ","checkpoint":null,"snapshot":"b49c5616-6df3-4d26-b5f4-a5c05e84a98f","retentionDays":30,"oldestAvailableAt":"2026-10-29T19:20:56.399Z"}