1999 CVEs

1579 CVEs published in 1999. 8 critical, 19 high. Browse by vendor, severity, or with PoCs.

Top CVEs published in 1999
CVESeverityScorePublishedSummary
CVE-1999-0199Critical9.82020-10-06manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, whi…
CVE-1999-1588Critical9.81999-12-31Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning wit…
CVE-1999-1324Critical9.81999-12-31VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit thre…
CVE-1999-0426Critical9.81999-03-01The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
CVE-1999-0006Critical9.81998-07-14Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CVE-1999-0043Critical9.81996-12-04Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVE-1999-0066Critical9.81995-07-31AnyForm CGI remote execution.
CVE-1999-0511Critical9.11997-01-01IP forwarding is enabled on a machine which is not a router or firewall.
CVE-1999-0069High8.41998-04-29Solaris ufsrestore buffer overflow.
CVE-1999-0013High8.41998-01-22Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.
CVE-1999-0029High8.41997-07-16root privileges via buffer overflow in ordist command on SGI IRIX systems.
CVE-1999-0036High8.41997-05-26IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
CVE-1999-0038High8.41997-04-26Buffer overflow in xlock program allows local users to execute commands as root.
CVE-1999-0084High8.41990-05-01Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.
CVE-1999-0468High8.21999-04-09Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
CVE-1999-1549High7.81999-11-16Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a tempora…
CVE-1999-0022High7.81996-07-03Local user gains root privileges via buffer overflow in rdist, via expstr() function.
CVE-1999-1127High7.51999-12-31Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion)…
CVE-1999-1568High7.51999-01-01Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.
CVE-1999-0052High7.51998-11-04IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
All CVEs published in 1999 — newest first (page 1 of 16)
CVESeverityScorePublishedSummary
CVE-1999-0199Critical9.82020-10-06manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, whi…
CVE-1999-15932009-01-15Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration tha…
CVE-1999-15572005-05-02Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possib…
CVE-1999-13742005-05-02perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to…
CVE-1999-14312005-01-07ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing so…
CVE-1999-13732005-01-05FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via nmap.
CVE-1999-12632003-08-15Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pa…
CVE-1999-15702002-05-01Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.
CVE-1999-10912002-01-15UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of…
CVE-1999-10812002-01-15Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
CVE-1999-11742001-12-21ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known pass…
CVE-1999-15142001-11-28Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long U…
CVE-1999-10242001-11-28ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop a…
CVE-1999-15692001-07-17Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP conne…
CVE-1999-09452001-03-12Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO c…
CVE-1999-09242001-03-12The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
CVE-1999-09232001-03-12Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for othe…
CVE-1999-09222001-03-12An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
CVE-1999-08052001-03-12Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.
CVE-1999-08002001-03-12The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
CVE-1999-07842001-03-12Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.
CVE-1999-07602001-03-12Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.
CVE-1999-07582001-03-12Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.
CVE-1999-07572001-03-12The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
CVE-1999-07562001-03-12ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.
CVE-1999-07292001-03-12Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.
CVE-1999-07182001-03-12IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping regist…
CVE-1999-06812001-03-12Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial…
CVE-1999-03592001-03-12ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords.
CVE-1999-03072000-12-20Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
CVE-1999-15792000-12-14The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause…
CVE-1999-15632000-10-14Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.
CVE-1999-07612000-09-16Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
CVE-1999-08122000-07-12Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
CVE-1999-05852000-07-01A Windows NT administrator account has the default name of Administrator.
CVE-1999-05902000-06-01A system does not present an appropriate legal message or warning to a user who is accessing it.
CVE-1999-10082000-05-17xsoldier program allows local users to gain root access via a long argument.
CVE-1999-09802000-05-16Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request.
CVE-1999-04272000-05-01Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.
CVE-1999-07062000-04-27Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
CVE-1999-09792000-04-11The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the pri…
CVE-1999-07012000-04-11After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
CVE-1999-06992000-04-11The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
CVE-1999-06952000-04-11The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.
CVE-1999-07902000-04-01A remote attacker can read information from a Netscape user's cache via JavaScript.
CVE-1999-06932000-03-02Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
CVE-1999-05952000-01-20A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
CVE-1999-09922000-01-18HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
CVE-1999-10022000-01-12Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
CVE-1999-08942000-01-04Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
CVE-1999-08762000-01-04Buffer overflow in Internet Explorer 4.0 via EMBED tag.
CVE-1999-07442000-01-04Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
CVE-1999-07352000-01-04KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.
CVE-1999-09642000-01-01Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.
CVE-1999-15921999-12-31Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might…
CVE-1999-15911999-12-31Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under cert…
CVE-1999-15901999-12-31Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the…
CVE-1999-15891999-12-31Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.
CVE-1999-1588Critical9.81999-12-31Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning wit…
CVE-1999-15871999-12-31/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary pro…
CVE-1999-15861999-12-31loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability…
CVE-1999-15851999-12-31The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is…
CVE-1999-15841999-12-31Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows…
CVE-1999-15121999-12-31The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metachara…
CVE-1999-14881999-12-31sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
CVE-1999-14811999-12-31Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.
CVE-1999-14761999-12-31A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT…
CVE-1999-14741999-12-31PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when…
CVE-1999-14731999-12-31When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka…
CVE-1999-14721999-12-31Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to…
CVE-1999-14651999-12-31Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when…
CVE-1999-14641999-12-31Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when…
CVE-1999-14621999-12-31Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
CVE-1999-14561999-12-31thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the fil…
CVE-1999-14551999-12-31RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorize…
CVE-1999-14521999-12-31GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-…
CVE-1999-14511999-12-31The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
CVE-1999-14441999-12-31genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
CVE-1999-1386Medium5.51999-12-31Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on…
CVE-1999-13821999-12-31NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges…
CVE-1999-13791999-12-31DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the…
CVE-1999-13641999-12-31Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThrea…
CVE-1999-13631999-12-31Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhau…
CVE-1999-13621999-12-31Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.
CVE-1999-13601999-12-31Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a…
CVE-1999-13591999-12-31When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which…
CVE-1999-13581999-12-31When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the…
CVE-1999-13551999-12-31BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUse…
CVE-1999-13391999-12-31Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to…
CVE-1999-13351999-12-31snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.
CVE-1999-13341999-12-31Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, o…
CVE-1999-13331999-12-31automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharac…
CVE-1999-13321999-12-31gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.
CVE-1999-13311999-12-31netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a…
CVE-1999-13301999-12-31The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a…
CVE-1999-13291999-12-31Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.
CVE-1999-13281999-12-31linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
CVE-1999-13271999-12-31Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.
CVE-1999-13251999-12-31SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.
CVE-1999-1324Critical9.81999-12-31VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit thre…