CVE-1999-0199 | Critical | 9.8 | 2020-10-06 | manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, whi… |
CVE-1999-1593 | | | 2009-01-15 | Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration tha… |
CVE-1999-1557 | | | 2005-05-02 | Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possib… |
CVE-1999-1374 | | | 2005-05-02 | perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to… |
CVE-1999-1431 | | | 2005-01-07 | ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing so… |
CVE-1999-1373 | | | 2005-01-05 | FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS fingerprinting, e.g. via nmap. |
CVE-1999-1263 | | | 2003-08-15 | Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pa… |
CVE-1999-1570 | | | 2002-05-01 | Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter. |
CVE-1999-1091 | | | 2002-01-15 | UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of… |
CVE-1999-1081 | | | 2002-01-15 | Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. |
CVE-1999-1174 | | | 2001-12-21 | ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known pass… |
CVE-1999-1514 | | | 2001-11-28 | Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long U… |
CVE-1999-1024 | | | 2001-11-28 | ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop a… |
CVE-1999-1569 | | | 2001-07-17 | Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP conne… |
CVE-1999-0945 | | | 2001-03-12 | Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO c… |
CVE-1999-0924 | | | 2001-03-12 | The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service. |
CVE-1999-0923 | | | 2001-03-12 | Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for othe… |
CVE-1999-0922 | | | 2001-03-12 | An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file. |
CVE-1999-0805 | | | 2001-03-12 | Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests. |
CVE-1999-0800 | | | 2001-03-12 | The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm. |
CVE-1999-0784 | | | 2001-03-12 | Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP. |
CVE-1999-0760 | | | 2001-03-12 | Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges. |
CVE-1999-0758 | | | 2001-03-12 | Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL. |
CVE-1999-0757 | | | 2001-03-12 | The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates. |
CVE-1999-0756 | | | 2001-03-12 | ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility. |
CVE-1999-0729 | | | 2001-03-12 | Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request. |
CVE-1999-0718 | | | 2001-03-12 | IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping regist… |
CVE-1999-0681 | | | 2001-03-12 | Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial… |
CVE-1999-0359 | | | 2001-03-12 | ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords. |
CVE-1999-0307 | | | 2000-12-20 | Buffer overflow in HP-UX cstm program allows local users to gain root privileges. |
CVE-1999-1579 | | | 2000-12-14 | The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause… |
CVE-1999-1563 | | | 2000-10-14 | Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm. |
CVE-1999-0761 | | | 2000-09-16 | Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program. |
CVE-1999-0812 | | | 2000-07-12 | Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations. |
CVE-1999-0585 | | | 2000-07-01 | A Windows NT administrator account has the default name of Administrator. |
CVE-1999-0590 | | | 2000-06-01 | A system does not present an appropriate legal message or warning to a user who is accessing it. |
CVE-1999-1008 | | | 2000-05-17 | xsoldier program allows local users to gain root access via a long argument. |
CVE-1999-0980 | | | 2000-05-16 | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request. |
CVE-1999-0427 | | | 2000-05-01 | Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names. |
CVE-1999-0706 | | | 2000-04-27 | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. |
CVE-1999-0979 | | | 2000-04-11 | The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the pri… |
CVE-1999-0701 | | | 2000-04-11 | After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. |
CVE-1999-0699 | | | 2000-04-11 | The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs. |
CVE-1999-0695 | | | 2000-04-11 | The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack. |
CVE-1999-0790 | | | 2000-04-01 | A remote attacker can read information from a Netscape user's cache via JavaScript. |
CVE-1999-0693 | | | 2000-03-02 | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. |
CVE-1999-0595 | | | 2000-01-20 | A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. |
CVE-1999-0992 | | | 2000-01-18 | HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP). |
CVE-1999-1002 | | | 2000-01-12 | Netscape Navigator uses weak encryption for storing a user's Netscape mail password. |
CVE-1999-0894 | | | 2000-01-04 | Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals. |
CVE-1999-0876 | | | 2000-01-04 | Buffer overflow in Internet Explorer 4.0 via EMBED tag. |
CVE-1999-0744 | | | 2000-01-04 | Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request. |
CVE-1999-0735 | | | 2000-01-04 | KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. |
CVE-1999-0964 | | | 2000-01-01 | Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable. |
CVE-1999-1592 | | | 1999-12-31 | Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might… |
CVE-1999-1591 | | | 1999-12-31 | Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under cert… |
CVE-1999-1590 | | | 1999-12-31 | Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the… |
CVE-1999-1589 | | | 1999-12-31 | Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors. |
CVE-1999-1588 | Critical | 9.8 | 1999-12-31 | Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning wit… |
CVE-1999-1587 | | | 1999-12-31 | /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary pro… |
CVE-1999-1586 | | | 1999-12-31 | loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability… |
CVE-1999-1585 | | | 1999-12-31 | The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is… |
CVE-1999-1584 | | | 1999-12-31 | Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows… |
CVE-1999-1512 | | | 1999-12-31 | The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metachara… |
CVE-1999-1488 | | | 1999-12-31 | sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. |
CVE-1999-1481 | | | 1999-12-31 | Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair. |
CVE-1999-1476 | | | 1999-12-31 | A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT… |
CVE-1999-1474 | | | 1999-12-31 | PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when… |
CVE-1999-1473 | | | 1999-12-31 | When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka… |
CVE-1999-1472 | | | 1999-12-31 | Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to… |
CVE-1999-1465 | | | 1999-12-31 | Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when… |
CVE-1999-1464 | | | 1999-12-31 | Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when… |
CVE-1999-1462 | | | 1999-12-31 | Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files. |
CVE-1999-1456 | | | 1999-12-31 | thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the fil… |
CVE-1999-1455 | | | 1999-12-31 | RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorize… |
CVE-1999-1452 | | | 1999-12-31 | GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-… |
CVE-1999-1451 | | | 1999-12-31 | The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files. |
CVE-1999-1444 | | | 1999-12-31 | genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext. |
CVE-1999-1386 | Medium | 5.5 | 1999-12-31 | Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on… |
CVE-1999-1382 | | | 1999-12-31 | NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges… |
CVE-1999-1379 | | | 1999-12-31 | DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the… |
CVE-1999-1364 | | | 1999-12-31 | Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThrea… |
CVE-1999-1363 | | | 1999-12-31 | Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhau… |
CVE-1999-1362 | | | 1999-12-31 | Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters. |
CVE-1999-1360 | | | 1999-12-31 | Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a… |
CVE-1999-1359 | | | 1999-12-31 | When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which… |
CVE-1999-1358 | | | 1999-12-31 | When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the… |
CVE-1999-1355 | | | 1999-12-31 | BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUse… |
CVE-1999-1339 | | | 1999-12-31 | Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to… |
CVE-1999-1335 | | | 1999-12-31 | snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information. |
CVE-1999-1334 | | | 1999-12-31 | Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, o… |
CVE-1999-1333 | | | 1999-12-31 | automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharac… |
CVE-1999-1332 | | | 1999-12-31 | gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. |
CVE-1999-1331 | | | 1999-12-31 | netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a… |
CVE-1999-1330 | | | 1999-12-31 | The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a… |
CVE-1999-1329 | | | 1999-12-31 | Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges. |
CVE-1999-1328 | | | 1999-12-31 | linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack. |
CVE-1999-1327 | | | 1999-12-31 | Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable. |
CVE-1999-1325 | | | 1999-12-31 | SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges. |
CVE-1999-1324 | Critical | 9.8 | 1999-12-31 | VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit thre… |