1999 CVEs (page 10)
Page 10 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-1289 | | 1998-11-11 | ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT)… | |
CVE-1999-1155 | | 1998-11-09 | LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. | |
CVE-1999-1154 | | 1998-11-09 | LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. | |
CVE-1999-1153 | | 1998-11-09 | HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address. | |
CVE-1999-1321 | | 1998-11-05 | Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long… | |
CVE-1999-1284 | | 1998-11-05 | NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usag… | |
CVE-1999-0052 | High | 7.5 | 1998-11-04 | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. |
CVE-1999-1459 | | 1998-11-02 | BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file. | |
CVE-1999-0254 | | 1998-11-02 | A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. | |
CVE-1999-0118 | | 1998-11-01 | AIX infod allows local users to gain root access through an X display. | |
CVE-1999-0215 | | 1998-10-26 | Routed allows attackers to append data to files. | |
CVE-1999-0088 | | 1998-10-26 | IRIX and AIX automountd services (autofsd) allow remote users to execute root commands. | |
CVE-1999-0053 | | 1998-10-13 | TCP RST denial of service in FreeBSD. | |
CVE-1999-0002 | | 1998-10-12 | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. | |
CVE-1999-1381 | | 1998-10-08 | Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands. | |
CVE-1999-1185 | | 1998-10-06 | Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file. | |
CVE-1999-1291 | | 1998-10-05 | TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a… | |
CVE-1999-1404 | | 1998-10-02 | IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtrac… | |
CVE-1999-1403 | | 1998-10-02 | IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writabl… | |
CVE-1999-0343 | | 1998-10-02 | A malicious Palace server can force a client to execute arbitrary programs. | |
CVE-1999-0870 | | 1998-10-01 | Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste. | |
CVE-1999-0546 | | 1998-10-01 | The Windows NT guest account is enabled. | |
CVE-1999-0506 | | 1998-10-01 | A Windows NT domain user or administrator account has a default, null, blank, or missing password. | |
CVE-1999-0505 | | 1998-10-01 | A Windows NT domain user or administrator account has a guessable password. | |
CVE-1999-0186 | | 1998-10-01 | In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. | |
CVE-1999-1181 | | 1998-09-29 | Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges. | |
CVE-1999-0969 | | 1998-09-29 | The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is s… | |
CVE-1999-1228 | | 1998-09-27 | Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands suc… | |
CVE-1999-1054 | | 1998-09-25 | The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command. | |
CVE-1999-1265 | | 1998-09-22 | SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "(" (parenthesis… | |
CVE-1999-1020 | | 1998-09-18 | The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive… | |
CVE-1999-0897 | | 1998-09-09 | iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-0056 | | 1998-09-09 | Buffer overflow in Sun's ping program can give root access to local users. | |
CVE-1999-1048 | | 1998-09-05 | Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is ins… | |
CVE-1999-0871 | | 1998-09-04 | Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability. | |
CVE-1999-0930 | | 1998-09-03 | wwwboard allows a remote attacker to delete message board articles via a malformed argument. | |
CVE-1999-0779 | | 1998-09-03 | Denial of service in HP-UX SharedX recserv program. | |
CVE-1999-1292 | | 1998-09-01 | Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL. | |
CVE-1999-0792 | | 1998-09-01 | ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration. | |
CVE-1999-0310 | | 1998-09-01 | SSH 1.2.25 on HP-UX allows access to new user accounts. | |
CVE-1999-0302 | | 1998-09-01 | SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server. | |
CVE-1999-0162 | | 1998-09-01 | The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. | |
CVE-1999-0158 | | 1998-08-31 | Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is know… | |
CVE-1999-0065 | | 1998-08-31 | Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. | |
CVE-1999-1041 | | 1998-08-27 | Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2)… | |
CVE-1999-1417 | | 1998-08-23 | Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary c… | |
CVE-1999-1416 | | 1998-08-23 | AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large con… | |
CVE-1999-0157 | | 1998-08-18 | Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. | |
CVE-1999-1283 | | 1998-08-14 | Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag. | |
CVE-1999-0159 | Low | 3.5 | 1998-08-12 | Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11… |
CVE-1999-1199 | | 1998-08-07 | Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same… | |
CVE-1999-0262 | | 1998-08-04 | Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string. | |
CVE-1999-0062 | | 1998-08-03 | The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage. | |
CVE-1999-0516 | | 1998-08-01 | An SNMP community name is guessable. | |
CVE-1999-0344 | | 1998-08-01 | NT users can gain debug-level access on a system process using the Sechole exploit. | |
CVE-1999-0339 | | 1998-08-01 | Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access. | |
CVE-1999-0333 | | 1998-08-01 | HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack. | |
CVE-1999-0288 | | 1998-08-01 | The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to por… | |
CVE-1999-0269 | | 1998-08-01 | Netscape Enterprise servers may list files through the PageServices query. | |
CVE-1999-1136 | | 1998-07-30 | Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using… | |
CVE-1999-1448 | | 1998-07-29 | Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (… | |
CVE-1999-1406 | | 1998-07-29 | dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to t… | |
CVE-1999-1447 | | 1998-07-28 | Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. | |
CVE-1999-0941 | | 1998-07-28 | Mutt mail client allows a remote attacker to execute commands via shell metacharacters. | |
CVE-1999-1070 | | 1998-07-25 | Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter. | |
CVE-1999-1421 | | 1998-07-20 | NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (cras… | |
CVE-1999-1420 | | 1998-07-20 | NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's conf… | |
CVE-1999-1200 | | 1998-07-20 | Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command. | |
CVE-1999-0005 | | 1998-07-20 | Arbitrary command execution via IMAP buffer overflow in authenticate command. | |
CVE-1999-1558 | | 1998-07-16 | Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled. | |
CVE-1999-1432 | | 1998-07-16 | Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attac… | |
CVE-1999-1149 | | 1998-07-16 | Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port. | |
CVE-1999-0263 | | 1998-07-16 | Solaris SUNWadmap can be exploited to obtain root access. | |
CVE-1999-1582 | | 1998-07-15 | By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit h… | |
CVE-1999-1433 | | 1998-07-15 | HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file. | |
CVE-1999-1297 | | 1998-07-15 | cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as… | |
CVE-1999-0213 | | 1998-07-15 | libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. | |
CVE-1999-0006 | Critical | 9.8 | 1998-07-14 | Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command. |
CVE-1999-1434 | | 1998-07-13 | login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges… | |
CVE-1999-1270 | | 1998-07-11 | KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise… | |
CVE-1999-1435 | | 1998-07-10 | Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables. | |
CVE-1999-0102 | | 1998-07-09 | Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line. | |
CVE-1999-1436 | | 1998-07-08 | Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "user" parameter. | |
CVE-1999-1437 | | 1998-07-07 | ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argum… | |
CVE-1999-1574 | | 1998-07-06 | Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input string… | |
CVE-1999-1409 | | 1998-07-03 | The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argumen… | |
CVE-1999-1202 | | 1998-07-03 | StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command. | |
CVE-1999-0494 | | 1998-07-01 | Denial of service in WinGate proxy through a buffer overflow in POP3. | |
CVE-1999-0314 | | 1998-07-01 | ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames. | |
CVE-1999-0313 | | 1998-07-01 | disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames. | |
CVE-1999-1441 | | 1998-06-30 | Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sendin… | |
CVE-1999-1150 | | 1998-06-30 | Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to conduct spoofing a… | |
CVE-1999-1556 | | 1998-06-29 | Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, whic… | |
CVE-1999-0797 | | 1998-06-29 | NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries. | |
CVE-1999-1038 | | 1998-06-26 | Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by… | |
CVE-1999-1037 | | 1998-06-26 | rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file. | |
CVE-1999-1036 | | 1998-06-26 | COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk. | |
CVE-1999-0007 | | 1998-06-26 | Information from SSL-encrypted sessions via PKCS #1. | |
CVE-1999-1479 | | 1998-06-24 | The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-1999-1442 | | 1998-06-22 | Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, pos… |