1999 CVEs (page 11)
Page 11 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0783 | Medium | 5.5 | 1998-06-16 | FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. |
CVE-1999-1085 | | 1998-06-12 | SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert a… | |
CVE-1999-1555 | | 1998-06-11 | Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows lo… | |
CVE-1999-1480 | | 1998-06-11 | (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. | |
CVE-1999-1271 | | 1998-06-11 | Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users. | |
CVE-1999-1178 | | 1998-06-10 | Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script. | |
CVE-1999-0054 | | 1998-06-10 | Sun's ftpd daemon can be subjected to a denial of service. | |
CVE-1999-0008 | | 1998-06-08 | Buffer overflow in NIS+, in Sun's rpc.nisd program. | |
CVE-1999-1152 | High | 7.5 | 1998-06-03 | Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess use… |
CVE-1999-1151 | | 1998-06-03 | Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a de… | |
CVE-1999-1443 | | 1998-06-02 | Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CT… | |
CVE-1999-0508 | | 1998-06-01 | An account on a router, firewall, or other network device has a default, null, blank, or missing password. | |
CVE-1999-0501 | | 1998-06-01 | A Unix account has a guessable password. | |
CVE-1999-0329 | | 1998-06-01 | SGI mediad program allows local users to gain root access. | |
CVE-1999-0278 | | 1998-06-01 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | |
CVE-1999-1490 | | 1998-05-28 | xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable. | |
CVE-1999-1492 | | 1998-05-27 | Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges. | |
CVE-1999-1039 | | 1998-05-27 | Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise. | |
CVE-1999-0303 | | 1998-05-21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. | |
CVE-1999-1096 | | 1998-05-16 | Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable. | |
CVE-1999-1179 | | 1998-05-15 | Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands. | |
CVE-1999-0055 | | 1998-05-14 | Buffer overflows in Sun libnsl allow root access. | |
CVE-1999-1389 | | 1998-05-11 | US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting i… | |
CVE-1999-1204 | | 1998-05-11 | Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a… | |
CVE-1999-0919 | | 1998-05-10 | A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections. | |
CVE-1999-0816 | | 1998-05-10 | The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024. | |
CVE-1999-1361 | | 1998-05-09 | Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of… | |
CVE-1999-1044 | | 1998-05-07 | Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges. | |
CVE-1999-1027 | | 1998-05-07 | Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program. | |
CVE-1999-0126 | | 1998-05-03 | SGI IRIX buffer overflow in xterm and Xaw allows root access. | |
CVE-1999-0796 | | 1998-05-01 | FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. | |
CVE-1999-0108 | | 1998-05-01 | The printers program in IRIX has a buffer overflow that gives root access to local users. | |
CVE-1999-1106 | | 1998-04-29 | Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument. | |
CVE-1999-0212 | | 1998-04-29 | Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server. | |
CVE-1999-0069 | High | 8.4 | 1998-04-29 | Solaris ufsrestore buffer overflow. |
CVE-1999-1390 | | 1998-04-28 | suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line. | |
CVE-1999-1113 | | 1998-04-14 | Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER co… | |
CVE-1999-1499 | | 1998-04-10 | named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) n… | |
CVE-1999-1504 | | 1998-04-08 | Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command. | |
CVE-1999-1503 | | 1998-04-08 | Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data fie… | |
CVE-1999-1502 | | 1998-04-08 | Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server add… | |
CVE-1999-1501 | | 1998-04-08 | (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users t… | |
CVE-1999-1114 | | 1998-04-08 | Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges. | |
CVE-1999-1040 | | 1998-04-08 | Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental… | |
CVE-1999-1015 | | 1998-04-08 | Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO co… | |
CVE-1999-0190 | | 1998-04-08 | Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. | |
CVE-1999-0011 | Medium | 5.4 | 1998-04-08 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
CVE-1999-0010 | | 1998-04-08 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-1505 | | 1998-04-07 | Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial conn… | |
CVE-1999-1498 | | 1998-04-06 | Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file. | |
CVE-1999-0270 | | 1998-04-03 | Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows… | |
CVE-1999-1183 | | 1998-04-02 | System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor… | |
CVE-1999-0551 | | 1998-04-01 | HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests. | |
CVE-1999-0537 | | 1998-04-01 | A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc. | |
CVE-1999-0507 | | 1998-04-01 | An account on a router, firewall, or other network device has a guessable password. | |
CVE-1999-0257 | | 1998-04-01 | Nestea variation of teardrop IP fragmentation denial of service. | |
CVE-1999-0098 | | 1998-04-01 | Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities. | |
CVE-1999-0003 | | 1998-04-01 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | |
CVE-1999-0960 | | 1998-03-20 | IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option. | |
CVE-1999-1075 | | 1998-03-18 | inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control… | |
CVE-1999-0060 | | 1998-03-16 | Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator… | |
CVE-1999-1118 | | 1998-03-11 | ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters. | |
CVE-1999-1407 | | 1998-03-09 | ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file. | |
CVE-1999-1272 | | 1998-03-01 | Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. | |
CVE-1999-0795 | | 1998-03-01 | The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify c… | |
CVE-1999-0514 | | 1998-03-01 | UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target. | |
CVE-1999-0502 | | 1998-03-01 | A Unix account has a default, null, blank, or missing password. | |
CVE-1999-0330 | | 1998-03-01 | Linux bdash game has a buffer overflow that allows local users to gain root access. | |
CVE-1999-0320 | | 1998-03-01 | SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files. | |
CVE-1999-0266 | | 1998-03-01 | The info2www CGI script allows remote file access or remote command execution. | |
CVE-1999-1486 | | 1998-02-25 | sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink att… | |
CVE-1999-1229 | | 1998-02-25 | Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files v… | |
CVE-1999-0290 | | 1998-02-21 | The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost. | |
CVE-1999-1273 | | 1998-02-20 | Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences. | |
CVE-1999-0323 | | 1998-02-20 | FreeBSD mmap function allows users to modify append-only or immutable files. | |
CVE-1999-1207 | | 1998-02-18 | Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP… | |
CVE-1999-0225 | | 1998-02-14 | Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specifie… | |
CVE-1999-0258 | | 1998-02-13 | Bonk variation of teardrop IP fragmentation denial of service. | |
CVE-1999-1269 | | 1998-02-06 | Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file. | |
CVE-1999-0012 | High | 7.0 | 1998-02-06 | Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. |
CVE-1999-1445 | | 1998-02-02 | Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a cor… | |
CVE-1999-0486 | | 1998-02-01 | Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash. | |
CVE-1999-0305 | | 1998-02-01 | The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly res… | |
CVE-1999-0304 | | 1998-02-01 | mmap function in BSD allows local attackers in the kmem group to modify memory through devices. | |
CVE-1999-0296 | | 1998-02-01 | Solaris volrmmount program allows attackers to read any file. | |
CVE-1999-0256 | | 1998-02-01 | Buffer overflow in War FTP allows remote execution of commands. | |
CVE-1999-0087 | | 1998-02-01 | Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. | |
CVE-1999-0264 | | 1998-01-27 | htmlscript CGI program allows remote read access to files. | |
CVE-1999-0125 | | 1998-01-25 | Buffer overflow in SGI IRIX mailx program. | |
CVE-1999-0013 | High | 8.4 | 1998-01-22 | Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user. |
CVE-1999-1487 | | 1998-01-21 | Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system. | |
CVE-1999-0014 | | 1998-01-21 | Unauthorized privileged access or denial of service via dtappgather program in CDE. | |
CVE-1999-1045 | | 1998-01-15 | pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request. | |
CVE-1999-0271 | | 1998-01-15 | Progressive Networks Real Video server (pnserver) can be crashed remotely. | |
CVE-1999-0958 | | 1998-01-12 | sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack. | |
CVE-1999-1176 | | 1998-01-10 | Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script. | |
CVE-1999-0086 | | 1998-01-08 | AIX routed allows remote users to modify sensitive files. | |
CVE-1999-1429 | | 1998-01-05 | DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver. | |
CVE-1999-0513 | | 1998-01-05 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. |