1999 CVEs (page 12)
Page 12 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-1439 | | 1998-01-02 | gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files. | |
CVE-1999-0341 | | 1998-01-01 | Buffer overflow in the Linux mail program "deliver" allows local users to gain root access. | |
CVE-1999-0331 | | 1998-01-01 | Buffer overflow in Internet Explorer 4.0(1). | |
CVE-1999-0293 | | 1998-01-01 | AAA authentication on Cisco systems allows attackers to execute commands without authorization. | |
CVE-1999-0284 | | 1998-01-01 | Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command. | |
CVE-1999-0279 | | 1998-01-01 | Excite for Web Servers (EWS) allows remote command execution via shell metacharacters. | |
CVE-1999-0273 | | 1998-01-01 | Denial of service through Solaris 2.5.1 telnet by sending ^D characters. | |
CVE-1999-0239 | High | 7.5 | 1998-01-01 | Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET. |
CVE-1999-0114 | | 1998-01-01 | Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack. | |
CVE-1999-0107 | | 1997-12-30 | Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number… | |
CVE-1999-1274 | | 1997-12-29 | iPass RoamServer 3.1 creates temporary files with world-writable permissions. | |
CVE-1999-1230 | | 1997-12-24 | Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to att… | |
CVE-1999-1581 | | 1997-12-23 | Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of… | |
CVE-1999-0104 | | 1997-12-16 | A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. | |
CVE-1999-0015 | | 1997-12-16 | Teardrop IP denial of service. | |
CVE-1999-0004 | | 1997-12-16 | MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. | |
CVE-1999-0230 | | 1997-12-15 | Buffer overflow in Cisco 7xx routers through the telnet service. | |
CVE-1999-1140 | | 1997-12-14 | Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-0018 | | 1997-12-05 | Buffer overflow in statd allows root privileges. | |
CVE-1999-0340 | | 1997-12-01 | Buffer overflow in Linux Slackware crond program allows local users to gain root access. | |
CVE-1999-0244 | | 1997-12-01 | Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root. | |
CVE-1999-0193 | | 1997-12-01 | Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option. | |
CVE-1999-0016 | | 1997-12-01 | Land IP denial of service. | |
CVE-1999-1257 | | 1997-11-26 | Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a… | |
CVE-1999-0210 | | 1997-11-26 | Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters. | |
CVE-1999-1209 | | 1997-11-20 | Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges. | |
CVE-1999-1210 | | 1997-11-12 | xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when x… | |
CVE-1999-1428 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with s… | |
CVE-1999-1427 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges. | |
CVE-1999-1426 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files. | |
CVE-1999-1425 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges… | |
CVE-1999-1424 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root ac… | |
CVE-1999-1069 | | 1997-11-08 | Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand… | |
CVE-1999-0021 | | 1997-11-05 | Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program. | |
CVE-1999-0306 | | 1997-11-04 | buffer overflow in HP xlock program. | |
CVE-1999-0967 | | 1997-11-01 | Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. | |
CVE-1999-0328 | | 1997-11-01 | SGI permissions program allows local users to gain root privileges. | |
CVE-1999-0327 | | 1997-11-01 | SGI syserr program allows local users to corrupt files. | |
CVE-1999-0216 | | 1997-11-01 | Denial of service of inetd on Linux through SYN and RST packets. | |
CVE-1999-0322 | | 1997-10-29 | The open() function in FreeBSD allows local attackers to write to arbitrary files. | |
CVE-1999-0097 | | 1997-10-29 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). | |
CVE-1999-0094 | | 1997-10-29 | AIX piodmgrsu command allows local users to gain additional group privileges. | |
CVE-1999-0093 | | 1997-10-29 | AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. | |
CVE-1999-0092 | | 1997-10-29 | Various vulnerabilities in the AIX portmir command allows local users to obtain root access. | |
CVE-1999-0091 | | 1997-10-28 | Buffer overflow in AIX writesrv command allows local users to obtain root access. | |
CVE-1999-0089 | | 1997-10-28 | Buffer overflow in AIX libDtSvc library can allow local users to gain root access. | |
CVE-1999-1261 | | 1997-10-24 | Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (… | |
CVE-1999-1131 | | 1997-10-24 | Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via… | |
CVE-1999-0072 | | 1997-10-22 | Buffer overflow in AIX xdat gives root access to local users. | |
CVE-1999-0068 | | 1997-10-19 | CGI PHP mylog script allows an attacker to read any file on the target server. | |
CVE-1999-0192 | | 1997-10-18 | Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. | |
CVE-1999-0346 | | 1997-10-16 | CGI PHP mlog script allows an attacker to read any file on the target server. | |
CVE-1999-1224 | | 1997-10-08 | IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certa… | |
CVE-1999-1095 | | 1997-10-06 | sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as obse… | |
CVE-1999-1062 | | 1997-10-04 | HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents… | |
CVE-1999-1061 | | 1997-10-04 | HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the p… | |
CVE-1999-0061 | | 1997-10-02 | File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). | |
CVE-1999-1213 | | 1997-10-01 | Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service. | |
CVE-1999-0326 | | 1997-10-01 | Vulnerability in HP-UX mediainit program. | |
CVE-1999-0300 | | 1997-10-01 | nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers. | |
CVE-1999-0295 | | 1997-10-01 | Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. | |
CVE-1999-0294 | | 1997-10-01 | All records in a WINS database can be deleted through SNMP for a denial of service. | |
CVE-1999-0272 | | 1997-10-01 | Denial of service in Slmail v2.5 through the POP3 port. | |
CVE-1999-0185 | | 1997-10-01 | In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote comma… | |
CVE-1999-0160 | | 1997-10-01 | Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. | |
CVE-1999-0090 | | 1997-10-01 | Buffer overflow in AIX rcp command allows local users to obtain root access. | |
CVE-1999-0182 | | 1997-09-30 | Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. | |
CVE-1999-0955 | | 1997-09-23 | Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command. | |
CVE-1999-0267 | | 1997-09-23 | Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution. | |
CVE-1999-1125 | | 1997-09-19 | Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obt… | |
CVE-1999-0965 | | 1997-09-19 | Race condition in xterm allows local users to modify arbitrary files via the logging option. | |
CVE-1999-0956 | | 1997-09-19 | The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service. | |
CVE-1999-0667 | | 1997-09-19 | The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service. | |
CVE-1999-1214 | | 1997-09-15 | The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cau… | |
CVE-1999-0079 | | 1997-09-12 | Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. | |
CVE-1999-1275 | | 1997-09-08 | Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privilege… | |
CVE-1999-1139 | | 1997-09-01 | Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink atta… | |
CVE-1999-1133 | | 1997-09-01 | HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authentic… | |
CVE-1999-0237 | | 1997-09-01 | Remote execution of arbitrary commands through Guestbook CGI program. | |
CVE-1999-0191 | | 1997-09-01 | IIS newdsn.exe CGI script allows remote users to overwrite files. | |
CVE-1999-0183 | | 1997-09-01 | Linux implementations of TFTP would allow access to files outside the restricted directory. | |
CVE-1999-0177 | | 1997-09-01 | The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs. | |
CVE-1999-0148 | | 1997-09-01 | The handler CGI program in IRIX allows arbitrary command execution. | |
CVE-1999-0115 | | 1997-09-01 | AIX bugfiler program allows local users to gain root access. | |
CVE-1999-0071 | | 1997-09-01 | Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. | |
CVE-1999-1225 | | 1997-08-24 | rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to… | |
CVE-1999-1220 | | 1997-08-24 | Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file… | |
CVE-1999-1399 | | 1997-08-20 | spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the co… | |
CVE-1999-1250 | | 1997-08-19 | Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files. | |
CVE-1999-0024 | | 1997-08-13 | DNS cache poisoning via BIND, by predictable query IDs. | |
CVE-1999-0152 | | 1997-08-11 | The DG/UX finger daemon allows remote command execution through shell metacharacters. | |
CVE-1999-1446 | | 1997-08-05 | Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which a… | |
CVE-1999-1262 | | 1997-08-01 | Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Jav… | |
CVE-1999-0566 | | 1997-08-01 | An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities. | |
CVE-1999-0524 | Medium | 4.0 | 1997-08-01 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
CVE-1999-0301 | | 1997-08-01 | Buffer overflow in SunOS/Solaris ps command. | |
CVE-1999-0238 | | 1997-08-01 | php.cgi allows attackers to read any file on the system. | |
CVE-1999-1308 | | 1997-07-31 | Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges. | |
CVE-1999-1419 | | 1997-07-30 | Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges. |