1999 CVEs (page 13)
Page 13 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-1217 | | 1997-07-25 | The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the s… | |
CVE-1999-1068 | | 1997-07-23 | Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request. | |
CVE-1999-0971 | | 1997-07-22 | Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file. | |
CVE-1999-1208 | | 1997-07-21 | Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument. | |
CVE-1999-0247 | | 1997-07-21 | Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands. | |
CVE-1999-0122 | | 1997-07-21 | Buffer overflow in AIX lchangelv gives root access. | |
CVE-1999-1182 | | 1997-07-17 | Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a lon… | |
CVE-1999-0030 | | 1997-07-16 | root privileges via buffer overflow in xlock command on SGI IRIX systems. | |
CVE-1999-0029 | High | 8.4 | 1997-07-16 | root privileges via buffer overflow in ordist command on SGI IRIX systems. |
CVE-1999-0028 | | 1997-07-16 | root privileges via buffer overflow in login/scheme command on SGI IRIX systems. | |
CVE-1999-0027 | | 1997-07-16 | root privileges via buffer overflow in eject command on SGI IRIX systems. | |
CVE-1999-0026 | | 1997-07-16 | root privileges via buffer overflow in pset command on SGI IRIX systems. | |
CVE-1999-0025 | | 1997-07-16 | root privileges via buffer overflow in df command on SGI IRIX systems. | |
CVE-1999-0146 | | 1997-07-15 | The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query… | |
CVE-1999-0059 | High | 7.3 | 1997-07-14 | IRIX fam service allows an attacker to obtain a list of all files on the server. |
CVE-1999-1463 | | 1997-07-10 | Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP pack… | |
CVE-1999-0176 | | 1997-07-10 | The Webgais program allows a remote user to execute arbitrary commands. | |
CVE-1999-0196 | | 1997-07-08 | websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). | |
CVE-1999-0031 | | 1997-07-08 | JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulne… | |
CVE-1999-1326 | | 1997-07-04 | wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal t… | |
CVE-1999-0628 | | 1997-07-01 | The rwho/rwhod service is running, which exposes machine status and user information. | |
CVE-1999-0541 | | 1997-07-01 | A password for accessing a WWW URL is guessable. | |
CVE-1999-0533 | | 1997-07-01 | A DNS server allows inverse queries. | |
CVE-1999-0532 | | 1997-07-01 | A DNS server allows zone transfers. | |
CVE-1999-0526 | | 1997-07-01 | An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server. | |
CVE-1999-0250 | | 1997-07-01 | Denial of service in Qmail through long SMTP commands. | |
CVE-1999-0219 | | 1997-07-01 | Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command. | |
CVE-1999-0195 | | 1997-07-01 | Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127… | |
CVE-1999-0184 | | 1997-07-01 | When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records. | |
CVE-1999-0169 | | 1997-07-01 | NFS allows attackers to read and write any file on the system by specifying a false UID. | |
CVE-1999-0156 | | 1997-07-01 | wu-ftpd FTP daemon allows any user and password combination. | |
CVE-1999-0153 | | 1997-07-01 | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. | |
CVE-1999-0150 | | 1997-07-01 | The Perl fingerd program allows arbitrary command execution from remote users. | |
CVE-1999-0147 | | 1997-07-01 | The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands. | |
CVE-1999-0111 | | 1997-07-01 | RIP v1 is susceptible to spoofing. | |
CVE-1999-0076 | | 1997-07-01 | Buffer overflow in wu-ftp from PASV command causes a core dump. | |
CVE-1999-0074 | | 1997-07-01 | Listening TCP ports are sequentially allocated, allowing spoofing attacks. | |
CVE-1999-1423 | | 1997-06-26 | ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interfac… | |
CVE-1999-1192 | | 1997-06-24 | Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. | |
CVE-1999-1483 | | 1997-06-19 | Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable. | |
CVE-1999-0957 | | 1997-06-18 | MajorCool mj_key_cache program allows local users to modify files via a symlink attack. | |
CVE-1999-1266 | | 1997-06-13 | rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid… | |
CVE-1999-0033 | | 1997-06-12 | Command execution in Sun systems via buffer overflow in the at program. | |
CVE-1999-0083 | | 1997-06-11 | getcwd() file descriptor leak in FTP. | |
CVE-1999-0275 | | 1997-06-10 | Denial of service in Windows NT DNS servers by flooding port 53 with too many characters. | |
CVE-1999-0189 | | 1997-06-04 | Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. | |
CVE-1999-0799 | | 1997-06-01 | Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location. | |
CVE-1999-0281 | | 1997-06-01 | Denial of service in IIS using long URLs. | |
CVE-1999-0227 | | 1997-06-01 | Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service. | |
CVE-1999-0144 | | 1997-06-01 | Denial of service in Qmail by specifying a large number of recipients with the RCPT command. | |
CVE-1999-0035 | Medium | 5.4 | 1997-05-29 | Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. |
CVE-1999-0034 | | 1997-05-29 | Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. | |
CVE-1999-1143 | | 1997-05-28 | Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs. | |
CVE-1999-0064 | | 1997-05-26 | Buffer overflow in AIX lquerylv program gives root access to local users. | |
CVE-1999-0036 | High | 8.4 | 1997-05-26 | IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. |
CVE-1999-0259 | | 1997-05-23 | cfingerd lists all users on a system via search.**@target. | |
CVE-1999-0037 | | 1997-05-21 | Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. | |
CVE-1999-1449 | | 1997-05-19 | SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device. | |
CVE-1999-1191 | | 1997-05-19 | Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. | |
CVE-1999-1402 | | 1997-05-17 | The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow l… | |
CVE-1999-1232 | | 1997-05-16 | Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable… | |
CVE-1999-1141 | | 1997-05-15 | Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of C… | |
CVE-1999-0962 | | 1997-05-14 | Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option. | |
CVE-1999-1184 | | 1997-05-13 | Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable. | |
CVE-1999-1158 | | 1997-05-13 | Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain roo… | |
CVE-1999-1410 | | 1997-05-09 | addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary f… | |
CVE-1999-1286 | | 1997-05-09 | addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file. | |
CVE-1999-1461 | | 1997-05-07 | inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users… | |
CVE-1999-1398 | | 1997-05-07 | Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. | |
CVE-1999-1067 | | 1997-05-07 | SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote at… | |
CVE-1999-0039 | High | 7.3 | 1997-05-06 | webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter. |
CVE-1999-1267 | | 1997-05-05 | KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the… | |
CVE-1999-1380 | | 1997-05-04 | Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary co… | |
CVE-1999-1116 | | 1997-05-03 | Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges. | |
CVE-1999-0112 | | 1997-05-01 | Buffer overflow in AIX dtterm program for the CDE. | |
CVE-1999-0040 | | 1997-05-01 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | |
CVE-1999-1296 | | 1997-04-29 | Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configura… | |
CVE-1999-0038 | High | 8.4 | 1997-04-26 | Buffer overflow in xlock program allows local users to execute commands as root. |
CVE-1999-0149 | | 1997-04-19 | The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack. | |
CVE-1999-0058 | | 1997-04-17 | Buffer overflow in PHP cgi program, php.cgi allows shell access. | |
CVE-1999-1298 | | 1997-04-07 | Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could a… | |
CVE-1999-0042 | | 1997-04-07 | Buffer overflow in University of Washington's implementation of IMAP and POP servers. | |
CVE-1999-1387 | | 1997-04-02 | Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux s… | |
CVE-1999-0315 | | 1997-04-01 | Buffer overflow in Solaris fdformat command gives root access to local users. | |
CVE-1999-0292 | | 1997-04-01 | Denial of service through Winpopup using large user names. | |
CVE-1999-0280 | | 1997-04-01 | Remote command execution in Microsoft Internet Explorer using .lnk and .url files. | |
CVE-1999-1525 | | 1997-03-14 | Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on… | |
CVE-1999-1408 | | 1997-03-05 | Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the local… | |
CVE-1999-0299 | | 1997-03-05 | Buffer overflow in FreeBSD lpd through long DNS hostnames. | |
CVE-1999-1489 | | 1997-03-04 | Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument. | |
CVE-1999-1128 | | 1997-03-01 | Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and exe… | |
CVE-1999-0612 | | 1997-03-01 | A version of finger is running that exposes valid user information to any entity on the network. | |
CVE-1999-0318 | | 1997-03-01 | Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. | |
CVE-1999-0165 | | 1997-03-01 | NFS cache poisoning. | |
CVE-1999-0106 | | 1997-03-01 | Finger redirection allows finger bombs. | |
CVE-1999-0105 | | 1997-03-01 | finger allows recursive searches by using a long string of @ symbols. | |
CVE-1999-0868 | | 1997-02-20 | ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN. | |
CVE-1999-0041 | | 1997-02-13 | Buffer overflow in NLS (Natural Language Service). | |
CVE-1999-0109 | | 1997-02-10 | Buffer overflow in ffbconfig in Solaris 2.5.1. | |
CVE-1999-0228 | | 1997-02-07 | Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT. |