1999 CVEs (page 14)
Page 14 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0046 | | 1997-02-06 | Buffer overflow of rlogin program using TERM environmental variable. | |
CVE-1999-0298 | | 1997-02-05 | ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack. | |
CVE-1999-1299 | | 1997-02-03 | rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpre… | |
CVE-1999-1160 | | 1997-02-02 | Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges. | |
CVE-1999-0959 | | 1997-02-01 | IRIX startmidi program allows local users to modify arbitrary files via a symlink attack. | |
CVE-1999-0369 | | 1997-02-01 | The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access. | |
CVE-1999-0309 | | 1997-02-01 | HP-UX vgdisplay program gives root access to local users. | |
CVE-1999-0174 | | 1997-02-01 | The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-1144 | | 1997-01-30 | Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges. | |
CVE-1999-0047 | | 1997-01-28 | MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. | |
CVE-1999-0966 | | 1997-01-27 | Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0]. | |
CVE-1999-0048 | | 1997-01-27 | Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges. | |
CVE-1999-0081 | | 1997-01-11 | wu-ftp allows files to be overwritten via the rnfr command. | |
CVE-1999-1088 | | 1997-01-09 | Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges. | |
CVE-1999-0049 | | 1997-01-08 | Csetup under IRIX allows arbitrary file creation or overwriting. | |
CVE-1999-1311 | | 1997-01-07 | Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges. | |
CVE-1999-1145 | | 1997-01-07 | Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges. | |
CVE-1999-1249 | | 1997-01-06 | movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges. | |
CVE-1999-0051 | | 1997-01-06 | Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. | |
CVE-1999-1120 | | 1997-01-04 | netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain pri… | |
CVE-1999-0626 | | 1997-01-01 | A version of rusers is running that exposes valid user information to any entity on the network. | |
CVE-1999-0582 | | 1997-01-01 | A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc. | |
CVE-1999-0576 | | 1997-01-01 | A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories. | |
CVE-1999-0575 | | 1997-01-01 | A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User a… | |
CVE-1999-0572 | | 1997-01-01 | .reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks. | |
CVE-1999-0562 | | 1997-01-01 | The registry in Windows NT can be accessed remotely by users who are not administrators. | |
CVE-1999-0550 | | 1997-01-01 | A router's routing tables can be obtained from arbitrary hosts. | |
CVE-1999-0535 | | 1997-01-01 | A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness. | |
CVE-1999-0534 | | 1997-01-01 | A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Ob… | |
CVE-1999-0525 | | 1997-01-01 | IP traceroute is allowed from arbitrary hosts. | |
CVE-1999-0521 | | 1997-01-01 | An NIS domain name is easily guessable. | |
CVE-1999-0519 | | 1997-01-01 | A NETBIOS/SMB share password is the default, null, or missing. | |
CVE-1999-0518 | | 1997-01-01 | A NETBIOS/SMB share password is guessable. | |
CVE-1999-0517 | Medium | 5.9 | 1997-01-01 | An SNMP community name is the default (e.g. public), null, or missing. |
CVE-1999-0511 | Critical | 9.1 | 1997-01-01 | IP forwarding is enabled on a machine which is not a router or firewall. |
CVE-1999-0510 | | 1997-01-01 | A router or firewall allows source routed packets from arbitrary hosts. | |
CVE-1999-0504 | | 1997-01-01 | A Windows NT local user or administrator account has a default, null, blank, or missing password. | |
CVE-1999-0503 | | 1997-01-01 | A Windows NT local user or administrator account has a guessable password. | |
CVE-1999-0499 | | 1997-01-01 | NETBIOS share information may be published through SNMP registry keys in NT. | |
CVE-1999-0496 | | 1997-01-01 | A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin. | |
CVE-1999-0345 | | 1997-01-01 | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | |
CVE-1999-0274 | | 1997-01-01 | Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made. | |
CVE-1999-0265 | | 1997-01-01 | ICMP redirect messages may crash or lock up a host. | |
CVE-1999-0253 | | 1997-01-01 | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. | |
CVE-1999-0252 | | 1997-01-01 | Buffer overflow in listserv allows arbitrary command execution. | |
CVE-1999-0251 | | 1997-01-01 | Denial of service in talk program allows remote attackers to disrupt a user's display. | |
CVE-1999-0249 | | 1997-01-01 | Windows NT RSHSVC program allows remote users to execute arbitrary commands. | |
CVE-1999-0236 | High | 7.5 | 1997-01-01 | ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. |
CVE-1999-0217 | | 1997-01-01 | Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. | |
CVE-1999-0204 | | 1997-01-01 | Sendmail 8.6.9 allows remote attackers to execute root commands, using ident. | |
CVE-1999-0202 | | 1997-01-01 | The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. | |
CVE-1999-0201 | | 1997-01-01 | A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user. | |
CVE-1999-0180 | | 1997-01-01 | in.rshd allows users to login with a NULL username and execute commands. | |
CVE-1999-0179 | | 1997-01-01 | Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share. | |
CVE-1999-0178 | | 1997-01-01 | Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long quer… | |
CVE-1999-0173 | | 1997-01-01 | FormMail CGI program can be used by web servers other than the host server that the program resides on. | |
CVE-1999-0171 | | 1997-01-01 | Denial of service in syslog by sending it a large number of superfluous messages. | |
CVE-1999-0170 | | 1997-01-01 | Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. | |
CVE-1999-0166 | | 1997-01-01 | NFS allows users to use a "cd .." command to access other directories besides the exported file system. | |
CVE-1999-0163 | | 1997-01-01 | In older versions of Sendmail, an attacker could use a pipe character to execute root commands. | |
CVE-1999-0100 | | 1997-01-01 | Remote access in AIX innd 1.5.1, using control messages. | |
CVE-1999-1251 | | 1996-12-24 | Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service. | |
CVE-1999-0260 | | 1996-12-24 | The jj CGI program allows command execution via shell metacharacters. | |
CVE-1999-1026 | | 1996-12-20 | aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file. | |
CVE-1999-1385 | | 1996-12-19 | Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable. | |
CVE-1999-0127 | | 1996-12-19 | swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access. | |
CVE-1999-0128 | | 1996-12-18 | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | |
CVE-1999-1089 | | 1996-12-13 | Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument. | |
CVE-1999-0297 | | 1996-12-12 | Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. | |
CVE-1999-0101 | | 1996-12-10 | Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names. | |
CVE-1999-0096 | | 1996-12-10 | Sendmail decode alias can be used to overwrite sensitive files. | |
CVE-1999-0045 | | 1996-12-10 | List of arbitrary files on Web host via nph-test-cgi script. | |
CVE-1999-1401 | | 1996-12-05 | Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). | |
CVE-1999-0043 | Critical | 9.8 | 1996-12-04 | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. |
CVE-1999-0129 | | 1996-12-03 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | |
CVE-1999-0044 | | 1996-12-03 | fsdump command in IRIX allows local users to obtain root access by modifying sensitive files. | |
CVE-1999-0050 | | 1996-12-01 | Buffer overflow in HP-UX newgrp program. | |
CVE-1999-1240 | | 1996-11-26 | Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message. | |
CVE-1999-1099 | | 1996-11-22 | Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the re… | |
CVE-1999-1221 | | 1996-11-17 | dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file. | |
CVE-1999-0130 | | 1996-11-16 | Local users can start Sendmail in daemon mode and gain root privileges. | |
CVE-1999-1161 | | 1996-11-03 | Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump. | |
CVE-1999-0336 | | 1996-11-01 | Buffer overflow in mstm in HP-UX allows local users to gain root access. | |
CVE-1999-0311 | | 1996-11-01 | fpkg2swpk in HP-UX allows local users to gain root access. | |
CVE-1999-1384 | | 1996-10-30 | Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exito… | |
CVE-1999-0277 | | 1996-10-28 | The WorkMan program can be used to overwrite any file to get root access. | |
CVE-1999-0032 | | 1996-10-25 | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) comma… | |
CVE-1999-0075 | | 1996-10-16 | PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. | |
CVE-1999-0234 | | 1996-10-08 | Bash treats any character with a value of 255 as a command separator. | |
CVE-1999-0319 | | 1996-10-01 | Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting. | |
CVE-1999-0308 | | 1996-10-01 | HP-UX gwind program allows users to modify arbitrary files. | |
CVE-1999-0246 | | 1996-10-01 | HP Remote Watch allows a remote user to gain root access. | |
CVE-1999-0206 | | 1996-10-01 | MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access. | |
CVE-1999-0961 | | 1996-09-21 | HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation. | |
CVE-1999-0116 | | 1996-09-19 | Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood. | |
CVE-1999-1295 | | 1996-09-17 | Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of gro… | |
CVE-1999-1383 | | 1996-09-13 | (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can c… | |
CVE-1999-0131 | | 1996-09-11 | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. | |
CVE-1999-1252 | | 1996-09-04 | Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges. | |
CVE-1999-0324 | | 1996-09-01 | ppl program in HP-UX allows local users to create root files through symlinks. |