1999 CVEs (page 15)
Page 15 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-1309 | | 1996-08-30 | Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option. | |
CVE-1999-1187 | | 1996-08-26 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail. | |
CVE-1999-0085 | | 1996-08-21 | Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname. | |
CVE-1999-0132 | | 1996-08-15 | Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. | |
CVE-1999-0133 | | 1996-08-14 | fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access. | |
CVE-1999-0134 | | 1996-08-06 | vold in Solaris 2.x allows local users to gain root access. | |
CVE-1999-1413 | | 1996-08-03 | Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users t… | |
CVE-1999-0136 | | 1996-07-31 | Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access. | |
CVE-1999-0135 | | 1996-07-25 | admintool in Solaris allows a local user to write to arbitrary files and gain root access. | |
CVE-1999-0023 | | 1996-07-24 | Local user gains root privileges via buffer overflow in rdist, via lookup() function. | |
CVE-1999-1572 | | 1996-07-16 | cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, whi… | |
CVE-1999-1301 | | 1996-07-16 | A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module o… | |
CVE-1999-0137 | | 1996-07-09 | The dip program on many Linux systems allows local users to gain root access via a buffer overflow. | |
CVE-1999-0022 | High | 7.8 | 1996-07-03 | Local user gains root privileges via buffer overflow in rdist, via expstr() function. |
CVE-1999-0175 | | 1996-07-01 | The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server. | |
CVE-1999-0138 | | 1996-06-26 | The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access. | |
CVE-1999-1253 | | 1996-06-07 | Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privilege… | |
CVE-1999-1205 | | 1996-06-07 | nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration… | |
CVE-1999-0509 | | 1996-05-29 | Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands. | |
CVE-1999-0522 | | 1996-05-28 | The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate. | |
CVE-1999-1313 | | 1996-05-23 | Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands. | |
CVE-1999-1314 | | 1996-05-17 | Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system re… | |
CVE-1999-0019 | | 1996-04-24 | Delete or create a file via rpc.statd, due to invalid information. | |
CVE-1999-0078 | | 1996-04-18 | pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. | |
CVE-1999-1103 | | 1996-04-03 | dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter. | |
CVE-1999-0070 | | 1996-04-01 | test-cgi program allows an attacker to list files on the server. | |
CVE-1999-0141 | | 1996-03-29 | Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet. | |
CVE-1999-0067 | | 1996-03-20 | phf CGI program allows remote command execution through shell metacharacters. | |
CVE-1999-0142 | | 1996-03-01 | The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts. | |
CVE-1999-0233 | | 1996-02-25 | IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files. | |
CVE-1999-0143 | | 1996-02-21 | Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys. | |
CVE-1999-0103 | | 1996-02-08 | Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm. | |
CVE-1999-1491 | | 1996-02-02 | abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path t… | |
CVE-1999-1319 | | 1996-01-03 | Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations. | |
CVE-1999-1186 | | 1996-01-02 | rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root… | |
CVE-1999-0208 | | 1995-12-12 | rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. | |
CVE-1999-0325 | | 1995-12-01 | vhe_u_mnt program in HP-UX allows local users to create root files through symlinks. | |
CVE-1999-0316 | | 1995-12-01 | Buffer overflow in Linux splitvt command gives root access to local users. | |
CVE-1999-0123 | | 1995-12-01 | Race condition in Linux mailx command allows local users to read user files. | |
CVE-1999-0080 | | 1995-11-30 | Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenti… | |
CVE-1999-0241 | | 1995-11-01 | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. | |
CVE-1999-0099 | | 1995-10-19 | Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. | |
CVE-1999-0073 | | 1995-10-13 | Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain r… | |
CVE-1999-0218 | | 1995-10-01 | Livingston portmaster machines could be rebooted via a series of commands. | |
CVE-1999-0245 | | 1995-09-07 | Some configurations of NIS+ in Linux allowed attackers to log in as the user "+". | |
CVE-1999-0155 | | 1995-08-31 | The ghostscript command with the -dSAFER option allows remote attackers to execute commands. | |
CVE-1999-0164 | | 1995-08-29 | A race condition in the Solaris ps command allows an attacker to overwrite critical files. | |
CVE-1999-1580 | | 1995-08-23 | SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Inter… | |
CVE-1999-0203 | | 1995-08-17 | In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the ma… | |
CVE-1999-0172 | | 1995-08-02 | FormMail CGI program allows remote execution of commands. | |
CVE-1999-0161 | | 1995-07-31 | In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering. | |
CVE-1999-0066 | Critical | 9.8 | 1995-07-31 | AnyForm CGI remote execution. |
CVE-1999-1080 | | 1995-05-10 | rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could a… | |
CVE-1999-0151 | | 1995-04-03 | The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access. | |
CVE-1999-1243 | | 1995-03-03 | SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges. | |
CVE-1999-1098 | | 1995-03-03 | Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing. | |
CVE-1999-0242 | | 1995-03-01 | Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords. | |
CVE-1999-0235 | | 1995-02-17 | Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access. | |
CVE-1999-0232 | | 1995-02-01 | Buffer overflow in NCSA WebServer (version 1.5c) gives remote access. | |
CVE-1999-0077 | | 1995-01-01 | Predictable TCP sequence numbers allow spoofing. | |
CVE-1999-1305 | | 1994-11-30 | Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1304 | | 1994-11-30 | Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1303 | | 1994-11-30 | Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1302 | | 1994-11-30 | Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1248 | | 1994-11-30 | Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges. | |
CVE-1999-1022 | | 1994-10-02 | serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local us… | |
CVE-1999-1238 | | 1994-09-21 | Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges. | |
CVE-1999-1219 | | 1994-08-11 | Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clog… | |
CVE-1999-1494 | | 1994-08-09 | colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument. | |
CVE-1999-1552 | | 1994-07-20 | dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary fi… | |
CVE-1999-1239 | | 1994-07-13 | HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have no… | |
CVE-1999-0207 | | 1994-06-09 | Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command. | |
CVE-1999-0337 | | 1994-06-03 | AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled. | |
CVE-1999-0423 | | 1994-06-01 | Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges. | |
CVE-1999-0113 | | 1994-05-23 | Some implementations of rlogin allow root access if given a -froot parameter. | |
CVE-1999-1134 | | 1994-05-18 | Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066. | |
CVE-1999-1388 | | 1994-05-13 | passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. | |
CVE-1999-1146 | | 1994-05-04 | Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. | |
CVE-1999-1135 | | 1994-04-20 | Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438. | |
CVE-1999-0120 | | 1994-03-21 | Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root. | |
CVE-1999-0338 | | 1994-02-24 | AIX Licensed Program Product performance tools allow local users to gain root access. | |
CVE-1999-0211 | | 1994-02-14 | Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone. | |
CVE-1999-1242 | | 1994-02-07 | Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges. | |
CVE-1999-0181 | | 1994-01-01 | The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands. | |
CVE-1999-0334 | | 1993-12-16 | In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access. | |
CVE-1999-1137 | | 1993-10-01 | The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an… | |
CVE-1999-0145 | | 1993-09-30 | Sendmail WIZ command enabled, allowing root access. | |
CVE-1999-1318 | | 1993-09-17 | /usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Tro… | |
CVE-1999-1138 | | 1993-09-17 | SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which al… | |
CVE-1999-1215 | | 1993-09-16 | LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privilege… | |
CVE-1999-0124 | | 1993-08-09 | Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon. | |
CVE-1999-1162 | | 1993-05-24 | Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system. | |
CVE-1999-1216 | | 1993-04-22 | Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using… | |
CVE-1999-1312 | | 1993-02-24 | Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges. | |
CVE-1999-1218 | | 1993-02-18 | Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files. | |
CVE-1999-1507 | | 1993-02-03 | Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash. | |
CVE-1999-0312 | | 1993-01-13 | HP ypbind allows attackers with root privileges to modify NIS data. | |
CVE-1999-1021 | | 1992-12-30 | NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0… | |
CVE-1999-1466 | | 1992-12-10 | Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certai… | |
CVE-1999-1306 | | 1992-12-10 | Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which coul… |