1999 CVEs (page 2)
Page 2 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-1320 | | 1999-12-31 | Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing. | |
CVE-1999-1317 | | 1999-12-31 | Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case lette… | |
CVE-1999-1316 | | 1999-12-31 | Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess. | |
CVE-1999-1315 | | 1999-12-31 | Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service. | |
CVE-1999-1307 | | 1999-12-31 | Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges. | |
CVE-1999-1300 | | 1999-12-31 | Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration. | |
CVE-1999-1294 | | 1999-12-31 | Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from th… | |
CVE-1999-1293 | | 1999-12-31 | mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core. | |
CVE-1999-1290 | | 1999-12-31 | Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via… | |
CVE-1999-1287 | | 1999-12-31 | Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface. | |
CVE-1999-1279 | | 1999-12-31 | An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users shar… | |
CVE-1999-1259 | | 1999-12-31 | Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously delete… | |
CVE-1999-1246 | | 1999-12-31 | Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure defaul… | |
CVE-1999-1233 | | 1999-12-31 | IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Do… | |
CVE-1999-1223 | | 1999-12-31 | IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) charact… | |
CVE-1999-1222 | | 1999-12-31 | Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name… | |
CVE-1999-1206 | | 1999-12-31 | SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are m… | |
CVE-1999-1177 | | 1999-12-31 | Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an uplo… | |
CVE-1999-1175 | | 1999-12-31 | Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect H… | |
CVE-1999-1167 | | 1999-12-31 | Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third… | |
CVE-1999-1157 | | 1999-12-31 | Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multip… | |
CVE-1999-1148 | | 1999-12-31 | FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same t… | |
CVE-1999-1132 | | 1999-12-31 | Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field w… | |
CVE-1999-1127 | High | 7.5 | 1999-12-31 | Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion)… |
CVE-1999-1126 | | 1999-12-31 | Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration informati… | |
CVE-1999-1124 | | 1999-12-31 | HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the ma… | |
CVE-1999-1117 | | 1999-12-31 | lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter. | |
CVE-1999-1105 | | 1999-12-31 | Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which all… | |
CVE-1999-1104 | | 1999-12-31 | Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypt… | |
CVE-1999-1102 | | 1999-12-31 | lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack t… | |
CVE-1999-1100 | | 1999-12-31 | Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DE… | |
CVE-1999-1094 | | 1999-12-31 | Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK… | |
CVE-1999-1093 | | 1999-12-31 | Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute ar… | |
CVE-1999-1087 | | 1999-12-31 | Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intrane… | |
CVE-1999-1084 | | 1999-12-31 | The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is autom… | |
CVE-1999-1074 | | 1999-12-31 | Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privilege… | |
CVE-1999-1055 | | 1999-12-31 | Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL fun… | |
CVE-1999-1043 | | 1999-12-31 | Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a de… | |
CVE-1999-1042 | | 1999-12-31 | Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as u… | |
CVE-1999-1035 | | 1999-12-31 | IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability. | |
CVE-1999-0815 | | 1999-12-31 | Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries. | |
CVE-1999-0808 | | 1999-12-31 | Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute… | |
CVE-1999-0154 | | 1999-12-31 | IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. | |
CVE-1999-0001 | | 1999-12-30 | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. | |
CVE-1999-1573 | | 1999-12-28 | Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00… | |
CVE-1999-0477 | | 1999-12-25 | The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict… | |
CVE-1999-0455 | | 1999-12-25 | The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restri… | |
CVE-1999-0892 | | 1999-12-24 | Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font. | |
CVE-1999-1109 | | 1999-12-22 | Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Send… | |
CVE-1999-1066 | | 1999-12-22 | Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifi… | |
CVE-1999-1497 | | 1999-12-21 | Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts. | |
CVE-1999-0997 | | 1999-12-20 | wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does… | |
CVE-1999-1006 | | 1999-12-19 | Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter. | |
CVE-1999-1005 | | 1999-12-19 | Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter. | |
CVE-1999-1004 | | 1999-12-16 | Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command. | |
CVE-1999-1001 | | 1999-12-16 | Cisco Cache Engine allows a remote attacker to gain access via a null username and password. | |
CVE-1999-1000 | | 1999-12-16 | The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. | |
CVE-1999-0998 | | 1999-12-16 | Cisco Cache Engine allows an attacker to replace content in the cache. | |
CVE-1999-0995 | | 1999-12-16 | Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which look… | |
CVE-1999-0994 | | 1999-12-16 | Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords. | |
CVE-1999-0996 | | 1999-12-15 | Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request. | |
CVE-1999-0935 | | 1999-12-15 | classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form. | |
CVE-1999-0934 | | 1999-12-15 | classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters. | |
CVE-1999-1010 | | 1999-12-14 | An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. | |
CVE-1999-1007 | | 1999-12-13 | Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file. | |
CVE-1999-1003 | | 1999-12-13 | War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections. | |
CVE-1999-0993 | | 1999-12-13 | Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed. | |
CVE-1999-1009 | | 1999-12-12 | The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system. | |
CVE-1999-0289 | | 1999-12-12 | The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. | |
CVE-1999-0977 | | 1999-12-10 | Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request. | |
CVE-1999-0975 | | 1999-12-10 | The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying… | |
CVE-1999-0978 | | 1999-12-09 | htdig allows remote attackers to execute commands via filenames with shell metacharacters. | |
CVE-1999-0974 | | 1999-12-09 | Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service. | |
CVE-1999-0972 | | 1999-12-09 | Buffer overflow in Xshipwars xsw program. | |
CVE-1999-0986 | | 1999-12-08 | The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. | |
CVE-1999-0981 | | 1999-12-08 | Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via t… | |
CVE-1999-0976 | | 1999-12-07 | Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail. | |
CVE-1999-0973 | | 1999-12-07 | Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode. | |
CVE-1999-0991 | | 1999-12-06 | Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name. | |
CVE-1999-0989 | | 1999-12-06 | Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol. | |
CVE-1999-0990 | | 1999-12-05 | Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system. | |
CVE-1999-0982 | | 1999-12-05 | The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. | |
CVE-1999-0988 | | 1999-12-04 | UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. | |
CVE-1999-0866 | | 1999-12-03 | Buffer overflow in UnixWare xauto program allows local users to gain root privilege. | |
CVE-1999-0865 | | 1999-12-03 | Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port. | |
CVE-1999-0864 | | 1999-12-03 | UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file. | |
CVE-1999-0825 | | 1999-12-03 | The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. | |
CVE-1999-0862 | | 1999-12-02 | Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file. | |
CVE-1999-0858 | | 1999-12-02 | Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server. | |
CVE-1999-0852 | | 1999-12-02 | IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin. | |
CVE-1999-0850 | | 1999-12-02 | The default permissions for Endymion MailMan allow local users to read email or modify files. | |
CVE-1999-0828 | | 1999-12-02 | UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission. | |
CVE-1999-0963 | | 1999-12-01 | FreeBSD mount_union command allows local users to gain root privileges via a symlink attack. | |
CVE-1999-0860 | | 1999-12-01 | Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack. | |
CVE-1999-0859 | | 1999-12-01 | Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. | |
CVE-1999-0857 | | 1999-12-01 | FreeBSD gdc program allows local users to modify files via a symlink attack. | |
CVE-1999-0856 | | 1999-12-01 | login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exi… | |
CVE-1999-0855 | | 1999-12-01 | Buffer overflow in FreeBSD gdc program. | |
CVE-1999-0853 | | 1999-12-01 | Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication proced… | |
CVE-1999-0846 | | 1999-12-01 | Denial of service in MDaemon 2.7 via a large number of connection attempts. |