1999 CVEs (page 3)
Page 3 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0838 | | 1999-12-01 | Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command. | |
CVE-1999-0834 | | 1999-12-01 | Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library. | |
CVE-1999-0826 | | 1999-12-01 | Buffer overflow in FreeBSD angband allows local users to gain privileges. | |
CVE-1999-0823 | | 1999-12-01 | Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument. | |
CVE-1999-0820 | | 1999-12-01 | FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. | |
CVE-1999-0819 | | 1999-12-01 | NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it. | |
CVE-1999-0841 | | 1999-11-30 | Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type. | |
CVE-1999-0840 | | 1999-11-30 | Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option. | |
CVE-1999-0824 | | 1999-11-30 | A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the… | |
CVE-1999-0822 | | 1999-11-30 | Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command. | |
CVE-1999-0847 | | 1999-11-29 | Buffer overflow in free internet chess server (FICS) program, xboard. | |
CVE-1999-0842 | | 1999-11-29 | Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-0839 | | 1999-11-29 | Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled. | |
CVE-1999-0387 | | 1999-11-29 | A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords. | |
CVE-1999-1547 | | 1999-11-25 | Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent. | |
CVE-1999-0845 | | 1999-11-25 | Buffer overflow in SCO su program allows local users to gain root access via a long username. | |
CVE-1999-0317 | | 1999-11-25 | Buffer overflow in Linux su command gives root access to local users. | |
CVE-1999-1548 | | 1999-11-24 | Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of… | |
CVE-1999-1189 | | 1999-11-24 | Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute… | |
CVE-1999-1163 | | 1999-11-24 | Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Te… | |
CVE-1999-0844 | | 1999-11-24 | Denial of service in MDaemon WorldClient and WebConfig services via a long URL. | |
CVE-1999-1527 | | 1999-11-23 | Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addre… | |
CVE-1999-1058 | | 1999-11-22 | Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several… | |
CVE-1999-0818 | | 1999-11-20 | Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable. | |
CVE-1999-1475 | | 1999-11-19 | ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privilege… | |
CVE-1999-0999 | | 1999-11-19 | Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet. | |
CVE-1999-0831 | | 1999-11-19 | Denial of service in Linux syslogd via a large number of connections. | |
CVE-1999-0987 | | 1999-11-18 | Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name. | |
CVE-1999-1519 | | 1999-11-17 | Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password. | |
CVE-1999-1092 | | 1999-11-17 | tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file. | |
CVE-1999-0793 | | 1999-11-17 | Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet. | |
CVE-1999-1549 | High | 7.8 | 1999-11-16 | Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a tempora… |
CVE-1999-1508 | | 1999-11-16 | Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such a… | |
CVE-1999-1457 | | 1999-11-16 | Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handle… | |
CVE-1999-1051 | | 1999-11-16 | Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ dir… | |
CVE-1999-1190 | | 1999-11-15 | Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail me… | |
CVE-1999-1528 | | 1999-11-14 | ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other us… | |
CVE-1999-1110 | | 1999-11-14 | Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious we… | |
CVE-1999-1050 | | 1999-11-12 | Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_mes… | |
CVE-1999-1539 | | 1999-11-10 | Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and p… | |
CVE-1999-1511 | | 1999-11-10 | Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in t… | |
CVE-1999-0851 | | 1999-11-10 | Denial of service in BIND named via naptr. | |
CVE-1999-0849 | | 1999-11-10 | Denial of service in BIND named via maxdname. | |
CVE-1999-0848 | | 1999-11-10 | Denial of service in BIND named via consuming more than "fdmax" file descriptors. | |
CVE-1999-0837 | | 1999-11-10 | Denial of service in BIND by improperly closing TCP sessions via so_linger. | |
CVE-1999-0835 | | 1999-11-10 | Denial of service in BIND named via malformed SIG records. | |
CVE-1999-0833 | | 1999-11-10 | Buffer overflow in BIND 8.2 via NXT records. | |
CVE-1999-1112 | | 1999-11-09 | Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop im… | |
CVE-1999-1111 | | 1999-11-09 | Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack whi… | |
CVE-1999-0985 | | 1999-11-09 | CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | |
CVE-1999-0984 | | 1999-11-09 | Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | |
CVE-1999-0983 | | 1999-11-09 | Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry. | |
CVE-1999-0832 | | 1999-11-09 | Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. | |
CVE-1999-1550 | | 1999-11-08 | bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter. | |
CVE-1999-1530 | | 1999-11-08 | cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to vi… | |
CVE-1999-0863 | | 1999-11-08 | Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI. | |
CVE-1999-0821 | | 1999-11-08 | FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument. | |
CVE-1999-1533 | | 1999-11-07 | Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTT… | |
CVE-1999-1529 | | 1999-11-07 | A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary… | |
CVE-1999-1571 | | 1999-11-04 | Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability… | |
CVE-1999-1509 | | 1999-11-04 | Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL. | |
CVE-1999-1340 | | 1999-11-04 | Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument. | |
CVE-1999-1065 | | 1999-11-04 | Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string… | |
CVE-1999-0899 | | 1999-11-04 | The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate… | |
CVE-1999-0898 | | 1999-11-04 | Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request. | |
CVE-1999-0896 | | 1999-11-04 | Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password. | |
CVE-1999-0887 | | 1999-11-04 | FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack. | |
CVE-1999-0843 | | 1999-11-04 | Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port. | |
CVE-1999-0904 | | 1999-11-03 | Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username. | |
CVE-1999-0885 | | 1999-11-03 | Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL. | |
CVE-1999-1531 | | 1999-11-02 | Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML ta… | |
CVE-1999-0949 | | 1999-11-02 | Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. | |
CVE-1999-0948 | | 1999-11-02 | Buffer overflow in uum program for Canna input system allows local users to gain root privileges. | |
CVE-1999-0947 | | 1999-11-02 | AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacter… | |
CVE-1999-0946 | | 1999-11-02 | Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag. | |
CVE-1999-1517 | | 1999-11-01 | runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary… | |
CVE-1999-1077 | | 1999-11-01 | Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard seq… | |
CVE-1999-0854 | | 1999-11-01 | Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts… | |
CVE-1999-0830 | | 1999-11-01 | Buffer overflow in SCO UnixWare Xsco command via a long argument. | |
CVE-1999-0829 | | 1999-11-01 | HP Secure Web Console uses weak encryption. | |
CVE-1999-0827 | | 1999-11-01 | By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing. | |
CVE-1999-0354 | | 1999-11-01 | Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn… | |
CVE-1999-1577 | | 1999-10-31 | Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long… | |
CVE-1999-0873 | | 1999-10-30 | Buffer overflow in Skyfull mail server via MAIL FROM command. | |
CVE-1999-1532 | | 1999-10-29 | Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands. | |
CVE-1999-1226 | | 1999-10-28 | Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key. | |
CVE-1999-0950 | | 1999-10-28 | Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. | |
CVE-1999-0915 | | 1999-10-28 | URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-0882 | | 1999-10-28 | Falcon web server allows remote attackers to determine the absolute path of the web root via long file names. | |
CVE-1999-1234 | | 1999-10-26 | LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDo… | |
CVE-1999-1076 | | 1999-10-26 | Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Canc… | |
CVE-1999-0903 | | 1999-10-26 | genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. | |
CVE-1999-0881 | | 1999-10-26 | Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-0884 | | 1999-10-25 | The Zeus web server administrative interface uses weak encryption for its passwords. | |
CVE-1999-0883 | | 1999-10-25 | Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine. | |
CVE-1999-0944 | | 1999-10-24 | IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections. | |
CVE-1999-0902 | | 1999-10-23 | ypserv allows local administrators to modify password tables. | |
CVE-1999-0901 | | 1999-10-23 | ypserv allows a local user to modify the GECOS and login shells of other users. | |
CVE-1999-0900 | | 1999-10-23 | Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation. | |
CVE-1999-1341 | | 1999-10-22 | Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty device… |