1999 CVEs (page 4)
Page 4 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0951 | | 1999-10-22 | Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands. | |
CVE-1999-0905 | | 1999-10-21 | Denial of service in Axent Raptor firewall via malformed zero-length IP options. | |
CVE-1999-0766 | | 1999-10-21 | The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment. | |
CVE-1999-0895 | | 1999-10-20 | Firewall-1 does not properly restrict access to LDAP attributes. | |
CVE-1999-1047 | | 1999-10-18 | When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does… | |
CVE-1999-1342 | | 1999-10-17 | ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port. | |
CVE-1999-0943 | | 1999-10-15 | Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator. | |
CVE-1999-1343 | | 1999-10-13 | HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters. | |
CVE-1999-0893 | | 1999-10-11 | userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. | |
CVE-1999-1083 | | 1999-10-08 | Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack. | |
CVE-1999-1082 | | 1999-10-08 | Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack. | |
CVE-1999-1522 | | 1999-10-07 | Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML. | |
CVE-1999-1347 | | 1999-10-07 | Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or an… | |
CVE-1999-1346 | | 1999-10-07 | PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access… | |
CVE-1999-1349 | | 1999-10-06 | NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urge… | |
CVE-1999-0791 | | 1999-10-06 | Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP… | |
CVE-1999-1357 | | 1999-10-05 | Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b… | |
CVE-1999-1345 | | 1999-10-05 | Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files… | |
CVE-1999-1344 | | 1999-10-05 | Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file. | |
CVE-1999-1542 | | 1999-10-04 | RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command. | |
CVE-1999-1541 | | 1999-10-04 | shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary… | |
CVE-1999-1540 | | 1999-10-04 | shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code. | |
CVE-1999-1523 | | 1999-10-04 | Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET r… | |
CVE-1999-1454 | | 1999-10-04 | Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass… | |
CVE-1999-0942 | | 1999-10-04 | UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes. | |
CVE-1999-1500 | | 1999-10-01 | Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters… | |
CVE-1999-1236 | | 1999-10-01 | Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the… | |
CVE-1999-0933 | | 1999-10-01 | TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-0880 | | 1999-10-01 | Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly. | |
CVE-1999-0879 | | 1999-10-01 | Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file. | |
CVE-1999-0877 | | 1999-10-01 | Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME. | |
CVE-1999-0794 | | 1999-10-01 | Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file. | |
CVE-1999-1583 | | 1999-09-30 | Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. | |
CVE-1999-1469 | | 1999-09-30 | Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2)… | |
CVE-1999-0932 | | 1999-09-30 | Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file. | |
CVE-1999-0931 | | 1999-09-30 | Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands. | |
CVE-1999-1350 | | 1999-09-29 | ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a… | |
CVE-1999-1352 | | 1999-09-28 | mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges. | |
CVE-1999-0789 | | 1999-09-28 | Buffer overflow in AIX ftpd in the libc library. | |
CVE-1999-1576 | | 1999-09-27 | Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via… | |
CVE-1999-0940 | | 1999-09-27 | Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages. | |
CVE-1999-0788 | | 1999-09-26 | Arkiea nlservd allows remote attackers to conduct a denial of service. | |
CVE-1999-1578 | | 1999-09-24 | Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execu… | |
CVE-1999-1484 | | 1999-09-24 | Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsSe… | |
CVE-1999-1351 | | 1999-09-24 | Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbi… | |
CVE-1999-1534 | | 1999-09-23 | Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental vari… | |
CVE-1999-1477 | | 1999-09-23 | Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack. | |
CVE-1999-1013 | | 1999-09-23 | named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone fi… | |
CVE-1999-0908 | | 1999-09-23 | Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter. | |
CVE-1999-0906 | | 1999-09-23 | Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable. | |
CVE-1999-0777 | | 1999-09-23 | IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. | |
CVE-1999-0912 | | 1999-09-22 | FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files. | |
CVE-1999-0786 | | 1999-09-22 | The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack. | |
CVE-1999-0708 | | 1999-09-21 | Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field. | |
CVE-1999-0909 | | 1999-09-20 | Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Poin… | |
CVE-1999-0886 | | 1999-09-17 | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. | |
CVE-1999-0787 | | 1999-09-17 | The SSH authentication agent follows symlinks via a UNIX domain socket. | |
CVE-1999-0954 | | 1999-09-16 | WWWBoard has a default username and default password. | |
CVE-1999-0953 | | 1999-09-16 | WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers. | |
CVE-1999-0907 | | 1999-09-16 | sccw allows local users to read arbitrary files. | |
CVE-1999-0890 | | 1999-09-16 | iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error. | |
CVE-1999-0704 | | 1999-09-16 | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | |
CVE-1999-0817 | | 1999-09-15 | Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. te… | |
CVE-1999-1053 | | 1999-09-13 | guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary comma… | |
CVE-1999-1014 | | 1999-09-13 | Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument. | |
CVE-1999-0759 | | 1999-09-13 | Buffer overflow in FuseMAIL POP service via long USER and PASS commands. | |
CVE-1999-0751 | | 1999-09-13 | Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch. | |
CVE-1999-0750 | | 1999-09-13 | Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account. | |
CVE-1999-0691 | | 1999-09-13 | Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | |
CVE-1999-0689 | | 1999-09-13 | The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. | |
CVE-1999-0687 | | 1999-09-13 | The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. | |
CVE-1999-1521 | | 1999-09-12 | Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to ex… | |
CVE-1999-1575 | | 1999-09-10 | The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Ad… | |
CVE-1999-0910 | | 1999-09-10 | Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used… | |
CVE-1999-0702 | | 1999-09-10 | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vuln… | |
CVE-1999-1377 | | 1999-09-09 | Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. | |
CVE-1999-0697 | | 1999-09-09 | SCO Doctor allows local users to gain root privileges through a Tools option. | |
CVE-1999-0767 | | 1999-09-08 | Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. | |
CVE-1999-1353 | | 1999-09-07 | Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf dat… | |
CVE-1999-1562 | | 1999-09-05 | gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file. | |
CVE-1999-0926 | | 1999-09-03 | Apache allows remote attackers to conduct a denial of service via a large number of MIME headers. | |
CVE-1999-0925 | | 1999-09-03 | UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers. | |
CVE-1999-1564 | | 1999-09-02 | FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory fr… | |
CVE-1999-1516 | | 1999-09-02 | A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more… | |
CVE-1999-1356 | | 1999-09-02 | Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (LegalNoticeCaption) an… | |
CVE-1999-0685 | | 1999-09-02 | Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option. | |
CVE-1999-1129 | | 1999-09-01 | Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking… | |
CVE-1999-0891 | | 1999-09-01 | The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. | |
CVE-1999-0705 | | 1999-09-01 | Buffer overflow in INN inews program. | |
CVE-1999-0670 | | 1999-09-01 | Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands. | |
CVE-1999-0669 | | 1999-09-01 | The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrate… | |
CVE-1999-1515 | | 1999-08-31 | A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient address… | |
CVE-1999-0774 | | 1999-08-31 | Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names. | |
CVE-1999-1513 | | 1999-08-30 | Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is acc… | |
CVE-1999-1354 | | 1999-08-30 | E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (… | |
CVE-1999-1016 | | 1999-08-27 | Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote m… | |
CVE-1999-0911 | | 1999-08-27 | Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directori… | |
CVE-1999-0939 | | 1999-08-26 | Denial of service in Debian IRC Epic/epic4 client via a long string. | |
CVE-1999-1235 | | 1999-08-25 | Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from anot… | |
CVE-1999-0872 | | 1999-08-25 | Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. |