1999 CVEs (page 5)
Page 5 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0769 | | 1999-08-25 | Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. | |
CVE-1999-0768 | | 1999-08-25 | Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. | |
CVE-1999-1052 | | 1999-08-24 | Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which… | |
CVE-1999-0720 | | 1999-08-23 | The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. | |
CVE-1999-1064 | | 1999-08-22 | Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing… | |
CVE-1999-0878 | | 1999-08-22 | Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR. | |
CVE-1999-0668 | | 1999-08-21 | The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as… | |
CVE-1999-1565 | | 1999-08-20 | Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. | |
CVE-1999-1561 | | 1999-08-20 | Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain admini… | |
CVE-1999-0743 | | 1999-08-20 | Trn allows local users to overwrite other users' files via symlinks. | |
CVE-1999-0741 | | 1999-08-19 | QMS CrownNet Unix Utilities for 2060 allows root to log on without a password. | |
CVE-1999-0740 | | 1999-08-19 | Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable. | |
CVE-1999-0734 | | 1999-08-19 | A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. | |
CVE-1999-0732 | | 1999-08-19 | The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links. | |
CVE-1999-0725 | | 1999-08-19 | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double B… | |
CVE-1999-0747 | | 1999-08-18 | Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load. | |
CVE-1999-0745 | | 1999-08-18 | Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler. | |
CVE-1999-0753 | | 1999-08-17 | The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories. | |
CVE-1999-0888 | | 1999-08-16 | dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmico… | |
CVE-1999-0749 | | 1999-08-16 | Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument. | |
CVE-1999-0746 | | 1999-08-16 | A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service. | |
CVE-1999-0679 | | 1999-08-13 | Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option. | |
CVE-1999-1336 | | 1999-08-12 | 3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the tel… | |
CVE-1999-0724 | | 1999-08-12 | Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function. | |
CVE-1999-0875 | | 1999-08-11 | DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. | |
CVE-1999-0867 | | 1999-08-11 | Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers. | |
CVE-1999-0861 | | 1999-08-11 | Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext. | |
CVE-1999-0814 | | 1999-08-11 | Red Hat pump DHCP client allows remote attackers to gain root access in some configurations. | |
CVE-1999-0694 | | 1999-08-11 | Denial of service in AIX ptrace system call allows local users to crash the system. | |
CVE-1999-0813 | | 1999-08-10 | Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root pri… | |
CVE-1999-0680 | | 1999-08-09 | Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service. | |
CVE-1999-0676 | | 1999-08-09 | sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack. | |
CVE-1999-0675 | | 1999-08-09 | Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host. | |
CVE-1999-0674 | | 1999-08-09 | The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. | |
CVE-1999-0722 | | 1999-08-08 | The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. | |
CVE-1999-0673 | | 1999-08-08 | Buffer overflow in ALMail32 POP3 client via From: or To: headers. | |
CVE-1999-1524 | | 1999-08-07 | FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force… | |
CVE-1999-0727 | | 1999-08-06 | A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted. | |
CVE-1999-0682 | | 1999-08-06 | Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled. | |
CVE-1999-0913 | | 1999-08-05 | dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters. | |
CVE-1999-0719 | | 1999-08-05 | The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code. | |
CVE-1999-0703 | | 1999-08-03 | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices. | |
CVE-1999-0677 | | 1999-08-03 | The WebRamp web administration utility has a default password. | |
CVE-1999-0671 | | 1999-08-03 | Buffer overflow in ToxSoft NextFTP client through CWD command. | |
CVE-1999-1337 | | 1999-08-01 | FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which all… | |
CVE-1999-0672 | | 1999-08-01 | Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics. | |
CVE-1999-1536 | | 1999-07-30 | .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file. | |
CVE-1999-1227 | | 1999-07-30 | Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file. | |
CVE-1999-1130 | | 1999-07-30 | Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTM… | |
CVE-1999-0683 | | 1999-07-30 | Denial of service in Gauntlet Firewall via a malformed ICMP packet. | |
CVE-1999-1078 | | 1999-07-29 | WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privilege… | |
CVE-1999-0770 | | 1999-07-29 | Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large… | |
CVE-1999-0700 | | 1999-07-29 | Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file. | |
CVE-1999-1017 | | 1999-07-28 | Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP f… | |
CVE-1999-1018 | | 1999-07-27 | IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass… | |
CVE-1999-0710 | | 1999-07-25 | The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use… | |
CVE-1999-0224 | | 1999-07-23 | Denial of service in Windows NT messenger service through a long username. | |
CVE-1999-1338 | | 1999-07-21 | Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions. | |
CVE-1999-1165 | | 1999-07-21 | GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious… | |
CVE-1999-0811 | | 1999-07-21 | Buffer overflow in Samba smbd program via a malformed message command. | |
CVE-1999-0810 | | 1999-07-21 | Denial of service in Samba NETBIOS name service daemon (nmbd). | |
CVE-1999-1560 | | 1999-07-20 | Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root. | |
CVE-1999-1535 | | 1999-07-20 | Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitr… | |
CVE-1999-0721 | | 1999-07-20 | Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. | |
CVE-1999-1378 | | 1999-07-19 | dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files. | |
CVE-1999-1011 | | 1999-07-19 | The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote a… | |
CVE-1999-0692 | | 1999-07-19 | The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges. | |
CVE-1999-1518 | | 1999-07-15 | Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as speci… | |
CVE-1999-1086 | | 1999-07-15 | Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the… | |
CVE-1999-1545 | | 1999-07-14 | Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edit… | |
CVE-1999-1460 | | 1999-07-13 | BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument t… | |
CVE-1999-1166 | | 1999-07-11 | Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory. | |
CVE-1999-1543 | | 1999-07-10 | MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File. | |
CVE-1999-0809 | | 1999-07-09 | Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies origin… | |
CVE-1999-1537 | | 1999-07-07 | IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (reso… | |
CVE-1999-1478 | | 1999-07-06 | The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ charact… | |
CVE-1999-0752 | | 1999-07-06 | Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. | |
CVE-1999-0728 | | 1999-07-06 | A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them. | |
CVE-1999-0918 | | 1999-07-03 | Denial of service in various Windows systems via malformed, fragmented IGMP packets. | |
CVE-1999-1394 | | 1999-07-02 | BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the… | |
CVE-1999-0889 | | 1999-07-01 | Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set. | |
CVE-1999-0707 | | 1999-07-01 | The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization. | |
CVE-1999-0696 | | 1999-07-01 | Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). | |
CVE-1999-0690 | | 1999-07-01 | HP CDE program includes the current directory in root's PATH variable. | |
CVE-1999-0688 | | 1999-07-01 | Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. | |
CVE-1999-1348 | | 1999-06-30 | Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial… | |
CVE-1999-0726 | | 1999-06-30 | An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header. | |
CVE-1999-0140 | | 1999-06-30 | Denial of service in RAS/PPTP on NT systems. | |
CVE-1999-0916 | | 1999-06-29 | WebTrends software stores account names and passwords in a file which does not have restricted access permissions. | |
CVE-1999-1365 | | 1999-06-28 | Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, US… | |
CVE-1999-0938 | | 1999-06-28 | MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages. | |
CVE-1999-0733 | | 1999-06-26 | Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable. | |
CVE-1999-1164 | | 1999-06-25 | Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Out… | |
CVE-1999-0778 | | 1999-06-25 | Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter. | |
CVE-1999-1470 | | 1999-06-24 | Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges. | |
CVE-1999-0748 | | 1999-06-24 | Buffer overflows in Red Hat net-tools package. | |
CVE-1999-1019 | | 1999-06-23 | SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privilege… | |
CVE-1999-0731 | | 1999-06-23 | The KDE klock program allows local users to unlock a session using malformed input. | |
CVE-1999-0723 | | 1999-06-23 | The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input. | |
CVE-1999-0742 | | 1999-06-22 | The Debian mailman package uses weak authentication, which allows attackers to gain privileges. |