1999 CVEs (page 6)
Page 6 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0929 | | 1999-06-16 | Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests. | |
CVE-1999-0874 | | 1999-06-16 | Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. | |
CVE-1999-0730 | | 1999-06-12 | The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack. | |
CVE-1999-0713 | | 1999-06-11 | The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges. | |
CVE-1999-1023 | | 1999-06-10 | useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login a… | |
CVE-1999-0775 | | 1999-06-10 | Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an acc… | |
CVE-1999-1231 | | 1999-06-09 | ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name… | |
CVE-1999-1496 | | 1999-06-08 | Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a… | |
CVE-1999-0493 | | 1999-06-07 | rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remo… | |
CVE-1999-1237 | | 1999-06-06 | Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to ex… | |
CVE-1999-0970 | | 1999-06-05 | The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files t… | |
CVE-1999-1412 | | 1999-06-03 | A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTT… | |
CVE-1999-1400 | | 1999-06-03 | The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and re… | |
CVE-1999-1063 | | 1999-06-01 | CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter. | |
CVE-1999-0804 | | 1999-06-01 | Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths. | |
CVE-1999-0772 | | 1999-06-01 | Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301. | |
CVE-1999-1485 | | 1999-05-31 | nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by… | |
CVE-1999-1028 | | 1999-05-28 | Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631. | |
CVE-1999-0917 | | 1999-05-27 | The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files. | |
CVE-1999-0802 | | 1999-05-27 | Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon. | |
CVE-1999-0755 | | 1999-05-27 | Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option. | |
CVE-1999-0927 | | 1999-05-26 | NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-0920 | | 1999-05-26 | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. | |
CVE-1999-0771 | | 1999-05-26 | The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-1414 | | 1999-05-25 | IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level pr… | |
CVE-1999-0803 | | 1999-05-25 | The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack. | |
CVE-1999-0762 | | 1999-05-24 | When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser informat… | |
CVE-1999-0928 | | 1999-05-23 | Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL. | |
CVE-1999-1393 | | 1999-05-21 | Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an… | |
CVE-1999-0715 | | 1999-05-20 | Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry. | |
CVE-1999-1031 | | 1999-05-19 | counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument. | |
CVE-1999-1030 | | 1999-05-19 | counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in… | |
CVE-1999-0765 | | 1999-05-19 | SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. | |
CVE-1999-1510 | | 1999-05-17 | Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1… | |
CVE-1999-1156 | | 1999-05-17 | BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character an… | |
CVE-1999-0716 | | 1999-05-17 | Buffer overflow in Windows NT 4.0 help file utility via a malformed help file. | |
CVE-1999-0489 | | 1999-05-17 | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted past… | |
CVE-1999-1366 | | 1999-05-15 | Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwo… | |
CVE-1999-1029 | | 1999-05-13 | SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote atta… | |
CVE-1999-1368 | | 1999-05-12 | AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, whi… | |
CVE-1999-0776 | | 1999-05-12 | Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack. | |
CVE-1999-0229 | | 1999-05-12 | Denial of service in Windows NT IIS server using ..\.. | |
CVE-1999-1520 | | 1999-05-11 | A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which expose… | |
CVE-1999-1033 | | 1999-05-11 | Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter… | |
CVE-1999-0785 | | 1999-05-11 | The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file. | |
CVE-1999-0773 | | 1999-05-11 | Buffer overflow in Solaris lpset program allows local users to gain root access. | |
CVE-1999-0754 | | 1999-05-11 | The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable. | |
CVE-1999-0806 | | 1999-05-10 | Buffer overflow in Solaris dtprintinfo program. | |
CVE-1999-1566 | | 1999-05-08 | Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending re… | |
CVE-1999-0739 | | 1999-05-07 | The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | |
CVE-1999-0738 | | 1999-05-07 | The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | |
CVE-1999-0737 | | 1999-05-07 | The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | |
CVE-1999-0736 | | 1999-05-07 | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | |
CVE-1999-0717 | | 1999-05-07 | A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. | |
CVE-1999-0686 | | 1999-05-07 | Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL. | |
CVE-1999-1367 | | 1999-05-06 | Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the… | |
CVE-1999-1241 | | 1999-05-06 | Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSyste… | |
CVE-1999-1079 | | 1999-05-06 | Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program. | |
CVE-1999-1195 | | 1999-05-05 | NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, whi… | |
CVE-1999-1097 | | 1999-05-04 | Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty. | |
CVE-1999-1012 | | 1999-05-04 | SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string. | |
CVE-1999-1553 | | 1999-05-01 | Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line. | |
CVE-1999-1418 | | 1999-05-01 | ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing… | |
CVE-1999-0807 | | 1999-05-01 | The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users. | |
CVE-1999-0764 | | 1999-05-01 | NetBSD allows ARP packets to overwrite static ARP entries. | |
CVE-1999-0763 | | 1999-05-01 | NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network. | |
CVE-1999-0487 | | 1999-05-01 | The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files. | |
CVE-1999-0194 | | 1999-05-01 | Denial of service in in.comsat allows attackers to generate messages. | |
CVE-1999-0711 | | 1999-04-29 | The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root. | |
CVE-1999-0712 | | 1999-04-27 | A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable. | |
CVE-1999-0492 | | 1999-04-23 | The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses. | |
CVE-1999-0490 | | 1999-04-21 | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag. | |
CVE-1999-0488 | | 1999-04-21 | Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cros… | |
CVE-1999-0466 | | 1999-04-21 | The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device. | |
CVE-1999-0607 | | 1999-04-20 | quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to ob… | |
CVE-1999-0604 | | 1999-04-20 | An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. | |
CVE-1999-0491 | | 1999-04-20 | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. | |
CVE-1999-0684 | | 1999-04-19 | Denial of service in Sendmail 8.8.6 in HPUX. | |
CVE-1999-1244 | | 1999-04-15 | IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file. | |
CVE-1999-1369 | | 1999-04-14 | Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges. | |
CVE-1999-0446 | | 1999-04-12 | Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in… | |
CVE-1999-0444 | | 1999-04-12 | Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up l… | |
CVE-1999-1323 | | 1999-04-09 | Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrat… | |
CVE-1999-0801 | | 1999-04-09 | BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. | |
CVE-1999-0471 | | 1999-04-09 | The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button. | |
CVE-1999-0470 | | 1999-04-09 | A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted. | |
CVE-1999-0468 | High | 8.2 | 1999-04-09 | Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component. |
CVE-1999-0287 | | 1999-04-09 | Vulnerability in the Wguest CGI program. | |
CVE-1999-1196 | | 1999-04-07 | Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000. | |
CVE-1999-0473 | | 1999-04-07 | The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being trans… | |
CVE-1999-0472 | | 1999-04-07 | The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it. | |
CVE-1999-1245 | | 1999-04-06 | vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitiv… | |
CVE-1999-0475 | | 1999-04-05 | A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. | |
CVE-1999-0474 | | 1999-04-05 | The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory. | |
CVE-1999-0439 | | 1999-04-05 | Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file. | |
CVE-1999-0921 | | 1999-04-01 | BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service. | |
CVE-1999-0610 | | 1999-04-01 | An incorrect configuration of the Webcart CGI program could disclose private information. | |
CVE-1999-0609 | | 1999-04-01 | An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. | |
CVE-1999-0608 | | 1999-04-01 | An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information. | |
CVE-1999-0606 | | 1999-04-01 | An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information. |