1999 CVEs (page 7)
Page 7 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0605 | | 1999-04-01 | An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information. | |
CVE-1999-0480 | | 1999-04-01 | Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack. | |
CVE-1999-0469 | | 1999-04-01 | Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client. | |
CVE-1999-0467 | | 1999-04-01 | The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter. | |
CVE-1999-0447 | | 1999-04-01 | Local users can gain privileges using the debug utility in the MPE/iX operating system. | |
CVE-1999-0445 | | 1999-04-01 | In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. | |
CVE-1999-0443 | | 1999-04-01 | Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. | |
CVE-1999-1559 | | 1999-03-31 | Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch… | |
CVE-1999-0434 | | 1999-03-30 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privilege… | |
CVE-1999-1397 | | 1999-03-23 | Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows loc… | |
CVE-1999-1370 | | 1999-03-23 | The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a f… | |
CVE-1999-0481 | | 1999-03-22 | Denial of service in "poll" in OpenBSD. | |
CVE-1999-0428 | | 1999-03-22 | OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls. | |
CVE-1999-0482 | | 1999-03-21 | OpenBSD kernel crash through TSS handling, as caused by the crashme program. | |
CVE-1999-0433 | | 1999-03-21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privil… | |
CVE-1999-0425 | | 1999-03-18 | talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes. | |
CVE-1999-0424 | | 1999-03-18 | talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes. | |
CVE-1999-0462 | | 1999-03-17 | suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountab… | |
CVE-1999-0422 | | 1999-03-17 | In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set. | |
CVE-1999-0421 | | 1999-03-17 | During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password. | |
CVE-1999-0420 | | 1999-03-17 | umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program. | |
CVE-1999-0382 | | 1999-03-12 | The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges. | |
CVE-1999-1526 | | 1999-03-11 | Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia. | |
CVE-1999-0416 | | 1999-03-11 | Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port. | |
CVE-1999-0415 | | 1999-03-11 | The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. | |
CVE-1999-0417 | | 1999-03-09 | 64 bit Solaris 7 procfs allows local users to perform a denial of service. | |
CVE-1999-1567 | | 1999-03-08 | Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to… | |
CVE-1999-1371 | | 1999-03-08 | Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument. | |
CVE-1999-1254 | | 1999-03-08 | Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change… | |
CVE-1999-0418 | | 1999-03-08 | Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connection. | |
CVE-1999-0411 | | 1999-03-07 | Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, all… | |
CVE-1999-0410 | | 1999-03-05 | The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access. | |
CVE-1999-1256 | | 1999-03-04 | Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database… | |
CVE-1999-0409 | | 1999-03-04 | Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access. | |
CVE-1999-1551 | | 1999-03-02 | Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL. | |
CVE-1999-1046 | | 1999-03-01 | Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to po… | |
CVE-1999-0479 | | 1999-03-01 | Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. | |
CVE-1999-0476 | | 1999-03-01 | A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user. | |
CVE-1999-0440 | | 1999-03-01 | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. | |
CVE-1999-0438 | | 1999-03-01 | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address. | |
CVE-1999-0437 | | 1999-03-01 | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port. | |
CVE-1999-0436 | | 1999-03-01 | Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges. | |
CVE-1999-0435 | | 1999-03-01 | MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM. | |
CVE-1999-0432 | | 1999-03-01 | ftp on HP-UX 11.00 allows local users to gain privileges. | |
CVE-1999-0431 | | 1999-03-01 | Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service. | |
CVE-1999-0430 | | 1999-03-01 | Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module t… | |
CVE-1999-0429 | | 1999-03-01 | The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mail" preference. | |
CVE-1999-0426 | Critical | 9.8 | 1999-03-01 | The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. |
CVE-1999-0419 | | 1999-03-01 | When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the messa… | |
CVE-1999-0414 | | 1999-03-01 | In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection. | |
CVE-1999-0413 | | 1999-03-01 | A buffer overflow in the SGI X server allows local users to gain root access through the X server font path. | |
CVE-1999-0386 | | 1999-03-01 | Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstan… | |
CVE-1999-0261 | | 1999-03-01 | Netmanager Chameleon SMTPd has several buffer overflows that cause a crash. | |
CVE-1999-0223 | | 1999-03-01 | Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry. | |
CVE-1999-0222 | | 1999-03-01 | Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. | |
CVE-1999-0221 | | 1999-03-01 | Denial of service of Ascend routers through port 150 (remote administration). | |
CVE-1999-0381 | | 1999-02-26 | super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access. | |
CVE-1999-0483 | | 1999-02-25 | OpenBSD crash using nlink value in FFS and EXT2FS filesystems. | |
CVE-1999-0408 | | 1999-02-25 | Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server. | |
CVE-1999-0380 | | 1999-02-25 | SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Fi… | |
CVE-1999-1247 | | 1999-02-24 | Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges. | |
CVE-1999-0484 | | 1999-02-23 | Buffer overflow in OpenBSD ping. | |
CVE-1999-0441 | | 1999-02-22 | Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service. | |
CVE-1999-0379 | | 1999-02-22 | Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting. | |
CVE-1999-0378 | | 1999-02-22 | InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands. | |
CVE-1999-0377 | | 1999-02-22 | Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections… | |
CVE-1999-1049 | | 1999-02-21 | ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the pass… | |
CVE-1999-1168 | | 1999-02-20 | install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via… | |
CVE-1999-0376 | | 1999-02-20 | Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs. | |
CVE-1999-1482 | | 1999-02-19 | SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes. | |
CVE-1999-1372 | | 1999-02-19 | Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gai… | |
CVE-1999-1255 | | 1999-02-19 | Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter. | |
CVE-1999-1101 | | 1999-02-19 | Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain… | |
CVE-1999-0485 | | 1999-02-19 | Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD. | |
CVE-1999-0460 | | 1999-02-19 | Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service. | |
CVE-1999-0412 | | 1999-02-19 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | |
CVE-1999-0406 | | 1999-02-19 | Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege. | |
CVE-1999-1495 | | 1999-02-18 | xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file. | |
CVE-1999-0405 | | 1999-02-18 | A buffer overflow in lsof allows local users to obtain root privilege. | |
CVE-1999-1405 | | 1999-02-17 | snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is… | |
CVE-1999-1060 | | 1999-02-17 | Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to… | |
CVE-1999-0396 | | 1999-02-17 | A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service. | |
CVE-1999-1180 | | 1999-02-16 | O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2)… | |
CVE-1999-0375 | | 1999-02-16 | Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands. | |
CVE-1999-0374 | | 1999-02-16 | Debian GNU/Linux cfengine package is susceptible to a symlink attack. | |
CVE-1999-1260 | | 1999-02-15 | mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerSta… | |
CVE-1999-0714 | | 1999-02-15 | Vulnerability in Compaq Tru64 UNIX edauth command. | |
CVE-1999-0404 | | 1999-02-14 | Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution. | |
CVE-1999-1203 | | 1999-02-12 | Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier. | |
CVE-1999-0372 | | 1999-02-12 | The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted. | |
CVE-1999-1375 | | 1999-02-11 | FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file paramete… | |
CVE-1999-0371 | | 1999-02-11 | Lynx allows a local user to overwrite sensitive files through /tmp symlinks. | |
CVE-1999-0370 | | 1999-02-10 | In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files. | |
CVE-1999-0353 | | 1999-02-10 | rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory. | |
CVE-1999-0407 | | 1999-02-09 | By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid… | |
CVE-1999-0368 | | 1999-02-09 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. | |
CVE-1999-0367 | | 1999-02-09 | NetBSD netstat command allows local users to access kernel memory. | |
CVE-1999-0366 | | 1999-02-08 | In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value. | |
CVE-1999-0350 | | 1999-02-08 | Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits. | |
CVE-1999-1201 | | 1999-02-06 | Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of servi… |