1999 CVEs (page 8)
Page 8 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-1169 | | 1999-02-04 | nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets. | |
CVE-1999-0365 | | 1999-02-04 | The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry. | |
CVE-1999-1453 | | 1999-02-02 | Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object. | |
CVE-1999-1171 | | 1999-02-02 | IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920. | |
CVE-1999-0383 | | 1999-02-02 | ACC Tigris allows public access without a login. | |
CVE-1999-0363 | | 1999-02-02 | SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise. | |
CVE-1999-0362 | | 1999-02-02 | WS_FTP server remote denial of service through cwd command. | |
CVE-1999-0459 | | 1999-02-01 | Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot. | |
CVE-1999-0403 | | 1999-02-01 | A bug in Cyrix CPUs on Linux allows local users to perform a denial of service. | |
CVE-1999-0373 | | 1999-02-01 | Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root. | |
CVE-1999-0358 | | 1999-02-01 | Digital Unix 4.0 has a buffer overflow in the inc program of the mh package. | |
CVE-1999-0351 | | 1999-02-01 | FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client. | |
CVE-1999-0291 | | 1999-02-01 | The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication. | |
CVE-1999-0360 | | 1999-01-30 | MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely. | |
CVE-1999-1546 | | 1999-01-29 | netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable. | |
CVE-1999-0952 | | 1999-01-28 | Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. | |
CVE-1999-0461 | | 1999-01-28 | Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address. | |
CVE-1999-1450 | | 1999-01-27 | Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to… | |
CVE-1999-0349 | | 1999-01-27 | A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands. | |
CVE-1999-0348 | | 1999-01-27 | IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory. | |
CVE-1999-0450 | | 1999-01-26 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | |
CVE-1999-0449 | | 1999-01-26 | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query… | |
CVE-1999-0400 | | 1999-01-26 | Denial of service in Linux 2.2.0 running the ldd command on a core file. | |
CVE-1999-0347 | | 1999-01-26 | Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Intern… | |
CVE-1999-1458 | | 1999-01-25 | Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument. | |
CVE-1999-0357 | | 1999-01-25 | Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentat… | |
CVE-1999-0356 | | 1999-01-25 | ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book. | |
CVE-1999-0352 | | 1999-01-25 | ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption. | |
CVE-1999-1544 | | 1999-01-24 | Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) comman… | |
CVE-1999-1264 | | 1999-01-21 | WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled. | |
CVE-1999-0121 | | 1999-01-21 | Buffer overflow in dtaction command gives root access. | |
CVE-1999-0451 | | 1999-01-19 | Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port. | |
CVE-1999-0119 | | 1999-01-19 | Windows NT 4.0 beta allows users to read and delete shares. | |
CVE-1999-0678 | | 1999-01-17 | A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire ser… | |
CVE-1999-0457 | | 1999-01-17 | Linux ftpwatch program allows local users to gain root privileges. | |
CVE-1999-1538 | | 1999-01-14 | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an una… | |
CVE-1999-1376 | | 1999-01-14 | Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. | |
CVE-1999-1172 | | 1999-01-14 | By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being sha… | |
CVE-1999-0063 | | 1999-01-11 | Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port. | |
CVE-1999-0392 | | 1999-01-10 | Buffer overflow in Thomas Boutell's cgic library version up to 1.05. | |
CVE-1999-0442 | | 1999-01-07 | Solaris ff.core allows local users to modify files. | |
CVE-1999-1268 | | 1999-01-06 | Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices. | |
CVE-1999-0458 | | 1999-01-06 | L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information. | |
CVE-1999-0391 | | 1999-01-05 | The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a use… | |
CVE-1999-0464 | | 1999-01-04 | Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames. | |
CVE-1999-0390 | | 1999-01-04 | Buffer overflow in Dosemu Slang library in Linux. | |
CVE-1999-0914 | | 1999-01-03 | Buffer overflow in the FTP client in the Debian GNU/Linux netstd package. | |
CVE-1999-0389 | | 1999-01-03 | Buffer overflow in the bootp server in the Debian Linux netstd package. | |
CVE-1999-1422 | | 1999-01-02 | The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which coul… | |
CVE-1999-1170 | | 1999-01-02 | IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920. | |
CVE-1999-0402 | | 1999-01-02 | wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself. | |
CVE-1999-1568 | High | 7.5 | 1999-01-01 | Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command. |
CVE-1999-1440 | | 1999-01-01 | Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file… | |
CVE-1999-1430 | | 1999-01-01 | PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read t… | |
CVE-1999-0698 | | 1999-01-01 | Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux. | |
CVE-1999-0665 | | 1999-01-01 | An application-critical Windows NT registry key has an inappropriate value. | |
CVE-1999-0664 | | 1999-01-01 | An application-critical Windows NT registry key has inappropriate permissions. | |
CVE-1999-0663 | | 1999-01-01 | A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified. | |
CVE-1999-0662 | | 1999-01-01 | A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete. | |
CVE-1999-0661 | | 1999-01-01 | A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux… | |
CVE-1999-0657 | | 1999-01-01 | WinGate is being used. | |
CVE-1999-0656 | | 1999-01-01 | The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group n… | |
CVE-1999-0654 | | 1999-01-01 | The OS/2 or POSIX subsystem in NT is enabled. | |
CVE-1999-0653 | | 1999-01-01 | A component service related to NIS+ is running. | |
CVE-1999-0651 | | 1999-01-01 | The rsh/rlogin service is running. | |
CVE-1999-0650 | | 1999-01-01 | The netstat service is running, which provides sensitive information to remote attackers. | |
CVE-1999-0641 | | 1999-01-01 | The UUCP service is running. | |
CVE-1999-0640 | | 1999-01-01 | The Gopher service is running. | |
CVE-1999-0639 | | 1999-01-01 | The chargen service is running. | |
CVE-1999-0638 | | 1999-01-01 | The daytime service is running. | |
CVE-1999-0637 | | 1999-01-01 | The systat service is running. | |
CVE-1999-0636 | | 1999-01-01 | The discard service is running. | |
CVE-1999-0635 | | 1999-01-01 | The echo service is running. | |
CVE-1999-0632 | High | 7.3 | 1999-01-01 | The RPC portmapper service is running. |
CVE-1999-0630 | | 1999-01-01 | The NT Alerter and Messenger services are running. | |
CVE-1999-0629 | | 1999-01-01 | The ident/identd service is running. | |
CVE-1999-0625 | | 1999-01-01 | The rpc.rquotad service is running. | |
CVE-1999-0624 | | 1999-01-01 | The rstat/rstatd service is running. | |
CVE-1999-0618 | | 1999-01-01 | The rexec service is running. | |
CVE-1999-0613 | | 1999-01-01 | The rpc.sprayd service is running. | |
CVE-1999-0611 | | 1999-01-01 | A system-critical Windows NT registry key has an inappropriate value. | |
CVE-1999-0603 | | 1999-01-01 | In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators… | |
CVE-1999-0602 | | 1999-01-01 | A network intrusion detection system (IDS) does not properly reassemble fragmented packets. | |
CVE-1999-0601 | | 1999-01-01 | A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. | |
CVE-1999-0600 | | 1999-01-01 | A network intrusion detection system (IDS) does not verify the checksum on a packet. | |
CVE-1999-0599 | | 1999-01-01 | A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers. | |
CVE-1999-0598 | | 1999-01-01 | A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection. | |
CVE-1999-0597 | | 1999-01-01 | A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire. | |
CVE-1999-0596 | | 1999-01-01 | A Windows NT log file has an inappropriate maximum size or retention period. | |
CVE-1999-0594 | | 1999-01-01 | A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive. | |
CVE-1999-0593 | | 1999-01-01 | The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without lo… | |
CVE-1999-0592 | | 1999-01-01 | The Logon box of a Windows NT system displays the name of the last user who logged in. | |
CVE-1999-0591 | | 1999-01-01 | An event log in Windows NT has inappropriate access permissions. | |
CVE-1999-0589 | | 1999-01-01 | A system-critical Windows NT registry key has inappropriate permissions. | |
CVE-1999-0588 | | 1999-01-01 | A filter in a router or firewall allows unusual fragmented packets. | |
CVE-1999-0587 | | 1999-01-01 | A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data. | |
CVE-1999-0586 | | 1999-01-01 | A network service is running on a nonstandard port. | |
CVE-1999-0584 | | 1999-01-01 | A Windows NT file system is not NTFS. | |
CVE-1999-0583 | | 1999-01-01 | There is a one-way or two-way trust relationship between Windows NT domains. | |
CVE-1999-0581 | | 1999-01-01 | The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions. |