1999 CVEs (page 9)
Page 9 of 16 — CVEs published in 1999, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0580 | | 1999-01-01 | The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions. | |
CVE-1999-0579 | | 1999-01-01 | A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. | |
CVE-1999-0578 | | 1999-01-01 | A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. | |
CVE-1999-0577 | | 1999-01-01 | A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories. | |
CVE-1999-0571 | | 1999-01-01 | A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts. | |
CVE-1999-0570 | | 1999-01-01 | Windows NT is not using a password filter utility, e.g. PASSFILT.DLL. | |
CVE-1999-0569 | | 1999-01-01 | A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file. | |
CVE-1999-0568 | | 1999-01-01 | rpc.admind in Solaris is not running in a secure mode. | |
CVE-1999-0565 | | 1999-01-01 | A Sendmail alias allows input to be piped to a program. | |
CVE-1999-0564 | | 1999-01-01 | An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled. | |
CVE-1999-0561 | | 1999-01-01 | IIS has the #exec function enabled for Server Side Include (SSI) files. | |
CVE-1999-0560 | | 1999-01-01 | A system-critical Windows NT file or directory has inappropriate permissions. | |
CVE-1999-0559 | | 1999-01-01 | A system-critical Unix file or directory has inappropriate permissions. | |
CVE-1999-0556 | | 1999-01-01 | Two or more Unix accounts have the same UID. | |
CVE-1999-0555 | | 1999-01-01 | A Unix account with a name other than "root" has UID 0, i.e. root privileges. | |
CVE-1999-0554 | | 1999-01-01 | NFS exports system-critical data to the world, e.g. / or a password file. | |
CVE-1999-0549 | | 1999-01-01 | Windows NT automatically logs in an administrator upon rebooting. | |
CVE-1999-0548 | | 1999-01-01 | A superfluous NFS server is running, but it is not importing or exporting any file systems. | |
CVE-1999-0547 | | 1999-01-01 | An SSH server allows authentication through the .rhosts file. | |
CVE-1999-0539 | | 1999-01-01 | A trust relationship exists between two Unix hosts. | |
CVE-1999-0530 | | 1999-01-01 | A system is operating in "promiscuous" mode which allows it to perform packet sniffing. | |
CVE-1999-0529 | | 1999-01-01 | A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc. | |
CVE-1999-0528 | | 1999-01-01 | A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of. | |
CVE-1999-0527 | | 1999-01-01 | The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password… | |
CVE-1999-0523 | | 1999-01-01 | ICMP echo (ping) is allowed from arbitrary hosts. | |
CVE-1999-0520 | | 1999-01-01 | A system-critical NETBIOS/SMB share has inappropriate access control. | |
CVE-1999-0515 | | 1999-01-01 | An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv. | |
CVE-1999-0512 | | 1999-01-01 | A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. | |
CVE-1999-0497 | | 1999-01-01 | Anonymous FTP is enabled. | |
CVE-1999-0495 | | 1999-01-01 | A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares. | |
CVE-1999-0465 | | 1999-01-01 | Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter. | |
CVE-1999-0454 | | 1999-01-01 | A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso. | |
CVE-1999-0453 | | 1999-01-01 | An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). | |
CVE-1999-0452 | | 1999-01-01 | A service or application has a backdoor password that was placed there by the developer. | |
CVE-1999-0448 | | 1999-01-01 | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | |
CVE-1999-0401 | | 1999-01-01 | A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files. | |
CVE-1999-0399 | | 1999-01-01 | The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a diff… | |
CVE-1999-0398 | | 1999-01-01 | In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login. | |
CVE-1999-0397 | | 1999-01-01 | The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext. | |
CVE-1999-0395 | | 1999-01-01 | A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server. | |
CVE-1999-0394 | | 1999-01-01 | DPEC Online Courseware allows an attacker to change another user's password without knowing the original password. | |
CVE-1999-0393 | | 1999-01-01 | Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers. | |
CVE-1999-0388 | | 1999-01-01 | DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root. | |
CVE-1999-0384 | | 1999-01-01 | The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documen… | |
CVE-1999-0364 | | 1999-01-01 | Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data. | |
CVE-1999-0361 | | 1999-01-01 | NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging. | |
CVE-1999-0355 | | 1999-01-01 | Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service. | |
CVE-1999-0286 | | 1999-01-01 | In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages. | |
CVE-1999-0285 | | 1999-01-01 | Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. | |
CVE-1999-0283 | | 1999-01-01 | The Java Web Server would allow remote users to obtain the source code for CGI programs. | |
CVE-1999-0276 | | 1999-01-01 | mSQL v2.0.1 and below allows remote execution through a buffer overflow. | |
CVE-1999-0268 | | 1999-01-01 | MetaInfo MetaWeb web server allows users to upload, execute, and read scripts. | |
CVE-1999-0255 | | 1999-01-01 | Buffer overflow in ircd allows arbitrary command execution. | |
CVE-1999-0248 | | 1999-01-01 | A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials. | |
CVE-1999-0243 | | 1999-01-01 | Linux cfingerd could be exploited to gain root access. | |
CVE-1999-0240 | | 1999-01-01 | Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy. | |
CVE-1999-0231 | | 1999-01-01 | Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access. | |
CVE-1999-0226 | | 1999-01-01 | Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service. | |
CVE-1999-0220 | | 1999-01-01 | Attackers can do a denial of service of IRC by crashing the server. | |
CVE-1999-0205 | | 1999-01-01 | Denial of service in Sendmail 8.6.11 and 8.6.12. | |
CVE-1999-0200 | | 1999-01-01 | Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password. | |
CVE-1999-0198 | | 1999-01-01 | finger .@host on some systems may print information on some user accounts. | |
CVE-1999-0197 | | 1999-01-01 | finger 0@host on some systems may print information on some user accounts. | |
CVE-1999-1159 | | 1998-12-29 | SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root. | |
CVE-1999-1285 | | 1998-12-27 | Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urand… | |
CVE-1999-1188 | | 1998-12-27 | mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user databa… | |
CVE-1999-1281 | | 1998-12-26 | Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program. | |
CVE-1999-0968 | | 1998-12-26 | Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges. | |
CVE-1999-1278 | | 1998-12-25 | nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (… | |
CVE-1999-1277 | | 1998-12-24 | BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to… | |
CVE-1999-1173 | | 1998-12-18 | Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behav… | |
CVE-1999-0188 | | 1998-12-17 | The passwd command in Solaris can be subjected to a denial of service. | |
CVE-1999-0139 | | 1998-12-12 | Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access. | |
CVE-1999-1282 | | 1998-12-10 | RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges. | |
CVE-1999-1276 | | 1998-12-07 | fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device. | |
CVE-1999-1147 | | 1998-12-04 | Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827… | |
CVE-1999-0798 | | 1998-12-04 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. | |
CVE-1999-1280 | | 1998-12-03 | Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the tes… | |
CVE-1999-0937 | | 1998-12-03 | BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable. | |
CVE-1999-0936 | | 1998-12-03 | BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters. | |
CVE-1999-0836 | | 1998-12-02 | UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. | |
CVE-1999-0869 | | 1998-12-01 | Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing. | |
CVE-1999-0478 | | 1998-12-01 | Denial of service in HP-UX sendmail 8.8.6 related to accepting connections. | |
CVE-1999-0463 | | 1998-12-01 | Remote attackers can perform a denial of service using IRIX fcagent. | |
CVE-1999-0385 | | 1998-12-01 | The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands. | |
CVE-1999-0342 | | 1998-12-01 | Linux PAM modules allow local users to gain root access using temporary files. | |
CVE-1999-0332 | | 1998-12-01 | Buffer overflow in NetMeeting allows denial of service and remote command execution. | |
CVE-1999-0321 | | 1998-12-01 | Buffer overflow in Solaris kcms_configure command allows local users to gain root access. | |
CVE-1999-1073 | | 1998-11-30 | Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for… | |
CVE-1999-1072 | | 1998-11-30 | Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authenticatio… | |
CVE-1999-1071 | | 1998-11-30 | Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to E… | |
CVE-1999-1411 | | 1998-11-26 | The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically… | |
CVE-1999-1288 | | 1998-11-19 | Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows loc… | |
CVE-1999-1107 | | 1998-11-18 | Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable. | |
CVE-1999-0782 | | 1998-11-18 | KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable. | |
CVE-1999-0781 | | 1998-11-18 | KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executa… | |
CVE-1999-0780 | | 1998-11-18 | KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. | |
CVE-1999-0057 | | 1998-11-16 | Vacation program allows command execution by remote users through a sendmail command. | |
CVE-1999-1322 | | 1998-11-12 | The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in p… | |
CVE-1999-1025 | | 1998-11-12 | CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows… |