1999.csv

cve_id,cve_href,cwe_id,vuln_type,publish_date,update_date,score,acces_level,access,complexity,authentication,confidentiality,integrity,availability,summary,refs
CVE-2001-0679,https://www.cvedetails.com/cve/CVE-2001-0679/,,Exec Code Overflow,1999-11-08,2017-12-19,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.,"{'https://marc.info/?l=ntbugtraq&m=94216491202063&w=2', 'https://marc.info/?l=bugtraq&m=94204166130782&w=2', 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9911&L=NTBUGTRAQ&P=R2331', 'https://marc.info/?l=ntbugtraq&m=94208143007829&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3465'}"
CVE-2000-1206,https://www.cvedetails.com/cve/CVE-2000-1206/,,,1999-08-20,2021-06-06,5.0,None,Remote,Low,Not required,Partial,None,None,"Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files.","{'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E', 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E', 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E', 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E', 'https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E', 'http://www.apacheweek.com/issues/00-01-07#status', 'https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E'}"
CVE-2000-0531,https://www.cvedetails.com/cve/CVE-2000-0531/,,DoS,1999-11-23,2017-12-19,2.1,None,Local,Low,Not required,None,None,Partial,Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/5010', 'http://www.securityfocus.com/bid/1377', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006201453090.1812-200000@apollo.aci.com.pl', 'https://www.redhat.com/support/errata/RHSA-2000-045.html', 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0409.html'}"
CVE-2000-0489,https://www.cvedetails.com/cve/CVE-2000-0489/,,DoS,1999-09-05,2017-10-10,2.1,None,Local,Low,Not required,None,None,Partial,"FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.","{'http://www.securityfocus.com/bid/622', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000@thetis.deor.org', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs@ussrback.com', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3298'}"
CVE-2000-0481,https://www.cvedetails.com/cve/CVE-2000-0481/,,DoS Overflow,1999-06-01,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.,"{'http://securityfocus.com/templates/archive.pike?list=82&date=2000-06-22&msg=00060200422401.01667@lez', 'http://www.securityfocus.com/bid/1380', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4993'}"
CVE-2000-0412,https://www.cvedetails.com/cve/CVE-2000-0412/,,,1999-05-01,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.","{'http://www.securityfocus.com/bid/1186', 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0127.html', 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0124.html', 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:18-gnapster.adv'}"
CVE-2000-0374,https://www.cvedetails.com/cve/CVE-2000-0374/,,Bypass +Info,1999-08-22,2017-10-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.","{'http://www.securityfocus.com/bid/1446', 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4856', 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt'}"
CVE-2000-0373,https://www.cvedetails.com/cve/CVE-2000-0373/,,+Priv,1999-06-01,2017-10-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.,"{'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-015.0.txt', 'https://www.redhat.com/support/errata/RHSA1999015_01.html', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2266'}"
CVE-2000-0371,https://www.cvedetails.com/cve/CVE-2000-0371/,,,1999-03-01,2008-09-10,1.2,None,Local,High,Not required,None,Partial,None,The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.,"{'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-005.0.txt', 'http://www.securityfocus.com/bid/1269'}"
CVE-2000-0370,https://www.cvedetails.com/cve/CVE-2000-0370/,,Exec Code,1999-01-29,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.,"{'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-001.0.txt', 'http://www.securityfocus.com/bid/1268'}"
CVE-2000-0369,https://www.cvedetails.com/cve/CVE-2000-0369/,,DoS,1999-10-08,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,"The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.","{'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-029.1.txt', 'http://www.securityfocus.com/bid/1266'}"
CVE-2000-0367,https://www.cvedetails.com/cve/CVE-2000-0367/,,+Priv,1999-02-18,2008-09-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.,{'https://www.debian.org/security/1999/19990218'}
CVE-2000-0366,https://www.cvedetails.com/cve/CVE-2000-0366/,,,1999-12-02,2008-09-10,2.1,None,Local,Low,Not required,None,Partial,None,"dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.","{'http://www.securityfocus.com/bid/1442', 'https://www.debian.org/security/1999/19991202'}"
CVE-2000-0365,https://www.cvedetails.com/cve/CVE-2000-0365/,,,1999-06-01,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.","{'https://www.redhat.com/corp/support/errata/RHSA1999014_01.html', 'https://marc.info/?l=bugtraq&m=92886009012161&w=2', 'http://www.securityfocus.com/bid/308', 'https://marc.info/?l=bugtraq&m=92877527701347&w=2'}"
CVE-2000-0364,https://www.cvedetails.com/cve/CVE-2000-0364/,,,1999-06-01,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.","{'https://www.redhat.com/corp/support/errata/RHSA1999014_01.html', 'https://marc.info/?l=bugtraq&m=92886009012161&w=2', 'http://www.securityfocus.com/bid/309', 'https://marc.info/?l=bugtraq&m=92877527701347&w=2'}"
CVE-2000-0363,https://www.cvedetails.com/cve/CVE-2000-0363/,,+Priv,1999-10-22,2008-09-10,6.2,None,Local,High,Not required,Complete,Complete,Complete,Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.,"{'http://www.novell.com/linux/security/advisories/suse_security_announce_25.html', 'http://www.securityfocus.com/bid/738'}"
CVE-2000-0362,https://www.cvedetails.com/cve/CVE-2000-0362/,,Overflow +Priv,1999-10-22,2008-09-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.,"{'http://www.novell.com/linux/security/advisories/suse_security_announce_25.html', 'http://www.securityfocus.com/bid/738'}"
CVE-2000-0361,https://www.cvedetails.com/cve/CVE-2000-0361/,,,1999-12-14,2008-09-10,2.1,None,Local,Low,Not required,Partial,None,None,"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.",{'http://www.novell.com/linux/security/advisories/suse_security_announce_35.html'}
CVE-2000-0358,https://www.cvedetails.com/cve/CVE-2000-0358/,,,1999-12-03,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.,{'https://www.redhat.com/corp/support/errata/RHSA1999058-01.html'}
CVE-2000-0357,https://www.cvedetails.com/cve/CVE-2000-0357/,,,1999-12-03,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.",{'https://www.redhat.com/corp/support/errata/RHSA1999058-01.html'}
CVE-2000-0356,https://www.cvedetails.com/cve/CVE-2000-0356/,,,1999-10-13,2008-09-10,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.,"{'http://www.securityfocus.com/templates/advisory.html?id=1789', 'http://www.securityfocus.com/bid/697'}"
CVE-2000-0355,https://www.cvedetails.com/cve/CVE-2000-0355/,,,1999-08-21,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.,{'http://www.novell.com/linux/security/advisories/suse_security_announce_21.html'}
CVE-2000-0353,https://www.cvedetails.com/cve/CVE-2000-0353/,,Exec Code,1999-06-28,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.","{'http://www.novell.com/linux/security/advisories/suse_security_announce_6.html', 'http://www.securityfocus.com/bid/1247', 'http://www.novell.com/linux/security/advisories/pine_update_announcement.html', 'http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html'}"
CVE-2000-0352,https://www.cvedetails.com/cve/CVE-2000-0352/,,Exec Code,1999-11-18,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.","{'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt', 'http://www.securityfocus.com/bid/810', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000@ray.compu-aid.com', 'http://www.novell.com/linux/security/advisories/suse_security_announce_36.html'}"
CVE-2000-0333,https://www.cvedetails.com/cve/CVE-2000-0333/,,DoS,1999-05-31,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,"tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.","{'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000@paranoia.pgci.ca', 'http://www.securityfocus.com/bid/1165'}"
CVE-2000-0330,https://www.cvedetails.com/cve/CVE-2000-0330/,,Exec Code,1999-11-12,2018-10-12,7.6,None,Remote,High,Not required,Complete,Complete,Complete,"The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the ""File Access URL"" vulnerability.",{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-049'}
CVE-2000-0329,https://www.cvedetails.com/cve/CVE-2000-0329/,,,1999-11-11,2021-07-22,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the ""Active Setup Control"" vulnerability.",{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048'}
CVE-2000-0328,https://www.cvedetails.com/cve/CVE-2000-0328/,,,1999-08-24,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,"Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-046', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40@192.168.124.1', 'http://www.securityfocus.com/bid/604'}"
CVE-2000-0327,https://www.cvedetails.com/cve/CVE-2000-0327/,,Exec Code,1999-10-21,2018-10-12,7.6,None,Remote,High,Not required,Complete,Complete,Complete,"Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the ""Virtual Machine Verifier"" vulnerability.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-045', 'https://marc.info/?l=bugtraq&m=93993545118416&w=2'}"
CVE-2000-0325,https://www.cvedetails.com/cve/CVE-2000-0325/,,Exec Code,1999-08-20,2018-10-12,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the ""VBA Shell"" vulnerability.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3155', 'http://www.securityfocus.com/bid/548'}"
CVE-2000-0323,https://www.cvedetails.com/cve/CVE-2000-0323/,,,1999-07-28,2018-10-15,7.6,None,Remote,High,Not required,Complete,Complete,Complete,"The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the ""Text I-ISAM"" vulnerability.","{'https://www.securityfocus.com/bid/595', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030', 'http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-08-22&msg=19990729195531.25108.qmail@underground.org', 'https://web.archive.org/web/20000819203059/http://xforce.iss.net:80/alerts/vol-4_num-7.php#jet-text-isam'}"
CVE-2000-0165,https://www.cvedetails.com/cve/CVE-2000-0165/,,Exec Code Overflow,1999-11-13,2018-05-03,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.,"{'http://www.ciac.org/ciac/bulletins/k-023.shtml', 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.BSF.4.21.0002192249290.10784-100000@freefall.freebsd.org', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4195'}"
CVE-2000-0153,https://www.cvedetails.com/cve/CVE-2000-0153/,,,1999-03-26,2008-09-10,5.0,None,Remote,Low,Not required,Partial,None,None,FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.,"{'http://www.securityfocus.com/bid/989', 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000801bf780a$9ad4b2e0$0100007f@localhost'}"
CVE-2000-0139,https://www.cvedetails.com/cve/CVE-2000-0139/,,DoS,1999-12-03,2016-10-18,2.1,None,Local,Low,Not required,None,None,Partial,Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.,"{'http://www.securityfocus.com/bid/982', 'https://marc.info/?l=bugtraq&m=95021326417936&w=2'}"
CVE-2000-0119,https://www.cvedetails.com/cve/CVE-2000-0119/,,,1999-12-22,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.",{'https://marc.info/?l=bugtraq&m=94936267131123&w=2'}
CVE-2000-0118,https://www.cvedetails.com/cve/CVE-2000-0118/,,,1999-06-09,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.",{'https://marc.info/?l=bugtraq&m=94935300520617&w=2'}
CVE-2000-0100,https://www.cvedetails.com/cve/CVE-2000-0100/,,+Priv,1999-12-29,2018-10-12,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-012', 'http://archives.neohapsis.com/archives/ntbugtraq/current/0045.html'}"
CVE-2000-0076,https://www.cvedetails.com/cve/CVE-2000-0076/,,,1999-12-30,2016-10-18,2.1,None,Local,Low,Not required,None,Partial,None,nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.,"{'https://marc.info/?l=bugtraq&m=94709988232618&w=2', 'http://www.securityfocus.com/bid/1439'}"
CVE-2000-0073,https://www.cvedetails.com/cve/CVE-2000-0073/,,DoS Overflow,1999-11-17,2018-10-12,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-005', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q249973', 'http://xforce.iss.net/search.php3?type=2&pattern=win-malformed-rtf-control-word'}"
CVE-2000-0068,https://www.cvedetails.com/cve/CVE-2000-0068/,,,1999-12-14,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.",{'https://marc.info/?l=bugtraq&m=94704437920965&w=2'}
CVE-2000-0060,https://www.cvedetails.com/cve/CVE-2000-0060/,,DoS Overflow,1999-12-27,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.,"{'https://marc.info/?l=ntbugtraq&m=94647711311057&w=2', 'https://marc.info/?l=bugtraq&m=94633851427858&w=2', 'http://www.securityfocus.com/bid/894', 'http://www.iss.net/security_center/static/3765.php'}"
CVE-2000-0054,https://www.cvedetails.com/cve/CVE-2000-0054/,,,1999-01-03,2008-09-10,5.0,None,Remote,Low,Not required,Partial,None,None,search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.,{'http://www.securityfocus.com/bid/921'}
CVE-2000-0047,https://www.cvedetails.com/cve/CVE-2000-0047/,,DoS Overflow,1999-10-01,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.,set()
CVE-2000-0043,https://www.cvedetails.com/cve/CVE-2000-0043/,,Exec Code Overflow,1999-12-30,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.,{'http://www.securityfocus.com/bid/905'}
CVE-2000-0042,https://www.cvedetails.com/cve/CVE-2000-0042/,,DoS Exec Code Overflow,1999-12-29,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.,{'http://www.securityfocus.com/bid/895'}
CVE-2000-0041,https://www.cvedetails.com/cve/CVE-2000-0041/,,,1999-12-28,2021-09-22,5.0,None,Remote,Low,Not required,None,None,Partial,"Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.",{'http://www.securityfocus.com/bid/890'}
CVE-2000-0040,https://www.cvedetails.com/cve/CVE-2000-0040/,,+Priv,1999-12-23,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.,set()
CVE-2000-0039,https://www.cvedetails.com/cve/CVE-2000-0039/,,,1999-12-29,2008-09-10,5.0,None,Remote,Low,Not required,Partial,None,None,AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.,"{'http://www.osvdb.org/15', 'http://www.securityfocus.com/bid/896'}"
CVE-2000-0038,https://www.cvedetails.com/cve/CVE-2000-0038/,,,1999-12-23,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,glFtpD includes a default glftpd user account with a default password and a UID of 0.,set()
CVE-2000-0037,https://www.cvedetails.com/cve/CVE-2000-0037/,,+Priv,1999-12-28,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.,"{'https://marc.info/?l=bugtraq&m=94780294009285&w=2', 'http://www.securityfocus.com/bid/903', 'https://www.redhat.com/support/errata/RHSA-2000-005.html'}"
CVE-2000-0036,https://www.cvedetails.com/cve/CVE-2000-0036/,,,1999-12-22,2018-10-12,5.0,None,Remote,Low,Not required,None,Partial,None,"Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the ""HTML Mail Attachment"" vulnerability.","{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q249082', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-060'}"
CVE-2000-0035,https://www.cvedetails.com/cve/CVE-2000-0035/,,+Priv,1999-12-28,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,resend command in Majordomo allows local users to gain privileges via shell metacharacters.,"{'https://marc.info/?l=bugtraq&m=94780294009285&w=2', 'http://www.securityfocus.com/bid/902'}"
CVE-2000-0034,https://www.cvedetails.com/cve/CVE-2000-0034/,,,1999-12-22,2008-09-10,5.0,None,Remote,Low,Not required,Partial,None,None,"Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled ""remember passwords.""",set()
CVE-2000-0033,https://www.cvedetails.com/cve/CVE-2000-0033/,,,1999-12-27,2008-09-10,5.0,None,Remote,Low,Not required,None,Partial,None,InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.,{'http://www.securityfocus.com/bid/899'}
CVE-2000-0032,https://www.cvedetails.com/cve/CVE-2000-0032/,,,1999-12-22,2018-10-30,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.,"{'http://www.securityfocus.com/bid/878', 'http://www.osvdb.org/7582'}"
CVE-2000-0030,https://www.cvedetails.com/cve/CVE-2000-0030/,,,1999-12-22,2018-10-30,5.0,None,Remote,Low,Not required,None,None,Partial,Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.,{'http://www.securityfocus.com/bid/878'}
CVE-2000-0029,https://www.cvedetails.com/cve/CVE-2000-0029/,,+Priv,1999-12-27,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.,"{'https://marc.info/?l=bugtraq&m=94780294009285&w=2', 'http://www.securityfocus.com/bid/901'}"
CVE-2000-0028,https://www.cvedetails.com/cve/CVE-2000-0028/,,Bypass,1999-12-23,2021-07-23,2.6,None,Remote,High,Not required,Partial,None,None,Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.,set()
CVE-2000-0027,https://www.cvedetails.com/cve/CVE-2000-0027/,,+Priv,1999-12-27,2008-09-10,6.2,None,Local,High,Not required,Complete,Complete,Complete,IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.,"{'http://www.securityfocus.com/archive/1/39962', 'http://www.securityfocus.com/bid/900', 'http://www.iss.net/security_center/static/5381.php'}"
CVE-2000-0026,https://www.cvedetails.com/cve/CVE-2000-0026/,,Overflow,1999-12-21,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.,"{'https://marc.info/?l=bugtraq&m=94606167110764&w=2', 'http://www.osvdb.org/6310', 'http://www.securityfocus.com/bid/876'}"
CVE-2000-0025,https://www.cvedetails.com/cve/CVE-2000-0025/,,,1999-12-21,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,"IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the ""Virtual Directory Naming"" vulnerability.","{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q238606', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-058', 'http://www.osvdb.org/8098'}"
CVE-2000-0024,https://www.cvedetails.com/cve/CVE-2000-0024/,,Bypass,1999-12-21,2018-10-12,6.4,None,Remote,Low,Not required,Partial,Partial,None,"IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the ""Escape Character Parsing"" vulnerability.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-061', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q246401', 'http://www.acrossecurity.com/aspr/ASPR-1999-11-10-1-PUB.txt'}"
CVE-2000-0023,https://www.cvedetails.com/cve/CVE-2000-0023/,,DoS Overflow,1999-12-21,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.,"{'http://www.securityfocus.com/bid/881', 'http://www.osvdb.org/51'}"
CVE-2000-0022,https://www.cvedetails.com/cve/CVE-2000-0022/,,,1999-12-21,2008-09-10,5.0,None,Remote,Low,Not required,Partial,None,None,Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.,{'http://www.securityfocus.com/bid/881'}
CVE-2000-0021,https://www.cvedetails.com/cve/CVE-2000-0021/,,,1999-12-01,2008-09-10,5.0,None,Remote,Low,Not required,Partial,None,None,Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin.,{'http://www.securityfocus.com/bid/881'}
CVE-2000-0020,https://www.cvedetails.com/cve/CVE-2000-0020/,,DoS,1999-12-20,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.,set()
CVE-2000-0019,https://www.cvedetails.com/cve/CVE-2000-0019/,,,1999-03-04,2008-09-10,2.1,None,Local,Low,Not required,Partial,None,None,"IMail POP3 daemon uses weak encryption, which allows local users to read files.",set()
CVE-2000-0018,https://www.cvedetails.com/cve/CVE-2000-0018/,,+Priv,1999-12-22,2008-09-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.,"{'http://www.securityfocus.com/bid/885', 'http://www.osvdb.org/1169'}"
CVE-2000-0017,https://www.cvedetails.com/cve/CVE-2000-0017/,,Overflow +Priv,1999-12-21,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.,set()
CVE-2000-0016,https://www.cvedetails.com/cve/CVE-2000-0016/,,DoS Exec Code Overflow,1999-10-01,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.,{'http://www.securityfocus.com/bid/730'}
CVE-2000-0015,https://www.cvedetails.com/cve/CVE-2000-0015/,,+Priv,1999-12-31,2008-09-10,4.6,None,Local,Low,Not required,Partial,Partial,Partial,CascadeView TFTP server allows local users to gain privileges via a symlink attack.,{'http://www.securityfocus.com/bid/910'}
CVE-2000-0014,https://www.cvedetails.com/cve/CVE-2000-0014/,,DoS,1999-12-28,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Savant web server via a null character in the requested URL.,{'http://www.securityfocus.com/bid/897'}
CVE-2000-0013,https://www.cvedetails.com/cve/CVE-2000-0013/,,+Priv,1999-12-31,2008-09-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.",{'http://www.securityfocus.com/bid/909'}
CVE-2000-0012,https://www.cvedetails.com/cve/CVE-2000-0012/,,Exec Code Overflow,1999-12-27,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.,{'http://www.securityfocus.com/bid/898'}
CVE-2000-0011,https://www.cvedetails.com/cve/CVE-2000-0011/,,Exec Code Overflow,1999-12-31,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.,"{'http://www.osvdb.org/1184', 'http://www.analogx.com/contents/download/network/sswww.htm', 'http://www.securityfocus.com/bid/906'}"
CVE-2000-0010,https://www.cvedetails.com/cve/CVE-2000-0010/,,Exec Code,1999-12-26,2008-09-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.,set()
CVE-2000-0009,https://www.cvedetails.com/cve/CVE-2000-0009/,,Exec Code,1999-12-29,2008-09-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the ""rm"" program, which allows local users to execute arbitrary commands.",{'http://www.securityfocus.com/bid/907'}
CVE-2000-0008,https://www.cvedetails.com/cve/CVE-2000-0008/,,,1999-12-26,2008-09-10,2.1,None,Local,Low,Not required,Partial,None,None,"FTPPro allows local users to read sensitive information, which is stored in plain text.",set()
CVE-2000-0007,https://www.cvedetails.com/cve/CVE-2000-0007/,,DoS,1999-12-29,2018-05-03,5.0,None,Remote,Low,Not required,None,None,Partial,"Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service.","{'http://www.securityfocus.com/bid/1740', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4491'}"
CVE-2000-0006,https://www.cvedetails.com/cve/CVE-2000-0006/,,,1999-12-25,2017-10-10,2.6,None,Local,High,Not required,Partial,Partial,None,strace allows local users to read arbitrary files via memory mapped file names.,"{'http://online.securityfocus.com/archive/1/39831', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4554'}"
CVE-2000-0005,https://www.cvedetails.com/cve/CVE-2000-0005/,,+Priv,1999-01-02,2018-05-03,7.2,None,Local,Low,Not required,Complete,Complete,Complete,HP-UX aserver program allows local users to gain privileges via a symlink attack.,{'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5635'}
CVE-2000-0004,https://www.cvedetails.com/cve/CVE-2000-0004/,,,1999-12-01,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL.,"{'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556', 'https://marc.info/?l=bugtraq&m=94606572912422&w=2'}"
CVE-2000-0003,https://www.cvedetails.com/cve/CVE-2000-0003/,,Overflow +Priv,1999-12-30,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.,{'https://marc.info/?l=bugtraq&m=94908470928258&w=2'}
CVE-2000-0002,https://www.cvedetails.com/cve/CVE-2000-0002/,,Exec Code Overflow,1999-12-22,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.,"{'http://www.securityfocus.com/templates/archive.pike?list=1&msg=36B0596E.8D111D66@teleline.es', 'https://marc.info/?l=bugtraq&m=94598388530358&w=2', 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556', 'http://www.securityfocus.com/bid/889'}"
CVE-2000-0001,https://www.cvedetails.com/cve/CVE-2000-0001/,,DoS,1999-12-23,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.,{'http://www.securityfocus.com/bid/888'}
CVE-1999-1592,https://www.cvedetails.com/cve/CVE-1999-1592/,,,1999-12-31,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.  NOTE: this might overlap CVE-1999-0129.","{'http://sunsolve.sun.com/search/document.do?assetkey=1-22-00159-1', 'http://www.securityfocus.com/bid/243'}"
CVE-1999-1591,https://www.cvedetails.com/cve/CVE-1999-1591/,,Bypass,1999-12-31,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.","{'http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00276.html', 'http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00277.html', 'http://www.securityfocus.com/bid/190'}"
CVE-1999-1590,https://www.cvedetails.com/cve/CVE-1999-1590/,,Dir. Trav.,1999-12-31,2008-09-05,3.5,None,Remote,Medium,???,Partial,None,None,"Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via "".."" sequences in the image parameter, a different vulnerability than CVE-1999-0021.",{'http://seclists.org/bugtraq/1997/Oct/0058.html'}
CVE-1999-1589,https://www.cvedetails.com/cve/CVE-1999-1589/,,+Priv,1999-12-31,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.,"{'http://www.securityfocus.com/bid/357', 'https://www.cert.org/advisories/CA-1992-10.html'}"
CVE-1999-1588,https://www.cvedetails.com/cve/CVE-1999-1588/,,Exec Code Overflow,1999-12-31,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with ""NLPS:002:002:"" to the listen (aka System V listener) port, TCP port 2766.","{'http://www.securityfocus.com/data/vulnerabilities/exploits/nlps_server.c', 'http://www.securityfocus.com/bid/2319', 'http://security-protocols.com/sploits/unsorted_exploits/nlps_server.c', 'http://lsd-pl.net/files/get?SOLARIS/solx86_nlps_server'}"
CVE-1999-1587,https://www.cvedetails.com/cve/CVE-1999-1587/,,,1999-12-31,2018-10-30,2.1,None,Local,Low,Not required,Partial,None,None,"/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.","{'http://securitytracker.com/id?1015833', 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1470', 'http://www.sunmanagers.org/archives/1996/1383.html', 'https://secunia.com/advisories/19426', 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102215-1', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25460', 'http://www.vupen.com/english/advisories/2006/1123', 'http://www.osvdb.org/24200', 'http://www.securityfocus.com/bid/19662'}"
CVE-1999-1586,https://www.cvedetails.com/cve/CVE-1999-1586/,,+Priv,1999-12-31,2017-07-11,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/498', 'https://www.cert.org/advisories/CA-1995-12.html', 'http://www.ciac.org/ciac/bulletins/g-02.shtml'}"
CVE-1999-1585,https://www.cvedetails.com/cve/CVE-1999-1585/,,+Priv,1999-12-31,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.",{'http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1'}
CVE-1999-1584,https://www.cvedetails.com/cve/CVE-1999-1584/,,+Priv,1999-12-31,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.","{'https://www.cert.org/advisories/CA-1993-18.html', 'http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1'}"
CVE-1999-1583,https://www.cvedetails.com/cve/CVE-1999-1583/,,Exec Code Overflow,1999-09-30,2017-07-11,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.,"{'https://www.kb.cert.org/vuls/id/872443', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8031', 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY02120&apar=only'}"
CVE-1999-1578,https://www.cvedetails.com/cve/CVE-1999-1578/,,Exec Code Overflow,1999-09-24,2021-07-22,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.","{'http://www.securityfocus.com/archive/1/28719', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3311', 'https://www.kb.cert.org/vuls/id/37556', 'http://www.securityfocus.com/bid/671'}"
CVE-1999-1577,https://www.cvedetails.com/cve/CVE-1999-1577/,,Exec Code Overflow,1999-10-31,2021-07-22,5.1,None,Remote,High,Not required,Partial,Partial,Partial,Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3314', 'http://www.securityfocus.com/bid/669', 'https://www.kb.cert.org/vuls/id/29795', 'http://www.securityfocus.com/archive/1/28719'}"
CVE-1999-1576,https://www.cvedetails.com/cve/CVE-1999-1576/,,Exec Code Overflow,1999-09-27,2017-07-11,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method.","{'http://www.securityfocus.com/archive/1/28719', 'http://www.securityfocus.com/bid/666', 'https://www.kb.cert.org/vuls/id/25919', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3318'}"
CVE-1999-1575,https://www.cvedetails.com/cve/CVE-1999-1575/,,Exec Code,1999-09-10,2021-07-22,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as ""Safe for Scripting,"" which allows remote attackers to create and modify files and execute arbitrary commands.","{'https://www.kb.cert.org/vuls/id/26924', 'https://www.kb.cert.org/vuls/id/23412', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037', 'http://www.securityfocus.com/archive/1/28719', 'https://www.kb.cert.org/vuls/id/41408', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7097', 'https://www.kb.cert.org/vuls/id/9162', 'https://www.kb.cert.org/vuls/id/24839'}"
CVE-1999-1573,https://www.cvedetails.com/cve/CVE-1999-1573/,,+Priv,1999-12-28,2017-10-19,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Multiple unknown vulnerabilities in the ""r-cmnds"" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.","{'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5550', 'https://www.kb.cert.org/vuls/id/13217', 'http://www.securityfocus.com/advisories/1471', 'https://www.auscert.org.au/render.html?it=490', 'http://www.ciac.org/ciac/bulletins/j-022.shtml', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7860'}"
CVE-1999-1571,https://www.cvedetails.com/cve/CVE-1999-1571/,,Overflow +Priv,1999-11-04,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.","{'https://marc.info/?l=vuln-dev&m=102098949103708&w=2', 'ftp://stage.caldera.com/pub/security/sse/sse037c/sse037c.ltr', 'http://www.securityfocus.com/bid/643', 'https://marc.info/?l=bugtraq&m=94053017801639&w=2', 'http://online.securityfocus.com/archive/1/27074', 'https://marc.info/?l=bugtraq&m=93762097815861&w=2', 'https://marc.info/?l=bugtraq&m=94183363719024&w=2', 'http://online.securityfocus.com/advisories/1843', 'http://www.iss.net/security_center/static/8989.php', 'ftp://stage.caldera.com/pub/security/sse/security_bulletins/SB-99.17c'}"
CVE-1999-1568,https://www.cvedetails.com/cve/CVE-1999-1568/,,DoS,1999-01-01,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.,"{'http://www.securityfocus.com/archive/1/12699', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1833', 'https://marc.info/?l=bugtraq&m=91981352617720&w=2'}"
CVE-1999-1567,https://www.cvedetails.com/cve/CVE-1999-1567/,,DoS,1999-03-08,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data.,"{'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9903&L=NTBUGTRAQ&P=R1215', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1948', 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9906&L=NTBUGTRAQ&P=R1680'}"
CVE-1999-1566,https://www.cvedetails.com/cve/CVE-1999-1566/,,DoS Overflow,1999-05-08,2008-09-05,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.,{'http://www.securityfocus.com/archive/1/13600'}
CVE-1999-1565,https://www.cvedetails.com/cve/CVE-1999-1565/,,,1999-08-20,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.,"{'http://www.securityfocus.com/archive/1/24784', 'http://www.osvdb.org/6291'}"
CVE-1999-1564,https://www.cvedetails.com/cve/CVE-1999-1564/,,DoS,1999-09-02,2008-09-05,2.1,None,Local,Low,Not required,None,None,Partial,FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.,{'http://www.securityfocus.com/archive/1/26166'}
CVE-1999-1562,https://www.cvedetails.com/cve/CVE-1999-1562/,,,1999-09-05,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.","{'http://www.securityfocus.com/archive/1/26915', 'http://www.securityfocus.com/bid/3446', 'https://www.debian.org/security/2001/dsa-084'}"
CVE-1999-1561,https://www.cvedetails.com/cve/CVE-1999-1561/,,+Priv,1999-08-20,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.",{'http://www.securityfocus.com/archive/1/24852'}
CVE-1999-1560,https://www.cvedetails.com/cve/CVE-1999-1560/,,Exec Code,1999-07-20,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root.","{'https://marc.info/?l=bugtraq&m=93252050203589&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2369'}"
CVE-1999-1559,https://www.cvedetails.com/cve/CVE-1999-1559/,,Bypass,1999-03-31,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,"Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time.","{'https://marc.info/?l=bugtraq&m=92299263017061&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2064'}"
CVE-1999-1553,https://www.cvedetails.com/cve/CVE-1999-1553/,,Exec Code Overflow,1999-05-01,2017-12-19,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1859', 'http://www.securityfocus.com/bid/311', 'http://www.securityfocus.com/archive/1/12730'}"
CVE-1999-1551,https://www.cvedetails.com/cve/CVE-1999-1551/,,DoS Exec Code Overflow,1999-03-02,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1898', 'https://marc.info/?l=bugtraq&m=92038879607336&w=2', 'http://www.securityfocus.com/bid/505'}"
CVE-1999-1550,https://www.cvedetails.com/cve/CVE-1999-1550/,,,1999-11-08,2018-10-30,5.0,None,Remote,Low,Not required,Partial,None,None,"bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the ""file"" parameter.","{'https://marc.info/?l=bugtraq&m=94217006208374&w=2', 'https://marc.info/?l=bugtraq&m=94217879020184&w=2', 'https://marc.info/?l=bugtraq&m=94225879703021&w=2', 'http://www.securityfocus.com/bid/778', 'http://www.iss.net/security_center/static/7771.php'}"
CVE-1999-1549,https://www.cvedetails.com/cve/CVE-1999-1549/,,Exec Code,1999-11-16,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a ""secure"" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.","{'https://marc.info/?l=bugtraq&m=94286509804526&w=2', 'http://www.securityfocus.com/bid/804'}"
CVE-1999-1548,https://www.cvedetails.com/cve/CVE-1999-1548/,,DoS,1999-11-24,2017-02-16,5.0,None,Remote,Low,Not required,None,None,Partial,Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.,"{'http://razor.bindview.com/publish/advisories/adv_Cabletron.html', 'http://www.securityfocus.com/bid/821'}"
CVE-1999-1547,https://www.cvedetails.com/cve/CVE-1999-1547/,CWE-20,Bypass,1999-11-25,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.,"{'https://marc.info/?l=ntbugtraq&m=94390053530890&w=2', 'http://www.securityfocus.com/bid/841', 'https://marc.info/?l=bugtraq&m=94359982417686&w=2'}"
CVE-1999-1546,https://www.cvedetails.com/cve/CVE-1999-1546/,,,1999-01-29,2017-12-19,5.0,None,Remote,Low,Not required,Partial,None,None,netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.,"{'http://www.securityfocus.com/archive/1/12217', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1724'}"
CVE-1999-1545,https://www.cvedetails.com/cve/CVE-1999-1545/,,,1999-07-14,2016-10-18,2.1,None,Local,Low,Not required,Partial,None,None,"Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users.","{'https://marc.info/?l=bugtraq&m=93226771401036&w=2', 'https://marc.info/?l=bugtraq&m=93216103027827&w=2'}"
CVE-1999-1544,https://www.cvedetails.com/cve/CVE-1999-1544/,,DoS Overflow,1999-01-24,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.,{'https://marc.info/?l=bugtraq&m=91722115016183&w=2'}
CVE-1999-1543,https://www.cvedetails.com/cve/CVE-1999-1543/,,,1999-07-10,2021-09-22,4.6,None,Local,Low,Not required,Partial,Partial,Partial,MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.,"{'https://marc.info/?l=bugtraq&m=93736667813924&w=2', 'https://marc.info/?l=bugtraq&m=93188174906513&w=2', 'http://www.securityfocus.com/bid/519'}"
CVE-1999-1542,https://www.cvedetails.com/cve/CVE-1999-1542/,,Exec Code,1999-10-04,2017-10-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the ""MAIL FROM"" command.","{'https://marc.info/?l=bugtraq&m=93915641729415&w=2', 'https://marc.info/?l=bugtraq&m=93923853105687&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3353'}"
CVE-1999-1541,https://www.cvedetails.com/cve/CVE-1999-1541/,,Exec Code,1999-10-04,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.","{'http://www.atstake.com/research/advisories/1999/shell-lock.txt', 'https://marc.info/?l=bugtraq&m=93916168802365&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3358'}"
CVE-1999-1540,https://www.cvedetails.com/cve/CVE-1999-1540/,,,1999-10-04,2017-12-19,2.1,None,Local,Low,Not required,Partial,None,None,shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.,"{'http://www.atstake.com/research/advisories/1999/shell-lock.txt', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3356', 'https://marc.info/?l=bugtraq&m=93916168802365&w=2'}"
CVE-1999-1539,https://www.cvedetails.com/cve/CVE-1999-1539/,,DoS Exec Code Overflow,1999-11-10,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.","{'http://www.securityfocus.com/bid/796', 'https://marc.info/?l=bugtraq&m=94225924803704&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3491', 'https://marc.info/?l=ntbugtraq&m=94223972910670&w=2'}"
CVE-1999-1538,https://www.cvedetails.com/cve/CVE-1999-1538/,,,1999-01-14,2016-10-18,2.1,None,Local,Low,Not required,Partial,None,None,"When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.","{'https://marc.info/?l=bugtraq&m=91638375309890&w=2', 'http://www.securityfocus.com/bid/189', 'https://marc.info/?l=ntbugtraq&m=91632724913080&w=2'}"
CVE-1999-1537,https://www.cvedetails.com/cve/CVE-1999-1537/,,DoS,1999-07-07,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,"IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.","{'http://www.securityfocus.com/bid/521', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2352', 'https://marc.info/?l=ntbugtraq&m=93138827329577&w=2'}"
CVE-1999-1536,https://www.cvedetails.com/cve/CVE-1999-1536/,,+Priv,1999-07-30,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,".sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.","{'https://marc.info/?l=bugtraq&m=93347785827287&w=2', 'http://www.osvdb.org/13557', 'http://www.securityfocus.com/bid/560'}"
CVE-1999-1535,https://www.cvedetails.com/cve/CVE-1999-1535/,,DoS Exec Code Overflow,1999-07-20,2017-10-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.","{'https://marc.info/?l=ntbugtraq&m=93256878011447&w=2', 'http://www.securityfocus.com/bid/592', 'https://marc.info/?l=ntbugtraq&m=93501427820328&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3291'}"
CVE-1999-1534,https://www.cvedetails.com/cve/CVE-1999-1534/,,Overflow,1999-09-23,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.,"{'https://marc.info/?l=bugtraq&m=93837184228248&w=2', 'http://www.securityfocus.com/bid/661'}"
CVE-1999-1533,https://www.cvedetails.com/cve/CVE-1999-1533/,,DoS,1999-11-07,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.,"{'http://www.securityfocus.com/bid/665', 'https://marc.info/?l=bugtraq&m=93846522511387&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3317'}"
CVE-1999-1532,https://www.cvedetails.com/cve/CVE-1999-1532/,,DoS,1999-10-29,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.","{'http://www.securityfocus.com/bid/748', 'https://marc.info/?l=bugtraq&m=94117465014255&w=2'}"
CVE-1999-1531,https://www.cvedetails.com/cve/CVE-1999-1531/,,Exec Code Overflow,1999-11-02,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.,"{'http://www.iss.net/security_center/static/7767.php', 'http://www.securityfocus.com/bid/763', 'https://marc.info/?l=bugtraq&m=94157187815629&w=2'}"
CVE-1999-1530,https://www.cvedetails.com/cve/CVE-1999-1530/,,,1999-11-08,2016-10-18,3.6,None,Local,Low,Not required,Partial,Partial,None,"cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.","{'http://www.osvdb.org/35', 'https://marc.info/?l=bugtraq&m=94225629200045&w=2', 'https://marc.info/?l=bugtraq&m=94209954200450&w=2', 'http://www.securityfocus.com/bid/777', 'http://www.iss.net/security_center/static/7764.php'}"
CVE-1999-1529,https://www.cvedetails.com/cve/CVE-1999-1529/,,Exec Code Overflow,1999-11-07,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.","{'https://marc.info/?l=bugtraq&m=94204166130782&w=2', 'https://marc.info/?l=bugtraq&m=94201512111092&w=2', 'https://marc.info/?l=ntbugtraq&m=94199707625818&w=2', 'https://marc.info/?l=ntbugtraq&m=94208143007829&w=2', 'http://www.securityfocus.com/archive/1/55551', 'http://www.securityfocus.com/bid/787', 'https://marc.info/?l=bugtraq&m=94210427406568&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3465'}"
CVE-1999-1528,https://www.cvedetails.com/cve/CVE-1999-1528/,,,1999-11-14,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.","{'http://www.securityfocus.com/bid/794', 'https://marc.info/?l=bugtraq&m=94261444428430&w=2'}"
CVE-1999-1527,https://www.cvedetails.com/cve/CVE-1999-1527/,,,1999-11-23,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server.","{'http://www.securityfocus.com/bid/816', 'https://marc.info/?l=bugtraq&m=94338883114254&w=2'}"
CVE-1999-1526,https://www.cvedetails.com/cve/CVE-1999-1526/,,,1999-03-11,2017-12-19,5.0,None,Remote,Low,Not required,Partial,None,None,Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.,"{'http://www.securityfocus.com/archive/1/12842', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1931'}"
CVE-1999-1524,https://www.cvedetails.com/cve/CVE-1999-1524/,,,1999-08-07,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port.",{'https://marc.info/?l=bugtraq&m=93424680430460&w=2'}
CVE-1999-1523,https://www.cvedetails.com/cve/CVE-1999-1523/,,DoS Exec Code Overflow,1999-10-04,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1672', 'https://marc.info/?l=bugtraq&m=93901161727373&w=2', 'https://marc.info/?l=bugtraq&m=93941351229256&w=2'}"
CVE-1999-1522,https://www.cvedetails.com/cve/CVE-1999-1522/,,,1999-10-07,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML.",{'https://marc.info/?l=bugtraq&m=93942579008408&w=2'}
CVE-1999-1521,https://www.cvedetails.com/cve/CVE-1999-1521/,,Exec Code Overflow,1999-09-12,2017-12-19,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.,"{'http://www.securityfocus.com/bid/633', 'https://marc.info/?l=bugtraq&m=94121824921783&w=2', 'https://marc.info/?l=bugtraq&m=93720402717560&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2240'}"
CVE-1999-1520,https://www.cvedetails.com/cve/CVE-1999-1520/,,+Info,1999-05-11,2017-10-10,5.0,None,Remote,Low,Not required,Partial,None,None,"A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.","{'https://marc.info/?l=bugtraq&m=92647407227303&w=2', 'http://www.securityfocus.com/bid/256', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2270'}"
CVE-1999-1519,https://www.cvedetails.com/cve/CVE-1999-1519/,,DoS,1999-11-17,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3513', 'https://marc.info/?l=bugtraq&m=94286244700573&w=2', 'http://www.securityfocus.com/bid/805'}"
CVE-1999-1518,https://www.cvedetails.com/cve/CVE-1999-1518/,,DoS Bypass,1999-07-15,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,"Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.","{'http://www.securityfocus.com/bid/526', 'https://marc.info/?l=bugtraq&m=93207728118694&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2351'}"
CVE-1999-1517,https://www.cvedetails.com/cve/CVE-1999-1517/,,,1999-11-01,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.","{'https://marc.info/?l=bugtraq&m=94148942818975&w=2', 'http://www.securityfocus.com/bid/750'}"
CVE-1999-1516,https://www.cvedetails.com/cve/CVE-1999-1516/,,Exec Code Overflow,1999-09-02,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.,{'https://marc.info/?l=bugtraq&m=93677241318492&w=2'}
CVE-1999-1515,https://www.cvedetails.com/cve/CVE-1999-1515/,,DoS,1999-08-31,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,"A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds.","{'http://www.securityfocus.com/bid/613', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3290'}"
CVE-1999-1513,https://www.cvedetails.com/cve/CVE-1999-1513/,,,1999-08-30,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities.",{'https://marc.info/?l=bugtraq&m=93616983223090&w=2'}
CVE-1999-1512,https://www.cvedetails.com/cve/CVE-1999-1512/,,Exec Code,1999-12-31,2017-10-10,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.,"{'http://www.securityfocus.com/bid/527', 'https://www.amavis.org/ChangeLog.txt', 'https://marc.info/?l=bugtraq&m=93219846414732&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2349'}"
CVE-1999-1511,https://www.cvedetails.com/cve/CVE-1999-1511/,,DoS Exec Code Overflow,1999-11-10,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.","{'http://www.securityfocus.com/bid/791', 'https://marc.info/?l=bugtraq&m=94226003804744&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3488'}"
CVE-1999-1510,https://www.cvedetails.com/cve/CVE-1999-1510/,,DoS Exec Code Overflow,1999-05-17,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.","{'https://marc.info/?l=ntbugtraq&m=92697301706956&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3234'}"
CVE-1999-1509,https://www.cvedetails.com/cve/CVE-1999-1509/,,Dir. Trav.,1999-11-04,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.,"{'https://marc.info/?l=bugtraq&m=94183041514522&w=2', 'https://marc.info/?l=ntbugtraq&m=94177470915423&w=2', 'http://www.securityfocus.com/bid/773'}"
CVE-1999-1508,https://www.cvedetails.com/cve/CVE-1999-1508/,,,1999-11-16,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.,"{'http://www.securityfocus.com/bid/806', 'https://marc.info/?l=bugtraq&m=94286041430870&w=2'}"
CVE-1999-1500,https://www.cvedetails.com/cve/CVE-1999-1500/,,DoS,1999-10-01,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.","{'http://www.securityfocus.com/bid/733', 'https://marc.info/?l=ntbugtraq&m=93880357530599&w=2'}"
CVE-1999-1497,https://www.cvedetails.com/cve/CVE-1999-1497/,,,1999-12-21,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.","{'http://www.securityfocus.com/archive/1/39329', 'http://www.securityfocus.com/bid/880'}"
CVE-1999-1496,https://www.cvedetails.com/cve/CVE-1999-1496/,,,1999-06-08,2017-12-19,2.1,None,Local,Low,Not required,Partial,None,None,"Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.","{'http://www.securityfocus.com/bid/321', 'http://www.securityfocus.com/archive/1/14665', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2277'}"
CVE-1999-1495,https://www.cvedetails.com/cve/CVE-1999-1495/,,,1999-02-18,2017-12-19,2.1,None,Local,Low,Not required,None,None,Partial,xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1792', 'http://www.securityfocus.com/archive/1/12580', 'http://www.securityfocus.com/bid/325'}"
CVE-1999-1488,https://www.cvedetails.com/cve/CVE-1999-1488/,,,1999-12-31,2008-09-05,5.0,None,Remote,Low,Not required,Partial,None,None,sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.,"{'http://ciac.llnl.gov/ciac/bulletins/i-079a.shtml', 'http://www.iss.net/security_center/static/7217.php', 'http://www.securityfocus.com/bid/371'}"
CVE-1999-1485,https://www.cvedetails.com/cve/CVE-1999-1485/,,DoS,1999-05-31,2017-12-19,6.4,None,Remote,Low,Not required,Partial,None,Partial,"nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2247', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2246', 'http://www.securityfocus.com/bid/412', 'http://www.osvdb.org/8564', 'https://marc.info/?l=bugtraq&m=92818552106912&w=2'}"
CVE-1999-1484,https://www.cvedetails.com/cve/CVE-1999-1484/,,Exec Code Overflow,1999-09-24,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.,"{'http://www.securityfocus.com/archive/1/28719', 'http://www.securityfocus.com/bid/668', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3310'}"
CVE-1999-1482,https://www.cvedetails.com/cve/CVE-1999-1482/,,+Priv,1999-02-19,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes.,{'http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-02-15&msg=Pine.LNX.3.96.990219175605.9622A-100000@ferret.lmh.ox.ac.uk'}
CVE-1999-1481,https://www.cvedetails.com/cve/CVE-1999-1481/,,Bypass,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,Partial,None,None,"Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.","{'http://www.securityfocus.com/bid/741', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3433', 'http://www.securityfocus.com/archive/1/33295', 'http://www.squid-cache.org/Versions/v2/2.2/bugs/'}"
CVE-1999-1478,https://www.cvedetails.com/cve/CVE-1999-1478/,,DoS,1999-07-06,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.,"{'https://marc.info/?l=ntbugtraq&m=93138827429589&w=2', 'http://www.securityfocus.com/bid/522', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2348', 'https://marc.info/?l=ntbugtraq&m=93240220324183&w=2'}"
CVE-1999-1477,https://www.cvedetails.com/cve/CVE-1999-1477/,,Overflow,1999-09-23,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.,"{'http://www.securityfocus.com/archive/1/28717', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3349', 'http://www.securityfocus.com/bid/663'}"
CVE-1999-1476,https://www.cvedetails.com/cve/CVE-1999-1476/,,DoS,1999-12-31,2017-10-10,2.1,None,Local,Low,Not required,None,None,Partial,"A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the ""Invalid Operand with Locked CMPXCHG8B Instruction"" problem.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/704', 'https://support.microsoft.com/support/kb/articles/q163/8/52.asp'}"
CVE-1999-1475,https://www.cvedetails.com/cve/CVE-1999-1475/,,+Priv,1999-11-19,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.","{'http://www.securityfocus.com/archive/1/35483', 'http://www.securityfocus.com/bid/812'}"
CVE-1999-1474,https://www.cvedetails.com/cve/CVE-1999-1474/,,,1999-12-31,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.","{'https://www.microsoft.com/windows/ie/security/powerpoint.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/179'}"
CVE-1999-1473,https://www.cvedetails.com/cve/CVE-1999-1473/,,,1999-12-31,2021-07-22,5.0,None,Remote,Low,Not required,Partial,None,None,"When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the ""Page Redirect Issue.""","{'http://www.iss.net/security_center/static/7426.php', 'http://www.osvdb.org/7818', 'https://support.microsoft.com/support/kb/articles/q176/6/97.asp'}"
CVE-1999-1472,https://www.cvedetails.com/cve/CVE-1999-1472/,,,1999-12-31,2021-07-22,5.0,None,Remote,Low,Not required,Partial,None,None,"Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.","{'https://www.microsoft.com/Windows/ie/security/freiburg.asp', 'http://www.osvdb.org/7819', 'http://www.insecure.org/sploits/Internet_explorer_4.0.hack.html', 'https://support.microsoft.com/support/kb/articles/q176/7/94.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/587', 'https://marc.info/?l=bugtraq&m=87710897923098&w=2', 'https://support.microsoft.com/support/kb/articles/q176/6/97.asp'}"
CVE-1999-1470,https://www.cvedetails.com/cve/CVE-1999-1470/,,+Priv,1999-06-24,2017-12-19,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2303', 'https://marc.info/?l=ntbugtraq&m=93034788412494&w=2', 'http://www.securityfocus.com/bid/485'}"
CVE-1999-1469,https://www.cvedetails.com/cve/CVE-1999-1469/,,Exec Code Overflow,1999-09-30,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.",{'https://marc.info/?l=bugtraq&m=93871926821410&w=2'}
CVE-1999-1465,https://www.cvedetails.com/cve/CVE-1999-1465/,,Bypass,1999-12-31,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1401', 'http://ciac.llnl.gov/ciac/bulletins/j-016.shtml', 'https://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml'}"
CVE-1999-1464,https://www.cvedetails.com/cve/CVE-1999-1464/,,Bypass,1999-12-31,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1401', 'http://ciac.llnl.gov/ciac/bulletins/j-016.shtml', 'https://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml'}"
CVE-1999-1462,https://www.cvedetails.com/cve/CVE-1999-1462/,CWE-200,+Info,1999-12-31,2018-11-29,5.0,None,Remote,Low,Not required,Partial,None,None,Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.,"{'http://bb4.com/README.CHANGES', 'http://www.securityfocus.com/archive/1/13440', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3755', 'http://www.securityfocus.com/bid/142'}"
CVE-1999-1460,https://www.cvedetails.com/cve/CVE-1999-1460/,,,1999-07-13,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program.,"{'https://marc.info/?l=bugtraq&m=93198293132463&w=2', 'http://www.securityfocus.com/bid/525', 'https://marc.info/?l=bugtraq&m=93372579004129&w=2'}"
CVE-1999-1458,https://www.cvedetails.com/cve/CVE-1999-1458/,,Overflow +Priv,1999-01-25,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3138', 'http://www.securityfocus.com/archive/1/12121', 'http://ftp1.support.compaq.com/public/dunix/v4.0d/ssrt0583u.README'}"
CVE-1999-1457,https://www.cvedetails.com/cve/CVE-1999-1457/,,Exec Code Overflow,1999-11-16,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.",{'http://www.novell.com/linux/security/advisories/suse_security_announce_30.html'}
CVE-1999-1456,https://www.cvedetails.com/cve/CVE-1999-1456/,,,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,Partial,None,None,thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1809', 'http://www.acme.com/software/thttpd/thttpd.html#releasenotes', 'http://www.securityfocus.com/archive/1/10368'}"
CVE-1999-1455,https://www.cvedetails.com/cve/CVE-1999-1455/,,,1999-12-31,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/7422', 'https://support.microsoft.com/support/kb/articles/q158/3/20.asp'}"
CVE-1999-1454,https://www.cvedetails.com/cve/CVE-1999-1454/,,Bypass,1999-10-04,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Macromedia ""The Matrix"" screen saver on Windows 95 with the ""Password protected"" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key.",{'https://marc.info/?l=bugtraq&m=93915027622690&w=2'}
CVE-1999-1453,https://www.cvedetails.com/cve/CVE-1999-1453/,,,1999-02-02,2021-07-22,2.6,None,Remote,High,Not required,Partial,None,None,Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.,"{'https://marc.info/?l=ntbugtraq&m=91979439932341&w=2', 'http://www.securityfocus.com/bid/215'}"
CVE-1999-1452,https://www.cvedetails.com/cve/CVE-1999-1452/,,,1999-12-31,2017-10-10,2.1,None,Local,Low,Not required,Partial,None,None,GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.,"{'https://support.microsoft.com/support/kb/articles/q214/8/02.asp', 'http://www.securityfocus.com/bid/198', 'https://marc.info/?l=ntbugtraq&m=91822011021558&w=2', 'https://marc.info/?l=bugtraq&m=91788829326419&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1975', 'https://marc.info/?l=ntbugtraq&m=91764169410814&w=2'}"
CVE-1999-1451,https://www.cvedetails.com/cve/CVE-1999-1451/,,,1999-12-31,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3271', 'https://support.microsoft.com/support/kb/articles/q231/3/68.asp'}"
CVE-1999-1450,https://www.cvedetails.com/cve/CVE-1999-1450/,,+Priv,1999-01-27,2008-09-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.","{'ftp://ftp.sco.COM/SSE/sse020.ltr', 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.06b', 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.03b'}"
CVE-1999-1444,https://www.cvedetails.com/cve/CVE-1999-1444/,,,1999-12-31,2008-09-10,5.0,None,Remote,Low,Not required,Partial,None,None,"genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.",{'http://catless.ncl.ac.uk/Risks/20.41.html#subj4'}
CVE-1999-1440,https://www.cvedetails.com/cve/CVE-1999-1440/,,,1999-01-01,2016-10-18,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.","{'http://www.securityfocus.com/bid/132', 'https://marc.info/?l=bugtraq&m=91522424302962&w=2'}"
CVE-1999-1430,https://www.cvedetails.com/cve/CVE-1999-1430/,,,1999-01-01,2016-10-18,2.1,None,Local,Low,Not required,Partial,None,None,"PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access.","{'http://www.securityfocus.com/bid/185', 'https://marc.info/?l=bugtraq&m=91540043723185&w=2'}"
CVE-1999-1422,https://www.cvedetails.com/cve/CVE-1999-1422/,,,1999-01-02,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.","{'http://www.securityfocus.com/bid/211', 'https://marc.info/?l=bugtraq&m=91540043023167&w=2'}"
CVE-1999-1418,https://www.cvedetails.com/cve/CVE-1999-1418/,,,1999-05-01,2008-09-05,5.0,None,Remote,Low,Not required,Partial,None,None,"ICQ99 ICQ web server build 1701 with ""Active Homepage"" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists (""404 Forbidden"") versus when a file does not exist (""404 not found"").","{'http://www.securityfocus.com/archive/1/13508', 'http://www.securityfocus.com/bid/246'}"
CVE-1999-1414,https://www.cvedetails.com/cve/CVE-1999-1414/,,+Priv,1999-05-25,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges.","{'https://marc.info/?l=ntbugtraq&m=92765856706547&w=2', 'http://www.securityfocus.com/bid/284', 'https://marc.info/?l=ntbugtraq&m=92902484317769&w=2'}"
CVE-1999-1412,https://www.cvedetails.com/cve/CVE-1999-1412/,,DoS,1999-06-03,2021-09-22,5.0,None,Remote,Low,Not required,None,None,Partial,"A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.","{'http://www.securityfocus.com/bid/306', 'http://www.securityfocus.com/archive/1/14215'}"
CVE-1999-1405,https://www.cvedetails.com/cve/CVE-1999-1405/,,Exec Code,1999-02-17,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a.","{'https://marc.info/?l=bugtraq&m=91954824614013&w=2', 'http://www.securityfocus.com/bid/375', 'https://marc.info/?l=bugtraq&m=91936783009385&w=2'}"
CVE-1999-1400,https://www.cvedetails.com/cve/CVE-1999-1400/,,Bypass,1999-06-03,2016-10-18,2.1,None,Local,Low,Not required,Partial,None,None,"The Economist screen saver 1999 with the ""Password Protected"" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked.","{'http://www.securityfocus.com/bid/466', 'http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0007.html', 'http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0009.html', 'https://marc.info/?l=ntbugtraq&m=92851653600852&w=2'}"
CVE-1999-1397,https://www.cvedetails.com/cve/CVE-1999-1397/,,+Info,1999-03-23,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.","{'http://www.iss.net/security_center/static/7559.php', 'http://www.securityfocus.com/bid/476', 'https://marc.info/?l=ntbugtraq&m=92223293409756&w=2', 'https://marc.info/?l=bugtraq&m=92242671024118&w=2'}"
CVE-1999-1394,https://www.cvedetails.com/cve/CVE-1999-1394/,,,1999-07-02,2016-10-18,2.1,None,Local,Low,Not required,None,Partial,None,"BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.","{'http://www.securityfocus.com/bid/510', 'https://marc.info/?l=bugtraq&m=93094058620450&w=2'}"
CVE-1999-1393,https://www.cvedetails.com/cve/CVE-1999-1393/,,Bypass,1999-05-21,2021-09-22,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Control Panel ""Password Security"" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible.","{'http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html', 'http://www.securityfocus.com/bid/532'}"
CVE-1999-1386,https://www.cvedetails.com/cve/CVE-1999-1386/,,,1999-12-31,2016-10-18,2.1,None,Local,Low,Not required,None,Partial,None,"Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.","{'http://www.iss.net/security_center/static/7243.php', 'https://www.redhat.com/support/errata/rh50-errata-general.html#perl', 'https://marc.info/?l=bugtraq&m=88932165406213&w=2'}"
CVE-1999-1382,https://www.cvedetails.com/cve/CVE-1999-1382/,,+Priv,1999-12-31,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"NetWare NFS mode 1 and 2 implements the ""Read Only"" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to ""Read Only,"" which NetWare-NFS changes to a setuid root program.","{'http://www.iss.net/security_center/static/7246.php', 'http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551', 'https://marc.info/?l=bugtraq&m=90295697702474&w=2', 'https://marc.info/?l=bugtraq&m=88427711321769&w=2'}"
CVE-1999-1379,https://www.cvedetails.com/cve/CVE-1999-1379/,,,1999-12-31,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.","{'https://marc.info/?l=bugtraq&m=93433758607623&w=2', 'http://ciac.llnl.gov/ciac/bulletins/j-063.shtml', 'ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos', 'http://www.iss.net/security_center/static/7238.php', 'https://marc.info/?l=bugtraq&m=93348057829957&w=2'}"
CVE-1999-1378,https://www.cvedetails.com/cve/CVE-1999-1378/,,,1999-07-19,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files.",{'https://marc.info/?l=bugtraq&m=93250710625956&w=2'}
CVE-1999-1377,https://www.cvedetails.com/cve/CVE-1999-1377/,,,1999-09-09,2008-09-05,5.0,None,Remote,Low,Not required,Partial,None,None,Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.,{'http://pulhas.org/phrack/55/P55-07.html'}
CVE-1999-1376,https://www.cvedetails.com/cve/CVE-1999-1376/,,Exec Code Overflow,1999-01-14,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.,"{'https://marc.info/?l=bugtraq&m=91638375309890&w=2', 'https://marc.info/?l=ntbugtraq&m=91632724913080&w=2'}"
CVE-1999-1375,https://www.cvedetails.com/cve/CVE-1999-1375/,,,1999-02-11,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.,"{'http://www.securityfocus.com/bid/230', 'https://marc.info/?l=ntbugtraq&m=91877455626320&w=2'}"
CVE-1999-1372,https://www.cvedetails.com/cve/CVE-1999-1372/,,+Priv,1999-02-19,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges.",{'https://marc.info/?l=bugtraq&m=91966339502073&w=2'}
CVE-1999-1371,https://www.cvedetails.com/cve/CVE-1999-1371/,,Overflow +Priv,1999-03-08,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/7546', 'https://marc.info/?l=bugtraq&m=92100752221493&w=2', 'http://www.securiteam.com/exploits/5ZP0O1P35O.html'}"
CVE-1999-1370,https://www.cvedetails.com/cve/CVE-1999-1370/,,,1999-03-23,2021-07-22,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.",{'https://marc.info/?l=ntbugtraq&m=92220197414799&w=2'}
CVE-1999-1369,https://www.cvedetails.com/cve/CVE-1999-1369/,,+Priv,1999-04-14,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges.",{'https://marc.info/?l=bugtraq&m=92411181619110&w=2'}
CVE-1999-1368,https://www.cvedetails.com/cve/CVE-1999-1368/,,,1999-05-12,2021-04-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox.","{'https://marc.info/?l=ntbugtraq&m=97439568517355&w=2', 'https://marc.info/?l=ntbugtraq&m=92652152723629&w=2'}"
CVE-1999-1367,https://www.cvedetails.com/cve/CVE-1999-1367/,,,1999-05-06,2021-07-22,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users.","{'https://www.pcworld.com/news/article/0,aid,10842,00.asp'}"
CVE-1999-1366,https://www.cvedetails.com/cve/CVE-1999-1366/,,,1999-05-15,2016-10-18,3.6,None,Local,Low,Not required,Partial,Partial,None,"Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.",{'https://marc.info/?l=bugtraq&m=92714118829880&w=2'}
CVE-1999-1365,https://www.cvedetails.com/cve/CVE-1999-1365/,,+Priv Bypass,1999-06-28,2017-10-26,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default.","{'https://marc.info/?l=ntbugtraq&m=93069418400856&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2336', 'https://marc.info/?l=ntbugtraq&m=93127894731200&w=2', 'http://www.securityfocus.com/bid/515'}"
CVE-1999-1364,https://www.cvedetails.com/cve/CVE-1999-1364/,,DoS,1999-12-31,2008-09-05,2.1,None,Local,Low,Not required,None,None,Partial,Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext.,"{'https://support.microsoft.com/support/kb/articles/q142/6/53.asp', 'http://www.iss.net/security_center/static/7421.php'}"
CVE-1999-1363,https://www.cvedetails.com/cve/CVE-1999-1363/,,DoS,1999-12-31,2008-09-05,2.1,None,Local,Low,Not required,None,None,Partial,"Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.","{'https://support.microsoft.com/support/kb/articles/q163/1/43.asp', 'http://www.iss.net/security_center/static/7405.php'}"
CVE-1999-1362,https://www.cvedetails.com/cve/CVE-1999-1362/,,DoS,1999-12-31,2008-09-05,2.1,None,Local,Low,Not required,None,None,Partial,Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.,"{'http://www.iss.net/security_center/static/7403.php', 'https://support.microsoft.com/support/kb/articles/q160/6/01.asp'}"
CVE-1999-1360,https://www.cvedetails.com/cve/CVE-1999-1360/,,DoS,1999-12-31,2008-09-05,2.1,None,Local,Low,Not required,None,None,Partial,"Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.","{'https://support.microsoft.com/support/kb/articles/q160/6/50.asp', 'http://www.iss.net/security_center/static/7402.php'}"
CVE-1999-1359,https://www.cvedetails.com/cve/CVE-1999-1359/,,Bypass,1999-12-31,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.","{'https://support.microsoft.com/support/kb/articles/q163/8/75.asp', 'http://www.iss.net/security_center/static/7401.php'}"
CVE-1999-1358,https://www.cvedetails.com/cve/CVE-1999-1358/,,Bypass,1999-12-31,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.","{'https://support.microsoft.com/support/kb/articles/q157/6/73.asp', 'http://www.iss.net/security_center/static/7400.php'}"
CVE-1999-1357,https://www.cvedetails.com/cve/CVE-1999-1357/,,XSS,1999-10-05,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a ""<"" sign, and the 0x9b character to a "">"" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.",{'https://marc.info/?l=bugtraq&m=93915331626185&w=2'}
CVE-1999-1356,https://www.cvedetails.com/cve/CVE-1999-1356/,,,1999-09-02,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (LegalNoticeCaption) and text (LegalNoticeText) in Windows NT, which could produce a legal notice that is in violation of the security policy.","{'https://marc.info/?l=ntbugtraq&m=93759822830815&w=2', 'https://marc.info/?l=ntbugtraq&m=93637792706047&w=2', 'http://www.iss.net/security_center/static/7763.php', 'https://marc.info/?l=bugtraq&m=93646669500991&w=2'}"
CVE-1999-1355,https://www.cvedetails.com/cve/CVE-1999-1355/,,,1999-12-31,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.","{'https://marc.info/?l=ntbugtraq&m=93759822430801&w=2', 'https://marc.info/?l=ntbugtraq&m=93654336516711&w=2', 'https://marc.info/?l=ntbugtraq&m=94183795025294&w=2', 'https://marc.info/?l=ntbugtraq&m=93542118727732&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3231', 'https://www.compaq.com/products/servers/management/advisory.html'}"
CVE-1999-1354,https://www.cvedetails.com/cve/CVE-1999-1354/,,,1999-08-30,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.","{'https://marc.info/?l=ntbugtraq&m=93637687305327&w=2', 'https://marc.info/?l=ntbugtraq&m=93698283309513&w=2'}"
CVE-1999-1353,https://www.cvedetails.com/cve/CVE-1999-1353/,,+Priv,1999-09-07,2017-04-29,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges.",{'https://marc.info/?l=ntbugtraq&m=93698162708211&w=2'}
CVE-1999-1352,https://www.cvedetails.com/cve/CVE-1999-1352/,,+Priv,1999-09-28,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.",{'https://marc.info/?l=bugtraq&m=93855134409747&w=2'}
CVE-1999-1351,https://www.cvedetails.com/cve/CVE-1999-1351/,,Dir. Trav.,1999-09-24,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the ""Listen to !nick <soundname> requests"" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.","{'https://marc.info/?l=bugtraq&m=93845560631314&w=2', 'http://www.iss.net/security_center/static/7761.php'}"
CVE-1999-1350,https://www.cvedetails.com/cve/CVE-1999-1350/,,+Priv,1999-09-29,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.",{'https://marc.info/?l=bugtraq&m=93871933521519&w=2'}
CVE-1999-1349,https://www.cvedetails.com/cve/CVE-1999-1349/,,DoS,1999-10-06,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag set, to port 111.",{'https://marc.info/?l=bugtraq&m=93923679004325&w=2'}
CVE-1999-1348,https://www.cvedetails.com/cve/CVE-1999-1348/,,DoS,1999-06-30,2016-10-18,2.1,None,Local,Low,Not required,None,None,Partial,"Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service.",{'https://marc.info/?l=bugtraq&m=93220073515880&w=2'}
CVE-1999-1347,https://www.cvedetails.com/cve/CVE-1999-1347/,,Bypass,1999-10-07,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.",{'https://marc.info/?l=bugtraq&m=93942774609925&w=2'}
CVE-1999-1346,https://www.cvedetails.com/cve/CVE-1999-1346/,,,1999-10-07,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.",{'https://marc.info/?l=bugtraq&m=93942774609925&w=2'}
CVE-1999-1345,https://www.cvedetails.com/cve/CVE-1999-1345/,,,1999-10-05,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.",{'https://marc.info/?l=bugtraq&m=93923873006014&w=2'}
CVE-1999-1344,https://www.cvedetails.com/cve/CVE-1999-1344/,,,1999-10-05,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.,{'https://marc.info/?l=bugtraq&m=93923873006014&w=2'}
CVE-1999-1343,https://www.cvedetails.com/cve/CVE-1999-1343/,,DoS,1999-10-13,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.,{'https://marc.info/?l=bugtraq&m=93986405412867&w=2'}
CVE-1999-1342,https://www.cvedetails.com/cve/CVE-1999-1342/,,DoS,1999-10-17,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.,{'https://marc.info/?l=ntbugtraq&m=94042342010662&w=2'}
CVE-1999-1341,https://www.cvedetails.com/cve/CVE-1999-1341/,,,1999-10-22,2018-09-11,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/7858', 'https://marc.info/?l=bugtraq&m=94061108411308&w=2'}"
CVE-1999-1340,https://www.cvedetails.com/cve/CVE-1999-1340/,,Overflow +Priv,1999-11-04,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.,"{'https://marc.info/?l=bugtraq&m=94173799532589&w=2', 'http://www.securityfocus.com/bid/765'}"
CVE-1999-1339,https://www.cvedetails.com/cve/CVE-1999-1339/,,DoS,1999-12-31,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.","{'https://marc.info/?l=bugtraq&m=93277766505061&w=2', 'http://www.iss.net/security_center/static/7257.php', 'https://marc.info/?l=bugtraq&m=93277426802802&w=2', 'http://www.osvdb.org/6105', 'https://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz'}"
CVE-1999-1338,https://www.cvedetails.com/cve/CVE-1999-1338/,,,1999-07-21,2016-10-18,5.0,None,Remote,Low,Not required,None,Partial,None,Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.,{'https://marc.info/?l=bugtraq&m=93259112204664&w=2'}
CVE-1999-1337,https://www.cvedetails.com/cve/CVE-1999-1337/,,+Priv,1999-08-01,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.","{'https://marc.info/?l=bugtraq&m=93370073207984&w=2', 'http://www.iss.net/security_center/static/9873.php', 'http://www.osvdb.org/5921'}"
CVE-1999-1336,https://www.cvedetails.com/cve/CVE-1999-1336/,,DoS,1999-08-12,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port.,"{'https://marc.info/?l=bugtraq&m=93458364903256&w=2', 'https://marc.info/?l=bugtraq&m=93492615408725&w=2', 'http://www.osvdb.org/6057'}"
CVE-1999-1335,https://www.cvedetails.com/cve/CVE-1999-1335/,,,1999-12-31,2017-10-10,6.4,None,Remote,Low,Not required,Partial,Partial,None,snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.,"{'https://www.redhat.com/support/errata/rh40-errata-general.html#cmu-snmp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7251'}"
CVE-1999-1334,https://www.cvedetails.com/cve/CVE-1999-1334/,,Exec Code Overflow,1999-12-31,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.","{'https://www.redhat.com/support/errata/rh50-errata-general.html#elm', 'https://marc.info/?l=bugtraq&m=88609666024181&w=2'}"
CVE-1999-1333,https://www.cvedetails.com/cve/CVE-1999-1333/,,Exec Code,1999-12-31,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.,"{'https://marc.info/?l=bugtraq&m=89042322924057&w=2', 'https://www.redhat.com/support/errata/rh50-errata-general.html#ncftp', 'http://www.osvdb.org/6111', 'http://www.iss.net/security_center/static/7240.php'}"
CVE-1999-1332,https://www.cvedetails.com/cve/CVE-1999-1332/,,,1999-12-31,2016-10-18,2.1,None,Local,Low,Not required,None,Partial,None,gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.,"{'http://www.securityfocus.com/bid/7845', 'https://marc.info/?l=bugtraq&m=88603844115233&w=2', 'http://www.osvdb.org/3812', 'https://www.redhat.com/support/errata/rh50-errata-general.html#gzip', 'http://www.iss.net/security_center/static/7241.php', 'https://www.debian.org/security/2003/dsa-308'}"
CVE-1999-1331,https://www.cvedetails.com/cve/CVE-1999-1331/,,DoS,1999-12-31,2008-09-10,2.1,None,Local,Low,Not required,None,None,Partial,"netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface.","{'http://www.iss.net/security_center/static/7245.php', 'https://www.redhat.com/support/errata/rh42-errata-general.html#netcfg'}"
CVE-1999-1330,https://www.cvedetails.com/cve/CVE-1999-1330/,,Overflow,1999-12-31,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.","{'https://www.redhat.com/support/errata/rh42-errata-general.html#db', 'https://marc.info/?l=bugtraq&m=87602661419259&w=2', 'http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html', 'http://www.iss.net/security_center/static/7244.php'}"
CVE-1999-1329,https://www.cvedetails.com/cve/CVE-1999-1329/,,Overflow +Priv,1999-12-31,2008-09-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.,"{'http://www.iss.net/security_center/static/7250.php', 'https://www.redhat.com/support/errata/rh50-errata-general.html#SysVinit'}"
CVE-1999-1328,https://www.cvedetails.com/cve/CVE-1999-1328/,,,1999-12-31,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.,"{'http://www.osvdb.org/6068', 'http://www.iss.net/security_center/static/7232.php', 'https://marc.info/?l=bugtraq&m=90383955231511&w=2', 'https://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf'}"
CVE-1999-1327,https://www.cvedetails.com/cve/CVE-1999-1327/,,Overflow +Priv,1999-12-31,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.,"{'https://marc.info/?l=bugtraq&m=90221103125826&w=2', 'http://www.iss.net/security_center/static/7239.php', 'https://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf', 'http://www.osvdb.org/6065'}"
CVE-1999-1325,https://www.cvedetails.com/cve/CVE-1999-1325/,,+Priv,1999-12-31,2017-10-10,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.","{'http://ciac.llnl.gov/ciac/bulletins/c-19.shtml', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7261'}"
CVE-1999-1324,https://www.cvedetails.com/cve/CVE-1999-1324/,,,1999-12-31,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/7225', 'http://ciac.llnl.gov/ciac/bulletins/d-06.shtml'}"
CVE-1999-1323,https://www.cvedetails.com/cve/CVE-1999-1323/,,,1999-04-09,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE.",{'https://marc.info/?l=ntbugtraq&m=92370067416739&w=2'}
CVE-1999-1320,https://www.cvedetails.com/cve/CVE-1999-1320/,,+Priv,1999-12-31,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.,"{'http://www.iss.net/security_center/static/7213.php', 'http://ciac.llnl.gov/ciac/bulletins/d-01.shtml'}"
CVE-1999-1317,https://www.cvedetails.com/cve/CVE-1999-1317/,,+Priv,1999-12-31,2017-10-10,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.,"{'https://marc.info/?l=ntbugtraq&m=92162979530341&w=2', 'https://support.microsoft.com/support/kb/articles/q222/1/59.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7398', 'https://marc.info/?l=ntbugtraq&m=92127046701349&w=2'}"
CVE-1999-1316,https://www.cvedetails.com/cve/CVE-1999-1316/,,,1999-12-31,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.","{'https://support.microsoft.com/support/kb/articles/Q247/9/75.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7391'}"
CVE-1999-1315,https://www.cvedetails.com/cve/CVE-1999-1315/,,DoS +Priv,1999-12-31,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service.,{'http://ciac.llnl.gov/ciac/bulletins/f-04.shtml'}
CVE-1999-1307,https://www.cvedetails.com/cve/CVE-1999-1307/,,+Priv,1999-12-31,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.,"{'http://ciac.llnl.gov/ciac/bulletins/f-06.shtml', 'http://www.dataguard.no/bugtraq/1994_4/0676.html'}"
CVE-1999-1300,https://www.cvedetails.com/cve/CVE-1999-1300/,,,1999-12-31,2008-09-05,3.6,None,Local,Low,Not required,Partial,Partial,None,Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.,{'http://ciac.llnl.gov/ciac/bulletins/b-31.shtml'}
CVE-1999-1294,https://www.cvedetails.com/cve/CVE-1999-1294/,,,1999-12-31,2017-10-10,2.1,None,Local,Low,Not required,Partial,None,None,"Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/562', 'https://support.microsoft.com/support/kb/articles/q146/6/04.asp'}"
CVE-1999-1293,https://www.cvedetails.com/cve/CVE-1999-1293/,,DoS,1999-12-31,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.","{'https://marc.info/?l=bugtraq&m=88413292830649&w=2', 'https://www.apache.org/info/security_bulletin_1.2.5.html'}"
CVE-1999-1290,https://www.cvedetails.com/cve/CVE-1999-1290/,,DoS Exec Code Overflow,1999-12-31,2017-10-10,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1397', 'https://marc.info/?l=bugtraq&m=91127951426494&w=2', 'http://www.ayukov.com/nftp/history.html'}"
CVE-1999-1287,https://www.cvedetails.com/cve/CVE-1999-1287/,,,1999-12-31,2017-12-19,5.0,None,Remote,Low,Not required,Partial,None,None,Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.,"{'http://www.statslab.cam.ac.uk/~sret1/analog/security.html', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1410'}"
CVE-1999-1279,https://www.cvedetails.com/cve/CVE-1999-1279/,,,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,Partial,None,None,An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU.,"{'https://support.microsoft.com/support/kb/articles/q138/0/01.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1548'}"
CVE-1999-1268,https://www.cvedetails.com/cve/CVE-1999-1268/,,,1999-01-06,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1645', 'https://lists.kde.org/?l=kde-devel&m=91560433413263&w=2'}"
CVE-1999-1264,https://www.cvedetails.com/cve/CVE-1999-1264/,,,1999-01-21,2017-12-20,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled.","{'http://www.securityfocus.com/archive/1/12048', 'https://marc.info/?l=bugtraq&m=91815321510224&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1670'}"
CVE-1999-1260,https://www.cvedetails.com/cve/CVE-1999-1260/,,+Info,1999-02-15,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1777', 'https://marc.info/?l=bugtraq&m=91910115718150&w=2'}"
CVE-1999-1259,https://www.cvedetails.com/cve/CVE-1999-1259/,,+Info,1999-12-31,2017-10-10,2.1,None,Local,Low,Not required,Partial,None,None,"Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information.","{'https://support.microsoft.com/support/kb/articles/q189/5/29.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1780'}"
CVE-1999-1256,https://www.cvedetails.com/cve/CVE-1999-1256/,,,1999-03-04,2017-12-19,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file.","{'http://www.securityfocus.com/archive/1/12744', 'https://marc.info/?l=ntbugtraq&m=92056752115116&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1902'}"
CVE-1999-1255,https://www.cvedetails.com/cve/CVE-1999-1255/,,,1999-02-19,2017-12-19,5.0,None,Remote,Low,Not required,None,Partial,None,Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.,"{'http://www.rootshell.com/archive-j457nxiqi3gq59dv/199902/hyperseek.txt.html', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1914'}"
CVE-1999-1254,https://www.cvedetails.com/cve/CVE-1999-1254/,,DoS,1999-03-08,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,"Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.","{'https://marc.info/?l=ntbugtraq&m=92099515709467&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1947'}"
CVE-1999-1247,https://www.cvedetails.com/cve/CVE-1999-1247/,,+Priv,1999-02-24,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.,"{'http://packetstormsecurity.org/advisories/hpalert/006', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2061'}"
CVE-1999-1246,https://www.cvedetails.com/cve/CVE-1999-1246/,,+Priv,1999-12-31,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2068', 'https://support.microsoft.com/support/kb/articles/Q229/9/72.asp'}"
CVE-1999-1245,https://www.cvedetails.com/cve/CVE-1999-1245/,,+Info,1999-04-06,2017-12-19,5.0,None,Remote,Low,Not required,Partial,None,None,"vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information.",{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2086'}
CVE-1999-1244,https://www.cvedetails.com/cve/CVE-1999-1244/,,,1999-04-15,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2087', 'http://www.securityfocus.com/archive/1/13303'}"
CVE-1999-1241,https://www.cvedetails.com/cve/CVE-1999-1241/,,Exec Code,1999-05-06,2021-07-23,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2173', 'http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html'}"
CVE-1999-1237,https://www.cvedetails.com/cve/CVE-1999-1237/,CWE-120,Exec Code Overflow,1999-06-06,2020-07-21,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2272', 'http://www.securityfocus.com/archive/1/14384'}"
CVE-1999-1236,https://www.cvedetails.com/cve/CVE-1999-1236/,,+Priv,1999-10-01,2017-12-19,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.","{'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3285', 'http://www.securityfocus.com/bid/731'}"
CVE-1999-1235,https://www.cvedetails.com/cve/CVE-1999-1235/,,,1999-08-25,2021-07-22,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing (""shoulder surfing"") another user to read the information from the status bar when the user moves the mouse over a link.","{'http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3289', 'http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html'}"
CVE-1999-1234,https://www.cvedetails.com/cve/CVE-1999-1234/,,DoS,1999-10-26,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,"LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3293', 'https://marc.info/?l=ntbugtraq&m=94096671308565&w=2'}"
CVE-1999-1233,https://www.cvedetails.com/cve/CVE-1999-1233/,,,1999-12-31,2018-10-12,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the ""Domain Resolution"" vulnerability.","{'https://support.microsoft.com/support/kb/articles/Q241/5/62.asp', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039', 'http://www.securityfocus.com/bid/657', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3306'}"
CVE-1999-1231,https://www.cvedetails.com/cve/CVE-1999-1231/,,,1999-06-09,2017-12-19,5.0,None,Remote,Low,Not required,Partial,None,None,"ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.","{'http://www.securityfocus.com/archive/1/14758', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2276'}"
CVE-1999-1227,https://www.cvedetails.com/cve/CVE-1999-1227/,,,1999-07-30,2017-12-19,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.,"{'http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.html', 'http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.html', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3334'}"
CVE-1999-1226,https://www.cvedetails.com/cve/CVE-1999-1226/,,DoS Exec Code,1999-10-28,2017-10-10,2.6,None,Remote,High,Not required,None,None,Partial,"Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3436', 'http://www.securiteam.com/exploits/Netscape_4_7_and_earlier_vulnerable_to__Huge_Key__DoS.html'}"
CVE-1999-1223,https://www.cvedetails.com/cve/CVE-1999-1223/,,DoS,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.,"{'https://support.microsoft.com/support/kb/articles/q187/5/03.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3892'}"
CVE-1999-1222,https://www.cvedetails.com/cve/CVE-1999-1222/,,DoS,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.,"{'https://support.microsoft.com/support/kb/articles/Q188/5/71.ASP', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3893'}"
CVE-1999-1206,https://www.cvedetails.com/cve/CVE-1999-1206/,,Exec Code,1999-12-31,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control.","{'http://www.systemsoft.com/l-2/l-3/support-systemwizard.htm', 'https://marc.info/?l=bugtraq&m=93336970231857&w=2', 'http://www.securityfocus.com/bid/555'}"
CVE-1999-1203,https://www.cvedetails.com/cve/CVE-1999-1203/,,DoS,1999-02-12,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier.,"{'http://www.iss.net/security_center/static/7498.php', 'https://marc.info/?l=bugtraq&m=91868964203769&w=2', 'https://marc.info/?l=bugtraq&m=91888117502765&w=2'}"
CVE-1999-1201,https://www.cvedetails.com/cve/CVE-1999-1201/,,DoS,1999-02-06,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,"Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.","{'http://www.securityfocus.com/bid/225', 'https://marc.info/?l=ntbugtraq&m=91849617221319&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7542'}"
CVE-1999-1196,https://www.cvedetails.com/cve/CVE-1999-1196/,,DoS,1999-04-07,2008-09-05,5.0,None,Remote,Low,Not required,None,None,Partial,Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.,"{'http://www.securityfocus.com/bid/158', 'http://www.securityfocus.com/archive/1/13451'}"
CVE-1999-1195,https://www.cvedetails.com/cve/CVE-1999-1195/,,,1999-05-05,2016-10-18,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.","{'https://marc.info/?l=ntbugtraq&m=92587579032534&w=2', 'https://marc.info/?l=bugtraq&m=92588169005196&w=2', 'http://www.securityfocus.com/bid/169'}"
CVE-1999-1190,https://www.cvedetails.com/cve/CVE-1999-1190/,,Exec Code Overflow,1999-11-15,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long ""From"" header in an e-mail message.","{'http://www.securiteam.com/exploits/E-MailClub__FROM__remote_buffer_overflow.html', 'http://www.securityfocus.com/bid/801'}"
CVE-1999-1189,https://www.cvedetails.com/cve/CVE-1999-1189/,,DoS Exec Code Overflow,1999-11-24,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.","{'http://www.securityfocus.com/archive/1/36608', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7884', 'http://www.securityfocus.com/archive/1/36306', 'http://www.securityfocus.com/bid/822'}"
CVE-1999-1180,https://www.cvedetails.com/cve/CVE-1999-1180/,,Exec Code,1999-02-16,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.,"{'http://oliver.efri.hr/~crv/security/bugs/NT/buffer.html', 'http://www.tryc.on.ca/archives/bugtraq/1999_1/0612.html'}"
CVE-1999-1177,https://www.cvedetails.com/cve/CVE-1999-1177/,,Dir. Trav.,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,None,Partial,None,Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2055', 'https://www.w3.org/Security/Faq/wwwsf4.html', 'http://www-genome.wi.mit.edu/WWW/tools/CGI_scripts/server_publish/nph-publish'}"
CVE-1999-1175,https://www.cvedetails.com/cve/CVE-1999-1175/,,,1999-12-31,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048.","{'http://www.ciac.org/ciac/bulletins/i-054.shtml', 'https://www.cisco.com/warp/public/770/wccpauth-pub.shtml', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1577'}"
CVE-1999-1172,https://www.cvedetails.com/cve/CVE-1999-1172/,,,1999-01-14,2008-09-05,5.0,None,Remote,Low,Not required,None,Partial,None,"By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.",{'http://www.securityfocus.com/archive/1/11947'}
CVE-1999-1171,https://www.cvedetails.com/cve/CVE-1999-1171/,,+Priv,1999-02-02,2019-08-13,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the ""flags"" registry key to 1920.","{'http://www.securityfocus.com/bid/218', 'https://marc.info/?l=ntbugtraq&m=91816507920544&w=2'}"
CVE-1999-1170,https://www.cvedetails.com/cve/CVE-1999-1170/,,+Priv,1999-01-02,2019-08-13,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the ""flags"" registry key to 1920.","{'http://www.securityfocus.com/bid/218', 'https://marc.info/?l=ntbugtraq&m=91816507920544&w=2'}"
CVE-1999-1169,https://www.cvedetails.com/cve/CVE-1999-1169/,,DoS,1999-02-04,2008-09-10,5.0,None,Remote,Low,Not required,None,None,Partial,nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.,{'http://www.securityfocus.com/archive/1/12284'}
CVE-1999-1168,https://www.cvedetails.com/cve/CVE-1999-1168/,,,1999-02-20,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.",{'http://www.securityfocus.com/archive/1/12640'}
CVE-1999-1167,https://www.cvedetails.com/cve/CVE-1999-1167/,,XSS,1999-12-31,2008-09-05,6.4,None,Remote,Low,Not required,Partial,Partial,None,Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.,"{'https://www.wired.com/news/technology/0,1282,20636,00.html', 'https://www.wired.com/news/technology/0,1282,20677,00.html', 'http://www.iss.net/security_center/static/7252.php'}"
CVE-1999-1166,https://www.cvedetails.com/cve/CVE-1999-1166/,,+Priv,1999-07-11,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.","{'http://www.securityfocus.com/archive/1/18156', 'http://www.securityfocus.com/bid/523'}"
CVE-1999-1165,https://www.cvedetails.com/cve/CVE-1999-1165/,,+Priv,1999-07-21,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.","{'https://marc.info/?l=bugtraq&m=93268249021561&w=2', 'http://www.securityfocus.com/bid/535', 'http://www.securityfocus.com/archive/1/2478'}"
CVE-1999-1164,https://www.cvedetails.com/cve/CVE-1999-1164/,,DoS,1999-06-25,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang.",{'https://marc.info/?l=bugtraq&m=93041631215856&w=2'}
CVE-1999-1163,https://www.cvedetails.com/cve/CVE-1999-1163/,,,1999-11-24,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation.,"{'https://marc.info/?l=bugtraq&m=94347039929958&w=2', 'http://www.iss.net/security_center/static/7439.php'}"
CVE-1999-1157,https://www.cvedetails.com/cve/CVE-1999-1157/,,DoS,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,"Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.","{'https://support.microsoft.com/support/kb/articles/Q192/7/74.ASP', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3894'}"
CVE-1999-1156,https://www.cvedetails.com/cve/CVE-1999-1156/,,DoS,1999-05-17,2018-05-03,5.0,None,Remote,Low,Not required,None,None,Partial,BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns.,{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2254'}
CVE-1999-1148,https://www.cvedetails.com/cve/CVE-1999-1148/,,DoS,1999-12-31,2018-10-12,5.0,None,Remote,Low,Not required,None,None,Partial,FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1215', 'https://support.microsoft.com/support/kb/articles/Q189/2/62.ASP', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006'}"
CVE-1999-1132,https://www.cvedetails.com/cve/CVE-1999-1132/,,DoS,1999-12-31,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs.","{'https://support.microsoft.com/support/kb/articles/Q179/1/57.asp', 'https://marc.info/?l=bugtraq&m=90763508011966&w=2', 'https://marc.info/?l=ntbugtraq&m=90760603030452&w=2', 'http://www.iss.net/security_center/static/1399.php'}"
CVE-1999-1130,https://www.cvedetails.com/cve/CVE-1999-1130/,,,1999-07-30,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.","{'http://www.securityfocus.com/bid/559', 'https://marc.info/?l=bugtraq&m=93346448121208&w=2', 'https://marc.info/?l=ntbugtraq&m=93337389603117&w=2'}"
CVE-1999-1129,https://www.cvedetails.com/cve/CVE-1999-1129/,,,1999-09-01,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3294', 'http://www.securityfocus.com/bid/615', 'https://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htm', 'http://www.securityfocus.com/archive/1/26008'}"
CVE-1999-1127,https://www.cvedetails.com/cve/CVE-1999-1127/,,DoS,1999-12-31,2018-10-12,5.0,None,Remote,Low,Not required,None,None,Partial,"Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the ""Named Pipes Over RPC"" vulnerability.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017', 'https://support.microsoft.com/support/kb/articles/Q195/7/33.asp', 'http://www.iss.net/security_center/static/523.php'}"
CVE-1999-1126,https://www.cvedetails.com/cve/CVE-1999-1126/,,+Info,1999-12-31,2017-12-19,2.1,None,Local,Low,Not required,Partial,None,None,"Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with ""DPR_"".","{'http://ciac.llnl.gov/ciac/bulletins/i-086.shtml', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1575', 'https://www.cisco.com/warp/public/770/crmtmp-pub.shtml'}"
CVE-1999-1124,https://www.cvedetails.com/cve/CVE-1999-1124/,,Bypass,1999-12-31,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.",{'http://packetstorm.securify.com/mag/phrack/phrack54/P54-08'}
CVE-1999-1117,https://www.cvedetails.com/cve/CVE-1999-1117/,,,1999-12-31,2017-10-10,2.1,None,Local,Low,Not required,Partial,None,None,lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter.,"{'http://www.securityfocus.com/bid/455', 'http://ciac.llnl.gov/ciac/bulletins/h-13.shtml', 'https://marc.info/?l=bugtraq&m=87602167420196&w=2', 'https://marc.info/?l=bugtraq&m=87602167420195&w=2', 'https://marc.info/?l=bugtraq&w=2&r=1&s=lquerypv&q=b', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1752'}"
CVE-1999-1112,https://www.cvedetails.com/cve/CVE-1999-1112/,,Exec Code Overflow,1999-11-09,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the ""8BPS"" image type in a Photo Shop image header.","{'http://www.securityfocus.com/archive/1/34066', 'http://stud4.tuwien.ac.at/~e9227474/main2.html', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3549', 'http://www.securityfocus.com/bid/781'}"
CVE-1999-1111,https://www.cvedetails.com/cve/CVE-1999-1111/,,Overflow Bypass,1999-11-09,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack which directly modifies a pointer to a return address instead of using a buffer overflow to reach the return address entry itself.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3524', 'http://www.securityfocus.com/bid/786', 'https://marc.info/?l=bugtraq&m=94218618329838&w=2'}"
CVE-1999-1110,https://www.cvedetails.com/cve/CVE-1999-1110/,,,1999-11-14,2021-07-22,5.0,None,Remote,Low,Not required,Partial,None,None,"Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.","{'http://www.securityfocus.com/bid/793', 'http://www.securityfocus.com/archive/1/34675'}"
CVE-1999-1109,https://www.cvedetails.com/cve/CVE-1999-1109/,,DoS,1999-12-22,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.","{'https://marc.info/?l=bugtraq&m=94780566911948&w=2', 'http://www.securityfocus.com/bid/904', 'http://www.iss.net/security_center/static/7760.php', 'https://marc.info/?l=bugtraq&m=94632241202626&w=2'}"
CVE-1999-1105,https://www.cvedetails.com/cve/CVE-1999-1105/,,,1999-12-31,2008-09-05,5.0,None,Remote,Low,Not required,Partial,None,None,"Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.","{'http://www.net-security.sk/bugs/NT/netware1.html', 'https://www.zdnet.com/eweek/reviews/1016/tr42bug.html', 'http://www.iss.net/security_center/static/7231.php'}"
CVE-1999-1104,https://www.cvedetails.com/cve/CVE-1999-1104/,,+Priv,1999-12-31,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.","{'https://marc.info/?l=ntbugtraq&m=88540877601866&w=2', 'http://www.iss.net/security_center/static/71.php', 'https://marc.info/?l=bugtraq&m=87602167418931&w=2', 'https://support.microsoft.com/support/kb/articles/q140/5/57.asp', 'https://marc.info/?l=bugtraq&m=88536273725787&w=2'}"
CVE-1999-1102,https://www.cvedetails.com/cve/CVE-1999-1102/,,,1999-12-31,2008-09-05,2.1,None,Local,Low,Not required,None,Partial,None,"lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.","{'http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm', 'http://www.phreak.org/archives/security/8lgm/8lgm.lpr', 'http://ciac.llnl.gov/ciac/bulletins/e-25.shtml'}"
CVE-1999-1101,https://www.cvedetails.com/cve/CVE-1999-1101/,,+Priv,1999-02-19,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges.",{'http://www.securityfocus.com/archive/1/12618'}
CVE-1999-1100,https://www.cvedetails.com/cve/CVE-1999-1100/,,,1999-12-31,2017-10-10,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.","{'https://www.cisco.com/warp/public/770/pixkey-pub.shtml', 'http://ciac.llnl.gov/ciac/bulletins/i-056.shtml', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1579'}"
CVE-1999-1097,https://www.cvedetails.com/cve/CVE-1999-1097/,,,1999-05-04,2017-12-19,6.4,None,Remote,Low,Not required,Partial,Partial,None,Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2187', 'https://marc.info/?l=bugtraq&m=92586457816446&w=2'}"
CVE-1999-1094,https://www.cvedetails.com/cve/CVE-1999-1094/,,Exec Code Overflow,1999-12-31,2021-07-22,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the ""mk:"" protocol, aka the ""MK Overrun security issue.""","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/917', 'https://support.microsoft.com/support/kb/articles/q176/6/97.asp', 'https://marc.info/?l=bugtraq&m=88480839506155&w=2'}"
CVE-1999-1093,https://www.cvedetails.com/cve/CVE-1999-1093/,,Exec Code Overflow,1999-12-31,2021-07-22,5.1,None,Remote,High,Not required,Partial,Partial,Partial,Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.,"{'http://www.iss.net/security_center/static/1276.php', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011', 'https://support.microsoft.com/support/kb/articles/q191/2/00.asp'}"
CVE-1999-1092,https://www.cvedetails.com/cve/CVE-1999-1092/,,,1999-11-17,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.",{'https://marc.info/?l=bugtraq&m=94286179032648&w=2'}
CVE-1999-1087,https://www.cvedetails.com/cve/CVE-1999-1087/,,,1999-12-31,2021-07-22,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Internet Explorer 4 treats a 32-bit number (""dotless IP address"") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.","{'http://www.osvdb.org/7828', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2209', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016', 'https://www.microsoft.com/Windows/Ie/security/dotless.asp', 'https://support.microsoft.com/support/kb/articles/q168/6/17.asp'}"
CVE-1999-1086,https://www.cvedetails.com/cve/CVE-1999-1086/,,+Priv,1999-07-15,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.","{'http://www.securityfocus.com/bid/528', 'https://marc.info/?l=bugtraq&m=93214475111651&w=2'}"
CVE-1999-1084,https://www.cvedetails.com/cve/CVE-1999-1084/,,,1999-12-31,2018-10-12,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"The ""AEDebug"" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.","{'https://marc.info/?l=ntbugtraq&m=90222453431604&w=2', 'http://www.ciac.org/ciac/bulletins/k-029.shtml', 'http://www.securityfocus.com/bid/1044', 'https://support.microsoft.com/support/kb/articles/q103/8/61.asp', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-008'}"
CVE-1999-1083,https://www.cvedetails.com/cve/CVE-1999-1083/,,Dir. Trav.,1999-10-08,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.,"{'http://www.securityfocus.com/bid/699', 'https://marc.info/?l=bugtraq&m=95730430727064&w=2'}"
CVE-1999-1082,https://www.cvedetails.com/cve/CVE-1999-1082/,,Dir. Trav.,1999-10-08,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a ""......"" (modified dot dot) attack.","{'https://marc.info/?l=bugtraq&m=93941794201059&w=2', 'http://www.securityfocus.com/bid/699'}"
CVE-1999-1079,https://www.cvedetails.com/cve/CVE-1999-1079/,,+Priv,1999-05-06,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.,"{'http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36', 'http://www.securityfocus.com/bid/439', 'https://marc.info/?l=bugtraq&m=92601792420088&w=2', 'https://marc.info/?l=bugtraq&m=93587956513233&w=2'}"
CVE-1999-1078,https://www.cvedetails.com/cve/CVE-1999-1078/,,+Priv,1999-07-29,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.","{'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P', 'http://www.securityfocus.com/bid/547'}"
CVE-1999-1077,https://www.cvedetails.com/cve/CVE-1999-1077/,,Bypass,1999-11-01,2021-09-22,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.","{'http://www.securityfocus.com/bid/756', 'https://marc.info/?l=bugtraq&m=94149318124548&w=2'}"
CVE-1999-1076,https://www.cvedetails.com/cve/CVE-1999-1076/,,Bypass,1999-10-26,2021-09-22,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the ""Log Out"" option and selecting a ""Cancel"" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.","{'http://www.securityfocus.com/bid/745', 'https://marc.info/?l=bugtraq&m=94096348604173&w=2'}"
CVE-1999-1074,https://www.cvedetails.com/cve/CVE-1999-1074/,,+Priv,1999-12-31,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.","{'http://www.webmin.com/webmin/changes.html', 'http://www.securityfocus.com/archive/1/9138', 'http://www.securityfocus.com/bid/98'}"
CVE-1999-1066,https://www.cvedetails.com/cve/CVE-1999-1066/,,,1999-12-22,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a ""Smurf"" style attack on another host, by spoofing the connection request.",{'https://marc.info/?l=bugtraq&m=94589559631535&w=2'}
CVE-1999-1065,https://www.cvedetails.com/cve/CVE-1999-1065/,,DoS Exec Code,1999-11-04,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode.",{'https://marc.info/?l=bugtraq&m=94175465525422&w=2'}
CVE-1999-1064,https://www.cvedetails.com/cve/CVE-1999-1064/,,DoS Exec Code Overflow,1999-08-22,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0]).,"{'http://www.securityfocus.com/bid/596', 'https://marc.info/?l=bugtraq&m=93555317429630&w=2', 'https://marc.info/?l=bugtraq&m=93582070508957&w=2'}"
CVE-1999-1063,https://www.cvedetails.com/cve/CVE-1999-1063/,,Exec Code,1999-06-01,2017-12-19,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/2251', 'http://www.securityfocus.com/bid/304', 'http://www.securityfocus.com/archive/1/14019'}"
CVE-1999-1060,https://www.cvedetails.com/cve/CVE-1999-1060/,,DoS Exec Code Overflow,1999-02-17,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname.,"{'http://www.securityfocus.com/bid/340', 'https://marc.info/?l=bugtraq&m=91937090211855&w=2'}"
CVE-1999-1058,https://www.cvedetails.com/cve/CVE-1999-1058/,,DoS Exec Code Overflow,1999-11-22,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.","{'https://marc.info/?l=ntbugtraq&m=94337185023159&w=2', 'http://www.securityfocus.com/bid/818', 'https://marc.info/?l=bugtraq&m=94329968617085&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3543'}"
CVE-1999-1055,https://www.cvedetails.com/cve/CVE-1999-1055/,,Exec Code,1999-12-31,2018-10-12,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel ""CALL Vulnerability.""","{'http://www.securityfocus.com/bid/179', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1737', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018'}"
CVE-1999-1053,https://www.cvedetails.com/cve/CVE-1999-1053/,,Exec Code,1999-09-13,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"guestbook.pl cleanses user-inserted SSI commands by removing text between ""<!--"" and ""-->"" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides ""-->"".","{'http://www.securityfocus.com/bid/776', 'http://www.securityfocus.com/archive/82/27296', 'http://www.securityfocus.com/archive/1/33674', 'http://www.securityfocus.com/archive/82/27560'}"
CVE-1999-1052,https://www.cvedetails.com/cve/CVE-1999-1052/,,,1999-08-24,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.",{'https://marc.info/?l=bugtraq&m=93582550911564&w=2'}
CVE-1999-1051,https://www.cvedetails.com/cve/CVE-1999-1051/,,,1999-11-16,2008-09-05,5.0,None,Remote,Low,Not required,Partial,None,None,"Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.",{'http://www.securityfocus.com/archive/1/34939'}
CVE-1999-1050,https://www.cvedetails.com/cve/CVE-1999-1050/,,Dir. Trav.,1999-11-12,2017-12-19,5.0,None,Remote,Low,Not required,Partial,None,None,"Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3550', 'http://www.securityfocus.com/bid/798', 'http://www.securityfocus.com/archive/1/34939', 'http://www.securityfocus.com/bid/799', 'http://www.securityfocus.com/archive/1/34600'}"
CVE-1999-1049,https://www.cvedetails.com/cve/CVE-1999-1049/,,,1999-02-21,2021-04-07,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.",{'https://marc.info/?l=bugtraq&m=91972006211238&w=2'}
CVE-1999-1047,https://www.cvedetails.com/cve/CVE-1999-1047/,,Bypass,1999-10-18,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities.","{'http://www.iss.net/security_center/static/3397.php', 'https://marc.info/?l=bugtraq&m=94036662326185&w=2', 'https://marc.info/?l=bugtraq&m=94026690521279&w=2'}"
CVE-1999-1046,https://www.cvedetails.com/cve/CVE-1999-1046/,,DoS Exec Code Overflow,1999-03-01,2017-12-19,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.","{'http://www.securityfocus.com/bid/504', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1897', 'https://marc.info/?l=bugtraq&m=92038879607336&w=2'}"
CVE-1999-1043,https://www.cvedetails.com/cve/CVE-1999-1043/,,DoS,1999-12-31,2020-04-02,5.0,None,Remote,Low,Not required,None,None,Partial,"Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error).",{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-007'}
CVE-1999-1042,https://www.cvedetails.com/cve/CVE-1999-1042/,,,1999-12-31,2008-09-05,1.2,None,Local,High,Not required,Partial,None,None,"Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.",{'https://www.cisco.com/warp/public/770/crmtmp-pub.shtml'}
CVE-1999-1035,https://www.cvedetails.com/cve/CVE-1999-1035/,,DoS,1999-12-31,2018-10-12,5.0,None,Remote,Low,Not required,None,None,Partial,"IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS ""GET"" vulnerability.","{'https://support.microsoft.com/support/kb/articles/q192/2/96.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1823', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-019'}"
CVE-1999-1033,https://www.cvedetails.com/cve/CVE-1999-1033/,,,1999-05-11,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.","{'https://marc.info/?l=bugtraq&m=92663402004275&w=2', 'http://www.securityfocus.com/bid/252', 'https://marc.info/?l=bugtraq&m=92647407427342&w=2'}"
CVE-1999-1031,https://www.cvedetails.com/cve/CVE-1999-1031/,,DoS,1999-05-19,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.,"{'https://marc.info/?l=ntbugtraq&m=92707671717292&w=2', 'https://marc.info/?l=bugtraq&m=92713790426690&w=2', 'http://www.securityfocus.com/bid/267'}"
CVE-1999-1030,https://www.cvedetails.com/cve/CVE-1999-1030/,,DoS,1999-05-19,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,"counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation.","{'https://marc.info/?l=ntbugtraq&m=92707671717292&w=2', 'https://marc.info/?l=bugtraq&m=92713790426690&w=2', 'http://www.securityfocus.com/bid/267'}"
CVE-1999-1029,https://www.cvedetails.com/cve/CVE-1999-1029/,,,1999-05-13,2017-12-19,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.","{'http://www.securityfocus.com/bid/277', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2193', 'https://marc.info/?l=bugtraq&m=92663402004280&w=2'}"
CVE-1999-1028,https://www.cvedetails.com/cve/CVE-1999-1028/,,DoS,1999-05-28,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631.,"{'https://marc.info/?l=ntbugtraq&m=92807524225090&w=2', 'http://www.iss.net/security_center/static/2256.php', 'http://www.securityfocus.com/bid/288'}"
CVE-1999-1023,https://www.cvedetails.com/cve/CVE-1999-1023/,,,1999-06-10,2018-10-30,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the ""-e"" (expiration date) argument, which could allow users to login after their accounts have expired.","{'https://marc.info/?l=bugtraq&m=92904175406756&w=2', 'http://www.securityfocus.com/bid/426'}"
CVE-1999-1019,https://www.cvedetails.com/cve/CVE-1999-1019/,,,1999-06-23,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.","{'http://www.securityfocus.com/bid/495', 'https://marc.info/?l=bugtraq&m=93024398513475&w=2', 'https://marc.info/?l=bugtraq&m=93024398713491&w=2'}"
CVE-1999-1018,https://www.cvedetails.com/cve/CVE-1999-1018/,,Bypass,1999-07-27,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.","{'https://marc.info/?l=bugtraq&m=93312523904591&w=2', 'http://www.securityfocus.com/bid/543'}"
CVE-1999-1017,https://www.cvedetails.com/cve/CVE-1999-1017/,,,1999-07-28,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message.","{'http://www.securityfocus.com/bid/544', 'https://marc.info/?l=ntbugtraq&m=93316253431588&w=2'}"
CVE-1999-1016,https://www.cvedetails.com/cve/CVE-1999-1016/,,DoS,1999-08-27,2021-07-22,5.0,None,Remote,Low,Not required,None,None,Partial,"Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.","{'http://www.securityfocus.com/bid/606', 'https://marc.info/?l=ntbugtraq&m=93578772920970&w=2'}"
CVE-1999-1014,https://www.cvedetails.com/cve/CVE-1999-1014/,,Overflow +Priv,1999-09-13,2018-10-30,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.,"{'https://marc.info/?l=bugtraq&m=93727925026476&w=2', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3297', 'https://marc.info/?l=bugtraq&m=93846422810162&w=2', 'http://www.securityfocus.com/bid/672'}"
CVE-1999-1013,https://www.cvedetails.com/cve/CVE-1999-1013/,,,1999-09-23,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.,"{'https://marc.info/?l=bugtraq&m=93837026726954&w=2', 'http://www.securityfocus.com/bid/673'}"
CVE-1999-1012,https://www.cvedetails.com/cve/CVE-1999-1012/,,,1999-05-04,2008-09-05,5.0,None,Remote,Low,Not required,None,None,Partial,"SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.","{'http://www.securityfocus.com/bid/173', 'http://www.securityfocus.com/archive/1/13527'}"
CVE-1999-1011,https://www.cvedetails.com/cve/CVE-1999-1011/,CWE-264,Exec Code,1999-07-19,2018-10-15,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.","{'http://www.osvdb.org/272', 'http://www.ciac.org/ciac/bulletins/j-054.shtml', 'https://www.securityfocus.com/bid/529', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025'}"
CVE-1999-1010,https://www.cvedetails.com/cve/CVE-1999-1010/,,,1999-12-14,2016-10-18,2.1,None,Local,Low,Not required,Partial,None,None,"An SSH 1.2.27 server allows a client to use the ""none"" cipher, even if it is not allowed by the server policy.",{'https://marc.info/?l=bugtraq&m=94519142415338&w=2'}
CVE-1999-1009,https://www.cvedetails.com/cve/CVE-1999-1009/,,,1999-12-12,2008-09-09,2.6,None,Remote,High,Not required,Partial,None,None,The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.,set()
CVE-1999-1007,https://www.cvedetails.com/cve/CVE-1999-1007/,,Exec Code Overflow,1999-12-13,2016-10-18,7.6,None,Remote,High,Not required,Complete,Complete,Complete,Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.,"{'https://marc.info/?l=bugtraq&m=94512259331599&w=2', 'http://www.securityfocus.com/bid/872'}"
CVE-1999-1006,https://www.cvedetails.com/cve/CVE-1999-1006/,,,1999-12-19,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.,{'https://marc.info/?l=bugtraq&m=94571433731824&w=2'}
CVE-1999-1005,https://www.cvedetails.com/cve/CVE-1999-1005/,,,1999-12-19,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.,"{'https://marc.info/?l=bugtraq&m=94571433731824&w=2', 'http://www.osvdb.org/3413', 'http://www.securityfocus.com/bid/879'}"
CVE-1999-1004,https://www.cvedetails.com/cve/CVE-1999-1004/,,Overflow,1999-12-16,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.,"{'http://www.osvdb.org/6267', 'http://www.securityfocus.com/archive/1/39194', 'http://www.securityfocus.com/archive/1/38970', 'http://service1.symantec.com/SUPPORT/nav.nsf/df0a595864594c86852567ac0063608c/6206f660a1f2516a882568660082c930?OpenDocument&Highlight=0,poproxy'}"
CVE-1999-1003,https://www.cvedetails.com/cve/CVE-1999-1003/,,DoS,1999-12-13,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.,set()
CVE-1999-1001,https://www.cvedetails.com/cve/CVE-1999-1001/,,,1999-12-16,2008-09-09,2.6,None,Remote,High,Not required,None,Partial,None,Cisco Cache Engine allows a remote attacker to gain access via a null username and password.,set()
CVE-1999-1000,https://www.cvedetails.com/cve/CVE-1999-1000/,,,1999-12-16,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.,set()
CVE-1999-0999,https://www.cvedetails.com/cve/CVE-1999-0999/,CWE-20,DoS,1999-11-19,2018-10-12,4.3,None,Remote,Medium,Not required,None,None,Partial,Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.,"{'http://www.securityfocus.com/bid/817', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q248749', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-059'}"
CVE-1999-0998,https://www.cvedetails.com/cve/CVE-1999-0998/,,,1999-12-16,2008-09-09,5.0,None,Remote,Low,Not required,None,Partial,None,Cisco Cache Engine allows an attacker to replace content in the cache.,set()
CVE-1999-0997,https://www.cvedetails.com/cve/CVE-1999-0997/,,Exec Code,1999-12-20,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.",{'https://www.debian.org/security/2003/dsa-377'}
CVE-1999-0996,https://www.cvedetails.com/cve/CVE-1999-0996/,,Exec Code Overflow,1999-12-15,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.,"{'http://www.eeye.com/html/Research/Advisories/AD19991215.html', 'http://www.osvdb.org/6490'}"
CVE-1999-0995,https://www.cvedetails.com/cve/CVE-1999-0995/,CWE-20,DoS,1999-12-16,2018-10-12,7.8,None,Remote,Low,Not required,None,None,Complete,"Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka ""Malformed Security Identifier Request.""","{'http://www.securityfocus.com/bid/875', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-057', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q248185'}"
CVE-1999-0994,https://www.cvedetails.com/cve/CVE-1999-0994/,CWE-255,,1999-12-16,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,"Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.","{'http://www.securityfocus.com/bid/873', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q248183', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-056'}"
CVE-1999-0993,https://www.cvedetails.com/cve/CVE-1999-0993/,CWE-665,,1999-12-13,2020-04-02,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Modifications to ACLs (Access Control Lists) in Microsoft Exchange  5.5 do not take effect until the directory store cache is refreshed.,set()
CVE-1999-0991,https://www.cvedetails.com/cve/CVE-1999-0991/,,DoS Overflow,1999-12-06,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.,{'http://www.securityfocus.com/bid/862'}
CVE-1999-0990,https://www.cvedetails.com/cve/CVE-1999-0990/,,,1999-12-05,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.,set()
CVE-1999-0989,https://www.cvedetails.com/cve/CVE-1999-0989/,,Exec Code Overflow,1999-12-06,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.,{'http://www.securityfocus.com/bid/861'}
CVE-1999-0988,https://www.cvedetails.com/cve/CVE-1999-0988/,,,1999-12-04,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.,set()
CVE-1999-0987,https://www.cvedetails.com/cve/CVE-1999-0987/,CWE-287,,1999-11-18,2018-08-13,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.,{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q237923'}
CVE-1999-0986,https://www.cvedetails.com/cve/CVE-1999-0986/,,DoS,1999-12-08,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.,{'http://www.securityfocus.com/bid/870'}
CVE-1999-0985,https://www.cvedetails.com/cve/CVE-1999-0985/,,Exec Code,1999-11-09,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.,set()
CVE-1999-0984,https://www.cvedetails.com/cve/CVE-1999-0984/,,Exec Code,1999-11-09,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.,set()
CVE-1999-0983,https://www.cvedetails.com/cve/CVE-1999-0983/,,Exec Code,1999-11-09,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.,set()
CVE-1999-0982,https://www.cvedetails.com/cve/CVE-1999-0982/,,,1999-12-05,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.,set()
CVE-1999-0981,https://www.cvedetails.com/cve/CVE-1999-0981/,CWE-59,,1999-12-08,2021-07-23,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka ""Server-side Page Reference Redirect.""","{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q246094', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-050'}"
CVE-1999-0978,https://www.cvedetails.com/cve/CVE-1999-0978/,,Exec Code,1999-12-09,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,htdig allows remote attackers to execute commands via filenames with shell metacharacters.,{'http://www.securityfocus.com/bid/867'}
CVE-1999-0977,https://www.cvedetails.com/cve/CVE-1999-0977/,,Overflow +Priv,1999-12-10,2018-10-30,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.,"{'http://www.securityfocus.com/bid/866', 'http://www.osvdb.org/2558', 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191', 'http://www.securityfocus.com/bid/2354'}"
CVE-1999-0976,https://www.cvedetails.com/cve/CVE-1999-0976/,,DoS,1999-12-07,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,"Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.",{'http://www.securityfocus.com/bid/857'}
CVE-1999-0975,https://www.cvedetails.com/cve/CVE-1999-0975/,,Exec Code,1999-12-10,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.,{'http://www.securityfocus.com/bid/868'}
CVE-1999-0974,https://www.cvedetails.com/cve/CVE-1999-0974/,,Overflow +Priv,1999-12-09,2018-10-30,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.,"{'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/190', 'http://www.securityfocus.com/bid/864'}"
CVE-1999-0973,https://www.cvedetails.com/cve/CVE-1999-0973/,,Overflow +Priv,1999-12-07,2018-10-30,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.,{'http://www.securityfocus.com/bid/858'}
CVE-1999-0972,https://www.cvedetails.com/cve/CVE-1999-0972/,,Overflow,1999-12-09,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in Xshipwars xsw program.,{'http://www.securityfocus.com/bid/863'}
CVE-1999-0970,https://www.cvedetails.com/cve/CVE-1999-0970/,,DoS,1999-06-05,2017-12-19,5.0,None,Remote,Low,Not required,None,None,Partial,The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.,"{'http://www.securityfocus.com/bid/1808', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2271', 'http://www.securityfocus.com/archive/1/14311'}"
CVE-1999-0963,https://www.cvedetails.com/cve/CVE-1999-0963/,,+Priv,1999-12-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.,{'http://www.osvdb.org/6088'}
CVE-1999-0954,https://www.cvedetails.com/cve/CVE-1999-0954/,,,1999-09-16,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,WWWBoard has a default username and default password.,{'http://www.securityfocus.com/bid/649'}
CVE-1999-0953,https://www.cvedetails.com/cve/CVE-1999-0953/,,,1999-09-16,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.,set()
CVE-1999-0952,https://www.cvedetails.com/cve/CVE-1999-0952/,,Overflow,1999-01-28,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.,{'https://marc.info/?l=bugtraq&m=91759216618637&w=2'}
CVE-1999-0951,https://www.cvedetails.com/cve/CVE-1999-0951/,,Exec Code Overflow,1999-10-22,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands.,"{'http://www.securityfocus.com/bid/739', 'http://www.osvdb.org/3380'}"
CVE-1999-0950,https://www.cvedetails.com/cve/CVE-1999-0950/,,Overflow,1999-10-28,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via	a series of MKD and CWD commands that create nested directories.,{'http://www.securityfocus.com/bid/747'}
CVE-1999-0949,https://www.cvedetails.com/cve/CVE-1999-0949/,,Overflow +Priv,1999-11-02,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.,{'http://www.securityfocus.com/bid/757'}
CVE-1999-0948,https://www.cvedetails.com/cve/CVE-1999-0948/,,Overflow +Priv,1999-11-02,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in uum program for Canna input system allows local users to gain root privileges.,{'http://www.securityfocus.com/bid/757'}
CVE-1999-0947,https://www.cvedetails.com/cve/CVE-1999-0947/,,Exec Code,1999-11-02,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters.","{'http://www.securityfocus.com/bid/762', 'https://marc.info/?l=bugtraq&m=94157187815629&w=2'}"
CVE-1999-0946,https://www.cvedetails.com/cve/CVE-1999-0946/,,Overflow,1999-11-02,2016-10-18,5.1,None,Remote,High,Not required,Partial,Partial,Partial,Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.,"{'http://www.securityfocus.com/bid/760', 'https://marc.info/?l=bugtraq&m=94157187815629&w=2'}"
CVE-1999-0944,https://www.cvedetails.com/cve/CVE-1999-0944/,,,1999-10-24,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.,set()
CVE-1999-0943,https://www.cvedetails.com/cve/CVE-1999-0943/,,Overflow +Priv,1999-10-15,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.,{'http://www.securityfocus.com/bid/720'}
CVE-1999-0942,https://www.cvedetails.com/cve/CVE-1999-0942/,,+Priv,1999-10-04,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.,set()
CVE-1999-0940,https://www.cvedetails.com/cve/CVE-1999-0940/,,Exec Code Overflow,1999-09-27,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.,set()
CVE-1999-0939,https://www.cvedetails.com/cve/CVE-1999-0939/,,DoS,1999-08-26,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Debian IRC Epic/epic4 client via a long string.,{'http://www.securityfocus.com/bid/605'}
CVE-1999-0938,https://www.cvedetails.com/cve/CVE-1999-0938/,,Exec Code,1999-06-28,2016-09-17,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.,set()
CVE-1999-0935,https://www.cvedetails.com/cve/CVE-1999-0935/,,Exec Code,1999-12-15,2005-05-02,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.,set()
CVE-1999-0934,https://www.cvedetails.com/cve/CVE-1999-0934/,,,1999-12-15,2018-05-03,5.0,None,Remote,Low,Not required,Partial,None,None,classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3102', 'http://www.securityfocus.com/bid/2020'}"
CVE-1999-0933,https://www.cvedetails.com/cve/CVE-1999-0933/,,,1999-10-01,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.,"{'http://www.osvdb.org/1096', 'http://www.securityfocus.com/bid/689'}"
CVE-1999-0932,https://www.cvedetails.com/cve/CVE-1999-0932/,,,1999-09-30,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.",{'http://www.securityfocus.com/bid/735'}
CVE-1999-0931,https://www.cvedetails.com/cve/CVE-1999-0931/,,Exec Code Overflow,1999-09-30,2008-09-09,5.0,None,Remote,Low,Not required,None,Partial,None,Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.,{'http://www.securityfocus.com/bid/734'}
CVE-1999-0929,https://www.cvedetails.com/cve/CVE-1999-0929/,,DoS,1999-06-16,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.,set()
CVE-1999-0928,https://www.cvedetails.com/cve/CVE-1999-0928/,,DoS Overflow,1999-05-23,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.,{'http://www.securityfocus.com/bid/278'}
CVE-1999-0927,https://www.cvedetails.com/cve/CVE-1999-0927/,,,1999-05-26,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.,"{'http://www.eeye.com/html/Research/Advisories/AD05261999.html', 'http://www.securityfocus.com/bid/279'}"
CVE-1999-0926,https://www.cvedetails.com/cve/CVE-1999-0926/,,DoS,1999-09-03,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.,{'http://archives.neohapsis.com/archives/bugtraq/1998_3/0742.html'}
CVE-1999-0925,https://www.cvedetails.com/cve/CVE-1999-0925/,,DoS,1999-09-03,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.,{'https://marc.info/?l=bugtraq&m=90486243124867&w=2'}
CVE-1999-0921,https://www.cvedetails.com/cve/CVE-1999-0921/,,DoS,1999-04-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.","{'http://www.iss.net/security_center/static/4291.php', 'http://www.securityfocus.com/bid/1879', 'http://www.securityfocus.com/archive/1/13204'}"
CVE-1999-0920,https://www.cvedetails.com/cve/CVE-1999-0920/,,Overflow +Priv,1999-05-26,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.,{'http://www.securityfocus.com/bid/283'}
CVE-1999-0918,https://www.cvedetails.com/cve/CVE-1999-0918/,CWE-20,DoS,1999-07-03,2018-10-12,7.8,None,Remote,Low,Not required,None,None,Complete,"Denial of service in various Windows systems via malformed, fragmented IGMP packets.","{'http://www.securityfocus.com/bid/514', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-034', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q238329'}"
CVE-1999-0917,https://www.cvedetails.com/cve/CVE-1999-0917/,,,1999-05-27,2021-07-22,5.1,None,Remote,High,Not required,Partial,Partial,Partial,The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q231452'}"
CVE-1999-0916,https://www.cvedetails.com/cve/CVE-1999-0916/,,,1999-06-29,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,WebTrends software stores account names and passwords in a file which does not have restricted access permissions.,set()
CVE-1999-0915,https://www.cvedetails.com/cve/CVE-1999-0915/,,,1999-10-28,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.,"{'http://www.osvdb.org/1129', 'http://www.securityfocus.com/bid/746'}"
CVE-1999-0914,https://www.cvedetails.com/cve/CVE-1999-0914/,,Overflow,1999-01-03,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.,{'http://www.securityfocus.com/bid/324'}
CVE-1999-0913,https://www.cvedetails.com/cve/CVE-1999-0913/,,Exec Code,1999-08-05,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.,"{'https://marc.info/?l=bugtraq&m=93383593909438&w=2', 'http://www.securityfocus.com/bid/564'}"
CVE-1999-0912,https://www.cvedetails.com/cve/CVE-1999-0912/,,DoS,1999-09-22,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.,"{'http://www.securityfocus.com/bid/653', 'http://www.osvdb.org/1079'}"
CVE-1999-0911,https://www.cvedetails.com/cve/CVE-1999-0911/,,Overflow,1999-08-27,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.","{'http://www.securityfocus.com/bid/612', 'https://www.debian.org/security/1999/19990210'}"
CVE-1999-0910,https://www.cvedetails.com/cve/CVE-1999-0910/,,,1999-09-10,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,"Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-035', 'http://www.securityfocus.com/bid/625'}"
CVE-1999-0909,https://www.cvedetails.com/cve/CVE-1999-0909/,CWE-264,Bypass,1999-09-20,2018-10-12,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the ""Spoofed Route Pointer"" vulnerability.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-038', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q238453', 'http://www.securityfocus.com/bid/646'}"
CVE-1999-0908,https://www.cvedetails.com/cve/CVE-1999-0908/,,DoS,1999-09-23,2018-10-30,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.,{'http://www.securityfocus.com/bid/655'}
CVE-1999-0907,https://www.cvedetails.com/cve/CVE-1999-0907/,,,1999-09-16,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,sccw allows local users to read arbitrary files.,set()
CVE-1999-0906,https://www.cvedetails.com/cve/CVE-1999-0906/,,Overflow,1999-09-23,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.,{'http://www.securityfocus.com/bid/656'}
CVE-1999-0905,https://www.cvedetails.com/cve/CVE-1999-0905/,,DoS,1999-10-21,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Axent Raptor firewall via malformed zero-length IP options.,"{'http://www.osvdb.org/1121', 'http://www.securityfocus.com/bid/736'}"
CVE-1999-0904,https://www.cvedetails.com/cve/CVE-1999-0904/,,DoS Overflow,1999-11-03,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.,{'http://www.securityfocus.com/bid/771'}
CVE-1999-0903,https://www.cvedetails.com/cve/CVE-1999-0903/,,,1999-10-26,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.,set()
CVE-1999-0902,https://www.cvedetails.com/cve/CVE-1999-0902/,,,1999-10-23,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,ypserv allows local administrators to modify password tables.,set()
CVE-1999-0901,https://www.cvedetails.com/cve/CVE-1999-0901/,,,1999-10-23,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,ypserv allows a local user to modify the GECOS and login shells of other users.,set()
CVE-1999-0900,https://www.cvedetails.com/cve/CVE-1999-0900/,,Overflow +Priv,1999-10-23,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.,set()
CVE-1999-0899,https://www.cvedetails.com/cve/CVE-1999-0899/,CWE-264,Exec Code,1999-11-04,2018-10-12,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.,"{'http://www.securityfocus.com/bid/769', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q243649'}"
CVE-1999-0898,https://www.cvedetails.com/cve/CVE-1999-0898/,CWE-119,DoS Overflow +Priv,1999-11-04,2018-10-12,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.,"{'http://www.securityfocus.com/bid/768', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q243649', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047'}"
CVE-1999-0896,https://www.cvedetails.com/cve/CVE-1999-0896/,,Exec Code Overflow,1999-11-04,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.,"{'http://service.real.com/help/faq/servg260.html', 'http://www.securityfocus.com/bid/767'}"
CVE-1999-0895,https://www.cvedetails.com/cve/CVE-1999-0895/,,,1999-10-20,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Firewall-1 does not properly restrict access to LDAP attributes.,"{'http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991020150002.21047.qmail@tarjan.mediaways.net', 'http://www.osvdb.org/1117', 'http://www.securityfocus.com/bid/725'}"
CVE-1999-0893,https://www.cvedetails.com/cve/CVE-1999-0893/,,,1999-10-11,2008-09-09,2.1,None,Local,Low,Not required,None,Partial,None,userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.,set()
CVE-1999-0892,https://www.cvedetails.com/cve/CVE-1999-0892/,,Overflow,1999-12-24,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.,set()
CVE-1999-0891,https://www.cvedetails.com/cve/CVE-1999-0891/,CWE-94,,1999-09-01,2021-07-22,5.0,None,Remote,Low,Not required,Partial,None,None,"The ""download behavior"" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.","{'http://www.securityfocus.com/bid/674', 'http://www.ciac.org/ciac/bulletins/k-002.shtml', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-040', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q242542', 'http://www.osvdb.org/11274', 'https://www.kb.cert.org/vuls/id/37828'}"
CVE-1999-0890,https://www.cvedetails.com/cve/CVE-1999-0890/,,Exec Code +Info,1999-09-16,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.,"{'http://www.securityfocus.com/bid/694', 'http://www.ihtmlmerchant.com/support_patches_feedback.htm'}"
CVE-1999-0889,https://www.cvedetails.com/cve/CVE-1999-0889/,,,1999-07-01,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.,{'http://www.osvdb.org/39'}
CVE-1999-0888,https://www.cvedetails.com/cve/CVE-1999-0888/,,+Priv,1999-08-16,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.",{'http://www.securityfocus.com/bid/585'}
CVE-1999-0887,https://www.cvedetails.com/cve/CVE-1999-0887/,,,1999-11-04,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.,"{'http://www.eeye.com/html/Research/Advisories/AD05261999.html', 'http://www.osvdb.org/1137'}"
CVE-1999-0886,https://www.cvedetails.com/cve/CVE-1999-0886/,CWE-16,,1999-09-17,2018-10-12,9.0,None,Remote,Low,???,Complete,Complete,Complete,The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q242294', 'http://www.securityfocus.com/bid/645', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-041'}"
CVE-1999-0885,https://www.cvedetails.com/cve/CVE-1999-0885/,,Exec Code,1999-11-03,2008-09-09,3.6,None,Local,Low,Not required,Partial,Partial,None,Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.,"{'http://www.securityfocus.com/bid/770', 'http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-11-01&msg=01BF261F.928821E0.kerb@fnusa.com'}"
CVE-1999-0884,https://www.cvedetails.com/cve/CVE-1999-0884/,,,1999-10-25,2018-05-03,5.0,None,Remote,Low,Not required,Partial,None,None,The Zeus web server administrative interface uses weak encryption for its passwords.,"{'http://www.osvdb.org/8186', 'http://www.securityfocus.com/bid/742', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3833'}"
CVE-1999-0883,https://www.cvedetails.com/cve/CVE-1999-0883/,,,1999-10-25,2018-05-03,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3380', 'http://www.osvdb.org/1126', 'http://www.securityfocus.com/bid/742'}"
CVE-1999-0882,https://www.cvedetails.com/cve/CVE-1999-0882/,,,1999-10-28,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.,set()
CVE-1999-0881,https://www.cvedetails.com/cve/CVE-1999-0881/,,,1999-10-26,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.,"{'http://www.securityfocus.com/bid/743', 'http://www.osvdb.org/1127'}"
CVE-1999-0880,https://www.cvedetails.com/cve/CVE-1999-0880/,,DoS,1999-10-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.",set()
CVE-1999-0879,https://www.cvedetails.com/cve/CVE-1999-0879/,,Overflow +Priv,1999-10-01,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.,set()
CVE-1999-0878,https://www.cvedetails.com/cve/CVE-1999-0878/,,Overflow +Priv,1999-08-22,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.,{'http://www.securityfocus.com/bid/599'}
CVE-1999-0877,https://www.cvedetails.com/cve/CVE-1999-0877/,CWE-200,+Info,1999-10-01,2021-07-22,4.3,None,Remote,Medium,Not required,Partial,None,None,Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q243638', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-042'}"
CVE-1999-0875,https://www.cvedetails.com/cve/CVE-1999-0875/,CWE-16,,1999-08-11,2018-10-30,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q216141', 'http://www.securityfocus.com/bid/578'}"
CVE-1999-0874,https://www.cvedetails.com/cve/CVE-1999-0874/,CWE-119,DoS Overflow,1999-06-16,2018-10-12,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-019', 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A915', 'http://www.ciac.org/ciac/bulletins/j-048.shtml', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q234905', 'http://www.eeye.com/html/Research/Advisories/AD06081999.html'}"
CVE-1999-0873,https://www.cvedetails.com/cve/CVE-1999-0873/,,Overflow,1999-10-30,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in Skyfull mail server via MAIL FROM command.,{'http://www.securityfocus.com/bid/759'}
CVE-1999-0872,https://www.cvedetails.com/cve/CVE-1999-0872/,,Overflow,1999-08-25,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.,"{'http://www.securityfocus.com/bid/759', 'http://www.securityfocus.com/bid/611'}"
CVE-1999-0867,https://www.cvedetails.com/cve/CVE-1999-0867/,CWE-20,DoS,1999-08-11,2018-10-12,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q238349', 'http://www.ciac.org/ciac/bulletins/j-058.shtml', 'http://www.securityfocus.com/bid/579'}"
CVE-1999-0866,https://www.cvedetails.com/cve/CVE-1999-0866/,,Overflow +Priv,1999-12-03,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in UnixWare xauto program allows local users to gain root privilege.,"{'http://www.securityfocus.com/bid/848', 'https://marc.info/?l=bugtraq&m=94530783815434&w=2', 'ftp://ftp.sco.com/SSE/security_bulletins/SB-99.24a', 'https://marc.info/?l=bugtraq&m=94606167110764&w=2', 'https://marc.info/?l=bugtraq&m=94581379905584&w=2'}"
CVE-1999-0865,https://www.cvedetails.com/cve/CVE-1999-0865/,,Overflow,1999-12-03,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.,"{'https://marc.info/?l=ntbugtraq&m=94454565726775&w=2', 'http://www.securityfocus.com/bid/860', 'https://marc.info/?l=bugtraq&m=94426440413027&w=2'}"
CVE-1999-0864,https://www.cvedetails.com/cve/CVE-1999-0864/,,,1999-12-03,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.,"{'https://marc.info/?l=bugtraq&m=94530783815434&w=2', 'http://www.securityfocus.com/bid/851', 'https://marc.info/?l=bugtraq&m=94606167110764&w=2', 'https://marc.info/?l=bugtraq&m=94581379905584&w=2', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991203020720.13115.qmail@nwcst289.netaddress.usa.net'}"
CVE-1999-0863,https://www.cvedetails.com/cve/CVE-1999-0863/,,Overflow,1999-11-08,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.",set()
CVE-1999-0862,https://www.cvedetails.com/cve/CVE-1999-0862/,,+Priv,1999-12-02,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.,set()
CVE-1999-0861,https://www.cvedetails.com/cve/CVE-1999-0861/,CWE-362,+Info,1999-08-11,2018-10-12,2.6,None,Remote,High,Not required,Partial,None,None,Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q244613', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-053'}"
CVE-1999-0860,https://www.cvedetails.com/cve/CVE-1999-0860/,,,1999-12-01,2018-10-30,2.1,None,Local,Low,Not required,Partial,None,None,Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.,{'http://www.securityfocus.com/bid/837'}
CVE-1999-0859,https://www.cvedetails.com/cve/CVE-1999-0859/,,,1999-12-01,2018-10-30,2.1,None,Local,Low,Not required,Partial,None,None,"Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.","{'http://www.securityfocus.com/bid/837', 'http://www.osvdb.org/6994'}"
CVE-1999-0858,https://www.cvedetails.com/cve/CVE-1999-0858/,CWE-16,,1999-12-02,2021-07-22,5.0,None,Remote,Low,Not required,None,Partial,None,Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-054', 'http://www.securityfocus.com/bid/846', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q247333'}"
CVE-1999-0857,https://www.cvedetails.com/cve/CVE-1999-0857/,,,1999-12-01,2008-09-09,2.1,None,Local,Low,Not required,None,Partial,None,FreeBSD gdc program allows local users to modify files via a symlink attack.,{'http://www.securityfocus.com/bid/835'}
CVE-1999-0856,https://www.cvedetails.com/cve/CVE-1999-0856/,,,1999-12-01,2008-09-09,5.0,None,Remote,Low,Not required,None,Partial,None,login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.,set()
CVE-1999-0855,https://www.cvedetails.com/cve/CVE-1999-0855/,,Overflow,1999-12-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in FreeBSD gdc program.,{'http://www.securityfocus.com/bid/834'}
CVE-1999-0854,https://www.cvedetails.com/cve/CVE-1999-0854/,,,1999-11-01,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.","{'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma@veronica.nl', 'http://www.ultimatebb.com/home/versions.shtml'}"
CVE-1999-0853,https://www.cvedetails.com/cve/CVE-1999-0853/,,Overflow +Priv,1999-12-01,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.,{'http://www.securityfocus.com/bid/847'}
CVE-1999-0852,https://www.cvedetails.com/cve/CVE-1999-0852/,,,1999-12-02,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.,{'http://www.securityfocus.com/bid/844'}
CVE-1999-0851,https://www.cvedetails.com/cve/CVE-1999-0851/,,DoS,1999-11-10,2018-10-30,2.1,None,Local,Low,Not required,None,None,Partial,Denial of service in BIND named via naptr.,"{'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194', 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt', 'http://www.securityfocus.com/bid/788'}"
CVE-1999-0850,https://www.cvedetails.com/cve/CVE-1999-0850/,,,1999-12-02,2008-09-09,3.6,None,Local,Low,Not required,Partial,Partial,None,The default permissions for Endymion MailMan allow local users to read email or modify files.,{'http://www.securityfocus.com/bid/845'}
CVE-1999-0849,https://www.cvedetails.com/cve/CVE-1999-0849/,,DoS,1999-11-10,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in BIND named via maxdname.,"{'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt', 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194', 'http://www.securityfocus.com/bid/788'}"
CVE-1999-0848,https://www.cvedetails.com/cve/CVE-1999-0848/,,DoS,1999-11-10,2018-10-30,5.0,None,Remote,Low,Not required,None,None,Partial,"Denial of service in BIND named via consuming more than ""fdmax"" file descriptors.","{'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194', 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt', 'http://www.securityfocus.com/bid/788'}"
CVE-1999-0847,https://www.cvedetails.com/cve/CVE-1999-0847/,,Overflow,1999-11-29,2008-09-05,5.0,None,Remote,Low,Not required,None,None,Partial,"Buffer overflow in free internet chess server (FICS) program, xboard.",set()
CVE-1999-0846,https://www.cvedetails.com/cve/CVE-1999-0846/,,DoS,1999-12-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in MDaemon 2.7 via a large number of connection attempts.,set()
CVE-1999-0845,https://www.cvedetails.com/cve/CVE-1999-0845/,,Overflow,1999-11-25,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in SCO su program allows local users to gain root access via a long username.,set()
CVE-1999-0844,https://www.cvedetails.com/cve/CVE-1999-0844/,,DoS,1999-11-24,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in MDaemon WorldClient and WebConfig services via a long URL.,"{'http://www.securityfocus.com/bid/820', 'http://www.securityfocus.com/bid/823'}"
CVE-1999-0843,https://www.cvedetails.com/cve/CVE-1999-0843/,,DoS,1999-11-04,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.,set()
CVE-1999-0842,https://www.cvedetails.com/cve/CVE-1999-0842/,,,1999-11-29,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.,"{'http://www.securityfocus.com/bid/827', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEAFCBAA.labs@ussrback.com', 'http://www.osvdb.org/1144'}"
CVE-1999-0841,https://www.cvedetails.com/cve/CVE-1999-0841/,,Overflow +Priv,1999-11-30,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.,"{'http://www.security-express.com/archives/bugtraq/1999-q4/0122.html', 'http://www.securiteam.com/exploits/3J5QQPPQ0O.html', 'http://www.securityfocus.com/bid/832', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3732'}"
CVE-1999-0840,https://www.cvedetails.com/cve/CVE-1999-0840/,,Overflow +Priv,1999-11-30,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3580', 'http://www.securiteam.com/exploits/3J5QQPPQ0O.html', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3579', 'http://www.security-express.com/archives/bugtraq/1999-q4/0122.html', 'http://www.securityfocus.com/bid/832'}"
CVE-1999-0839,https://www.cvedetails.com/cve/CVE-1999-0839/,CWE-264,+Priv,1999-11-29,2018-10-12,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-051', 'http://www.securityfocus.com/bid/828', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q246972'}"
CVE-1999-0838,https://www.cvedetails.com/cve/CVE-1999-0838/,,DoS Overflow,1999-12-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.,{'http://www.securityfocus.com/bid/859'}
CVE-1999-0837,https://www.cvedetails.com/cve/CVE-1999-0837/,,DoS,1999-11-10,2018-10-30,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Denial of service in BIND by improperly closing TCP sessions via so_linger.,"{'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt', 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194', 'http://www.securityfocus.com/bid/788'}"
CVE-1999-0835,https://www.cvedetails.com/cve/CVE-1999-0835/,,DoS,1999-11-10,2018-10-30,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Denial of service in BIND named via malformed SIG records.,"{'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt', 'http://www.securityfocus.com/bid/788'}"
CVE-1999-0834,https://www.cvedetails.com/cve/CVE-1999-0834/,,Overflow,1999-12-01,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.,{'http://www.securityfocus.com/bid/843'}
CVE-1999-0833,https://www.cvedetails.com/cve/CVE-1999-0833/,,Overflow,1999-11-10,2018-10-30,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in BIND 8.2 via NXT records.,"{'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt', 'http://www.securityfocus.com/bid/788'}"
CVE-1999-0832,https://www.cvedetails.com/cve/CVE-1999-0832/,,Exec Code Overflow,1999-11-09,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.,"{'https://www.debian.org/security/1999/19991111', 'https://www.redhat.com/support/errata/rh42-errata-general.html#NFS', 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-033.0.txt', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.20.9911091058140.12964-100000@mail.zigzag.pl', 'http://www.novell.com/linux/security/advisories/suse_security_announce_29.html', 'http://www.securityfocus.com/bid/782'}"
CVE-1999-0831,https://www.cvedetails.com/cve/CVE-1999-0831/,,DoS,1999-11-19,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Linux syslogd via a large number of connections.,"{'http://www.securityfocus.com/bid/809', 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-035.0.txt'}"
CVE-1999-0830,https://www.cvedetails.com/cve/CVE-1999-0830/,,Overflow,1999-11-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in SCO UnixWare Xsco command via a long argument.,set()
CVE-1999-0829,https://www.cvedetails.com/cve/CVE-1999-0829/,,,1999-11-01,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,HP Secure Web Console uses weak encryption.,set()
CVE-1999-0828,https://www.cvedetails.com/cve/CVE-1999-0828/,,,1999-12-02,2008-09-09,3.6,None,Local,Low,Not required,Partial,Partial,None,"UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.",{'http://www.securityfocus.com/bid/853'}
CVE-1999-0827,https://www.cvedetails.com/cve/CVE-1999-0827/,,,1999-11-01,2021-07-22,2.6,None,Remote,High,Not required,Partial,None,None,"By default, Internet Explorer 5.0 and other versions enables the ""Navigate sub-frames across different domains"" option, which allows frame spoofing.",set()
CVE-1999-0826,https://www.cvedetails.com/cve/CVE-1999-0826/,,Overflow +Priv,1999-12-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in FreeBSD angband allows local users to gain privileges.,"{'http://www.securityfocus.com/bid/840', 'http://www.osvdb.org/1151'}"
CVE-1999-0825,https://www.cvedetails.com/cve/CVE-1999-0825/,,,1999-12-03,2008-09-09,3.6,None,Local,Low,Not required,Partial,Partial,None,The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.,{'http://www.securityfocus.com/bid/849'}
CVE-1999-0824,https://www.cvedetails.com/cve/CVE-1999-0824/,,,1999-11-30,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.",{'http://www.securityfocus.com/bid/833'}
CVE-1999-0823,https://www.cvedetails.com/cve/CVE-1999-0823/,,Overflow +Priv,1999-12-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.,"{'http://www.osvdb.org/1150', 'http://www.securityfocus.com/bid/839'}"
CVE-1999-0822,https://www.cvedetails.com/cve/CVE-1999-0822/,,Overflow,1999-11-30,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.,{'http://www.securityfocus.com/bid/830'}
CVE-1999-0821,https://www.cvedetails.com/cve/CVE-1999-0821/,,+Priv,1999-11-08,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.,{'http://www.securityfocus.com/bid/838'}
CVE-1999-0820,https://www.cvedetails.com/cve/CVE-1999-0820/,,+Priv,1999-12-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.,"{'http://www.securityfocus.com/bid/838', 'http://www.osvdb.org/5996'}"
CVE-1999-0819,https://www.cvedetails.com/cve/CVE-1999-0819/,,,1999-12-01,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.",{'https://marc.info/?l=bugtraq&m=94398141118586&w=2'}
CVE-1999-0818,https://www.cvedetails.com/cve/CVE-1999-0818/,,Overflow,1999-11-20,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.,"{'http://www.securityfocus.com/bid/831', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=38433B7F5A.53F4SHADOWPENGUIN@fox.nightland.net'}"
CVE-1999-0817,https://www.cvedetails.com/cve/CVE-1999-0817/,,,1999-09-15,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.",set()
CVE-1999-0815,https://www.cvedetails.com/cve/CVE-1999-0815/,,DoS,1999-12-31,2017-10-10,5.0,None,Remote,Low,Not required,None,None,Partial,Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.,"{'https://support.microsoft.com/support/kb/articles/q196/2/70.asp', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/1974', 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A952'}"
CVE-1999-0814,https://www.cvedetails.com/cve/CVE-1999-0814/,,,1999-08-11,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.,{'https://www.redhat.com/support/errata/RHSA-1999-027.html'}
CVE-1999-0813,https://www.cvedetails.com/cve/CVE-1999-0813/,,+Priv,1999-08-10,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges.",set()
CVE-1999-0811,https://www.cvedetails.com/cve/CVE-1999-0811/,,Overflow,1999-07-21,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Samba smbd program via a malformed message command.,{'http://www.securityfocus.com/bid/536'}
CVE-1999-0810,https://www.cvedetails.com/cve/CVE-1999-0810/,,DoS,1999-07-21,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Denial of service in Samba NETBIOS name service daemon (nmbd).,set()
CVE-1999-0809,https://www.cvedetails.com/cve/CVE-1999-0809/,,,1999-07-09,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to ""Only accept cookies originating from the same server as the page being viewed"".",set()
CVE-1999-0808,https://www.cvedetails.com/cve/CVE-1999-0808/,,DoS Exec Code Overflow,1999-12-31,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.,"{'ftp://ftp.isc.org/isc/dhcp/dhcp-1.0-history/dhcp-1.0.0-1.0pl1.diff.gz', 'https://marc.info/?l=bugtraq&m=90221101925960&w=2', 'http://ciac.llnl.gov/ciac/bulletins/i-053.shtml'}"
CVE-1999-0807,https://www.cvedetails.com/cve/CVE-1999-0807/,,,1999-05-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.,set()
CVE-1999-0806,https://www.cvedetails.com/cve/CVE-1999-0806/,,Overflow,1999-05-10,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Solaris dtprintinfo program.,{'http://www.osvdb.org/6552'}
CVE-1999-0804,https://www.cvedetails.com/cve/CVE-1999-0804/,,DoS,1999-06-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.",{'http://www.securityfocus.com/bid/302'}
CVE-1999-0803,https://www.cvedetails.com/cve/CVE-1999-0803/,,,1999-05-25,2016-10-18,2.1,None,Local,Low,Not required,None,Partial,None,The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.,"{'http://www.osvdb.org/962', 'https://marc.info/?l=bugtraq&m=92765973207648&w=2'}"
CVE-1999-0802,https://www.cvedetails.com/cve/CVE-1999-0802/,CWE-119,Exec Code Overflow,1999-05-27,2021-07-22,7.6,None,Remote,High,Not required,Complete,Complete,Complete,Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q231450', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018'}"
CVE-1999-0801,https://www.cvedetails.com/cve/CVE-1999-0801/,,,1999-04-09,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.,"{'http://www.iss.net/security_center/static/2075.php', 'http://www.securityfocus.com/archive/1/13204'}"
CVE-1999-0794,https://www.cvedetails.com/cve/CVE-1999-0794/,CWE-59,,1999-10-01,2018-10-12,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q241900', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q241901', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-044', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q241902'}"
CVE-1999-0793,https://www.cvedetails.com/cve/CVE-1999-0793/,,,1999-11-17,2021-07-22,2.6,None,Remote,High,Not required,Partial,None,None,Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-043'}
CVE-1999-0791,https://www.cvedetails.com/cve/CVE-1999-0791/,,,1999-10-06,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol.",{'http://www.securityfocus.com/bid/695'}
CVE-1999-0789,https://www.cvedetails.com/cve/CVE-1999-0789/,,Overflow,1999-09-28,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in AIX ftpd in the libc library.,"{'http://www.securityfocus.com/bid/679', 'http://www.ciac.org/ciac/bulletins/j-072.shtml'}"
CVE-1999-0788,https://www.cvedetails.com/cve/CVE-1999-0788/,,DoS,1999-09-26,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Arkiea nlservd allows remote attackers to conduct a denial of service.,"{'http://www.securityfocus.com/bid/662', 'https://marc.info/?l=bugtraq&m=93837184228248&w=2'}"
CVE-1999-0787,https://www.cvedetails.com/cve/CVE-1999-0787/,,,1999-09-17,2016-10-18,2.1,None,Local,Low,Not required,None,Partial,None,The SSH authentication agent follows symlinks via a UNIX domain socket.,"{'https://marc.info/?l=bugtraq&m=93832856804415&w=2', 'https://marc.info/?l=bugtraq&m=93760201002154&w=2', 'http://www.securityfocus.com/bid/660'}"
CVE-1999-0786,https://www.cvedetails.com/cve/CVE-1999-0786/,,,1999-09-22,2018-10-30,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.,{'http://www.securityfocus.com/bid/659'}
CVE-1999-0785,https://www.cvedetails.com/cve/CVE-1999-0785/,,+Priv,1999-05-11,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The INN inndstart program allows local users to gain root privileges via the ""pathrun"" parameter in the inn.conf file.",{'http://www.securityfocus.com/bid/254'}
CVE-1999-0778,https://www.cvedetails.com/cve/CVE-1999-0778/,,Overflow,1999-06-25,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.,{'http://www.securityfocus.com/bid/488'}
CVE-1999-0777,https://www.cvedetails.com/cve/CVE-1999-0777/,CWE-264,,1999-09-23,2018-10-12,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have ""No Access"" permissions.","{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q242559', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q241407', 'http://www.securityfocus.com/bid/658'}"
CVE-1999-0776,https://www.cvedetails.com/cve/CVE-1999-0776/,,,1999-05-12,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.,{'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9905&L=NTBUGTRAQ&P=R1533'}
CVE-1999-0775,https://www.cvedetails.com/cve/CVE-1999-0775/,,,1999-06-10,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the ""established"" keyword in an access list.",set()
CVE-1999-0774,https://www.cvedetails.com/cve/CVE-1999-0774/,,Overflow,1999-08-31,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.",{'http://www.securityfocus.com/bid/617'}
CVE-1999-0773,https://www.cvedetails.com/cve/CVE-1999-0773/,,Overflow,1999-05-11,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Solaris lpset program allows local users to gain root access.,{'http://www.netspace.org/cgi-bin/wa?A2=ind9905B&L=bugtraq&P=R2017'}
CVE-1999-0772,https://www.cvedetails.com/cve/CVE-1999-0772/,,DoS,1999-06-01,2008-09-09,6.4,None,Remote,Low,Not required,Partial,None,Partial,Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.,set()
CVE-1999-0771,https://www.cvedetails.com/cve/CVE-1999-0771/,,,1999-05-26,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.,set()
CVE-1999-0770,https://www.cvedetails.com/cve/CVE-1999-0770/,,DoS,1999-07-29,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,"Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.","{'http://www.osvdb.org/1027', 'http://www.securityfocus.com/bid/549'}"
CVE-1999-0769,https://www.cvedetails.com/cve/CVE-1999-0769/,,,1999-08-25,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.,{'http://www.securityfocus.com/bid/611'}
CVE-1999-0768,https://www.cvedetails.com/cve/CVE-1999-0768/,,Overflow,1999-08-25,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.,{'http://www.securityfocus.com/bid/602'}
CVE-1999-0767,https://www.cvedetails.com/cve/CVE-1999-0767/,,Overflow,1999-09-08,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.",set()
CVE-1999-0766,https://www.cvedetails.com/cve/CVE-1999-0766/,CWE-16,Exec Code,1999-10-21,2021-07-23,9.3,None,Remote,Medium,Not required,Complete,Complete,Complete,The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q240346', 'http://www.securityfocus.com/bid/600', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-031'}"
CVE-1999-0765,https://www.cvedetails.com/cve/CVE-1999-0765/,,,1999-05-19,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.,"{'http://www.securityfocus.com/bid/262', 'ftp://patches.sgi.com/support/free/security/advisories/19990501-01-A'}"
CVE-1999-0764,https://www.cvedetails.com/cve/CVE-1999-0764/,,,1999-05-01,2008-09-09,6.4,None,Remote,Low,Not required,None,Partial,Partial,NetBSD allows ARP packets to overwrite static ARP entries.,{'http://www.osvdb.org/6539'}
CVE-1999-0763,https://www.cvedetails.com/cve/CVE-1999-0763/,,,1999-05-01,2008-09-09,6.4,None,Remote,Low,Not required,None,Partial,Partial,NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.,{'http://www.osvdb.org/6540'}
CVE-1999-0762,https://www.cvedetails.com/cve/CVE-1999-0762/,,,1999-05-24,2008-09-09,2.6,None,Remote,High,Not required,Partial,None,None,"When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the ""about"" protocol to gain access to browser information.",set()
CVE-1999-0759,https://www.cvedetails.com/cve/CVE-1999-0759/,,Overflow,1999-09-13,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in FuseMAIL POP service via long USER and PASS commands.,"{'http://www.securityfocus.com/bid/634', 'http://www.crosswinds.net/~fuseware/faq.html#8'}"
CVE-1999-0755,https://www.cvedetails.com/cve/CVE-1999-0755/,CWE-255,,1999-05-27,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,"Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the ""Save password"" option.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-017', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q230681'}"
CVE-1999-0754,https://www.cvedetails.com/cve/CVE-1999-0754/,,+Priv,1999-05-11,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.,"{'http://www.securityfocus.com/bid/255', 'https://www.redhat.com/corp/support/errata/inn99_05_22.html', 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt'}"
CVE-1999-0753,https://www.cvedetails.com/cve/CVE-1999-0753/,,,1999-08-17,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.,{'http://www.securityfocus.com/bid/591'}
CVE-1999-0752,https://www.cvedetails.com/cve/CVE-1999-0752/,,DoS Overflow,1999-07-06,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.,set()
CVE-1999-0751,https://www.cvedetails.com/cve/CVE-1999-0751/,,Overflow,1999-09-13,2018-05-03,5.0,None,Remote,Low,Not required,None,None,Partial,Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3256', 'http://www.securityfocus.com/bid/631'}"
CVE-1999-0750,https://www.cvedetails.com/cve/CVE-1999-0750/,,Exec Code,1999-09-13,2008-09-09,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.",{'http://www.securityfocus.com/bid/630'}
CVE-1999-0749,https://www.cvedetails.com/cve/CVE-1999-0749/,,Overflow,1999-08-16,2018-10-12,2.6,None,Remote,High,Not required,None,Partial,None,Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.,"{'http://www.securityfocus.com/bid/586', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-033'}"
CVE-1999-0748,https://www.cvedetails.com/cve/CVE-1999-0748/,,Overflow,1999-06-24,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflows in Red Hat net-tools package.,set()
CVE-1999-0747,https://www.cvedetails.com/cve/CVE-1999-0747/,,DoS,1999-08-18,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.,"{'http://www.securityfocus.com/bid/589', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSI.4.10.9908170253560.19291-100000@saturn.psn.net'}"
CVE-1999-0746,https://www.cvedetails.com/cve/CVE-1999-0746/,,DoS,1999-08-16,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.",{'http://www.securityfocus.com/bid/587'}
CVE-1999-0745,https://www.cvedetails.com/cve/CVE-1999-0745/,,Overflow,1999-08-18,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler.,"{'http://www.ciac.org/ciac/bulletins/j-059.shtml', 'http://www.securityfocus.com/bid/590'}"
CVE-1999-0743,https://www.cvedetails.com/cve/CVE-1999-0743/,,,1999-08-20,2018-05-03,2.1,None,Local,Low,Not required,None,Partial,None,Trn allows local users to overwrite other users' files via symlinks.,{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3144'}
CVE-1999-0742,https://www.cvedetails.com/cve/CVE-1999-0742/,,+Priv,1999-06-22,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"The Debian mailman package uses weak authentication, which allows attackers to gain privileges.",{'http://www.securityfocus.com/bid/480'}
CVE-1999-0741,https://www.cvedetails.com/cve/CVE-1999-0741/,,,1999-08-19,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,QMS CrownNet Unix Utilities for 2060 allows root to log on without a password.,{'http://www.securityfocus.com/bid/593'}
CVE-1999-0740,https://www.cvedetails.com/cve/CVE-1999-0740/,,DoS,1999-08-19,2008-09-09,6.4,None,Remote,Low,Not required,Partial,None,Partial,Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.,{'http://www.securityfocus.com/bid/594'}
CVE-1999-0739,https://www.cvedetails.com/cve/CVE-1999-0739/,,,1999-05-07,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}
CVE-1999-0738,https://www.cvedetails.com/cve/CVE-1999-0738/,,,1999-05-07,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}
CVE-1999-0737,https://www.cvedetails.com/cve/CVE-1999-0737/,,,1999-05-07,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013'}
CVE-1999-0736,https://www.cvedetails.com/cve/CVE-1999-0736/,,,1999-05-07,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013', 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932'}"
CVE-1999-0734,https://www.cvedetails.com/cve/CVE-1999-0734/,,,1999-08-19,2019-10-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/3133', 'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990819-dbaccess'}"
CVE-1999-0733,https://www.cvedetails.com/cve/CVE-1999-0733/,,Overflow,1999-06-26,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.,{'http://www.securityfocus.com/bid/490'}
CVE-1999-0732,https://www.cvedetails.com/cve/CVE-1999-0732/,,,1999-08-19,2016-09-17,2.1,None,Local,Low,Not required,None,Partial,None,The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links.,set()
CVE-1999-0731,https://www.cvedetails.com/cve/CVE-1999-0731/,,,1999-06-23,2021-01-20,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The KDE klock program allows local users to unlock a session using malformed input.,"{'http://www.securityfocus.com/bid/489', 'https://github.com/KDE/kde1-kdebase/commit/04906bd5de2f220bf100b605dad37b4a1d9a91a6'}"
CVE-1999-0730,https://www.cvedetails.com/cve/CVE-1999-0730/,,,1999-06-12,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.,set()
CVE-1999-0728,https://www.cvedetails.com/cve/CVE-1999-0728/,CWE-264,,1999-07-06,2018-10-12,7.8,None,Remote,Low,Not required,None,None,Complete,A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-024', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q236359'}"
CVE-1999-0727,https://www.cvedetails.com/cve/CVE-1999-0727/,,,1999-08-06,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.,{'http://www.osvdb.org/6127'}
CVE-1999-0726,https://www.cvedetails.com/cve/CVE-1999-0726/,CWE-20,DoS,1999-06-30,2018-10-12,7.8,None,Remote,Low,Not required,None,None,Complete,An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q234557', 'http://www.securityfocus.com/bid/499', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-023'}"
CVE-1999-0725,https://www.cvedetails.com/cve/CVE-1999-0725/,CWE-16,,1999-08-19,2018-10-12,7.1,None,Remote,Medium,Not required,Complete,None,None,"When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. ""Double Byte Code Page"".","{'http://www.securityfocus.com/bid/477', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2302', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q233335'}"
CVE-1999-0724,https://www.cvedetails.com/cve/CVE-1999-0724/,,Overflow,1999-08-12,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.,{'http://www.osvdb.org/6128'}
CVE-1999-0723,https://www.cvedetails.com/cve/CVE-1999-0723/,,DoS,1999-06-23,2018-10-12,7.1,None,Remote,Medium,Not required,None,None,Complete,The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.,"{'http://www.securityfocus.com/bid/478', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q233323', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-021', 'http://www.ciac.org/ciac/bulletins/j-049.shtml'}"
CVE-1999-0722,https://www.cvedetails.com/cve/CVE-1999-0722/,,,1999-08-08,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.,{'http://www.securityfocus.com/bid/558'}
CVE-1999-0721,https://www.cvedetails.com/cve/CVE-1999-0721/,CWE-20,DoS,1999-07-20,2018-10-12,7.8,None,Remote,Low,Not required,None,None,Complete,Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q231457', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-020', 'http://www.ciac.org/ciac/bulletins/j-049.shtml'}"
CVE-1999-0720,https://www.cvedetails.com/cve/CVE-1999-0720/,,,1999-08-23,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.,"{'http://www.securityfocus.com/bid/597', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=lcamtuf.4.05.9907041223290.355-300000@nimue.ids.pl'}"
CVE-1999-0719,https://www.cvedetails.com/cve/CVE-1999-0719/,,Exec Code,1999-08-05,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.,{'http://www.securityfocus.com/bid/563'}
CVE-1999-0717,https://www.cvedetails.com/cve/CVE-1999-0717/,,,1999-05-07,2018-10-12,2.6,None,Remote,High,Not required,None,Partial,None,A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-014', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q231304'}"
CVE-1999-0716,https://www.cvedetails.com/cve/CVE-1999-0716/,,Overflow,1999-05-17,2018-10-12,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q231605'}"
CVE-1999-0715,https://www.cvedetails.com/cve/CVE-1999-0715/,,DoS Exec Code Overflow,1999-05-20,2018-10-12,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q230677', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-016'}"
CVE-1999-0714,https://www.cvedetails.com/cve/CVE-1999-0714/,,,1999-02-15,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,Vulnerability in Compaq Tru64 UNIX edauth command.,set()
CVE-1999-0713,https://www.cvedetails.com/cve/CVE-1999-0713/,,+Priv,1999-06-11,2020-01-21,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.,{'http://www.ciac.org/ciac/bulletins/j-044.shtml'}
CVE-1999-0712,https://www.cvedetails.com/cve/CVE-1999-0712/,,,1999-04-27,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.,set()
CVE-1999-0711,https://www.cvedetails.com/cve/CVE-1999-0711/,,Exec Code,1999-04-29,2016-10-18,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.,"{'https://marc.info/?t=92550157100002&w=2&r=1', 'https://marc.info/?l=bugtraq&m=92609807906778&w=2'}"
CVE-1999-0710,https://www.cvedetails.com/cve/CVE-1999-0710/,,,1999-07-25,2018-05-03,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.","{'http://fedoranews.org/updates/FEDORA--.shtml', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/2385', 'https://www.redhat.com/support/errata/archives/rh52-errata-general.html#squid', 'https://www.redhat.com/support/errata/RHSA-2005-489.html', 'https://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html', 'http://www.securityfocus.com/bid/2059', 'https://www.redhat.com/support/errata/RHSA-1999-025.html', 'https://www.debian.org/security/2004/dsa-576'}"
CVE-1999-0708,https://www.cvedetails.com/cve/CVE-1999-0708/,,Overflow +Priv,1999-09-21,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.,{'http://www.securityfocus.com/bid/651'}
CVE-1999-0707,https://www.cvedetails.com/cve/CVE-1999-0707/,,,1999-07-01,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.,"{'http://www.ciac.org/ciac/bulletins/j-050.shtml', 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-099', 'http://www.securityfocus.com/bid/493'}"
CVE-1999-0705,https://www.cvedetails.com/cve/CVE-1999-0705/,,Overflow,1999-09-01,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in INN inews program.,{'http://www.securityfocus.com/bid/616'}
CVE-1999-0704,https://www.cvedetails.com/cve/CVE-1999-0704/,,Overflow,1999-09-16,2008-09-09,9.3,None,Remote,Medium,Not required,Complete,Complete,Complete,Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.,{'http://www.securityfocus.com/bid/614'}
CVE-1999-0703,https://www.cvedetails.com/cve/CVE-1999-0703/,,,1999-08-03,2008-09-09,3.6,None,Local,Low,Not required,None,Partial,Partial,"OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.",{'http://www.ciac.org/ciac/bulletins/j-066.shtml'}
CVE-1999-0702,https://www.cvedetails.com/cve/CVE-1999-0702/,CWE-94,,1999-09-10,2021-07-22,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the ""ImportExportFavorites"" vulnerability.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q241361', 'http://www.securityfocus.com/bid/627'}"
CVE-1999-0700,https://www.cvedetails.com/cve/CVE-1999-0700/,CWE-119,Overflow,1999-07-29,2018-10-12,6.2,None,Local,High,Not required,Complete,Complete,Complete,"Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-026', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q237185'}"
CVE-1999-0698,https://www.cvedetails.com/cve/CVE-1999-0698/,,DoS,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.,set()
CVE-1999-0697,https://www.cvedetails.com/cve/CVE-1999-0697/,,+Priv,1999-09-09,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,SCO Doctor allows local users to gain root privileges through a Tools option.,{'http://www.securityfocus.com/bid/621'}
CVE-1999-0696,https://www.cvedetails.com/cve/CVE-1999-0696/,,Overflow,1999-07-01,2018-10-30,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).,"{'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/188', 'http://www.ciac.org/ciac/bulletins/j-051.shtml', 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9908-102'}"
CVE-1999-0694,https://www.cvedetails.com/cve/CVE-1999-0694/,,DoS,1999-08-11,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,Denial of service in AIX ptrace system call allows local users to crash the system.,{'http://www.ciac.org/ciac/bulletins/j-055.shtml'}
CVE-1999-0692,https://www.cvedetails.com/cve/CVE-1999-0692/,,+Priv,1999-07-19,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.","{'ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P', 'http://www.ciac.org/ciac/bulletins/j-052.shtml'}"
CVE-1999-0691,https://www.cvedetails.com/cve/CVE-1999-0691/,,Overflow +Priv,1999-09-13,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.,"{'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3078', 'http://www.securityfocus.com/bid/635', 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192', 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103'}"
CVE-1999-0690,https://www.cvedetails.com/cve/CVE-1999-0690/,,,1999-07-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,HP CDE program includes the current directory in root's PATH variable.,"{'http://www.ciac.org/ciac/bulletins/j-053.shtml', 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-100'}"
CVE-1999-0689,https://www.cvedetails.com/cve/CVE-1999-0689/,,Exec Code,1999-09-13,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.,"{'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103', 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1880', 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192', 'http://www.securityfocus.com/bid/636'}"
CVE-1999-0688,https://www.cvedetails.com/cve/CVE-1999-0688/,,Overflow,1999-07-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.,"{'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-101', 'http://www.securityfocus.com/bid/545'}"
CVE-1999-0687,https://www.cvedetails.com/cve/CVE-1999-0687/,,Exec Code,1999-09-13,2018-10-30,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.","{'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192', 'http://www.ciac.org/ciac/bulletins/k-001.shtml', 'http://www.securityfocus.com/bid/637', 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103'}"
CVE-1999-0686,https://www.cvedetails.com/cve/CVE-1999-0686/,,DoS,1999-05-07,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.,"{'http://www.ciac.org/ciac/bulletins/j-046.shtml', 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-098'}"
CVE-1999-0685,https://www.cvedetails.com/cve/CVE-1999-0685/,,Overflow,1999-09-02,2008-09-09,5.1,None,Remote,High,Not required,Partial,Partial,Partial,Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.,{'http://www.securityfocus.com/bid/618'}
CVE-1999-0684,https://www.cvedetails.com/cve/CVE-1999-0684/,,DoS,1999-04-19,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Sendmail 8.8.6 in HPUX.,set()
CVE-1999-0683,https://www.cvedetails.com/cve/CVE-1999-0683/,,DoS,1999-07-30,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Gauntlet Firewall via a malformed ICMP packet.,"{'http://www.securityfocus.com/bid/556', 'http://www.osvdb.org/1029'}"
CVE-1999-0682,https://www.cvedetails.com/cve/CVE-1999-0682/,,,1999-08-06,2020-04-02,5.0,None,Remote,Low,Not required,None,None,Partial,"Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.","{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q237927', 'http://www.ciac.org/ciac/bulletins/j-056.shtml', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-027', 'http://www.securityfocus.com/bid/567'}"
CVE-1999-0680,https://www.cvedetails.com/cve/CVE-1999-0680/,CWE-287,DoS,1999-08-09,2018-10-12,5.0,None,Remote,Low,Not required,None,None,Partial,"Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.","{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q238600', 'http://www.securityfocus.com/bid/571', 'http://www.ciac.org/ciac/bulletins/j-057.shtml', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-028'}"
CVE-1999-0679,https://www.cvedetails.com/cve/CVE-1999-0679/,,Exec Code Overflow,1999-08-13,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.,"{'http://www.efnet.org/archive/servers/hybrid/ChangeLog', 'http://www.securityfocus.com/bid/581'}"
CVE-1999-0678,https://www.cvedetails.com/cve/CVE-1999-0678/,,,1999-01-17,2020-10-13,5.0,None,Remote,Low,Not required,Partial,None,None,"A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.",{'http://www.securityfocus.com/bid/318'}
CVE-1999-0677,https://www.cvedetails.com/cve/CVE-1999-0677/,,,1999-08-03,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,The WebRamp web administration utility has a default password.,{'http://www.securityfocus.com/bid/577'}
CVE-1999-0676,https://www.cvedetails.com/cve/CVE-1999-0676/,,,1999-08-09,2018-10-30,4.6,None,Local,Low,Not required,Partial,Partial,Partial,sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.,"{'http://www.securityfocus.com/templates/archive.pike?list=1&msg=19990809134220.A1191@hades.chaoz.org', 'http://www.securityfocus.com/bid/575'}"
CVE-1999-0675,https://www.cvedetails.com/cve/CVE-1999-0675/,,DoS,1999-08-09,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.,"{'http://www.securityfocus.com/bid/576', 'http://www.osvdb.org/1038', 'http://www.securityfocus.com/archive/1/23615'}"
CVE-1999-0674,https://www.cvedetails.com/cve/CVE-1999-0674/,,,1999-08-09,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.,"{'http://www.ciac.org/ciac/bulletins/j-067.shtml', 'http://www.securityfocus.com/bid/570'}"
CVE-1999-0673,https://www.cvedetails.com/cve/CVE-1999-0673/,,Overflow,1999-08-08,2008-09-09,5.1,None,Remote,High,Not required,Partial,Partial,Partial,Buffer overflow in ALMail32 POP3 client via From: or To: headers.,{'http://www.securityfocus.com/bid/574'}
CVE-1999-0672,https://www.cvedetails.com/cve/CVE-1999-0672/,,Overflow,1999-08-01,2008-09-09,5.1,None,Remote,High,Not required,Partial,Partial,Partial,Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.,{'http://www.securityfocus.com/bid/573'}
CVE-1999-0671,https://www.cvedetails.com/cve/CVE-1999-0671/,,Overflow,1999-08-03,2008-09-09,5.1,None,Remote,High,Not required,Partial,Partial,Partial,Buffer overflow in ToxSoft NextFTP client through CWD command.,{'http://www.securityfocus.com/bid/572'}
CVE-1999-0670,https://www.cvedetails.com/cve/CVE-1999-0670/,,Exec Code Overflow,1999-09-01,2021-07-22,4.0,None,Remote,High,Not required,Partial,Partial,None,Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.,"{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032', 'http://ciac.llnl.gov/ciac/bulletins/j-064.shtml'}"
CVE-1999-0669,https://www.cvedetails.com/cve/CVE-1999-0669/,,Exec Code,1999-09-01,2021-07-22,4.0,None,Remote,High,Not required,Partial,Partial,None,"The Eyedog ActiveX control is marked as ""safe for scripting"" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.",{'http://ciac.llnl.gov/ciac/bulletins/j-064.shtml'}
CVE-1999-0668,https://www.cvedetails.com/cve/CVE-1999-0668/,,Exec Code,1999-08-21,2021-07-22,5.1,None,Remote,High,Not required,Partial,Partial,Partial,"The scriptlet.typelib ActiveX control is marked as ""safe for scripting"" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032', 'http://ciac.llnl.gov/ciac/bulletins/j-064.shtml', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q240308', 'http://www.securityfocus.com/bid/598'}"
CVE-1999-0665,https://www.cvedetails.com/cve/CVE-1999-0665/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,An application-critical Windows NT registry key has an inappropriate value.,set()
CVE-1999-0664,https://www.cvedetails.com/cve/CVE-1999-0664/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,An application-critical Windows NT registry key has inappropriate permissions.,set()
CVE-1999-0663,https://www.cvedetails.com/cve/CVE-1999-0663/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.",set()
CVE-1999-0662,https://www.cvedetails.com/cve/CVE-1999-0662/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete.",set()
CVE-1999-0661,https://www.cvedetails.com/cve/CVE-1999-0661/,,,1999-01-01,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6.","{'https://marc.info/?l=bugtraq&m=102821663814127&w=2', 'https://marc.info/?l=bugtraq&m=102820843403741&w=2', 'https://www.cert.org/advisories/CA-1999-01.html', 'http://www.securityfocus.com/bid/5921', 'http://www.iss.net/security_center/static/10313.php', 'http://online.securityfocus.com/archive/1/294539', 'https://www.cert.org/advisories/CA-2002-28.html', 'https://www.cert.org/advisories/CA-1999-02.html', 'https://www.cert.org/advisories/CA-1994-14.html', 'https://www.cert.org/advisories/CA-1994-07.html'}"
CVE-1999-0657,https://www.cvedetails.com/cve/CVE-1999-0657/,,,1999-01-01,2007-07-21,0.0,None,Remote,Low,Not required,None,None,None,WinGate is being used.,set()
CVE-1999-0656,https://www.cvedetails.com/cve/CVE-1999-0656/,CWE-16,,1999-01-01,2017-07-11,5.0,None,Remote,Low,Not required,Partial,None,None,"The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.","{'https://exchange.xforce.ibmcloud.com/vulnerabilities/348', 'http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638'}"
CVE-1999-0654,https://www.cvedetails.com/cve/CVE-1999-0654/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The OS/2 or POSIX subsystem in NT is enabled.,set()
CVE-1999-0653,https://www.cvedetails.com/cve/CVE-1999-0653/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A component service related to NIS+ is running.,set()
CVE-1999-0651,https://www.cvedetails.com/cve/CVE-1999-0651/,,,1999-01-01,2005-10-20,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,The rsh/rlogin service is running.,set()
CVE-1999-0650,https://www.cvedetails.com/cve/CVE-1999-0650/,,,1999-01-01,2017-07-11,5.0,None,Remote,Low,Not required,Partial,None,None,"The netstat service is running, which provides sensitive information to remote attackers.",{'https://exchange.xforce.ibmcloud.com/vulnerabilities/72'}
CVE-1999-0641,https://www.cvedetails.com/cve/CVE-1999-0641/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The UUCP service is running.,set()
CVE-1999-0640,https://www.cvedetails.com/cve/CVE-1999-0640/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The Gopher service is running.,set()
CVE-1999-0639,https://www.cvedetails.com/cve/CVE-1999-0639/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The chargen service is running.,set()
CVE-1999-0638,https://www.cvedetails.com/cve/CVE-1999-0638/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The daytime service is running.,set()
CVE-1999-0637,https://www.cvedetails.com/cve/CVE-1999-0637/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The systat service is running.,set()
CVE-1999-0636,https://www.cvedetails.com/cve/CVE-1999-0636/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The discard service is running.,set()
CVE-1999-0635,https://www.cvedetails.com/cve/CVE-1999-0635/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The echo service is running.,"{'http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html', 'https://secunia.com/advisories/18514'}"
CVE-1999-0632,https://www.cvedetails.com/cve/CVE-1999-0632/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The RPC portmapper service is running.,set()
CVE-1999-0630,https://www.cvedetails.com/cve/CVE-1999-0630/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The NT Alerter and Messenger services are running.,set()
CVE-1999-0629,https://www.cvedetails.com/cve/CVE-1999-0629/,,,1999-01-01,2010-12-01,0.0,None,Remote,Low,Not required,None,None,None,The ident/identd service is running.,set()
CVE-1999-0625,https://www.cvedetails.com/cve/CVE-1999-0625/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The rpc.rquotad service is running.,set()
CVE-1999-0624,https://www.cvedetails.com/cve/CVE-1999-0624/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The rstat/rstatd service is running.,set()
CVE-1999-0618,https://www.cvedetails.com/cve/CVE-1999-0618/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The rexec service is running.,set()
CVE-1999-0613,https://www.cvedetails.com/cve/CVE-1999-0613/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,The rpc.sprayd service is running.,set()
CVE-1999-0611,https://www.cvedetails.com/cve/CVE-1999-0611/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A system-critical Windows NT registry key has an inappropriate value.,set()
CVE-1999-0610,https://www.cvedetails.com/cve/CVE-1999-0610/,,,1999-04-01,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,An incorrect configuration of the Webcart CGI program could disclose private information.,{'https://marc.info/?l=bugtraq&m=92462991805485&w=2'}
CVE-1999-0609,https://www.cvedetails.com/cve/CVE-1999-0609/,,,1999-04-01,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"An incorrect configuration of the SoftCart CGI program ""SoftCart.exe"" could disclose private information.",{'https://marc.info/?l=bugtraq&m=92462991805485&w=2'}
CVE-1999-0608,https://www.cvedetails.com/cve/CVE-1999-0608/,,,1999-04-01,2017-10-10,5.0,None,Remote,Low,Not required,Partial,None,None,"An incorrect configuration of the PDG Shopping Cart CGI program ""shopper.cgi"" could disclose private information.","{'http://www.pdgsoft.com/Security/security.html.', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3857', 'https://marc.info/?l=bugtraq&m=92462991805485&w=2'}"
CVE-1999-0607,https://www.cvedetails.com/cve/CVE-1999-0607/,,+Priv,1999-04-20,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges.",{'https://marc.info/?l=bugtraq&m=92462991805485&w=2'}
CVE-1999-0606,https://www.cvedetails.com/cve/CVE-1999-0606/,CWE-200,+Info,1999-04-01,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"An incorrect configuration of the EZMall 2000 shopping cart  CGI program ""mall2000.cgi"" could disclose private information.",{'https://marc.info/?l=bugtraq&m=92462991805485&w=2'}
CVE-1999-0605,https://www.cvedetails.com/cve/CVE-1999-0605/,CWE-200,+Info,1999-04-01,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,An incorrect configuration of the Order Form 1.0 shopping cart  CGI program could disclose private information.,{'https://marc.info/?l=bugtraq&m=92462991805485&w=2'}
CVE-1999-0604,https://www.cvedetails.com/cve/CVE-1999-0604/,,,1999-04-20,2016-10-18,5.0,None,Remote,Low,Not required,Partial,None,None,"An incorrect configuration of the WebStore 1.0 shopping cart CGI program ""web_store.cgi"" could disclose private information.",{'https://marc.info/?l=bugtraq&m=92462991805485&w=2'}
CVE-1999-0603,https://www.cvedetails.com/cve/CVE-1999-0603/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.",set()
CVE-1999-0602,https://www.cvedetails.com/cve/CVE-1999-0602/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A network intrusion detection system (IDS) does not properly reassemble fragmented packets.,set()
CVE-1999-0601,https://www.cvedetails.com/cve/CVE-1999-0601/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.,set()
CVE-1999-0600,https://www.cvedetails.com/cve/CVE-1999-0600/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A network intrusion detection system (IDS) does not verify the checksum on a packet.,set()
CVE-1999-0599,https://www.cvedetails.com/cve/CVE-1999-0599/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.,set()
CVE-1999-0598,https://www.cvedetails.com/cve/CVE-1999-0598/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection.",set()
CVE-1999-0597,https://www.cvedetails.com/cve/CVE-1999-0597/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.,set()
CVE-1999-0596,https://www.cvedetails.com/cve/CVE-1999-0596/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A Windows NT log file has an inappropriate maximum size or retention period.,set()
CVE-1999-0594,https://www.cvedetails.com/cve/CVE-1999-0594/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.,set()
CVE-1999-0593,https://www.cvedetails.com/cve/CVE-1999-0593/,,,1999-01-01,2017-07-11,4.9,None,Local,Low,Not required,None,None,Complete,The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.,"{'https://exchange.xforce.ibmcloud.com/vulnerabilities/1291', 'https://technet.microsoft.com/en-us/library/cc722469.aspx', 'https://www.microsoft.com/technet/archive/winntas/deploy/confeat/06wntpcc.mspx?mfr=true', 'http://osvdb.org/59333'}"
CVE-1999-0592,https://www.cvedetails.com/cve/CVE-1999-0592/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The Logon box of a Windows NT system displays the name of the last user who logged in.,set()
CVE-1999-0591,https://www.cvedetails.com/cve/CVE-1999-0591/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,An event log in Windows NT has inappropriate access permissions.,set()
CVE-1999-0589,https://www.cvedetails.com/cve/CVE-1999-0589/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A system-critical Windows NT registry key has inappropriate permissions.,set()
CVE-1999-0588,https://www.cvedetails.com/cve/CVE-1999-0588/,,,1999-01-01,2005-10-20,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,A filter in a router or firewall allows unusual fragmented packets.,set()
CVE-1999-0587,https://www.cvedetails.com/cve/CVE-1999-0587/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data.",set()
CVE-1999-0586,https://www.cvedetails.com/cve/CVE-1999-0586/,,,1999-01-01,2014-11-04,0.0,None,Remote,Low,Not required,None,None,None,A network service is running on a nonstandard port.,set()
CVE-1999-0584,https://www.cvedetails.com/cve/CVE-1999-0584/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A Windows NT file system is not NTFS.,set()
CVE-1999-0583,https://www.cvedetails.com/cve/CVE-1999-0583/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,There is a one-way or two-way trust relationship between Windows NT domains.,set()
CVE-1999-0581,https://www.cvedetails.com/cve/CVE-1999-0581/,,,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.",set()
CVE-1999-0580,https://www.cvedetails.com/cve/CVE-1999-0580/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.",set()
CVE-1999-0579,https://www.cvedetails.com/cve/CVE-1999-0579/,,,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.,set()
CVE-1999-0578,https://www.cvedetails.com/cve/CVE-1999-0578/,,,1999-01-01,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.,set()
CVE-1999-0577,https://www.cvedetails.com/cve/CVE-1999-0577/,,,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.,set()
CVE-1999-0571,https://www.cvedetails.com/cve/CVE-1999-0571/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts.,set()
CVE-1999-0570,https://www.cvedetails.com/cve/CVE-1999-0570/,,,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Windows NT is not using a password filter utility, e.g. PASSFILT.DLL.",set()
CVE-1999-0569,https://www.cvedetails.com/cve/CVE-1999-0569/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file.",set()
CVE-1999-0568,https://www.cvedetails.com/cve/CVE-1999-0568/,,,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,rpc.admind in Solaris is not running in a secure mode.,set()
CVE-1999-0565,https://www.cvedetails.com/cve/CVE-1999-0565/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A Sendmail alias allows input to be piped to a program.,set()
CVE-1999-0564,https://www.cvedetails.com/cve/CVE-1999-0564/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled.,set()
CVE-1999-0561,https://www.cvedetails.com/cve/CVE-1999-0561/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,IIS has the #exec function enabled for Server Side Include (SSI) files.,set()
CVE-1999-0560,https://www.cvedetails.com/cve/CVE-1999-0560/,,,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A system-critical Windows NT file or directory has inappropriate permissions.,set()
CVE-1999-0559,https://www.cvedetails.com/cve/CVE-1999-0559/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A system-critical Unix file or directory has inappropriate permissions.,set()
CVE-1999-0556,https://www.cvedetails.com/cve/CVE-1999-0556/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Two or more Unix accounts have the same UID.,set()
CVE-1999-0555,https://www.cvedetails.com/cve/CVE-1999-0555/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A Unix account with a name other than ""root"" has UID 0, i.e. root privileges.",set()
CVE-1999-0554,https://www.cvedetails.com/cve/CVE-1999-0554/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"NFS exports system-critical data to the world, e.g. / or a password file.",set()
CVE-1999-0549,https://www.cvedetails.com/cve/CVE-1999-0549/,,,1999-01-01,2008-09-05,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Windows NT automatically logs in an administrator upon rebooting.,set()
CVE-1999-0548,https://www.cvedetails.com/cve/CVE-1999-0548/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A superfluous NFS server is running, but it is not importing or exporting any file systems.",set()
CVE-1999-0547,https://www.cvedetails.com/cve/CVE-1999-0547/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,An SSH server allows authentication through the .rhosts file.,set()
CVE-1999-0539,https://www.cvedetails.com/cve/CVE-1999-0539/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A trust relationship exists between two Unix hosts.,set()
CVE-1999-0530,https://www.cvedetails.com/cve/CVE-1999-0530/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A system is operating in ""promiscuous"" mode which allows it to perform packet sniffing.",set()
CVE-1999-0529,https://www.cvedetails.com/cve/CVE-1999-0529/,,,1999-01-01,2005-10-20,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.",set()
CVE-1999-0528,https://www.cvedetails.com/cve/CVE-1999-0528/,,,1999-01-01,2005-10-20,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.,set()
CVE-1999-0527,https://www.cvedetails.com/cve/CVE-1999-0527/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"The permissions for system-critical data in an anonymous FTP account are inappropriate.  For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as ""ls"" can be overwritten.",set()
CVE-1999-0523,https://www.cvedetails.com/cve/CVE-1999-0523/,,,1999-01-01,2010-12-01,0.0,None,Remote,Low,Not required,None,None,None,ICMP echo (ping) is allowed from arbitrary hosts.,set()
CVE-1999-0520,https://www.cvedetails.com/cve/CVE-1999-0520/,,,1999-01-01,2005-10-20,6.4,None,Remote,Low,Not required,Partial,Partial,None,A system-critical NETBIOS/SMB share has inappropriate access control.,set()
CVE-1999-0515,https://www.cvedetails.com/cve/CVE-1999-0515/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.",set()
CVE-1999-0512,https://www.cvedetails.com/cve/CVE-1999-0512/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.",set()
CVE-1999-0497,https://www.cvedetails.com/cve/CVE-1999-0497/,,,1999-01-01,2007-07-13,0.0,None,Remote,Low,Not required,None,None,None,Anonymous FTP is enabled.,set()
CVE-1999-0495,https://www.cvedetails.com/cve/CVE-1999-0495/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A remote attacker can gain access to a file system using ..  (dot dot) when accessing SMB shares.,set()
CVE-1999-0493,https://www.cvedetails.com/cve/CVE-1999-0493/,,,1999-06-07,2018-10-30,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.","{'http://www.ciac.org/ciac/bulletins/j-045.shtml', 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba', 'http://www.securityfocus.com/bid/450', 'https://www.cert.org/advisories/CA-99-05-statd-automountd.html', 'https://marc.info/?l=bugtraq&m=91547759121289&w=2'}"
CVE-1999-0492,https://www.cvedetails.com/cve/CVE-1999-0492/,,,1999-04-23,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.,set()
CVE-1999-0491,https://www.cvedetails.com/cve/CVE-1999-0491/,CWE-94,Exec Code,1999-04-20,2014-12-31,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.,"{'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-008.0.txt', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9904202114070.6623-100000@smooth.Operator.org', 'http://www.securityfocus.com/bid/119'}"
CVE-1999-0490,https://www.cvedetails.com/cve/CVE-1999-0490/,,,1999-04-21,2021-07-22,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012'}
CVE-1999-0489,https://www.cvedetails.com/cve/CVE-1999-0489/,,,1999-05-17,2018-10-12,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of ""untrusted scripted paste"" as described in MS:MS98-013.",{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015'}
CVE-1999-0488,https://www.cvedetails.com/cve/CVE-1999-0488/,,,1999-04-21,2021-07-22,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the ""cross frame"" vulnerability.",{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012'}
CVE-1999-0487,https://www.cvedetails.com/cve/CVE-1999-0487/,,,1999-05-01,2021-07-22,2.6,None,Remote,High,Not required,Partial,None,None,The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-011'}
CVE-1999-0485,https://www.cvedetails.com/cve/CVE-1999-0485/,,,1999-02-19,2008-09-09,2.6,None,Remote,High,Not required,None,None,Partial,Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.,{'http://www.osvdb.org/7558'}
CVE-1999-0484,https://www.cvedetails.com/cve/CVE-1999-0484/,,Overflow,1999-02-23,2008-09-09,2.1,None,Local,Low,Not required,None,Partial,None,Buffer overflow in OpenBSD ping.,{'http://www.osvdb.org/6130'}
CVE-1999-0483,https://www.cvedetails.com/cve/CVE-1999-0483/,,,1999-02-25,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,OpenBSD crash using nlink value in FFS and EXT2FS filesystems.,{'http://www.osvdb.org/6129'}
CVE-1999-0482,https://www.cvedetails.com/cve/CVE-1999-0482/,,,1999-03-21,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"OpenBSD kernel crash through TSS handling, as caused by the crashme program.",{'http://www.osvdb.org/7557'}
CVE-1999-0481,https://www.cvedetails.com/cve/CVE-1999-0481/,,DoS,1999-03-22,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"Denial of service in ""poll"" in OpenBSD.",{'http://www.osvdb.org/7556'}
CVE-1999-0480,https://www.cvedetails.com/cve/CVE-1999-0480/,,DoS,1999-04-01,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.,set()
CVE-1999-0479,https://www.cvedetails.com/cve/CVE-1999-0479/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.,{'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-092'}
CVE-1999-0477,https://www.cvedetails.com/cve/CVE-1999-0477/,,,1999-12-25,2008-09-05,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.",{'http://www.securityfocus.com/bid/115'}
CVE-1999-0476,https://www.cvedetails.com/cve/CVE-1999-0476/,,,1999-03-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.",set()
CVE-1999-0475,https://www.cvedetails.com/cve/CVE-1999-0475/,,,1999-04-05,2008-09-09,1.2,None,Local,High,Not required,Partial,None,None,A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.,set()
CVE-1999-0474,https://www.cvedetails.com/cve/CVE-1999-0474/,,,1999-04-05,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.,set()
CVE-1999-0473,https://www.cvedetails.com/cve/CVE-1999-0473/,,,1999-04-07,2008-09-09,2.1,None,Local,Low,Not required,None,Partial,None,The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.,{'http://www.securityfocus.com/bid/145'}
CVE-1999-0472,https://www.cvedetails.com/cve/CVE-1999-0472/,,,1999-04-07,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"The SNMP default community name ""public"" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.",set()
CVE-1999-0471,https://www.cvedetails.com/cve/CVE-1999-0471/,,,1999-04-09,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the ""cancel"" button.",set()
CVE-1999-0470,https://www.cvedetails.com/cve/CVE-1999-0470/,,,1999-04-09,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.",{'http://www.securityfocus.com/bid/482'}
CVE-1999-0469,https://www.cvedetails.com/cve/CVE-1999-0469/,,,1999-04-01,2021-07-22,5.0,None,Remote,Low,Not required,Partial,None,None,"Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.",set()
CVE-1999-0468,https://www.cvedetails.com/cve/CVE-1999-0468/,,,1999-04-09,2021-07-22,2.6,None,Remote,High,Not required,Partial,None,None,Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012'}
CVE-1999-0467,https://www.cvedetails.com/cve/CVE-1999-0467/,,,1999-04-01,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the ""template"" parameter.",set()
CVE-1999-0466,https://www.cvedetails.com/cve/CVE-1999-0466/,,,1999-04-21,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.,{'http://www.osvdb.org/905'}
CVE-1999-0465,https://www.cvedetails.com/cve/CVE-1999-0465/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.,set()
CVE-1999-0464,https://www.cvedetails.com/cve/CVE-1999-0464/,,DoS,1999-01-04,2016-10-18,2.1,None,Local,Low,Not required,None,None,Partial,Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.,"{'http://www.osvdb.org/6609', 'https://marc.info/?l=bugtraq&m=91592136122066&w=2', 'https://marc.info/?l=bugtraq&m=91553066310826&w=2'}"
CVE-1999-0462,https://www.cvedetails.com/cve/CVE-1999-0462/,,,1999-03-17,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.",{'http://www.securityfocus.com/bid/339'}
CVE-1999-0461,https://www.cvedetails.com/cve/CVE-1999-0461/,,,1999-01-28,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.",set()
CVE-1999-0460,https://www.cvedetails.com/cve/CVE-1999-0460/,,DoS Overflow,1999-02-19,2008-09-05,2.1,None,Local,Low,Not required,None,None,Partial,Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.,{'http://www.securityfocus.com/bid/312'}
CVE-1999-0459,https://www.cvedetails.com/cve/CVE-1999-0459/,,DoS,1999-02-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.",set()
CVE-1999-0458,https://www.cvedetails.com/cve/CVE-1999-0458/,,,1999-01-06,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.,{'http://www.osvdb.org/915'}
CVE-1999-0457,https://www.cvedetails.com/cve/CVE-1999-0457/,,+Priv,1999-01-17,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Linux ftpwatch program allows local users to gain root privileges.,{'http://www.securityfocus.com/bid/317'}
CVE-1999-0455,https://www.cvedetails.com/cve/CVE-1999-0455/,,,1999-12-25,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.",{'http://www.securityfocus.com/bid/115'}
CVE-1999-0454,https://www.cvedetails.com/cve/CVE-1999-0454/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso.",set()
CVE-1999-0453,https://www.cvedetails.com/cve/CVE-1999-0453/,CWE-200,+Info,1999-01-01,2008-09-05,5.0,None,Remote,Low,Not required,Partial,None,None,"An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).",set()
CVE-1999-0452,https://www.cvedetails.com/cve/CVE-1999-0452/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A service or application has a backdoor password that was placed there by the developer.,set()
CVE-1999-0451,https://www.cvedetails.com/cve/CVE-1999-0451/,,DoS,1999-01-19,2008-09-05,2.1,None,Local,Low,Not required,None,None,Partial,Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.,{'http://www.securityfocus.com/bid/343'}
CVE-1999-0450,https://www.cvedetails.com/cve/CVE-1999-0450/,,,1999-01-26,2020-11-23,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).",{'http://www.securityfocus.com/bid/194'}
CVE-1999-0449,https://www.cvedetails.com/cve/CVE-1999-0449/,,DoS,1999-01-26,2008-09-09,7.8,None,Remote,Low,Not required,None,None,Complete,"The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.","{'http://www.securityfocus.com/bid/193', 'http://www.osvdb.org/3', 'http://www.osvdb.org/2', 'http://www.osvdb.org/4'}"
CVE-1999-0448,https://www.cvedetails.com/cve/CVE-1999-0448/,,,1999-01-01,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.",set()
CVE-1999-0447,https://www.cvedetails.com/cve/CVE-1999-0447/,,+Priv,1999-04-01,2013-07-23,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Local users can gain privileges using the debug utility in the MPE/iX operating system.,{'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMP9904-006'}
CVE-1999-0446,https://www.cvedetails.com/cve/CVE-1999-0446/,,DoS,1999-04-12,2008-09-09,2.1,None,Local,Low,Not required,None,None,Partial,"Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS.",{'http://www.osvdb.org/7051'}
CVE-1999-0445,https://www.cvedetails.com/cve/CVE-1999-0445/,,,1999-04-01,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.",{'http://www.osvdb.org/1104'}
CVE-1999-0444,https://www.cvedetails.com/cve/CVE-1999-0444/,,DoS,1999-04-12,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.",set()
CVE-1999-0443,https://www.cvedetails.com/cve/CVE-1999-0443/,,,1999-04-01,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.,{'http://www.securityfocus.com/archive/1/13204'}
CVE-1999-0442,https://www.cvedetails.com/cve/CVE-1999-0442/,,,1999-01-07,2018-10-30,2.1,None,Local,Low,Not required,None,Partial,None,Solaris ff.core allows local users to modify files.,{'http://www.securityfocus.com/bid/327'}
CVE-1999-0441,https://www.cvedetails.com/cve/CVE-1999-0441/,,DoS Overflow,1999-02-22,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service.,"{'http://www.eeye.com/html/Research/Advisories/AD02221999.html', 'http://www.securityfocus.com/bid/509'}"
CVE-1999-0440,https://www.cvedetails.com/cve/CVE-1999-0440/,,Exec Code,1999-03-01,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.,"{'http://java.sun.com/pr/1999/03/pr990329-01.html', 'http://www.securityfocus.com/bid/1939', 'https://marc.info/?l=bugtraq&m=92333596624452&w=2'}"
CVE-1999-0439,https://www.cvedetails.com/cve/CVE-1999-0439/,,Exec Code Overflow,1999-04-05,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.,set()
CVE-1999-0438,https://www.cvedetails.com/cve/CVE-1999-0438/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address.",set()
CVE-1999-0437,https://www.cvedetails.com/cve/CVE-1999-0437/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.,set()
CVE-1999-0436,https://www.cvedetails.com/cve/CVE-1999-0436/,,+Priv,1999-03-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.,{'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-095'}
CVE-1999-0435,https://www.cvedetails.com/cve/CVE-1999-0435/,,+Priv,1999-03-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.,set()
CVE-1999-0434,https://www.cvedetails.com/cve/CVE-1999-0434/,,DoS +Priv,1999-03-30,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.",{'http://www.securityfocus.com/bid/359'}
CVE-1999-0433,https://www.cvedetails.com/cve/CVE-1999-0433/,,DoS +Priv,1999-03-21,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.",set()
CVE-1999-0432,https://www.cvedetails.com/cve/CVE-1999-0432/,,+Priv,1999-03-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,ftp on HP-UX 11.00 allows local users to gain privileges.,{'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-094'}
CVE-1999-0431,https://www.cvedetails.com/cve/CVE-1999-0431/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.",set()
CVE-1999-0430,https://www.cvedetails.com/cve/CVE-1999-0430/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload.,{'http://www.osvdb.org/1103'}
CVE-1999-0429,https://www.cvedetails.com/cve/CVE-1999-0429/,,,1999-03-01,2016-10-18,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the ""Encrypt Saved Mail"" preference.","{'https://marc.info/?l=bugtraq&m=92241547418689&w=2', 'https://marc.info/?l=bugtraq&m=92221437025743&w=2', 'https://marc.info/?l=bugtraq&m=92246997917866&w=2', 'https://marc.info/?l=bugtraq&m=92249282302994&w=2'}"
CVE-1999-0428,https://www.cvedetails.com/cve/CVE-1999-0428/,CWE-384,Bypass,1999-03-22,2020-10-13,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.,{'http://www.osvdb.org/3936'}
CVE-1999-0426,https://www.cvedetails.com/cve/CVE-1999-0426/,,,1999-03-01,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.,set()
CVE-1999-0425,https://www.cvedetails.com/cve/CVE-1999-0425/,,,1999-03-18,2008-09-09,6.4,None,Remote,Low,Not required,None,Partial,Partial,talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.,set()
CVE-1999-0424,https://www.cvedetails.com/cve/CVE-1999-0424/,,,1999-03-18,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.,set()
CVE-1999-0422,https://www.cvedetails.com/cve/CVE-1999-0422/,,,1999-03-17,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the ""noexec"" flag set.",set()
CVE-1999-0421,https://www.cvedetails.com/cve/CVE-1999-0421/,,,1999-03-17,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.","{'http://www.securityfocus.com/bid/338', 'http://www.osvdb.org/981'}"
CVE-1999-0420,https://www.cvedetails.com/cve/CVE-1999-0420/,,+Priv,1999-03-17,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.,set()
CVE-1999-0419,https://www.cvedetails.com/cve/CVE-1999-0419/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service.",set()
CVE-1999-0418,https://www.cvedetails.com/cve/CVE-1999-0418/,,DoS,1999-03-08,2016-10-18,6.4,None,Remote,Low,Not required,Partial,None,Partial,"Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many ""RCPT TO"" commands in the same connection.",{'https://marc.info/?l=bugtraq&m=92100018214316&w=2'}
CVE-1999-0417,https://www.cvedetails.com/cve/CVE-1999-0417/,,DoS,1999-03-09,2018-10-30,2.1,None,Local,Low,Not required,None,None,Partial,64 bit Solaris 7 procfs allows local users to perform a denial of service.,"{'http://www.securityfocus.com/bid/448', 'http://www.osvdb.org/1001'}"
CVE-1999-0416,https://www.cvedetails.com/cve/CVE-1999-0416/,,,1999-03-11,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.,"{'https://www.cisco.com/warp/public/770/7xxconn-pub.shtml', 'http://ciac.llnl.gov/ciac/bulletins/j-034.shtml'}"
CVE-1999-0415,https://www.cvedetails.com/cve/CVE-1999-0415/,,,1999-03-11,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.","{'https://www.cisco.com/warp/public/770/7xxconn-pub.shtml', 'http://ciac.llnl.gov/ciac/bulletins/j-034.shtml'}"
CVE-1999-0414,https://www.cvedetails.com/cve/CVE-1999-0414/,,,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,"In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.",set()
CVE-1999-0413,https://www.cvedetails.com/cve/CVE-1999-0413/,,Overflow,1999-03-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.,{'ftp://patches.sgi.com/support/free/security/advisories/19990301-01-PX'}
CVE-1999-0412,https://www.cvedetails.com/cve/CVE-1999-0412/,,,1999-02-19,2020-11-23,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.",{'http://www.securityfocus.com/bid/501'}
CVE-1999-0411,https://www.cvedetails.com/cve/CVE-1999-0411/,,,1999-03-07,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.",set()
CVE-1999-0410,https://www.cvedetails.com/cve/CVE-1999-0410/,,Overflow,1999-03-05,2018-10-30,7.2,None,Local,Low,Not required,Complete,Complete,Complete,The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.,{'http://www.securityfocus.com/bid/293'}
CVE-1999-0409,https://www.cvedetails.com/cve/CVE-1999-0409/,,Overflow,1999-03-04,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.,{'http://www.securityfocus.com/bid/319'}
CVE-1999-0408,https://www.cvedetails.com/cve/CVE-1999-0408/,,,1999-02-25,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.",{'http://www.securityfocus.com/bid/337'}
CVE-1999-0407,https://www.cvedetails.com/cve/CVE-1999-0407/,,,1999-02-09,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.","{'https://marc.info/?l=bugtraq&m=92000623021036&w=2', 'https://marc.info/?l=bugtraq&m=91983486431506&w=2'}"
CVE-1999-0406,https://www.cvedetails.com/cve/CVE-1999-0406/,,Overflow,1999-02-19,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.,set()
CVE-1999-0405,https://www.cvedetails.com/cve/CVE-1999-0405/,,Overflow,1999-02-18,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,A buffer overflow in lsof allows local users to obtain root privilege.,{'http://www.osvdb.org/3163'}
CVE-1999-0404,https://www.cvedetails.com/cve/CVE-1999-0404/,,Exec Code Overflow,1999-02-14,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.,set()
CVE-1999-0403,https://www.cvedetails.com/cve/CVE-1999-0403/,,DoS,1999-02-01,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.,{'https://marc.info/?l=bugtraq&m=91821080015725&w=2'}
CVE-1999-0402,https://www.cvedetails.com/cve/CVE-1999-0402/,,,1999-01-02,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.,set()
CVE-1999-0401,https://www.cvedetails.com/cve/CVE-1999-0401/,,,1999-01-01,2008-09-09,3.7,None,Local,High,Not required,Partial,Partial,Partial,A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.,set()
CVE-1999-0400,https://www.cvedetails.com/cve/CVE-1999-0400/,,DoS,1999-01-26,2008-09-05,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Denial of service in Linux 2.2.0 running the ldd command on a core file.,{'http://www.securityfocus.com/bid/344'}
CVE-1999-0399,https://www.cvedetails.com/cve/CVE-1999-0399/,,Exec Code,1999-01-01,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands.",set()
CVE-1999-0398,https://www.cvedetails.com/cve/CVE-1999-0398/,,,1999-01-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.",set()
CVE-1999-0397,https://www.cvedetails.com/cve/CVE-1999-0397/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.,set()
CVE-1999-0396,https://www.cvedetails.com/cve/CVE-1999-0396/,,DoS,1999-02-17,2008-09-09,2.6,None,Remote,High,Not required,None,None,Partial,A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.,set()
CVE-1999-0395,https://www.cvedetails.com/cve/CVE-1999-0395/,,,1999-01-01,2008-09-09,5.1,None,Remote,High,Not required,Partial,Partial,Partial,A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.,{'http://xforce.iss.net/alerts/advise17.php'}
CVE-1999-0394,https://www.cvedetails.com/cve/CVE-1999-0394/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.,set()
CVE-1999-0393,https://www.cvedetails.com/cve/CVE-1999-0393/,,DoS,1999-01-01,2016-10-18,5.0,None,Remote,Low,Not required,None,None,Partial,Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.,{'https://marc.info/?l=bugtraq&m=91694391227372&w=2'}
CVE-1999-0392,https://www.cvedetails.com/cve/CVE-1999-0392/,,Overflow,1999-01-10,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,Buffer overflow in Thomas Boutell's cgic library version up to 1.05.,set()
CVE-1999-0391,https://www.cvedetails.com/cve/CVE-1999-0391/,,,1999-01-05,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.",set()
CVE-1999-0390,https://www.cvedetails.com/cve/CVE-1999-0390/,,Overflow,1999-01-04,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Dosemu Slang library in Linux.,"{'http://www.securityfocus.com/bid/187', 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-006.1.txt'}"
CVE-1999-0389,https://www.cvedetails.com/cve/CVE-1999-0389/,,Overflow,1999-01-03,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in the bootp server in the Debian Linux netstd package.,{'http://www.securityfocus.com/bid/324'}
CVE-1999-0388,https://www.cvedetails.com/cve/CVE-1999-0388/,,Exec Code,1999-01-01,2008-09-09,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.",{'http://www.osvdb.org/3186'}
CVE-1999-0387,https://www.cvedetails.com/cve/CVE-1999-0387/,CWE-255,,1999-11-29,2018-10-12,7.8,None,Remote,Low,Not required,Complete,None,None,A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.,"{'http://www.securityfocus.com/bid/829', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q168115', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-052'}"
CVE-1999-0386,https://www.cvedetails.com/cve/CVE-1999-0386/,,,1999-03-01,2018-10-12,5.0,None,Remote,Low,Not required,Partial,None,None,Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.,"{'http://www.osvdb.org/111', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-010'}"
CVE-1999-0384,https://www.cvedetails.com/cve/CVE-1999-0384/,,,1999-01-01,2018-10-12,4.6,None,Local,Low,Not required,Partial,Partial,Partial,The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-001'}
CVE-1999-0383,https://www.cvedetails.com/cve/CVE-1999-0383/,,,1999-02-02,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,ACC Tigris allows public access without a login.,"{'http://www.securityfocus.com/bid/183', 'http://www.osvdb.org/267'}"
CVE-1999-0382,https://www.cvedetails.com/cve/CVE-1999-0382/,,,1999-03-12,2018-10-12,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.",{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-008'}
CVE-1999-0381,https://www.cvedetails.com/cve/CVE-1999-0381/,,Overflow,1999-02-26,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.,"{'http://www.securityfocus.com/bid/342', 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.990225011801.12757A-100000@eleet'}"
CVE-1999-0380,https://www.cvedetails.com/cve/CVE-1999-0380/,,,1999-02-25,2017-10-10,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user.","{'http://www.securityfocus.com/bid/497', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5392', 'https://marc.info/?l=bugtraq&m=91996412724720&w=2', 'https://marc.info/?l=ntbugtraq&m=91999015212415&w=2', 'https://marc.info/?l=ntbugtraq&m=92110501504997&w=2'}"
CVE-1999-0379,https://www.cvedetails.com/cve/CVE-1999-0379/,,Exec Code,1999-02-22,2018-10-12,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.,"{'http://www.securityfocus.com/bid/498', 'http://www.osvdb.org/1019', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-007'}"
CVE-1999-0378,https://www.cvedetails.com/cve/CVE-1999-0378/,,,1999-02-22,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.,{'http://www.osvdb.org/6167'}
CVE-1999-0377,https://www.cvedetails.com/cve/CVE-1999-0377/,,DoS,1999-02-22,2016-12-28,5.0,None,Remote,Low,Not required,None,None,Partial,Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.,{'http://www.securitytracker.com/id/1033881'}
CVE-1999-0376,https://www.cvedetails.com/cve/CVE-1999-0376/,,,1999-02-20,2018-10-12,4.6,None,Local,Low,Not required,Partial,Partial,Partial,Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.,{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-006'}
CVE-1999-0375,https://www.cvedetails.com/cve/CVE-1999-0375/,,Exec Code Overflow,1999-02-16,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.,set()
CVE-1999-0374,https://www.cvedetails.com/cve/CVE-1999-0374/,,,1999-02-16,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,Debian GNU/Linux cfengine package is susceptible to a symlink attack.,set()
CVE-1999-0373,https://www.cvedetails.com/cve/CVE-1999-0373/,,Exec Code Overflow,1999-02-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"Buffer overflow in the ""Super"" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.",set()
CVE-1999-0372,https://www.cvedetails.com/cve/CVE-1999-0372/,CWE-200,+Info,1999-02-12,2018-10-12,2.1,None,Local,Low,Not required,Partial,None,None,The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q217004', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005'}"
CVE-1999-0371,https://www.cvedetails.com/cve/CVE-1999-0371/,,,1999-02-11,2008-09-09,1.2,None,Local,High,Not required,Partial,None,None,Lynx allows a local user to overwrite sensitive files through /tmp symlinks.,set()
CVE-1999-0370,https://www.cvedetails.com/cve/CVE-1999-0370/,,,1999-02-10,2018-10-30,4.6,None,Local,Low,Not required,Partial,Partial,Partial,"In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.",{'http://www.securityfocus.com/bid/165'}
CVE-1999-0368,https://www.cvedetails.com/cve/CVE-1999-0368/,,Overflow,1999-02-09,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.",set()
CVE-1999-0367,https://www.cvedetails.com/cve/CVE-1999-0367/,,,1999-02-09,2008-09-09,2.1,None,Local,Low,Not required,Partial,None,None,NetBSD netstat command allows local users to access kernel memory.,{'http://www.osvdb.org/7571'}
CVE-1999-0366,https://www.cvedetails.com/cve/CVE-1999-0366/,CWE-287,,1999-02-08,2018-10-12,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.","{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-004', 'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q214840'}"
CVE-1999-0365,https://www.cvedetails.com/cve/CVE-1999-0365/,,Exec Code,1999-02-04,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.,set()
CVE-1999-0364,https://www.cvedetails.com/cve/CVE-1999-0364/,,,1999-01-01,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.",{'https://marc.info/?l=bugtraq&m=91816470220259&w=2'}
CVE-1999-0363,https://www.cvedetails.com/cve/CVE-1999-0363/,,Overflow,1999-02-02,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.,{'http://www.securityfocus.com/bid/328'}
CVE-1999-0362,https://www.cvedetails.com/cve/CVE-1999-0362/,,DoS,1999-02-02,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,WS_FTP server remote denial of service through cwd command.,"{'http://www.securityfocus.com/bid/217', 'http://www.eeye.com/html/Research/Advisories/AD02021999.html'}"
CVE-1999-0361,https://www.cvedetails.com/cve/CVE-1999-0361/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.",set()
CVE-1999-0360,https://www.cvedetails.com/cve/CVE-1999-0360/,,Exec Code,1999-01-30,2016-10-18,7.2,None,Local,Low,Not required,Complete,Complete,Complete,"MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.",{'https://marc.info/?l=bugtraq&m=91763097004101&w=2'}
CVE-1999-0358,https://www.cvedetails.com/cve/CVE-1999-0358/,,Overflow,1999-02-01,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.,"{'http://www.ciac.org/ciac/bulletins/j-027.shtml', 'http://www.securityfocus.com/archive/1/12121'}"
CVE-1999-0357,https://www.cvedetails.com/cve/CVE-1999-0357/,,DoS,1999-01-25,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,"Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted ""oshare"" packets, possibly involving invalid fragmentation offsets.",set()
CVE-1999-0356,https://www.cvedetails.com/cve/CVE-1999-0356/,,,1999-01-25,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.,set()
CVE-1999-0355,https://www.cvedetails.com/cve/CVE-1999-0355/,,DoS,1999-01-01,2021-04-08,5.0,None,Remote,Low,Not required,None,None,Partial,"Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.",set()
CVE-1999-0354,https://www.cvedetails.com/cve/CVE-1999-0354/,,,1999-11-01,2021-07-22,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content.  Also applies to Outlook when the client views a malicious email message.",{'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002'}
CVE-1999-0353,https://www.cvedetails.com/cve/CVE-1999-0353/,,,1999-02-10,2013-09-03,9.3,None,Remote,Medium,Not required,Complete,Complete,Complete,rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.,"{'http://www.ciac.org/ciac/bulletins/j-026.shtml', 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9902-091'}"
CVE-1999-0352,https://www.cvedetails.com/cve/CVE-1999-0352/,,,1999-01-25,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.,set()
CVE-1999-0351,https://www.cvedetails.com/cve/CVE-1999-0351/,,DoS,1999-02-01,2018-05-03,6.4,None,Remote,Low,Not required,Partial,None,Partial,"FTP PASV ""Pizza Thief"" denial of service and unauthorized data access.  Attackers can steal data by connecting to a port that was intended for use by a client.","{'http://attrition.org/security/advisory/misc/infowar/iw_sec_01.txt', 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3389'}"
CVE-1999-0350,https://www.cvedetails.com/cve/CVE-1999-0350/,,,1999-02-08,2008-09-09,6.2,None,Local,High,Not required,Complete,Complete,Complete,Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.,set()
CVE-1999-0349,https://www.cvedetails.com/cve/CVE-1999-0349/,CWE-119,DoS Exec Code Overflow,1999-01-27,2018-10-12,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.","{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q188348', 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-003', 'http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html'}"
CVE-1999-0348,https://www.cvedetails.com/cve/CVE-1999-0348/,CWE-200,+Info,1999-01-27,2018-08-13,5.0,None,Remote,Low,Not required,Partial,None,None,IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.,"{'https://support.microsoft.com/default.aspx?scid=kb;[LN];Q197003', 'http://www.osvdb.org/930'}"
CVE-1999-0347,https://www.cvedetails.com/cve/CVE-1999-0347/,,,1999-01-26,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a ""%01"" character in an ""about:"" Javascript URL, which causes Internet Explorer to use the domain specified after the character.","{'https://marc.info/?l=ntbugtraq&m=91756771207719&w=2', 'https://marc.info/?l=bugtraq&m=91745430007021&w=2'}"
CVE-1999-0317,https://www.cvedetails.com/cve/CVE-1999-0317/,,Overflow,1999-11-25,2008-09-09,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in Linux su command gives root access to local users.,set()
CVE-1999-0291,https://www.cvedetails.com/cve/CVE-1999-0291/,,,1999-02-01,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,"The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.",set()
CVE-1999-0289,https://www.cvedetails.com/cve/CVE-1999-0289/,,,1999-12-12,2020-10-13,5.0,None,Remote,Low,Not required,Partial,None,None,The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.,set()
CVE-1999-0287,https://www.cvedetails.com/cve/CVE-1999-0287/,,,1999-04-09,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Vulnerability in the Wguest CGI program.,set()
CVE-1999-0286,https://www.cvedetails.com/cve/CVE-1999-0286/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.",set()
CVE-1999-0285,https://www.cvedetails.com/cve/CVE-1999-0285/,,DoS,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.",set()
CVE-1999-0283,https://www.cvedetails.com/cve/CVE-1999-0283/,,,1999-01-01,2016-10-18,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,The Java Web Server would allow remote users to obtain the source code for CGI programs.,{'https://marc.info/?l=bugtraq&m=88256790401004&w=2'}
CVE-1999-0276,https://www.cvedetails.com/cve/CVE-1999-0276/,,Overflow,1999-01-01,2008-09-09,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,mSQL v2.0.1 and below allows remote execution through a buffer overflow.,set()
CVE-1999-0268,https://www.cvedetails.com/cve/CVE-1999-0268/,,,1999-01-01,2008-09-09,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.","{'http://www.osvdb.org/3969', 'http://www.osvdb.org/110'}"
CVE-1999-0261,https://www.cvedetails.com/cve/CVE-1999-0261/,,Overflow,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.,{'http://www.insecure.org/sploits/netmanage.chameleon.overflows.html'}
CVE-1999-0255,https://www.cvedetails.com/cve/CVE-1999-0255/,,Exec Code Overflow,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Buffer overflow in ircd allows arbitrary command execution.,set()
CVE-1999-0248,https://www.cvedetails.com/cve/CVE-1999-0248/,,,1999-01-01,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.,"{'http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html', 'http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1'}"
CVE-1999-0243,https://www.cvedetails.com/cve/CVE-1999-0243/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Linux cfingerd could be exploited to gain root access.,set()
CVE-1999-0240,https://www.cvedetails.com/cve/CVE-1999-0240/,,,1999-01-01,2005-10-20,7.5,None,Remote,Low,Not required,Partial,Partial,Partial,Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.,set()
CVE-1999-0231,https://www.cvedetails.com/cve/CVE-1999-0231/,,DoS Overflow,1999-01-01,2008-09-05,5.0,None,Remote,Low,Not required,None,None,Partial,"Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.",set()
CVE-1999-0229,https://www.cvedetails.com/cve/CVE-1999-0229/,,DoS,1999-05-12,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Windows NT IIS server using ..\..,set()
CVE-1999-0226,https://www.cvedetails.com/cve/CVE-1999-0226/,CWE-19,DoS,1999-01-01,2017-05-03,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,"Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.",set()
CVE-1999-0224,https://www.cvedetails.com/cve/CVE-1999-0224/,,DoS,1999-07-23,2008-09-09,5.0,None,Remote,Low,Not required,Partial,None,None,Denial of service in Windows NT messenger service through a long username.,set()
CVE-1999-0223,https://www.cvedetails.com/cve/CVE-1999-0223/,,,1999-03-01,2018-10-30,2.1,None,Local,Low,Not required,None,None,Partial,Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.,"{'http://www.securityfocus.com/bid/1878', 'http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?patchid=103291&collection=fpatches'}"
CVE-1999-0222,https://www.cvedetails.com/cve/CVE-1999-0222/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.,set()
CVE-1999-0221,https://www.cvedetails.com/cve/CVE-1999-0221/,,DoS,1999-03-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service of Ascend routers through port 150 (remote administration).,set()
CVE-1999-0220,https://www.cvedetails.com/cve/CVE-1999-0220/,,DoS,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Attackers can do a denial of service of IRC by crashing the server.,set()
CVE-1999-0205,https://www.cvedetails.com/cve/CVE-1999-0205/,,DoS,1999-01-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in Sendmail 8.6.11 and 8.6.12.,set()
CVE-1999-0200,https://www.cvedetails.com/cve/CVE-1999-0200/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.,set()
CVE-1999-0198,https://www.cvedetails.com/cve/CVE-1999-0198/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,finger [email protected] on some systems may print information on some user accounts.,set()
CVE-1999-0197,https://www.cvedetails.com/cve/CVE-1999-0197/,,,1999-01-01,2005-10-20,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,finger [email protected] on some systems may print information on some user accounts.,set()
CVE-1999-0194,https://www.cvedetails.com/cve/CVE-1999-0194/,,DoS,1999-05-01,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in in.comsat allows attackers to generate messages.,set()
CVE-1999-0154,https://www.cvedetails.com/cve/CVE-1999-0154/,,,1999-12-31,2020-11-23,5.0,None,Remote,Low,Not required,Partial,None,None,IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.,set()
CVE-1999-0140,https://www.cvedetails.com/cve/CVE-1999-0140/,,DoS,1999-06-30,2008-09-05,5.0,None,Remote,Low,Not required,None,None,Partial,Denial of service in RAS/PPTP on NT systems.,set()
CVE-1999-0121,https://www.cvedetails.com/cve/CVE-1999-0121/,,Overflow,1999-01-21,2005-10-20,7.2,None,Local,Low,Not required,Complete,Complete,Complete,Buffer overflow in dtaction command gives root access.,set()
CVE-1999-0119,https://www.cvedetails.com/cve/CVE-1999-0119/,,,1999-01-19,2008-09-05,10.0,None,Remote,Low,Not required,Complete,Complete,Complete,Windows NT 4.0 beta allows users to read and delete shares.,set()
CVE-1999-0063,https://www.cvedetails.com/cve/CVE-1999-0063/,,,1999-01-11,2008-09-09,5.0,None,Remote,Low,Not required,None,None,Partial,Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.,set()
CVE-1999-0001,https://www.cvedetails.com/cve/CVE-1999-0001/,CWE-20,DoS,1999-12-30,2010-12-16,5.0,None,Remote,Low,Not required,None,None,Partial,ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.,"{'http://www.osvdb.org/5707', 'https://www.openbsd.org/errata23.html#tcpfix'}"