CVE Database — Page 20

Structured vulnerability intelligence: severity, affected software, and remediation. Search the full set in the Intelligence Portal.

• CVE-1999-0988 UNKNOWN — CVE-1999-0988: UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
• CVE-1999-0990 UNKNOWN — CVE-1999-0990: Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.
• CVE-1999-0991 UNKNOWN — CVE-1999-0991: Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.
• CVE-1999-0992 UNKNOWN — CVE-1999-0992: HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Ga
• CVE-1999-0993 UNKNOWN — CVE-1999-0993: Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cac
• CVE-1999-0994 UNKNOWN — CVE-1999-0994: Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to cra
• CVE-1999-0995 UNKNOWN — CVE-1999-0995: Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments t
• CVE-1999-0996 UNKNOWN — CVE-1999-0996: Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
• CVE-1999-0997 UNKNOWN — CVE-1999-0997: wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted
• CVE-1999-0998 UNKNOWN — CVE-1999-0998: Cisco Cache Engine allows an attacker to replace content in the cache.
• CVE-1999-0999 UNKNOWN — CVE-1999-0999: Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.
• CVE-1999-1000 UNKNOWN — CVE-1999-1000: The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
• CVE-1999-1001 UNKNOWN — CVE-1999-1001: Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
• CVE-1999-1002 UNKNOWN — CVE-1999-1002: Netscape Navigator uses weak encryption for storing a user's Netscape mail password.
• CVE-1999-1003 UNKNOWN — CVE-1999-1003: War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
• CVE-1999-1004 UNKNOWN — CVE-1999-1004: Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
• CVE-1999-1005 UNKNOWN — CVE-1999-1005: Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) a
• CVE-1999-1006 UNKNOWN — CVE-1999-1006: Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP paramet
• CVE-1999-1007 UNKNOWN — CVE-1999-1007: Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo fi
• CVE-1999-1008 UNKNOWN — CVE-1999-1008: xsoldier program allows local users to gain root access via a long argument.
• CVE-1999-1009 UNKNOWN — CVE-1999-1009: The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to
• CVE-1999-1010 UNKNOWN — CVE-1999-1010: An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
• CVE-1999-1011 UNKNOWN — CVE-1999-1011: The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x expose
• CVE-1999-1012 UNKNOWN — CVE-1999-1012: SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash
• CVE-1999-1013 UNKNOWN — CVE-1999-1013: named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via t
• CVE-1999-1014 UNKNOWN — CVE-1999-1014: Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
• CVE-1999-1015 UNKNOWN — CVE-1999-1015: Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denia
• CVE-1999-1016 UNKNOWN — CVE-1999-1016: Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudor
• CVE-1999-1017 UNKNOWN — CVE-1999-1017: Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting
• CVE-1999-1019 UNKNOWN — CVE-1999-1019: SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which al
• CVE-1999-1018 UNKNOWN — CVE-1999-1018: IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, wh
• CVE-1999-1020 UNKNOWN — CVE-1999-1020: The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allo
• CVE-1999-1021 UNKNOWN — CVE-1999-1021: NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root ac
• CVE-1999-1022 UNKNOWN — CVE-1999-1022: serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execut
• CVE-1999-1023 UNKNOWN — CVE-1999-1023: useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argum
• CVE-1999-1025 UNKNOWN — CVE-1999-1025: CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when t
• CVE-1999-1026 UNKNOWN — CVE-1999-1026: aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on
• CVE-1999-1027 UNKNOWN — CVE-1999-1027: Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by re
• CVE-1999-1028 UNKNOWN — CVE-1999-1028: Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of dat
• CVE-1999-1029 UNKNOWN — CVE-1999-1029: SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum
• CVE-1999-1030 UNKNOWN — CVE-1999-1030: counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newl
• CVE-1999-1031 UNKNOWN — CVE-1999-1031: counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.
• CVE-1999-1032 UNKNOWN — CVE-1999-1032: Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
• CVE-1999-1033 UNKNOWN — CVE-1999-1033: Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can
• CVE-1999-1034 UNKNOWN — CVE-1999-1034: Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
• CVE-1999-1035 UNKNOWN — CVE-1999-1035: IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request
• CVE-1999-1036 UNKNOWN — CVE-1999-1036: COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_d
• CVE-1999-1037 UNKNOWN — CVE-1999-1037: rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
• CVE-1999-1038 UNKNOWN — CVE-1999-1038: Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's d
• CVE-1999-1039 UNKNOWN — CVE-1999-1039: Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owne