Investigate2816 entity nodes
Knowledge Graph
Search CVEs, malware, techniques and threat actors, then explore their relationships and evidence. The graph is a helper — the entity overview is what matters.
Browse entities
Filter by typing above- CVE-1999-0002 (cve) — CVE-1999-0002: Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
- CVE-1999-0003 (cve) — CVE-1999-0003: Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
- CVE-1999-0004 (cve) — CVE-1999-0004: MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.
- CVE-1999-0005 (cve) — CVE-1999-0005: Arbitrary command execution via IMAP buffer overflow in authenticate command.
- CVE-1999-0006 (cve) — CVE-1999-0006: Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long
- CVE-1999-0007 (cve) — CVE-1999-0007: Information from SSL-encrypted sessions via PKCS #1.
- CVE-1999-0008 (cve) — CVE-1999-0008: Buffer overflow in NIS+, in Sun's rpc.nisd program.
- CVE-1999-0001 (cve) — CVE-1999-0001: ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) vi
- CVE-1999-0009 (cve) — CVE-1999-0009: Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
- CVE-1999-0010 (cve) — CVE-1999-0010: Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
- CVE-1999-0011 (cve) — CVE-1999-0011: Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
- CVE-1999-0012 (cve) — CVE-1999-0012: Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file n
- CVE-1999-0013 (cve) — CVE-1999-0013: Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belongin
- CVE-1999-0014 (cve) — CVE-1999-0014: Unauthorized privileged access or denial of service via dtappgather program in CDE.
- CVE-1999-0015 (cve) — CVE-1999-0015: Teardrop IP denial of service.
- CVE-1999-0016 (cve) — CVE-1999-0016: Land IP denial of service.
- CVE-1999-0017 (cve) — CVE-1999-0017: FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
- CVE-1999-0018 (cve) — CVE-1999-0018: Buffer overflow in statd allows root privileges.
- CVE-1999-0019 (cve) — CVE-1999-0019: Delete or create a file via rpc.statd, due to invalid information.
- CVE-1999-0020 (cve) — CVE-1999-0020: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of
- CVE-1999-0021 (cve) — CVE-1999-0021: Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
- CVE-1999-0024 (cve) — CVE-1999-0024: DNS cache poisoning via BIND, by predictable query IDs.
- CVE-1999-0023 (cve) — CVE-1999-0023: Local user gains root privileges via buffer overflow in rdist, via lookup() function.
- CVE-1999-0025 (cve) — CVE-1999-0025: root privileges via buffer overflow in df command on SGI IRIX systems.
- CVE-1999-0026 (cve) — CVE-1999-0026: root privileges via buffer overflow in pset command on SGI IRIX systems.
- CVE-1999-0022 (cve) — CVE-1999-0022: Local user gains root privileges via buffer overflow in rdist, via expstr() function.
- CVE-1999-0027 (cve) — CVE-1999-0027: root privileges via buffer overflow in eject command on SGI IRIX systems.
- CVE-1999-0028 (cve) — CVE-1999-0028: root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
- CVE-1999-0029 (cve) — CVE-1999-0029: root privileges via buffer overflow in ordist command on SGI IRIX systems.
- CVE-1999-0030 (cve) — CVE-1999-0030: root privileges via buffer overflow in xlock command on SGI IRIX systems.
- CVE-1999-0031 (cve) — CVE-1999-0031: JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's
- CVE-1999-0032 (cve) — CVE-1999-0032: Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as ro
- CVE-1999-0034 (cve) — CVE-1999-0034: Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.
- CVE-1999-0033 (cve) — CVE-1999-0033: Command execution in Sun systems via buffer overflow in the at program.
- CVE-1999-0036 (cve) — CVE-1999-0036: IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
- CVE-1999-0037 (cve) — CVE-1999-0037: Arbitrary command execution via metamail package using message headers, when user processes attacker's message using met
- CVE-1999-0035 (cve) — CVE-1999-0035: Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
- CVE-1999-0038 (cve) — CVE-1999-0038: Buffer overflow in xlock program allows local users to execute commands as root.
- CVE-1999-0039 (cve) — CVE-1999-0039: webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharac
- CVE-1999-0040 (cve) — CVE-1999-0040: Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
- CVE-1999-0042 (cve) — CVE-1999-0042: Buffer overflow in University of Washington's implementation of IMAP and POP servers.
- CVE-1999-0043 (cve) — CVE-1999-0043: Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and othe
- CVE-1999-0044 (cve) — CVE-1999-0044: fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
- CVE-1999-0045 (cve) — CVE-1999-0045: List of arbitrary files on Web host via nph-test-cgi script.
- CVE-1999-0046 (cve) — CVE-1999-0046: Buffer overflow of rlogin program using TERM environmental variable.
- CVE-1999-0047 (cve) — CVE-1999-0047: MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.
- CVE-1999-0048 (cve) — CVE-1999-0048: Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
- CVE-1999-0049 (cve) — CVE-1999-0049: Csetup under IRIX allows arbitrary file creation or overwriting.
- CVE-1999-0041 (cve) — CVE-1999-0041: Buffer overflow in NLS (Natural Language Service).
- CVE-1999-0050 (cve) — CVE-1999-0050: Buffer overflow in HP-UX newgrp program.
- CVE-1999-0051 (cve) — CVE-1999-0051: Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
- CVE-1999-0052 (cve) — CVE-1999-0052: IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.
- CVE-1999-0053 (cve) — CVE-1999-0053: TCP RST denial of service in FreeBSD.
- CVE-1999-0054 (cve) — CVE-1999-0054: Sun's ftpd daemon can be subjected to a denial of service.
- CVE-1999-0055 (cve) — CVE-1999-0055: Buffer overflows in Sun libnsl allow root access.
- CVE-1999-0056 (cve) — CVE-1999-0056: Buffer overflow in Sun's ping program can give root access to local users.
- CVE-1999-0057 (cve) — CVE-1999-0057: Vacation program allows command execution by remote users through a sendmail command.
- CVE-1999-0058 (cve) — CVE-1999-0058: Buffer overflow in PHP cgi program, php.cgi allows shell access.
- CVE-1999-0060 (cve) — CVE-1999-0060: Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port,
- CVE-1999-0059 (cve) — CVE-1999-0059: IRIX fam service allows an attacker to obtain a list of all files on the server.
- CVE-1999-0061 (cve) — CVE-1999-0061: File creation and deletion, and remote execution, in the BSD line printer daemon (lpd).
- CVE-1999-0063 (cve) — CVE-1999-0063: Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
- CVE-1999-0064 (cve) — CVE-1999-0064: Buffer overflow in AIX lquerylv program gives root access to local users.
- CVE-1999-0065 (cve) — CVE-1999-0065: Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.
- CVE-1999-0066 (cve) — CVE-1999-0066: AnyForm CGI remote execution.
- CVE-1999-0067 (cve) — CVE-1999-0067: phf CGI program allows remote command execution through shell metacharacters.
- CVE-1999-0068 (cve) — CVE-1999-0068: CGI PHP mylog script allows an attacker to read any file on the target server.
- CVE-1999-0062 (cve) — CVE-1999-0062: The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.
- CVE-1999-0069 (cve) — CVE-1999-0069: Solaris ufsrestore buffer overflow.
- CVE-1999-0070 (cve) — CVE-1999-0070: test-cgi program allows an attacker to list files on the server.
- CVE-1999-0071 (cve) — CVE-1999-0071: Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.
- CVE-1999-0074 (cve) — CVE-1999-0074: Listening TCP ports are sequentially allocated, allowing spoofing attacks.
- CVE-1999-0073 (cve) — CVE-1999-0073: Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass
- CVE-1999-0075 (cve) — CVE-1999-0075: PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
- CVE-1999-0076 (cve) — CVE-1999-0076: Buffer overflow in wu-ftp from PASV command causes a core dump.
- CVE-1999-0077 (cve) — CVE-1999-0077: Predictable TCP sequence numbers allow spoofing.
- CVE-1999-0072 (cve) — CVE-1999-0072: Buffer overflow in AIX xdat gives root access to local users.
- CVE-1999-0078 (cve) — CVE-1999-0078: pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments i
- CVE-1999-0079 (cve) — CVE-1999-0079: Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out o
- CVE-1999-0080 (cve) — CVE-1999-0080: Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, suc
- CVE-1999-0081 (cve) — CVE-1999-0081: wu-ftp allows files to be overwritten via the rnfr command.
- CVE-1999-0082 (cve) — CVE-1999-0082: CWD ~root command in ftpd allows root access.
- CVE-1999-0083 (cve) — CVE-1999-0083: getcwd() file descriptor leak in FTP.
- CVE-1999-0084 (cve) — CVE-1999-0084: Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID t
- CVE-1999-0085 (cve) — CVE-1999-0085: Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP
- CVE-1999-0086 (cve) — CVE-1999-0086: AIX routed allows remote users to modify sensitive files.
- CVE-1999-0087 (cve) — CVE-1999-0087: Denial of service in AIX telnet can freeze a system and prevent users from accessing the server.
- CVE-1999-0088 (cve) — CVE-1999-0088: IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.
- CVE-1999-0089 (cve) — CVE-1999-0089: Buffer overflow in AIX libDtSvc library can allow local users to gain root access.
- CVE-1999-0090 (cve) — CVE-1999-0090: Buffer overflow in AIX rcp command allows local users to obtain root access.
- CVE-1999-0091 (cve) — CVE-1999-0091: Buffer overflow in AIX writesrv command allows local users to obtain root access.
- CVE-1999-0092 (cve) — CVE-1999-0092: Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
- CVE-1999-0093 (cve) — CVE-1999-0093: AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.
- CVE-1999-0094 (cve) — CVE-1999-0094: AIX piodmgrsu command allows local users to gain additional group privileges.
- CVE-1999-0095 (cve) — CVE-1999-0095: The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
- CVE-1999-0096 (cve) — CVE-1999-0096: Sendmail decode alias can be used to overwrite sensitive files.
- CVE-1999-0097 (cve) — CVE-1999-0097: The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe c
- CVE-1999-0099 (cve) — CVE-1999-0099: Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
- CVE-1999-0100 (cve) — CVE-1999-0100: Remote access in AIX innd 1.5.1, using control messages.
- CVE-1999-0098 (cve) — CVE-1999-0098: Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities.
- CVE-1999-0101 (cve) — CVE-1999-0101: Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
- CVE-1999-0103 (cve) — CVE-1999-0103: Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or U
- CVE-1999-0104 (cve) — CVE-1999-0104: A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
- CVE-1999-0105 (cve) — CVE-1999-0105: finger allows recursive searches by using a long string of @ symbols.
- CVE-1999-0106 (cve) — CVE-1999-0106: Finger redirection allows finger bombs.
- CVE-1999-0102 (cve) — CVE-1999-0102: Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line.
- CVE-1999-0107 (cve) — CVE-1999-0107: Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of
- CVE-1999-0108 (cve) — CVE-1999-0108: The printers program in IRIX has a buffer overflow that gives root access to local users.
- CVE-1999-0109 (cve) — CVE-1999-0109: Buffer overflow in ffbconfig in Solaris 2.5.1.
- CVE-1999-0110 (cve) — CVE-1999-0110: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original descri
- CVE-1999-0111 (cve) — CVE-1999-0111: RIP v1 is susceptible to spoofing.
- CVE-1999-0112 (cve) — CVE-1999-0112: Buffer overflow in AIX dtterm program for the CDE.
- CVE-1999-0113 (cve) — CVE-1999-0113: Some implementations of rlogin allow root access if given a -froot parameter.
- CVE-1999-0114 (cve) — CVE-1999-0114: Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-
- CVE-1999-0115 (cve) — CVE-1999-0115: AIX bugfiler program allows local users to gain root access.
- CVE-1999-0116 (cve) — CVE-1999-0116: Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to
- CVE-1999-0117 (cve) — CVE-1999-0117: AIX passwd allows local users to gain root access.
- CVE-1999-0118 (cve) — CVE-1999-0118: AIX infod allows local users to gain root access through an X display.
- CVE-1999-0119 (cve) — CVE-1999-0119: Windows NT 4.0 beta allows users to read and delete shares.
- CVE-1999-0120 (cve) — CVE-1999-0120: Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root.
- CVE-1999-0121 (cve) — CVE-1999-0121: Buffer overflow in dtaction command gives root access.
- CVE-1999-0123 (cve) — CVE-1999-0123: Race condition in Linux mailx command allows local users to read user files.
- CVE-1999-0124 (cve) — CVE-1999-0124: Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accesse
- CVE-1999-0125 (cve) — CVE-1999-0125: Buffer overflow in SGI IRIX mailx program.
- CVE-1999-0126 (cve) — CVE-1999-0126: SGI IRIX buffer overflow in xterm and Xaw allows root access.
- CVE-1999-0122 (cve) — CVE-1999-0122: Buffer overflow in AIX lchangelv gives root access.
- CVE-1999-0127 (cve) — CVE-1999-0127: swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary fil
- CVE-1999-0128 (cve) — CVE-1999-0128: Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
- CVE-1999-0129 (cve) — CVE-1999-0129: Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
- CVE-1999-0130 (cve) — CVE-1999-0130: Local users can start Sendmail in daemon mode and gain root privileges.
- CVE-1999-0131 (cve) — CVE-1999-0131: Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users
- CVE-1999-0132 (cve) — CVE-1999-0132: Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
- CVE-1999-0133 (cve) — CVE-1999-0133: fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access.
- CVE-1999-0134 (cve) — CVE-1999-0134: vold in Solaris 2.x allows local users to gain root access.
- CVE-1999-0135 (cve) — CVE-1999-0135: admintool in Solaris allows a local user to write to arbitrary files and gain root access.
- CVE-1999-0136 (cve) — CVE-1999-0136: Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
- CVE-1999-0137 (cve) — CVE-1999-0137: The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
- CVE-1999-0138 (cve) — CVE-1999-0138: The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing ro
- CVE-1999-0139 (cve) — CVE-1999-0139: Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.
- CVE-1999-0140 (cve) — CVE-1999-0140: Denial of service in RAS/PPTP on NT systems.
- CVE-1999-0141 (cve) — CVE-1999-0141: Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet.
- CVE-1999-0143 (cve) — CVE-1999-0143: Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
- CVE-1999-0144 (cve) — CVE-1999-0144: Denial of service in Qmail by specifying a large number of recipients with the RCPT command.
- CVE-1999-0145 (cve) — CVE-1999-0145: Sendmail WIZ command enabled, allowing root access.
- CVE-1999-0146 (cve) — CVE-1999-0146: The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded
- CVE-1999-0142 (cve) — CVE-1999-0142: The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet
- CVE-1999-0148 (cve) — CVE-1999-0148: The handler CGI program in IRIX allows arbitrary command execution.
- CVE-1999-0149 (cve) — CVE-1999-0149: The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
- CVE-1999-0147 (cve) — CVE-1999-0147: The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
- CVE-1999-0150 (cve) — CVE-1999-0150: The Perl fingerd program allows arbitrary command execution from remote users.
- CVE-1999-0151 (cve) — CVE-1999-0151: The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access.
- CVE-1999-0153 (cve) — CVE-1999-0153: Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
- CVE-1999-0154 (cve) — CVE-1999-0154: IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the U
- CVE-1999-0155 (cve) — CVE-1999-0155: The ghostscript command with the -dSAFER option allows remote attackers to execute commands.
- CVE-1999-0152 (cve) — CVE-1999-0152: The DG/UX finger daemon allows remote command execution through shell metacharacters.
- CVE-1999-0156 (cve) — CVE-1999-0156: wu-ftpd FTP daemon allows any user and password combination.
- CVE-1999-0157 (cve) — CVE-1999-0157: Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
- CVE-1999-0158 (cve) — CVE-1999-0158: Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve a
- CVE-1999-0159 (cve) — CVE-1999-0159: Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). Thi
- CVE-1999-0160 (cve) — CVE-1999-0160: Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connect
- CVE-1999-0161 (cve) — CVE-1999-0161: In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
- CVE-1999-0162 (cve) — CVE-1999-0162: The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
- CVE-1999-0163 (cve) — CVE-1999-0163: In older versions of Sendmail, an attacker could use a pipe character to execute root commands.
- CVE-1999-0164 (cve) — CVE-1999-0164: A race condition in the Solaris ps command allows an attacker to overwrite critical files.
- CVE-1999-0165 (cve) — CVE-1999-0165: NFS cache poisoning.
- CVE-1999-0166 (cve) — CVE-1999-0166: NFS allows users to use a "cd .." command to access other directories besides the exported file system.
- CVE-1999-0167 (cve) — CVE-1999-0167: In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system.
- CVE-1999-0168 (cve) — CVE-1999-0168: The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from
- CVE-1999-0169 (cve) — CVE-1999-0169: NFS allows attackers to read and write any file on the system by specifying a false UID.
- CVE-1999-0170 (cve) — CVE-1999-0170: Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
- CVE-1999-0171 (cve) — CVE-1999-0171: Denial of service in syslog by sending it a large number of superfluous messages.
- CVE-1999-0173 (cve) — CVE-1999-0173: FormMail CGI program can be used by web servers other than the host server that the program resides on.
- CVE-1999-0174 (cve) — CVE-1999-0174: The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
- CVE-1999-0175 (cve) — CVE-1999-0175: The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is intern
- CVE-1999-0172 (cve) — CVE-1999-0172: FormMail CGI program allows remote execution of commands.
- CVE-1999-0176 (cve) — CVE-1999-0176: The Webgais program allows a remote user to execute arbitrary commands.
- CVE-1999-0177 (cve) — CVE-1999-0177: The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.
- CVE-1999-0178 (cve) — CVE-1999-0178: Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to
- CVE-1999-0179 (cve) — CVE-1999-0179: Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
- CVE-1999-0180 (cve) — CVE-1999-0180: in.rshd allows users to login with a NULL username and execute commands.
- CVE-1999-0181 (cve) — CVE-1999-0181: The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.
- CVE-1999-0182 (cve) — CVE-1999-0182: Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
- CVE-1999-0183 (cve) — CVE-1999-0183: Linux implementations of TFTP would allow access to files outside the restricted directory.
- CVE-1999-0184 (cve) — CVE-1999-0184: When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious mod
- CVE-1999-0185 (cve) — CVE-1999-0185: In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trust
- CVE-1999-0186 (cve) — CVE-1999-0186: In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands a
- CVE-1999-0187 (cve) — CVE-1999-0187: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of
- CVE-1999-0188 (cve) — CVE-1999-0188: The passwd command in Solaris can be subjected to a denial of service.
- CVE-1999-0189 (cve) — CVE-1999-0189: Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
- CVE-1999-0190 (cve) — CVE-1999-0190: Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
- CVE-1999-0191 (cve) — CVE-1999-0191: IIS newdsn.exe CGI script allows remote users to overwrite files.
- CVE-1999-0192 (cve) — CVE-1999-0192: Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environment
- CVE-1999-0194 (cve) — CVE-1999-0194: Denial of service in in.comsat allows attackers to generate messages.
- CVE-1999-0195 (cve) — CVE-1999-0195: Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using
- CVE-1999-0196 (cve) — CVE-1999-0196: websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver pa
- CVE-1999-0197 (cve) — CVE-1999-0197: finger 0@host on some systems may print information on some user accounts.
- CVE-1999-0198 (cve) — CVE-1999-0198: finger .@host on some systems may print information on some user accounts.
- CVE-1999-0193 (cve) — CVE-1999-0193: Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
- CVE-1999-0200 (cve) — CVE-1999-0200: Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP se
- CVE-1999-0201 (cve) — CVE-1999-0201: A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.
- CVE-1999-0202 (cve) — CVE-1999-0202: The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
- CVE-1999-0203 (cve) — CVE-1999-0203: In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "r
- CVE-1999-0204 (cve) — CVE-1999-0204: Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
- CVE-1999-0205 (cve) — CVE-1999-0205: Denial of service in Sendmail 8.6.11 and 8.6.12.
- CVE-1999-0206 (cve) — CVE-1999-0206: MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.
- CVE-1999-0207 (cve) — CVE-1999-0207: Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
- CVE-1999-0208 (cve) — CVE-1999-0208: rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
- CVE-1999-0209 (cve) — CVE-1999-0209: The SunView (SunTools) selection_svc facility allows remote users to read files.
- CVE-1999-0210 (cve) — CVE-1999-0210: Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
- CVE-1999-0211 (cve) — CVE-1999-0211: Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
- CVE-1999-0212 (cve) — CVE-1999-0212: Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server.
- CVE-1999-0213 (cve) — CVE-1999-0213: libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind.
- CVE-1999-0214 (cve) — CVE-1999-0214: Denial of service by sending forged ICMP unreachable packets.
- CVE-1999-0216 (cve) — CVE-1999-0216: Denial of service of inetd on Linux through SYN and RST packets.
- CVE-1999-0217 (cve) — CVE-1999-0217: Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
- CVE-1999-0215 (cve) — CVE-1999-0215: Routed allows attackers to append data to files.
- CVE-1999-0218 (cve) — CVE-1999-0218: Livingston portmaster machines could be rebooted via a series of commands.
- CVE-1999-0219 (cve) — CVE-1999-0219: Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1)
- CVE-1999-0220 (cve) — CVE-1999-0220: Attackers can do a denial of service of IRC by crashing the server.
- CVE-1999-0221 (cve) — CVE-1999-0221: Denial of service of Ascend routers through port 150 (remote administration).
- CVE-1999-0222 (cve) — CVE-1999-0222: Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
- CVE-1999-0223 (cve) — CVE-1999-0223: Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
- CVE-1999-0224 (cve) — CVE-1999-0224: Denial of service in Windows NT messenger service through a long username.
- CVE-1999-0225 (cve) — CVE-1999-0225: Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actua
- CVE-1999-0226 (cve) — CVE-1999-0226: Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.
- CVE-1999-0227 (cve) — CVE-1999-0227: Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
- CVE-1999-0228 (cve) — CVE-1999-0228: Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
- CVE-1999-0229 (cve) — CVE-1999-0229: Denial of service in Windows NT IIS server using ..\..
- CVE-1999-0230 (cve) — CVE-1999-0230: Buffer overflow in Cisco 7xx routers through the telnet service.
- CVE-1999-0231 (cve) — CVE-1999-0231: Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of s
- CVE-1999-0232 (cve) — CVE-1999-0232: Buffer overflow in NCSA WebServer (version 1.5c) gives remote access.
- CVE-1999-0233 (cve) — CVE-1999-0233: IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
- CVE-1999-0235 (cve) — CVE-1999-0235: Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access.
- CVE-1999-0234 (cve) — CVE-1999-0234: Bash treats any character with a value of 255 as a command separator.
- CVE-1999-0236 (cve) — CVE-1999-0236: ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
- CVE-1999-0237 (cve) — CVE-1999-0237: Remote execution of arbitrary commands through Guestbook CGI program.
- CVE-1999-0238 (cve) — CVE-1999-0238: php.cgi allows attackers to read any file on the system.
- CVE-1999-0239 (cve) — CVE-1999-0239: Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
- CVE-1999-0240 (cve) — CVE-1999-0240: Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.
- CVE-1999-0241 (cve) — CVE-1999-0241: Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
- CVE-1999-0242 (cve) — CVE-1999-0242: Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.
- CVE-1999-0244 (cve) — CVE-1999-0244: Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root.
- CVE-1999-0243 (cve) — CVE-1999-0243: Linux cfingerd could be exploited to gain root access.
- CVE-1999-0245 (cve) — CVE-1999-0245: Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
- CVE-1999-0246 (cve) — CVE-1999-0246: HP Remote Watch allows a remote user to gain root access.
- CVE-1999-0247 (cve) — CVE-1999-0247: Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
- CVE-1999-0249 (cve) — CVE-1999-0249: Windows NT RSHSVC program allows remote users to execute arbitrary commands.
- CVE-1999-0250 (cve) — CVE-1999-0250: Denial of service in Qmail through long SMTP commands.
- CVE-1999-0251 (cve) — CVE-1999-0251: Denial of service in talk program allows remote attackers to disrupt a user's display.
- CVE-1999-0248 (cve) — CVE-1999-0248: A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credent
- CVE-1999-0252 (cve) — CVE-1999-0252: Buffer overflow in listserv allows arbitrary command execution.
- CVE-1999-0253 (cve) — CVE-1999-0253: IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e in
- CVE-1999-0254 (cve) — CVE-1999-0254: A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive informat
- CVE-1999-0255 (cve) — CVE-1999-0255: Buffer overflow in ircd allows arbitrary command execution.
- CVE-1999-0256 (cve) — CVE-1999-0256: Buffer overflow in War FTP allows remote execution of commands.
- CVE-1999-0257 (cve) — CVE-1999-0257: Nestea variation of teardrop IP fragmentation denial of service.
- CVE-1999-0258 (cve) — CVE-1999-0258: Bonk variation of teardrop IP fragmentation denial of service.
- CVE-1999-0259 (cve) — CVE-1999-0259: cfingerd lists all users on a system via search.**@target.
- CVE-1999-0260 (cve) — CVE-1999-0260: The jj CGI program allows command execution via shell metacharacters.
- CVE-1999-0261 (cve) — CVE-1999-0261: Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.
- CVE-1999-0262 (cve) — CVE-1999-0262: Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in
- CVE-1999-0263 (cve) — CVE-1999-0263: Solaris SUNWadmap can be exploited to obtain root access.
- CVE-1999-0264 (cve) — CVE-1999-0264: htmlscript CGI program allows remote read access to files.
- CVE-1999-0265 (cve) — CVE-1999-0265: ICMP redirect messages may crash or lock up a host.
- CVE-1999-0266 (cve) — CVE-1999-0266: The info2www CGI script allows remote file access or remote command execution.
- CVE-1999-0267 (cve) — CVE-1999-0267: Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
- CVE-1999-0268 (cve) — CVE-1999-0268: MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
- CVE-1999-0269 (cve) — CVE-1999-0269: Netscape Enterprise servers may list files through the PageServices query.
- CVE-1999-0270 (cve) — CVE-1999-0270: Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer AP
- CVE-1999-0271 (cve) — CVE-1999-0271: Progressive Networks Real Video server (pnserver) can be crashed remotely.
- CVE-1999-0272 (cve) — CVE-1999-0272: Denial of service in Slmail v2.5 through the POP3 port.
- CVE-1999-0273 (cve) — CVE-1999-0273: Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
- CVE-1999-0274 (cve) — CVE-1999-0274: Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't ma
- CVE-1999-0276 (cve) — CVE-1999-0276: mSQL v2.0.1 and below allows remote execution through a buffer overflow.
- CVE-1999-0275 (cve) — CVE-1999-0275: Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
- CVE-1999-0277 (cve) — CVE-1999-0277: The WorkMan program can be used to overwrite any file to get root access.
- CVE-1999-0278 (cve) — CVE-1999-0278: In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
- CVE-1999-0279 (cve) — CVE-1999-0279: Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
- CVE-1999-0280 (cve) — CVE-1999-0280: Remote command execution in Microsoft Internet Explorer using .lnk and .url files.
- CVE-1999-0281 (cve) — CVE-1999-0281: Denial of service in IIS using long URLs.
- CVE-1999-0283 (cve) — CVE-1999-0283: The Java Web Server would allow remote users to obtain the source code for CGI programs.
- CVE-1999-0285 (cve) — CVE-1999-0285: Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.
- CVE-1999-0286 (cve) — CVE-1999-0286: In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.
- CVE-1999-0284 (cve) — CVE-1999-0284: Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HEL
- CVE-1999-0287 (cve) — CVE-1999-0287: Vulnerability in the Wguest CGI program.
- CVE-1999-0288 (cve) — CVE-1999-0288: The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process ter
- CVE-1999-0289 (cve) — CVE-1999-0289: The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
- CVE-1999-0290 (cve) — CVE-1999-0290: The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to local
- CVE-1999-0291 (cve) — CVE-1999-0291: The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authent
- CVE-1999-0282 (cve) — CVE-1999-0282: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-1584, CVE-1999-1586. Reason: This candidate co
- CVE-1999-0292 (cve) — CVE-1999-0292: Denial of service through Winpopup using large user names.
- CVE-1999-0293 (cve) — CVE-1999-0293: AAA authentication on Cisco systems allows attackers to execute commands without authorization.
- CVE-1999-0294 (cve) — CVE-1999-0294: All records in a WINS database can be deleted through SNMP for a denial of service.
- CVE-1999-0295 (cve) — CVE-1999-0295: Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges.
- CVE-1999-0296 (cve) — CVE-1999-0296: Solaris volrmmount program allows attackers to read any file.
- CVE-1999-0298 (cve) — CVE-1999-0298: ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to over
- CVE-1999-0297 (cve) — CVE-1999-0297: Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmenta
- CVE-1999-0300 (cve) — CVE-1999-0300: nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
- CVE-1999-0299 (cve) — CVE-1999-0299: Buffer overflow in FreeBSD lpd through long DNS hostnames.
- CVE-1999-0301 (cve) — CVE-1999-0301: Buffer overflow in SunOS/Solaris ps command.
- CVE-1999-0302 (cve) — CVE-1999-0302: SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.
- CVE-1999-0303 (cve) — CVE-1999-0303: Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
- CVE-1999-0304 (cve) — CVE-1999-0304: mmap function in BSD allows local attackers in the kmem group to modify memory through devices.
- CVE-1999-0305 (cve) — CVE-1999-0305: The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2
- CVE-1999-0306 (cve) — CVE-1999-0306: buffer overflow in HP xlock program.
- CVE-1999-0308 (cve) — CVE-1999-0308: HP-UX gwind program allows users to modify arbitrary files.
- CVE-1999-0309 (cve) — CVE-1999-0309: HP-UX vgdisplay program gives root access to local users.
- CVE-1999-0310 (cve) — CVE-1999-0310: SSH 1.2.25 on HP-UX allows access to new user accounts.
- CVE-1999-0311 (cve) — CVE-1999-0311: fpkg2swpk in HP-UX allows local users to gain root access.
- CVE-1999-0312 (cve) — CVE-1999-0312: HP ypbind allows attackers with root privileges to modify NIS data.
- CVE-1999-0313 (cve) — CVE-1999-0313: disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
- CVE-1999-0314 (cve) — CVE-1999-0314: ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
- CVE-1999-0315 (cve) — CVE-1999-0315: Buffer overflow in Solaris fdformat command gives root access to local users.
- CVE-1999-0316 (cve) — CVE-1999-0316: Buffer overflow in Linux splitvt command gives root access to local users.
- CVE-1999-0317 (cve) — CVE-1999-0317: Buffer overflow in Linux su command gives root access to local users.
- CVE-1999-0318 (cve) — CVE-1999-0318: Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
- CVE-1999-0319 (cve) — CVE-1999-0319: Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting.
- CVE-1999-0320 (cve) — CVE-1999-0320: SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
- CVE-1999-0321 (cve) — CVE-1999-0321: Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
- CVE-1999-0322 (cve) — CVE-1999-0322: The open() function in FreeBSD allows local attackers to write to arbitrary files.
- CVE-1999-0323 (cve) — CVE-1999-0323: FreeBSD mmap function allows users to modify append-only or immutable files.
- CVE-1999-0324 (cve) — CVE-1999-0324: ppl program in HP-UX allows local users to create root files through symlinks.
- CVE-1999-0325 (cve) — CVE-1999-0325: vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
- CVE-1999-0327 (cve) — CVE-1999-0327: SGI syserr program allows local users to corrupt files.
- CVE-1999-0328 (cve) — CVE-1999-0328: SGI permissions program allows local users to gain root privileges.
- CVE-1999-0326 (cve) — CVE-1999-0326: Vulnerability in HP-UX mediainit program.
- CVE-1999-0329 (cve) — CVE-1999-0329: SGI mediad program allows local users to gain root access.
- CVE-1999-0331 (cve) — CVE-1999-0331: Buffer overflow in Internet Explorer 4.0(1).
- CVE-1999-0330 (cve) — CVE-1999-0330: Linux bdash game has a buffer overflow that allows local users to gain root access.
- CVE-1999-0332 (cve) — CVE-1999-0332: Buffer overflow in NetMeeting allows denial of service and remote command execution.
- CVE-1999-0333 (cve) — CVE-1999-0333: HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via
- CVE-1999-0334 (cve) — CVE-1999-0334: In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
- CVE-1999-0335 (cve) — CVE-1999-0335: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of C
- CVE-1999-0336 (cve) — CVE-1999-0336: Buffer overflow in mstm in HP-UX allows local users to gain root access.
- CVE-1999-0337 (cve) — CVE-1999-0337: AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
- CVE-1999-0338 (cve) — CVE-1999-0338: AIX Licensed Program Product performance tools allow local users to gain root access.
- CVE-1999-0339 (cve) — CVE-1999-0339: Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access
- CVE-1999-0340 (cve) — CVE-1999-0340: Buffer overflow in Linux Slackware crond program allows local users to gain root access.
- CVE-1999-0341 (cve) — CVE-1999-0341: Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.
- CVE-1999-0342 (cve) — CVE-1999-0342: Linux PAM modules allow local users to gain root access using temporary files.
- CVE-1999-0344 (cve) — CVE-1999-0344: NT users can gain debug-level access on a system process using the Sechole exploit.
- CVE-1999-0343 (cve) — CVE-1999-0343: A malicious Palace server can force a client to execute arbitrary programs.
- CVE-1999-0345 (cve) — CVE-1999-0345: Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
- CVE-1999-0346 (cve) — CVE-1999-0346: CGI PHP mlog script allows an attacker to read any file on the target server.
- CVE-1999-0347 (cve) — CVE-1999-0347: Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "abou
- CVE-1999-0348 (cve) — CVE-1999-0348: IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
- CVE-1999-0349 (cve) — CVE-1999-0349: A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in som
- CVE-1999-0350 (cve) — CVE-1999-0350: Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
- CVE-1999-0351 (cve) — CVE-1999-0351: FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port
- CVE-1999-0352 (cve) — CVE-1999-0352: ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.
- CVE-1999-0353 (cve) — CVE-1999-0353: rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
- CVE-1999-0354 (cve) — CVE-1999-0354: Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through t
- CVE-1999-0355 (cve) — CVE-1999-0355: Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
- CVE-1999-0356 (cve) — CVE-1999-0356: ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.
- CVE-1999-0357 (cve) — CVE-1999-0357: Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets
- CVE-1999-0358 (cve) — CVE-1999-0358: Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
- CVE-1999-0360 (cve) — CVE-1999-0360: MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing th
- CVE-1999-0361 (cve) — CVE-1999-0361: NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logg
- CVE-1999-0362 (cve) — CVE-1999-0362: WS_FTP server remote denial of service through cwd command.
- CVE-1999-0363 (cve) — CVE-1999-0363: SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
- CVE-1999-0364 (cve) — CVE-1999-0364: Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
- CVE-1999-0365 (cve) — CVE-1999-0365: The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.
- CVE-1999-0366 (cve) — CVE-1999-0366: In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a pr
- CVE-1999-0367 (cve) — CVE-1999-0367: NetBSD netstat command allows local users to access kernel memory.
- CVE-1999-0368 (cve) — CVE-1999-0368: Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
- CVE-1999-0370 (cve) — CVE-1999-0370: In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
- CVE-1999-0369 (cve) — CVE-1999-0369: The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
- CVE-1999-0371 (cve) — CVE-1999-0371: Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
- CVE-1999-0372 (cve) — CVE-1999-0372: The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not delet
- CVE-1999-0373 (cve) — CVE-1999-0373: Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute c
- CVE-1999-0374 (cve) — CVE-1999-0374: Debian GNU/Linux cfengine package is susceptible to a symlink attack.
- CVE-1999-0375 (cve) — CVE-1999-0375: Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.
- CVE-1999-0376 (cve) — CVE-1999-0376: Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious prog
- CVE-1999-0377 (cve) — CVE-1999-0377: Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's proc
- CVE-1999-0378 (cve) — CVE-1999-0378: InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
- CVE-1999-0379 (cve) — CVE-1999-0379: Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that a
- CVE-1999-0380 (cve) — CVE-1999-0380: SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service
- CVE-1999-0381 (cve) — CVE-1999-0381: super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root acce
- CVE-1999-0382 (cve) — CVE-1999-0382: The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers t
- CVE-1999-0383 (cve) — CVE-1999-0383: ACC Tigris allows public access without a login.
- CVE-1999-0385 (cve) — CVE-1999-0385: The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of servic
- CVE-1999-0386 (cve) — CVE-1999-0386: Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read
- CVE-1999-0387 (cve) — CVE-1999-0387: A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext netwo
- CVE-1999-0388 (cve) — CVE-1999-0388: DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute command
- CVE-1999-0384 (cve) — CVE-1999-0384: The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's c
- CVE-1999-0390 (cve) — CVE-1999-0390: Buffer overflow in Dosemu Slang library in Linux.
- CVE-1999-0389 (cve) — CVE-1999-0389: Buffer overflow in the bootp server in the Debian Linux netstd package.
- CVE-1999-0391 (cve) — CVE-1999-0391: The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to re
- CVE-1999-0392 (cve) — CVE-1999-0392: Buffer overflow in Thomas Boutell's cgic library version up to 1.05.
- CVE-1999-0393 (cve) — CVE-1999-0393: Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of he
- CVE-1999-0394 (cve) — CVE-1999-0394: DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.
- CVE-1999-0395 (cve) — CVE-1999-0395: A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
- CVE-1999-0396 (cve) — CVE-1999-0396: A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial
- CVE-1999-0398 (cve) — CVE-1999-0398: In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.
- CVE-1999-0399 (cve) — CVE-1999-0399: The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attack
- CVE-1999-0400 (cve) — CVE-1999-0400: Denial of service in Linux 2.2.0 running the ldd command on a core file.
- CVE-1999-0401 (cve) — CVE-1999-0401: A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.
- CVE-1999-0402 (cve) — CVE-1999-0402: wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
- CVE-1999-0403 (cve) — CVE-1999-0403: A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
- CVE-1999-0397 (cve) — CVE-1999-0397: The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.