Browse CVE records published in September 1999, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 715 matching CVEs · Page 11 of 15.
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
Published Sep 29, 1999 · Updated Aug 1, 2024
Denial of service in IIS using long URLs.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in NetMeeting allows denial of service and remote command execution.
Published Sep 29, 1999 · Updated Aug 1, 2024
ACC Tigris allows public access without a login.
Published Sep 29, 1999 · Updated Aug 1, 2024
AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled.
Published Sep 29, 1999 · Updated Aug 1, 2024
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
Published Sep 29, 1999 · Updated Aug 1, 2024
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
Published Sep 29, 1999 · Updated Aug 1, 2024
Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
Published Sep 29, 1999 · Updated Aug 1, 2024
NT users can gain debug-level access on a system process using the Sechole exploit.
Published Sep 29, 1999 · Updated Aug 1, 2024
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
Published Sep 29, 1999 · Updated Aug 1, 2024
Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.
Published Sep 29, 1999 · Updated Aug 1, 2024
Denial of service through Winpopup using large user names.
Published Sep 29, 1999 · Updated Aug 1, 2024
AIX Licensed Program Product performance tools allow local users to gain root access.
Published Sep 29, 1999 · Updated Aug 1, 2024
Vulnerability in HP-UX mediainit program.
Published Sep 29, 1999 · Updated Aug 1, 2024
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in Linux splitvt command gives root access to local users.
Published Sep 29, 1999 · Updated Aug 1, 2024
Solaris volrmmount program allows attackers to read any file.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in Linux Slackware crond program allows local users to gain root access.
Published Sep 29, 1999 · Updated Aug 1, 2024
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
Published Sep 29, 1999 · Updated Aug 1, 2024
Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.
Published Sep 29, 1999 · Updated Aug 1, 2024
The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution.
Published Sep 29, 1999 · Updated Aug 1, 2024
The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
Published Sep 29, 1999 · Updated Aug 1, 2024
Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
Published Sep 29, 1999 · Updated Aug 1, 2024
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
Published Sep 29, 1999 · Updated Aug 1, 2024
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
Published Sep 29, 1999 · Updated Aug 1, 2024
NetBSD netstat command allows local users to access kernel memory.
Published Sep 29, 1999 · Updated Aug 1, 2024
htmlscript CGI program allows remote read access to files.
Published Sep 29, 1999 · Updated Aug 1, 2024
SSH 1.2.25 on HP-UX allows access to new user accounts.
Published Sep 29, 1999 · Updated Aug 1, 2024
HP-UX gwind program allows users to modify arbitrary files.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
Published Sep 29, 1999 · Updated Aug 1, 2024
Remote execution of arbitrary commands through Guestbook CGI program.
Published Sep 29, 1999 · Updated Aug 1, 2024
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in FreeBSD lpd through long DNS hostnames.
Published Sep 29, 1999 · Updated Aug 1, 2024
CGI PHP mlog script allows an attacker to read any file on the target server.
Published Sep 29, 1999 · Updated Aug 1, 2024
Solaris SUNWadmap can be exploited to obtain root access.
Published Sep 29, 1999 · Updated Aug 1, 2024
Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
Published Sep 29, 1999 · Updated Aug 1, 2024
mSQL v2.0.1 and below allows remote execution through a buffer overflow.
Published Sep 29, 1999 · Updated Aug 1, 2024
Some configurations of NIS+ in Linux allowed attackers to log in as the user "+".
Published Sep 29, 1999 · Updated Aug 1, 2024
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
Published Sep 29, 1999 · Updated Aug 1, 2024
fpkg2swpk in HP-UX allows local users to gain root access.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in War FTP allows remote execution of commands.
Published Sep 29, 1999 · Updated Aug 1, 2024
The info2www CGI script allows remote file access or remote command execution.
Published Sep 29, 1999 · Updated Aug 1, 2024
Denial of service in Slmail v2.5 through the POP3 port.
Published Sep 29, 1999 · Updated Aug 1, 2024
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
Published Sep 29, 1999 · Updated Aug 1, 2024
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Published Sep 29, 1999 · Updated Aug 1, 2024
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
Published Sep 29, 1999 · Updated Aug 1, 2024
SGI permissions program allows local users to gain root privileges.
Published Sep 29, 1999 · Updated Aug 1, 2024
Buffer overflow in SunOS/Solaris ps command.
Published Sep 29, 1999 · Updated Aug 1, 2024
