Browse CVE records published in September 1999, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 715 matching CVEs · Page 6 of 15.
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences.
Published Sep 12, 2001 · Updated Aug 1, 2024
Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command.
Published Sep 12, 2001 · Updated Aug 1, 2024
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.
Published Sep 12, 2001 · Updated Aug 1, 2024
Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.
Published Sep 12, 2001 · Updated Aug 1, 2024
RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
Published Sep 12, 2001 · Updated Aug 1, 2024
Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark).
Published Sep 12, 2001 · Updated Aug 1, 2024
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
Published Sep 12, 2001 · Updated Aug 1, 2024
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
Published Sep 12, 2001 · Updated Aug 1, 2024
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information.
Published Sep 12, 2001 · Updated Aug 1, 2024
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
Published Sep 12, 2001 · Updated Aug 1, 2024
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Published Sep 12, 2001 · Updated Aug 1, 2024
Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.
Published Sep 12, 2001 · Updated Aug 1, 2024
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command.
Published Sep 12, 2001 · Updated Aug 1, 2024
ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to access the target disk.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
Published Sep 12, 2001 · Updated Aug 1, 2024
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
Published Sep 12, 2001 · Updated Aug 1, 2024
Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others.
Published Sep 12, 2001 · Updated Aug 1, 2024
Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
Published Sep 12, 2001 · Updated Aug 1, 2024
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
Published Sep 1, 2004 · Updated Aug 1, 2024
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.
Published Sep 12, 2001 · Updated Aug 1, 2024
rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.
Published Sep 12, 2001 · Updated Aug 1, 2024
Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
Published Sep 12, 2001 · Updated Aug 1, 2024
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.
Published Sep 12, 2001 · Updated Aug 1, 2024
IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
Published Sep 12, 2001 · Updated Aug 1, 2024
nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
Published Sep 12, 2001 · Updated Aug 1, 2024
Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges.
Published Sep 12, 2001 · Updated Aug 1, 2024
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
Published Sep 12, 2001 · Updated Aug 1, 2024
Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.
Published Sep 12, 2001 · Updated Aug 1, 2024
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script.
Published Sep 12, 2001 · Updated Aug 1, 2024
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.
Published Sep 12, 2001 · Updated Aug 1, 2024
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.
Published Sep 12, 2001 · Updated Aug 1, 2024
