CVE-1999-1201

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service traffic amplification via a certain ICMP echo ping packet, which causes all stacks to send a ping response, aka TCP Chorusing...

CVE-1999-1397

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, enabling local and remote users to obtain the physical paths of indexed directories. Affected component: ContentIndex\Catalogs under AllowedPaths. Root cause: registr...

CVE-1999-1217

Technical details about CVE-1999-1217 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-1999-1568

Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service crash via a long PORT command...

CVE-1999-1486

The CVE-1999-1486 issue affects IBM AIX 4.1–4.3, where the sadc tool, when invoked by programs such as timex that run setgid adm, can be exploited locally to overwrite arbitrary files via a symlink attack. The root cause is a symlink race condition in sadc that can be triggered by untrusted file ...

CVE-1999-1568

CVE-1999-1568 affects the NcFTPd FTP server up to version 2.4.0 (prior to 2.4.1). The issue is an off-by-one error in handling the PORT command, allowing a remote attacker to cause a denial of service (crash). The root cause is an off-by-one logic flaw in the server’s PORT command processing. Imp...

CVE-1999-1365

Windows NT searches a user's home directory %systemroot% by default before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program...

CVE-1999-1520

The CVE-1999-1520 issue is a configuration problem in the Ad Server Sample directory (AdSamples) of Microsoft Site Server 3.0. The root cause is misconfiguration that allows an attacker to obtain the SITE.CSC file, exposing sensitive SQL database information. Affected software: Microsoft Site Ser...

CVE-1999-1537

The CVE-1999-1537 vulnerability affects IIS 3.x/4.x, where the server does not distinguish between pages requiring encryption and those that do not. As a result, remote attackers can trigger Denial of Service (resource exhaustion) by sending SSL requests to the HTTPS port for normally unencrypted...

CVE-1999-1189

The CVE-1999-1189 issue affects Netscape Navigator/Communicator 4.7 on Windows 95/98. A buffer overflow can be triggered by a long argument after the ? in a URL referencing .asp, .cgi, .html, or .pl, allowing remote denial of service and potentially arbitrary command execution. No remediation det...

CVE-1999-1199

The CVE-1999-1199 entry concerns Apache HTTP Server 1.3.1 and earlier. A remote attacker can trigger a denial of service by sending a large number of MIME headers with the same name (the so‑called “sioux” vulnerability). The NVD entry assigns a base score of 10.0 (HIGH) with NETWORK attack vector...

CVE-2004-1999

Cross-site scripting XSS vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the 1 ttitle or 2 sid parameters to modules.php...

[SECURITY] [DSA-377-1] New wu-ftpd packages fix insecure program execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 377-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 4th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-377-1] New wu-ftpd packages fix insecure program execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 377-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 4th, 2003 http://www.debian.org/security/faq -...

CVE-1999-1263

Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that specifies the full pathname for the file to be modified, which is processed by uuencode in Metamail scripts such as sun-audio-file...

[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...

CVE-1999-1337

FTP client in Midnight Commander mc before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges...

CVE-1999-1490

CVE-1999-1490 affects xosview 1.5.1 in Red Hat 5.1. The issue is a local privilege escalation where an overly long HOME environmental variable enables a non-privileged user to gain root access. The root cause is not expanded in the provided documents beyond the environmental variable manipulation...

CVE-1999-1468

CVE-1999-1468 affects rdist in various UNIX systems. The vulnerability arises when rdist uses popen to invoke sendmail, enabling local users to gain root privileges by modifying the IFS (Internal Field Separator) variable. The provided sources confirm the component and the privileged escalation v...

CVE-1999-1337

CVE-1999-1337 affects Midnight Commander (mc) before 4.5.11. The FTP client stores visited-site usernames/passwords in plaintext in the world-readable history file, enabling local users to gain partial privileges. Root cause: insecure plaintext history storage. Impact: local privilege elevation/p...