CVE-1999-1324

The issue affects OpenVMS running on VAXstations (OpenVMS 5.3–5.5-2) with VMS DECwindows or MOTIF, where access to accounts that exceeded the failed-login break-in limit is not properly disabled. This permits brute-force password guessing and is described in PT-1999-1646 as allowing attackers to ...

CVE-1999-1204

CVE-1999-1204 affects Check Point Firewall-1. It stems from improper handling of certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which can produce a rule defaulting to an ANY address and grant access to more systems than intended. CVSSv2 score 7.5 (HIGH) with Network...

CVE-1999-1143

Technical details for CVE-1999-1143 are not provided in the connected documents. The initial description summarizes a privilege escalation in SGI IRIX 6.x rld but no further public details are included here. Monitor for updates.

CVE-1999-1087

CVE-1999-1087 affects Internet Explorer 4 where a 32-bit number in a URL (a “dotless IP address”) is treated as the hostname rather than as an IP address. This causes the web page to inherit Local Intranet Zone settings, enabling remote malicious servers to perform unauthorized activities using U...

CVE-1999-1386

The vulnerability CVE-1999-1386 affects Perl versions 5.004_04 and earlier. When Perl is run with the -e option, it follows symbolic links, allowing a local attacker to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX path. The connected PT-1999-1699 entry reiterates that t...

CVE-1999-1360

Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle...

CVE-1999-1105

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...

CVE-1999-1249

CVE-1999-1249 affects HP-UX 10.20 movemail. The issue is insecure permissions in the movemail component, which can be exploited by local users to gain privileges. Mitigation is to adjust/correct the movemail permissions to prevent unauthorized privilege escalation.

CVE-1999-1100

CVE-1999-1100 affects Cisco PIX Private Link 4.1.6 and earlier. The vulnerability arises because certain configuration-file commands cause the DES key length to effectively shrink from 56 bits to 48 bits, easing brute-force key discovery. This is the root cause and the primary impact described in...

CVE-1999-1157

The issue (CVE-1999-1157) affects Tcpip.sys on Windows NT 4.0 before SP4. A remote attacker can cause denial of service by sending an ICMP Subnet Mask Address Request when multiple IP addresses are bound to the same network interface. The vulnerability impact is described as availability partial....

CVE-1999-1034

This CVE (CVE-1999-1034) is a local privilege escalation in the login component of AT&T System V Release 4. The NVD entry lists a base score of 7.2 (HIGH) with Local attack vector, low attack complexity, no authentication required, and complete impact on confidentiality, integrity, and availabili...

CVE-1999-1488

The CVE-1999-1488 entry concerns the sdrd daemon in IBM SP2 System Data Repository (SDR), where the service allows remote reading of files without authentication. The description indicates unauthenticated access enabling potentially disclosure of data via a network vector; no concrete exploit ste...

CVE-1999-1144

The CVE-1999-1144 entry affects HP-UX MPower on HP-UX 10.x, where certain MPower files are installed with insecure permissions, enabling local privilege escalation due to insufficient access controls. Root cause: insecure file permissions. Connected PT-1997-1195 notes the remediation to update/se...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

CVE-1999-1116

Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges...

CVE-1999-1085

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC Cipher Block Chaining or CFB Cipher Feedback 64 bits modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum...

CVE-1999-1160

Technical details about CVE-1999-1160 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-1402

Technical details about CVE-1999-1402 are not publicly available in the provided documents; monitor for updates.

CVE-1999-1147

CVE-1999-1147: Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 enables remote command execution via a long string sent to the Agent port 1827, handled by smaxagent.exe. The NVD entry notes a network-accessible, low-complexity exploit with partial confidentiality, integrity, and av...

CVE-1999-1146

CVE-1999-1146 : Vulnerability in the Glance and gpm programs of GlancePlus on HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. The description does not specify affected versions beyond the HP-UX 9.x and earlier, nor provide explicit remediation steps. No exp...