CVE-1999-1204

CVE-1999-1204 affects Check Point Firewall-1. It stems from improper handling of certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which can produce a rule defaulting to an ANY address and grant access to more systems than intended. CVSSv2 score 7.5 (HIGH) with Network...

CVE-1999-1360

Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle...

CVE-1999-1249

CVE-1999-1249 affects HP-UX 10.20 movemail. The issue is insecure permissions in the movemail component, which can be exploited by local users to gain privileges. Mitigation is to adjust/correct the movemail permissions to prevent unauthorized privilege escalation.

CVE-1999-1157

The issue (CVE-1999-1157) affects Tcpip.sys on Windows NT 4.0 before SP4. A remote attacker can cause denial of service by sending an ICMP Subnet Mask Address Request when multiple IP addresses are bound to the same network interface. The vulnerability impact is described as availability partial....

CVE-1999-1419

CVE-1999-1419 describes a buffer overflow in the nss_nisplus.so.1 library used by NIS+ on Solaris 2.3 and 2.4, enabling local users to gain root privileges. The provided documents do not include patch versions or remediation steps. No exploitation details are provided.

CVE-1999-1329

The CVE describes a local privilege escalation caused by a buffer overflow in SysVInit on Red Hat Linux 5.1 and earlier. Affected component: SysVInit; vulnerable action: buffer overflow leading to privilege gain. Root cause: overflow in SysVInit that permits local users to escalate privileges to ...

CVE-1999-1118

ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

CVE-1999-1085

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC Cipher Block Chaining or CFB Cipher Feedback 64 bits modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum...

CVE-1999-1160

Technical details about CVE-1999-1160 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-1402

Technical details about CVE-1999-1402 are not publicly available in the provided documents; monitor for updates.

CVE-1999-1147

CVE-1999-1147: Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 enables remote command execution via a long string sent to the Agent port 1827, handled by smaxagent.exe. The NVD entry notes a network-accessible, low-complexity exploit with partial confidentiality, integrity, and av...

CVE-1999-1146

CVE-1999-1146 : Vulnerability in the Glance and gpm programs of GlancePlus on HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. The description does not specify affected versions beyond the HP-UX 9.x and earlier, nor provide explicit remediation steps. No exp...

CVE-1999-1481

Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair...

CVE-1999-1263

CVE-1999-1263 affects Metamail prior to 2.7-7.2. A remote attacker can overwrite arbitrary files via an e-mail with a uuencoded attachment that specifies a full pathname, processed by Metamail scripts such as sun-audio-file. Root cause is the handling of uuencode in Metamail scripts, enabling arb...

CVE-1999-1162

Technical details about CVE-1999-1162 are not publicly provided in the supplied documents. Monitor for updates.

CVE-1999-1351

CVE-1999-1351 describes a directory traversal flaw in the KVIrc IRC client (version 0.9.0) when the “Listen to !nick requests” option is enabled. An attacker can read arbitrary files by injecting ‘..’ in a DCC GET request. The vulnerability is rooted in improper path handling during DCC GET proc...

CVE-1999-1045

RealServer 5.0 and earlier is affected by CVE-1999-1045 due to a vulnerability in the pnserver component. A remote attacker can cause a denial of service by sending a short, malformed request. The entry provides a CVSS v2 base score of 7.8 (NETWORK attack, low complexity, no authentication, avail...

CVE-1999-1203

CVE-1999-1203 affects Ascend systems using Multilink PPP for ISDN dialup prior to version 4.6. The vulnerability arises from a spoofed endpoint identifier, enabling remote attackers to cause a denial of service (availability impact). The provided documents do not specify a fix or mitigation. No e...

CVE-1999-1550

CVE-1999-1550 affects F5 BIG/ip 2.1.2 and earlier. The bigconf.conf CGI accepts a target file via the file parameter, enabling remote attackers to read arbitrary files on the affected device. This is the concrete detail reported across CVE listings and Nessus-related entries. There is no informat...