CVE-1999-1472

This CVE (CVE-1999-1472) affects Internet Explorer 4.0. The vulnerability allows a remote attacker to read arbitrary text and HTML files on the user’s machine by delivering a small IFRAME that uses Dynamic HTML (DHTML) to exfiltrate data (the Freiburg text-viewing issue). The connected records co...

CVE-1999-1359

The CVE-1999-1359 entry concerns Windows NT where, when the Ntconfig.pol file is used on a server with a name longer than 13 characters, policies for global groups are not properly enforced. This could allow bypass of restrictions intended by those policies (as described in multiple sources). Aff...

CVE-1999-1102

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times...

CVE-1999-1059

Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...

CVE-1999-1019

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable processd with a Trojan horse, facilitating a root or Administrator compromise...

CVE-1999-1203

CVE-1999-1203 affects Ascend systems using Multilink PPP for ISDN dialup prior to version 4.6. The vulnerability arises from a spoofed endpoint identifier, enabling remote attackers to cause a denial of service (availability impact). The provided documents do not specify a fix or mitigation. No e...

CVE-1999-0921

BMC Patrol is affected by CVE-1999-0921, where a remote attacker can flood the UDP port, resulting in a denial of service. The CVSS data shows network access, low complexity, no authentication, and partial availability impact. No exploit details or remediation are provided in the supplied documen...

CVE-1999-1122

CVE-1999-1122 affects SunOS 4.0.3 and earlier, via a vulnerability in the restore component that enables local privilege escalation for local users. The connected PT-1989-1000 entry confirms the affected SunOS versions and notes that, at present, there is no information about a fix in newer versi...

CVE-1999-1259

Technical details about CVE-1999-1259 are not publicly available in the provided documents beyond the high-level description of Office 98 disk space handling; monitor for updates.

CVE-1999-1191

CVE-1999-1191 : The vulnerability is a buffer overflow in the chkey utility on Solaris 2.5.1 and earlier. Triggered by a long command-line argument, it allows a local user to ignite a privilege escalation to root. In affected environments, exploitation is local and relies on overflowing the chkey...

CVE-1999-1341

CVE-1999-1341 concerns the Linux kernel before 2.3.18 or 2.2.13pre15, when compiled with SLIP and PPP options, allowing a local unprivileged user to forge IP packets via the TIOCSETD option on tty devices. The vulnerability enables local access to tamper with packet data, with partial impacts to ...

CVE-1999-1120

The vulnerability CVE-1999-1120 affects SGI IRIX 6.4 and earlier where netprint trusts the PATH environment variable to locate and execute the disable program. This trust allows local users to gain privileges. Documented impact indicates local privilege escalation; exploitation details are not pr...

CVE-1999-1363

CVE-1999-1363 affects Windows NT 3.51 and 4.0. The vulnerability allows a local attacker to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts NonPagedPool. The documented impact is a partial availability degradation; exploitation...

CVE-1999-1035

The provided records identify CVE-1999-1035 as a vulnerability in Microsoft IIS 3.0 and 4.0 running on x86 and Alpha, where remote attackers can cause a denial of service (hang) by sending a malformed GET request. Root cause details are not elaborated beyond mentioning a malformed GET handling is...

CVE-1999-1478

The CVE-1999-1478 entry concerns Sun’s HotSpot Performance Engine VM. A remote attacker can cause a denial of service on any server running HotSpot by issuing a URL that includes the [ character. The connected records confirm the affected component (Sun HotSpot Performance Engine VM) and the expl...

CVE-1999-1455

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host...

CVE-1999-1246

The CVE-1999-1246 entry relates to Microsoft Site Server 3.0: the Direct Mailer feature stores user domain names and passwords in plaintext in the TMLBQueue share, which has insecure default permissions. This enables remote read of passwords and privilege escalation as described. The documents do...

CVE-1999-1059

CVE-1999-1059 affects the rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems. The vulnerability enables a remote attacker to execute arbitrary commands via rexecd. The provided documents do not specify affected versions beyond AT&T TCP/IP 4.0, nor do they provide remediation steps ...

CVE-1999-1455

The CVE-1999-1455 entry concerns the RSH service utility RSHSVC on Windows NT 3.5–4.0. It states that access is not properly restricted as defined by the .Rhosts file, potentially allowing login by unauthorized users from an authorized host. This is the only publicly reported description provided...

CVE-1999-1175

The CVE-1999-1175 entry concerns Cisco’s Web Cache Control Protocol (WCCP) in Cisco Cache Engine on Cisco IOS 11.2 and earlier. The root cause is that WCCP does not use authentication, allowing a remote attacker to divert HTTP traffic to arbitrary hosts by sending valid WCCP packets to UDP port 2...