CVE-1999-1452

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting CTRL-V the contents into the username prompt...

CVE-1999-1138

The CVE affects SCO UNIX System V/386 Release 3.2 and other SCO products. Its description states that home directories are created under /tmp (dos user) and /usr/tmp (asg user), which are world-writable, enabling other users to access those accounts. The underlying issue is the use of world-writa...

CVE-1999-1142

SunOS 4.1.2 and earlier allows local users to gain privileges via LD_* environment variables affecting dynamically linked setuid/setgid programs (e.g., login, su, sendmail) by causing real and effective UIDs to the same user. This yields a local escalation with complete confidentiality and integr...

CVE-1999-1099

Kerberos 4 is affected by CVE-1999-1099 via a vulnerability where processing a malformed UDP packet triggers an error string that inadvertently reveals the realm name and the last user. The exposure is remote (network) with low attack complexity and no authentication required, and the impact is p...

CVE-1999-1021

CVE-1999-1021 affects SunOS 4.1–4.1.2 NFS: the high-order 16 bits of a 32-bit UID are ignored, enabling a local user to gain root if the lower 16 bits are 0. The issue is mitigated/fixed by the NFS jumbo patch upgrade. The connected sources confirm the affected OS and the patch-based fix; exploit...

CVE-1999-1336

The CVE-1999-1336 entry concerns a vulnerability in 3Com HiPer Access Router Card (HiperARC) versions 4.0–4.2.29 that allows a remote attacker to cause a denial of service (reboot) by flooding the telnet port with IAC packets. The cited sources confirm the affected device family and the attack ve...

CVE-1999-1565

CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...

CVE-1999-1363

CVE-1999-1363 affects Windows NT 3.51 and 4.0. The vulnerability allows a local attacker to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts NonPagedPool. The documented impact is a partial availability degradation; exploitation...

CVE-1999-1535

CVE-1999-1535 describes a buffer overflow in Persits Software AspUpload.dll (AspUpload before 1.4.0.2). This flaw enables remote attackers to cause a denial of service and potentially execute arbitrary commands via a long HTTP request argument. Affected component is AspUpload.dll; root cause is a...

CVE-1999-1542

CVE-1999-1542 affects RPMMail prior to 1.4. An attacker can remotely run commands by sending an e‑mail containing shell metacharacters in the MAIL FROM command, indicating a remote code execution vulnerability caused by unsanitized input in the mail command path. The provided documents do not spe...

CVE-1999-1512

The CVE-1999-1512 entry concerns the AMaViS virus scanner, specifically versions 0.2.0-pre4 and earlier. The documented vulnerability allows remote attackers to execute arbitrary commands as root by sending an infected mail message containing shell metacharacters in the reply-to field. The availa...

CVE-1999-1550

CVE-1999-1550 affects F5 BIG/ip 2.1.2 and earlier. The bigconf.conf CGI accepts a target file via the file parameter, enabling remote attackers to read arbitrary files on the affected device. This is the concrete detail reported across CVE listings and Nessus-related entries. There is no informat...

CVE-1999-1115

Vulnerability in the /etc/suidexec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell ksh...

CVE-1999-1243

CVE-1999-1243 affects SGI Desktop Permissions Tool on IRIX 6.0.1 and earlier. Local users can modify permissions on arbitrary files, enabling privilege escalation. The underlying root cause and exact exploit details are not provided in the supplied documents; CVSS indicates Local access with Part...

CVE-1999-1335

CVE-1999-1335 concerns the cmu-snmp package’s snmpd server on Red Hat Linux 4.0 prior to 3.3-1. The vulnerability arises because snmpd is configured to allow remote attackers to read and write sensitive information. Affected product: cmu-snmp snmpd; vulnerable version before 3.3-1. Remediation pe...

CVE-1999-1111

The CVE-1999-1111 entry describes a vulnerability in StackGuard before 1.21 where an attacker can bypass Random and Terminator Canary protections by a non-linear attack that directly modifies the return-address pointer instead of overflowing a buffer. Documents do not provide exploitation details...

CVE-1999-1094

The vulnerability CVE-1999-1094 affects Internet Explorer 4.01 and earlier. A buffer overflow can be triggered by a long URL using the mk: protocol, enabling a remote attacker to execute arbitrary commands. According to the NVD entry, the attack vector is network, with low complexity and no authe...

CVE-1999-1139

CVE-1999-1139 describes a local privilege escalation in HP-UX 11.0 and earlier via a symlink attack on IOERROR.mytty, allowing local users to overwrite arbitrary files and gain root privileges. Affected component is HP-UX system tooling related to Character-Terminal User Environment (CUE). The co...

CVE-1999-1044

The CVE-1999-1044 entry concerns the Advanced File System Utility (advfs) in Digital UNIX, affecting versions 4.0 through 4.0d. The vulnerability enables local users to gain privileges, but the provided documents do not disclose the exact root cause, vulnerable function/file, or affected componen...

CVE-1999-1192

CVE-1999-1192 describes a buffer overflow in the EEPROM handling of Solaris 2.5.1 and earlier. The overflow permits local users to gain root privileges by crafting a long command-line argument. The vulnerability is local and affects Solaris systems prior to or including 2.5.1, with a CVSS base sc...