CVE-1999-1411

The vulnerability CVE-1999-1411 affects the fsp package 2.71-10 on Debian GNU/Linux 2.0. During installation, an anonymous FTP user is added without administrator notification, which could automatically enable anonymous FTP on servers such as wu-ftp. Impact described as enabling anonymous FTP acc...

CVE-1999-1316

Affected product: Windows NT SP2 with Passfilt.dll. Description states that Passfilt.dll allows users to create a password containing the user’s name, which could make it easier for an attacker to guess. The material provided does not specify affected build numbers beyond SP2 or any explicit reme...

CVE-1999-1488

sdrd daemon in IBM SP2 System Data Repository SDR allows remote attackers to read files without authentication...

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

CVE-1999-1028

The CVE-1999-1028 entry concerns Symantec pcAnywhere 8.0. The affected component is the pcAnywhere service listening on port 5631. The documented impact is a remote denial of service caused by sending a large amount of data, leading to increased CPU utilization. The sources in the provided docume...

CVE-1999-1027

Solaris 2.6 HW3/98 installs admintool with world-writable permissions, enabling local users to escalate privileges by replacing the admintool binary with a Trojan horse program. Root cause: insecure file permissions on an installed admin tool. Impact: local privilege escalation; exact scope not q...

CVE-1999-1188

The CVE affects MySQL 3.21, where mysqld creates log files with world-readable permissions. This exposes passwords for newly created users to local users who can read those logs. The issue is a local-privilege-information-disclosure risk due to improper file permissions, allowing exposure of sens...

CVE-1999-1093

The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...

CVE-1999-1481

Squid 2.2.STABLE5 and earlier versions are affected when using external authentication. A newline in the user/password pair can bypass access controls, enabling unauthorized access. The available documents confirm the affected software and the bypass condition but do not provide remediation detai...

CVE-1999-1114

CVE-1999-1114 concerns a buffer overflow in the Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier (and possibly other OSes), enabling local users to gain root privileges. The vulnerability arises in the suid_exec component and has been documented in multiple sources (NVD, CVE, CVE List)....

CVE-1999-1100

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack...

CVE-1999-1157

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...

CVE-1999-1159

SSH 2.0.11 and earlier permits local users to request remote forwarding to privileged ports without root privileges. Root-cause: weakness in SSH 2.0.x remote forwarding handling enabling non-privileged users to bind privileged ports. Impact: potential unauthorized access paths via port forwarding...

CVE-1999-1223

The CVE-1999-1223 entry concerns IIS 3.0. It describes a remote denial-of-service condition triggered by an ASP page request whose URL contains a very large number of forward-slash characters. The available references reiterate that this input pattern can disrupt the service, but the documents do...

CVE-1999-1433

HP JetAdmin D.01.09 on Solaris is affected by a local privilege escalation via a symlink attack on /tmp/jetadmin.log, allowing a local user to change file permissions. The root cause is a race/symlink vulnerability in the handling of the log file, enabling arbitrary file permission changes. Publi...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...

CVE-1999-1037

CVE-1999-1037 affects SATAN 1.1.1; a local symlink attack allows a non-privileged user to overwrite arbitrary files via /tmp/rex.$$. This is described in the vulnerability record as rex.satan permits local file overwrite through a symlink race. The connected records confirm the affected product a...

CVE-1999-1103

The CVE-1999-1103 issue affects DEC OSF/1 3.2C and earlier where dxconsole allows a local user to read arbitrary files by supplying a -file parameter. The vulnerability is local with low attack complexity and no authentication required, yielding partial confidentiality, integrity, and availabilit...

CVE-1999-1288

Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program...

CVE-1999-1048

Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \w option in the PS1 environmental variable when another user changes into that directory...