CVE-1999-1258

CVE-1999-1258 affects SunOS 4.1.1 and earlier; the rpc.pwdauthd daemon does not properly prevent remote access, allowing remote attackers to obtain sensitive system information. The root cause is inadequate access control on the RPC daemon, leading to information disclosure. Public details in pro...

CVE-1999-1494

The CVE-1999-1494 entry concerns Silicon Graphics IRIX colorview on versions 5.1, 5.2, and 6.0. The vulnerability condition is local; an attacker can read arbitrary files by abusing the -text argument. The description does not provide affected product families beyond IRIX colorview, nor does it s...

CVE-1999-1385

The CVE-1999-1385 entry describes a buffer overflow in the FreeBSD ppp program (FreeBSD 2.1 and earlier) that allows local users to gain privileges via a long HOME environment variable. The connected documents corroborate the description, identifying the affected component as the ppp program on o...

CVE-1999-1131

The CVE-1999-1131 entry concerns the OSF Distributed Computing Environment (DCE) security daemon (secd) on IRIX 6.4 and earlier. The vulnerability is a buffer overflow in secd triggered by a long principal, group, or organization, leading to a denial of service. Documents consistently describe th...

CVE-1999-1197

CVE-1999-1197 affects SunOS 4.1.1 TIOCCONS. The issue is a missing or improper permission check when a user redirects console output/input, allowing a local user to gain privileges. No remediation or patch information is provided in the connected documents; exploitation details are not described.

CVE-1999-1198

The vulnerability affects the BuildDisk program on NeXT systems prior to 2.0. It fails to prompt for the root password, enabling local users to gain root privileges. Root cause: missing authentication prompt in BuildDisk. Impact: local privilege escalation with complete compromise of the affected...

CVE-1999-1535

Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request...

CVE-1999-1356

Technical details about this CVE are not provided in the supplied documents; no affected product/version or remediation details are present. Monitor for updates.

CVE-1999-1542

RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command...

CVE-1999-1432

CVE-1999-1432 affects Solaris Powermanagement on Solaris 2.4–2.6; the xlock authentication process does not start until after sys-suspend finishes, allowing a physically proximate attacker to type into the last active application during the restore window and potentially gain higher privileges. A...

CVE-1999-0815

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...

CVE-1999-0930

The CVE-1999-0930 issue affects the wwwboard Perl script (wwwboard.pl). It arises when a POST submission allows a malicious user to modify the hidden followup field, which references the previous message; altering this value can cause existing messages to be overwritten or deleted. The Seebug ent...

CVE-1999-1137

CVE-1999-1137 concerns the /dev/audio device on Solaris 2.2 and earlier and SunOS 4.1.x. Permissions allow any local user to read the device, enabling potential eavesdropping on nearby conversations. Root cause: permissive read access to the audio device; affected components are the legacy Solari...

CVE-1999-1452

CVE-1999-1452 concerns GINA in Windows NT 4.0 where an attacker with physical access can cause the user’s locked workstation clipboard to be partially exposed by pasting into the username prompt. The description states the effect but does not provide root-cause details, affected components beyond...

CVE-1999-1409

CVE-1999-1409 affects the at utility in IRIX 6.2 and NetBSD 1.3.2 and older. Local users can read portions of arbitrary files by submitting the file to at with the -f argument, which causes at to generate error messages that are emailed to the user. The description notes a local-privilege/partial...

CVE-1999-1140

CrackLib 2.5 is vulnerable to a local privilege escalation via a buffer overflow caused by a long GECOS field, enabling root privileges. The CVE-1999-1140 entry cites a local attack vector with high impact (C/C/I/A) and a base score of 7.2. No explicit remediation or exploit details are provided ...

CVE-1999-1093

The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...

CVE-1999-1411

The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp...

CVE-1999-0380

SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...

CVE-1999-1119

CVE-1999-1119 concerns the AIX FTP installation script anon.ftp, which insecurely configures anonymous FTP. The issue arises from a misconfiguration in the anonymous FTP setup, enabling remote attackers to execute arbitrary commands. Documents in the connected set confirm the description and the ...