CVE-1999-1087

Internet Explorer 4 treats a 32-bit number "dotless IP address" in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that conta...

CVE-1999-1530

cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system...

CVE-1999-1167

CVE-1999-1167 describes a Cross-site scripting vulnerability in the Third Voice Web annotation utility. The issue allows remote attackers to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious JavaScript into an annotation. Affected component is the ...

CVE-1999-1550

bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter...

CVE-1999-1109

The vulnerability CVE-1999-1109 affects Sendmail 8.x prior to 8.10.0. It allows remote attackers to cause a denial of service by sending a sequence of ETRN commands, then disconnecting; the server reportedly continues to process the commands after the connection is terminated. The available docum...

CVE-1999-1127

CVE-1999-1127 affects Windows NT 4.0. The vulnerability stems from improper handling of invalid named pipe RPC connections, leading to resource exhaustion and a denial of service when a remote attacker establishes a sequence of connections sending malformed data. The issue is tied to the shutdown...

CVE-1999-1276

fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device...

CVE-1999-1279

The CVE describes an interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier that allows users to view each other’s folders when the users share the same Local APPC LU. Affected components include AS/400 shared folders and Microsoft SNA Server 3.0 and earlie...

CVE-1999-1379

CVE-1999-1379 concerns DNS reflection via UDP queries where an attacker spoofs the source address to use DNS name servers as traffic amplifiers, causing amplified traffic toward the victim. The description in the connected records confirms that open resolvers can be abused to generate more traffi...

CVE-1999-1437

The vulnerability CVE-1999-1437 affects ePerl 2.2.12, where an attacker can supply a full pathname to bar.phtml to read arbitrary files on the server and may be able to execute certain commands. This is a remote issue with potential impacts to confidentiality and integrity. The description consis...

CVE-1999-1117

CVE-1999-1117 affects IBM AIX 4.1 and 4.2 where the lquerypv component can be exploited locally to read arbitrary files by supplying a file path in the -h argument. The underlying issue is a local access vulnerability impacting confidentiality (per CVSS: Partial). No explicit exploit code, workar...

CVE-1999-1208

The CVE-1999-1208 entry describes a buffer overflow in the ping utility on AIX versions 4.2 and earlier. The root cause is a buffer overrun triggered by a long command line argument, allowing local users to gain root privileges. Public references in the provided records confirm the vulnerable com...

CVE-1999-1162

Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system...

CVE-1999-1414

Technical details for CVE-1999-1414 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-1999-1331

netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface...

CVE-1999-1045

pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request...

CVE-1999-1057

CVE-1999-1057 affects VMS 4.0 through 5.3. The vulnerability arises from the ANALYZE/PROCESS_DUMP DCL command, enabling local users to gain privileges. Root cause: improper access control on the ANALYZE/PROCESS_DUMP DCL command. Impact: local privilege escalation (partial confidentiality/integrit...

CVE-1999-1297

cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters such as those from password prompts via the L2/AGAIN key...

CVE-1999-1297

Affected software : cmdtool in OpenWindows 3.0 and XView 3.0 running on SunOS 4.1.4 and earlier. Vulnerability : local attackers with physical access can cause the system to display unechoed characters (e.g., password prompts) via the L2/AGAIN key. Root cause / vector : the prompt characters can ...

CVE-1999-1284

CVE-1999-1284 affects NukeNabber. The vulnerability allows remote attackers to cause a denial of service by connecting to the NukeNabber port 1080 without sending data, triggering 100% CPU usage via the report.exe program executed on connection. Affected software is NukeNabber; the available sour...