CVE-1999-0189

Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111...

CVE-1999-1286

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file...

CVE-1999-0042

Buffer overflow in University of Washington's implementation of IMAP and POP servers...

CVE-1999-0046

Buffer overflow of rlogin program using TERM environmental variable...

CVE-1999-0049

Csetup under IRIX allows arbitrary file creation or overwriting...

CVE-1999-1311

Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges...

CVE-1999-0550

A router's routing tables can be obtained from arbitrary hosts...

CVE-1999-0173

FormMail CGI program can be used by web servers other than the host server that the program resides on...

CVE-1999-1026

aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file...

CVE-1999-0129

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file...

CVE-1999-0234

Bash treats any character with a value of 255 as a command separator...

CVE-1999-1252

Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges...

CVE-1999-0324

ppl program in HP-UX allows local users to create root files through symlinks...

CVE-1999-0137

The dip program on many Linux systems allows local users to gain root access via a buffer overflow...

CVE-1999-0522

The permissions for a system-critical NIS+ table e.g. passwd are inappropriate...

CVE-1999-0078

pcnfsd aka rpc.pcnfsd allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call...

CVE-1999-0241

Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm...

CVE-1999-0155

The ghostscript command with the -dSAFER option allows remote attackers to execute commands...

CVE-1999-0172

FormMail CGI program allows remote execution of commands...

CVE-1999-1138

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories 1 /tmp for the dos user, and 2 /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable...