CVE-1999-0281

CVE-1999-0281 describes a denial-of-service issue in Microsoft IIS triggered by long URLs. Connected documents identify IIS as the affected product and reiterate the DoS impact but do not provide concrete technical details such as vulnerable components, root cause, affected versions, or a fix. A ...

CVE-1999-0012

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names...

CVE-1999-0182

Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password...

CVE-1999-0224

Denial of service in Windows NT messenger service through a long username...

CVE-1999-0281

Denial of service in IIS using long URLs...

CVE-1999-0303

CVE-1999-0303 describes a buffer overflow in the BNU UUCP daemon (uucpd) triggered by long hostnames. The issue affects the BNU UUCP daemon and is caused by improper handling of hostname lengths, with CVSS metrics indicating a local, low-complexity attack that could impact confidentiality, integr...

CVE-1999-0182

This entry concerns Samba with a CVE-1999-0182 buffer overflow vulnerability that allows a remote attacker to obtain root access by supplying a long password. Affected component: Samba; vulnerability type: buffer overflow in handling long passwords. Documented impact states remote code execution ...

CVE-1999-0303: Undefined Security Weakness

Buffer overflow in BNU UUCP daemon uucpd through long hostnames...

CVE-1999-0085: Undefined Security Weakness

Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname...

CVE-1999-0012: Authentication Bypass by Spoofing

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names...

CVE-1999-0224: Undefined Security Weakness

Denial of service in Windows NT messenger service through a long username...

CVE-1999-0281: Undefined Security Weakness

Denial of service in IIS using long URLs...

CVE-1999-0178: Undefined Security Weakness

Buffer overflow in the win-c-sample program win-c-sample.exe in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string...

Eicon Technology Diva LAN ISDN Modem login.htm Long password Field DoS

The remote host appears to be an Eicon Technology Diva LAN ISDN modem. Nessus crashed the modem by supplying a long password to the login page. This is likely due to a buffer overflow. A remote attacker could exploit this by repeatedly disabling the modem. C Tenable Network Security, Inc...

CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...

win98explorer.txt

Date: Mon, 9 Feb 1998 17:49:45 -0800 From: Scott To: [email protected] Subject: Another Windows98 Bug... I'm not sure about the details of this problem, but when testing another buffer overflow, I created a long filename called "testfile.txt " note the chr160's at the end It is 235 characters ...

microsoft.wildcard.matches.txt

Date: Mon, 14 Jun 1999 09:46:41 +0200 From: BROWN Nick Subject: Unwanted wildcard match I don't normally like to present individual bugs as RISKs, but this one just bit me and is so counter-intuitive that I felt I had to report it. It appears that when Windows NT and, I imagine, other...

nt.explorer.DoS.txt

Date: Thu, 11 Feb 1999 11:25:01 -0800 From: Clifford Hammerschmidt To: [email protected] Subject: NT too? Re: Another Windows98 Bug... The following perl script will create a 250 character file that will crash WinNT service pack 3 explorer when right-clicked on: -------------------- $fn = 'A' ...

eudora.attachment.bof.txt

Date: Sat, 20 Mar 1999 02:21:35 -0500 From: whiz To: [email protected] Subject: Eudora Attachment Buffer Overflow I have found another problem with Eudora, attachments, and long filenames that is similar to the the problem I found last year. If two messages are sent to an Eudora 4.1 user that...

lotus-notes-smtp-DoS.txt

Date: Fri, 15 Jan 1999 00:52:53 PST From: Siva Sankar Adiraju To: [email protected] Subject: Lotus Notes SMTP Server bug There is a security bug in IBM's Lotus Notes SMTP server. eg. An SMTP session: helo a 250 notes.foo.com helo b 500 Session already established. The domain name b passed in...