CVE-1999-0234

Bash treats any character with a value of 255 as a command separator.

CVE-1999-0731

The KDE klock program allows local users to unlock a session using malformed input.

CVE-1999-1288

Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program.