CVE-1999-0193
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
CVE-1999-0192
Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
CVE-1999-0191
IIS newdsn.exe CGI script allows remote users to overwrite files.
CVE-1999-0182
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
CVE-1999-0178
Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.
CVE-1999-0176
The Webgais program allows a remote user to execute arbitrary commands.
CVE-1999-0175
The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
CVE-1999-0174
The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-1999-0173
FormMail CGI program can be used by web servers other than the host server that the program resides on.
CVE-1999-0154
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
CVE-1999-0153
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
CVE-1999-0149
The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
CVE-1999-0148
The handler CGI program in IRIX allows arbitrary command execution.
CVE-1999-0147
The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.
CVE-1999-0146
The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.
CVE-1999-0144
Denial of service in Qmail by specifying a large number of recipients with the RCPT command.
CVE-1999-0137
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
CVE-1999-0130
Local users can start Sendmail in daemon mode and gain root privileges.
CVE-1999-0128
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
CVE-1999-0126
SGI IRIX buffer overflow in xterm and Xaw allows root access.
CVE-1999-0118
AIX infod allows local users to gain root access through an X display.
CVE-1999-0116
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood.
CVE-1999-0113
Some implementations of rlogin allow root access if given a -froot parameter.
CVE-1999-0110
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE-1999-0108
The printers program in IRIX has a buffer overflow that gives root access to local users.
CVE-1999-0107
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters.
CVE-1999-0101
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
CVE-1999-0095
The debug command in Sendmail is enabled, allowing attackers to execute commands as root.
CVE-1999-0092
Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
CVE-1999-0070
test-cgi program allows an attacker to list files on the server.
CVE-1999-0068
CGI PHP mylog script allows an attacker to read any file on the target server.
CVE-1999-0064
Buffer overflow in AIX lquerylv program gives root access to local users.
CVE-1999-0063
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
CVE-1999-0060
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool.
CVE-1999-0051
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
CVE-1999-0046
Buffer overflow of rlogin program using TERM environmental variable.
CVE-1999-0044
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
CVE-1999-0042
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
