CVE Notifier

CVE-1999-1509 CWE-? N/A

CVE-1999-1509

Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1508 CWE-? N/A

CVE-1999-1508

Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1506 CWE-? N/A

CVE-1999-1506

Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1505 CWE-? N/A

CVE-1999-1505

Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1504 CWE-? N/A

CVE-1999-1504

Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1503 CWE-? N/A

CVE-1999-1503

Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1502 CWE-? N/A

CVE-1999-1502

Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1501 CWE-? N/A

CVE-1999-1501

(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1500 CWE-? N/A

CVE-1999-1500

Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1499 CWE-? N/A

CVE-1999-1499

named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1498 CWE-? N/A

CVE-1999-1498

Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1497 CWE-? N/A

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.

MITRE n/a:n/a 12 Sep 2001