CVE Notifier

CVE-1999-1240 CWE-? N/A

CVE-1999-1240

Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1239 CWE-? N/A

CVE-1999-1239

HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1238 CWE-? N/A

CVE-1999-1238

Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1237 CWE-? N/A

CVE-1999-1237

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long …

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1236 CWE-? N/A

CVE-1999-1236

Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1235 CWE-? N/A

CVE-1999-1235

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observ…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1234 CWE-? N/A

CVE-1999-1234

LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1232 CWE-? N/A

CVE-1999-1232

Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1231 CWE-? N/A

CVE-1999-1231

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determ…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1230 CWE-? N/A

CVE-1999-1230

Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1229 CWE-? N/A

CVE-1999-1229

Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1228 CWE-? N/A

CVE-1999-1228

Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a "+++" sequence that appears in IC…

MITRE n/a:n/a 12 Sep 2001