CVE Notifier

CVE-1999-1038 CWE-? N/A

CVE-1999-1038

Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1036 CWE-? N/A

CVE-1999-1036

COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1033 CWE-? N/A

CVE-1999-1033

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1031 CWE-? N/A

CVE-1999-1031

counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1030 CWE-? N/A

CVE-1999-1030

counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1029 CWE-? N/A

CVE-1999-1029

SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit lo…

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1026 CWE-? N/A

CVE-1999-1026

aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1025 CWE-? N/A

CVE-1999-1025

CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1024 CWE-? N/A

CVE-1999-1024

ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1023 CWE-? N/A

CVE-1999-1023

useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1022 CWE-? N/A

CVE-1999-1022

serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.

MITRE n/a:n/a 12 Sep 2001

CVE-1999-1020 CWE-? N/A

CVE-1999-1020

The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via …

MITRE n/a:n/a 12 Sep 2001