# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-1999-0001 |
20 |
|
DoS |
1999-12-30 |
2010-12-16 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets. |
2 |
CVE-1999-0004 |
|
|
Overflow |
1997-12-16 |
2018-10-12 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. |
3 |
CVE-1999-0007 |
327 |
|
|
1998-06-26 |
2020-04-02 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
Information from SSL-encrypted sessions via PKCS #1. |
4 |
CVE-1999-0010 |
|
|
DoS |
1998-04-08 |
2018-10-30 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. |
5 |
CVE-1999-0012 |
|
|
Bypass |
1998-02-06 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. |
6 |
CVE-1999-0015 |
|
|
DoS |
1997-12-16 |
2018-05-03 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Teardrop IP denial of service. |
7 |
CVE-1999-0016 |
|
|
DoS |
1997-12-01 |
2008-09-09 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Land IP denial of service. |
8 |
CVE-1999-0019 |
|
|
|
1996-04-24 |
2008-09-09 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
Delete or create a file via rpc.statd, due to invalid information. |
9 |
CVE-1999-0024 |
|
|
|
1997-08-13 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
DNS cache poisoning via BIND, by predictable query IDs. |
10 |
CVE-1999-0026 |
|
|
Overflow |
1997-07-16 |
2022-08-17 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
root privileges via buffer overflow in pset command on SGI IRIX systems. |
11 |
CVE-1999-0031 |
|
|
|
1997-07-08 |
2021-07-22 |
2.6 |
None |
Remote |
High |
Not required |
Partial |
None |
None |
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability. |
12 |
CVE-1999-0035 |
|
|
|
1997-05-29 |
2022-08-17 |
5.1 |
None |
Remote |
High |
Not required |
Partial |
Partial |
Partial |
Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. |
13 |
CVE-1999-0052 |
|
|
DoS |
1998-11-04 |
2018-05-03 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. |
14 |
CVE-1999-0053 |
|
|
DoS |
1998-10-13 |
2008-09-05 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
TCP RST denial of service in FreeBSD. |
15 |
CVE-1999-0054 |
|
|
DoS |
1998-06-10 |
2018-10-30 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Sun's ftpd daemon can be subjected to a denial of service. |
16 |
CVE-1999-0060 |
|
|
DoS |
1998-03-16 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool. |
17 |
CVE-1999-0061 |
|
|
|
1997-10-02 |
2022-08-17 |
5.1 |
None |
Remote |
High |
Not required |
Partial |
Partial |
Partial |
File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). |
18 |
CVE-1999-0063 |
|
|
|
1999-01-11 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port. |
19 |
CVE-1999-0070 |
|
|
|
1996-04-01 |
2020-10-13 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
test-cgi program allows an attacker to list files on the server. |
20 |
CVE-1999-0075 |
|
|
|
1996-10-16 |
2008-09-09 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. |
21 |
CVE-1999-0076 |
|
|
Overflow |
1997-07-01 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Buffer overflow in wu-ftp from PASV command causes a core dump. |
22 |
CVE-1999-0077 |
|
|
|
1995-01-01 |
2017-10-10 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
Predictable TCP sequence numbers allow spoofing. |
23 |
CVE-1999-0078 |
|
|
Exec Code |
1996-04-18 |
2022-08-17 |
1.9 |
None |
Local |
Medium |
Not required |
Partial |
None |
None |
pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. |
24 |
CVE-1999-0079 |
|
|
DoS |
1997-09-12 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. |
25 |
CVE-1999-0081 |
|
|
|
1997-01-11 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
wu-ftp allows files to be overwritten via the rnfr command. |
26 |
CVE-1999-0083 |
|
|
|
1997-06-11 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
getcwd() file descriptor leak in FTP. |
27 |
CVE-1999-0086 |
|
|
|
1998-01-08 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
AIX routed allows remote users to modify sensitive files. |
28 |
CVE-1999-0087 |
|
|
DoS |
1998-02-01 |
2008-09-09 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. |
29 |
CVE-1999-0094 |
|
|
+Priv |
1997-10-29 |
2022-08-17 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
AIX piodmgrsu command allows local users to gain additional group privileges. |
30 |
CVE-1999-0096 |
|
|
|
1996-12-10 |
2008-09-09 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
Sendmail decode alias can be used to overwrite sensitive files. |
31 |
CVE-1999-0103 |
|
|
|
1996-02-08 |
2018-08-22 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm. |
32 |
CVE-1999-0104 |
|
|
DoS |
1997-12-16 |
2018-08-22 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. |
33 |
CVE-1999-0105 |
|
|
|
1997-03-01 |
2022-08-17 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
finger allows recursive searches by using a long string of @ symbols. |
34 |
CVE-1999-0106 |
|
|
|
1997-03-01 |
2022-08-17 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Finger redirection allows finger bombs. |
35 |
CVE-1999-0107 |
|
|
DoS Overflow |
1997-12-30 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters. |
36 |
CVE-1999-0111 |
|
|
|
1997-07-01 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
RIP v1 is susceptible to spoofing. |
37 |
CVE-1999-0114 |
|
|
Exec Code |
1998-01-01 |
2022-08-17 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack. |
38 |
CVE-1999-0116 |
|
|
DoS |
1996-09-19 |
2008-09-09 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood. |
39 |
CVE-1999-0123 |
|
|
|
1995-12-01 |
2022-08-17 |
3.7 |
None |
Local |
High |
Not required |
Partial |
Partial |
Partial |
Race condition in Linux mailx command allows local users to read user files. |
40 |
CVE-1999-0125 |
|
|
Overflow |
1998-01-25 |
2018-10-30 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Buffer overflow in SGI IRIX mailx program. |
41 |
CVE-1999-0128 |
|
|
DoS |
1996-12-18 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. |
42 |
CVE-1999-0129 |
|
|
|
1996-12-03 |
2022-08-17 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. |
43 |
CVE-1999-0132 |
|
|
|
1996-08-15 |
2018-10-30 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. |
44 |
CVE-1999-0133 |
|
|
|
1996-08-14 |
2022-08-17 |
2.1 |
None |
Local |
Low |
Not required |
None |
Partial |
None |
fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access. |
45 |
CVE-1999-0140 |
|
|
DoS |
1999-06-30 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Denial of service in RAS/PPTP on NT systems. |
46 |
CVE-1999-0141 |
|
|
Exec Code |
1996-03-29 |
2008-09-09 |
3.7 |
None |
Local |
High |
Not required |
Partial |
Partial |
Partial |
Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet. |
47 |
CVE-1999-0143 |
|
|
|
1996-02-21 |
2022-08-17 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys. |
48 |
CVE-1999-0144 |
|
|
DoS |
1997-06-01 |
2020-01-23 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
Denial of service in Qmail by specifying a large number of recipients with the RCPT command. |
49 |
CVE-1999-0153 |
|
|
DoS |
1997-07-01 |
2008-09-09 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. |
50 |
CVE-1999-0154 |
|
|
|
1999-12-31 |
2022-08-17 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL. |