CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Security Vulnerabilities Published In 1999(Gain Information)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2000-0374 Bypass +Info 1999-08-22 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.
2 CVE-1999-1520 +Info 1999-05-11 2017-10-10
5.0
 None Remote Low Not required Partial None None
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
3 CVE-1999-1462 200 +Info 1999-12-31 2018-11-29
5.0
 None Remote Low Not required Partial None None
Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
4 CVE-1999-1397 +Info 1999-03-23 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.
5 CVE-1999-1260 +Info 1999-02-15 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query.
6 CVE-1999-1259 +Info 1999-12-31 2017-10-10
2.1
 None Local Low Not required Partial None None
Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information.
7 CVE-1999-1245 +Info 1999-04-06 2017-12-19
5.0
 None Remote Low Not required Partial None None
vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information.
8 CVE-1999-1126 +Info 1999-12-31 2017-12-19
2.1
 None Local Low Not required Partial None None
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".
9 CVE-1999-0890 Exec Code +Info 1999-09-16 2008-09-09
7.5
 None Remote Low Not required Partial Partial Partial
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
10 CVE-1999-0877 200 +Info 1999-10-01 2021-07-22
4.3
 None Remote Medium Not required Partial None None
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
11 CVE-1999-0861 362 +Info 1999-08-11 2018-10-12
2.6
 None Remote High Not required Partial None None
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
12 CVE-1999-0606 200 +Info 1999-04-01 2016-10-18
5.0
 None Remote Low Not required Partial None None
An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.
13 CVE-1999-0605 200 +Info 1999-04-01 2016-10-18
5.0
 None Remote Low Not required Partial None None
An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
14 CVE-1999-0453 200 +Info 1999-01-01 2022-08-17
5.0
 None Remote Low Not required Partial None None
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
15 CVE-1999-0372 200 +Info 1999-02-12 2018-10-12
2.1
 None Local Low Not required Partial None None
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
16 CVE-1999-0348 200 +Info 1999-01-27 2018-08-13
5.0
 None Remote Low Not required Partial None None
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
Total number of vulnerabilities : 16   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.