1999 CVE Vulnerabilities

897 CVEs published in 1999.

CVE IDSeverityCVSSDescription
CVE-1999-0749Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
CVE-1999-0679Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite i...
CVE-1999-13363Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot...
CVE-1999-0724Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.
CVE-1999-0694Denial of service in AIX ptrace system call allows local users to crash the system.
CVE-1999-0875DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.
CVE-1999-0867Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
CVE-1999-0861Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
CVE-1999-0814Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
CVE-1999-0813Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user...
CVE-1999-0680Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allo...
CVE-1999-0676sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
CVE-1999-0675Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of ...
CVE-1999-0674The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
CVE-1999-0722The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
CVE-1999-0673Buffer overflow in ALMail32 POP3 client via From: or To: headers.
CVE-1999-1524FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature fr...
CVE-1999-0682Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if th...
CVE-1999-0727A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
CVE-1999-0913dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.
CVE-1999-0719The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
CVE-1999-0671Buffer overflow in ToxSoft NextFTP client through CWD command.
CVE-1999-0677The WebRamp web administration utility has a default password.
CVE-1999-0703OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
CVE-1999-1337FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the...

Check if your code is affected by 1999 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now