Security Vulnerabilities, CVEs, Published In 1999

ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.

Windows NT 4.0 beta allows users to read and delete shares.

Buffer overflow in dtaction command gives root access.

Denial of service in RAS/PPTP on NT systems.

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.

Denial of service in in.comsat allows attackers to generate messages.

finger 0@host on some systems may print information on some user accounts.

finger .@host on some systems may print information on some user accounts.

Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.

Denial of service in Sendmail 8.6.11 and 8.6.12.

Attackers can do a denial of service of IRC by crashing the server.

Denial of service of Ascend routers through port 150 (remote administration).

Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.

Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.

Denial of service in Windows NT messenger service through a long username.

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.

Denial of service in Windows NT IIS server using ..\..

Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access.

Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.

Linux cfingerd could be exploited to gain root access.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.

Buffer overflow in ircd allows arbitrary command execution.

Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.

MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.