CVSS: 7.5EPSS: 1%CPEs: 7EXPL: 1CVE-1999-0502 – SSH - User Code Execution
https://notcve.org/view.php?id=CVE-1999-0502
A Unix account has a default, null, blank, or missing password. • https://www.exploit-db.com/exploits/41694 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0502 - •
CVSS: 4.6EPSS: 0%CPEs: 12EXPL: 2CVE-1999-0125 – RedHat Linux 4.2 / SGI IRIX 6.3 / Solaris 2.6 - 'mailx'
https://notcve.org/view.php?id=CVE-1999-0125
Buffer overflow in SGI IRIX mailx program. • https://www.exploit-db.com/exploits/19311 https://www.exploit-db.com/exploits/19312 ftp://patches.sgi.com/support/free/security/advisories/19980605-01-PX •
CVSS: 5.0EPSS: 14%CPEs: 33EXPL: 1CVE-1999-0513 – Linux Kernel 2.0/2.1 (Digital UNIX 4.0 D / FreeBSD 2.2.4 / HP HP-UX 10.20/11.0 / IBM AIX 3.2.5 / NetBSD 1.2 / Solaris 2.5.1) - Smurf Denial of Service
https://notcve.org/view.php?id=CVE-1999-0513
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. • https://www.exploit-db.com/exploits/19117 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0513 •
CVSS: 5.0EPSS: 0%CPEs: 5EXPL: 0CVE-1999-1225
https://notcve.org/view.php?id=CVE-1999-1225
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not. • http://www.securityfocus.com/archive/1/7526 https://exchange.xforce.ibmcloud.com/vulnerabilities/347 •
CVSS: 8.4EPSS: 0%CPEs: 45EXPL: 2CVE-1999-0038 – BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0038
Buffer overflow in xlock program allows local users to execute commands as root. • https://www.exploit-db.com/exploits/19173 https://www.exploit-db.com/exploits/19172 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •