CVSS: 9.8EPSS: 0%CPEs: 50EXPL: 3CVE-1999-0051 – SGI IRIX 5.3/6.2 / SGI license_oeo 1.0 LicenseManager - 'NETLS_LICENSE_FILE' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0051
06 Jan 1997 — Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. • https://www.exploit-db.com/exploits/19066 •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 2CVE-1999-0032 – BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - '/usr/bin/lpr' Buffer Overrun Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0032
25 Oct 1996 — Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option. • https://www.exploit-db.com/exploits/19545 •
CVSS: 9.1EPSS: 0%CPEs: 6EXPL: 0CVE-1999-0143
https://notcve.org/view.php?id=CVE-1999-0143
21 Feb 1996 — Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0143 •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-1999-1137
https://notcve.org/view.php?id=CVE-1999-1137
01 Oct 1993 — The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-1999-1318
https://notcve.org/view.php?id=CVE-1999-1318
17 Sep 1993 — /usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1142
https://notcve.org/view.php?id=CVE-1999-1142
27 May 1992 — SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/116 •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-1999-1468
https://notcve.org/view.php?id=CVE-1999-1468
22 Oct 1991 — rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable. • http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1211
https://notcve.org/view.php?id=CVE-1999-1211
27 Mar 1991 — Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges. • http://www.cert.org/advisories/CA-1991-02.html •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-1999-1438
https://notcve.org/view.php?id=CVE-1999-1438
22 Feb 1991 — Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/105 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-1999-1258
https://notcve.org/view.php?id=CVE-1999-1258
15 Jan 1991 — rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/102 •