
CVE-1999-0051 – SGI IRIX 5.3/6.2 / SGI license_oeo 1.0 LicenseManager - 'NETLS_LICENSE_FILE' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0051
06 Jan 1997 — Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. • https://www.exploit-db.com/exploits/19066 •

CVE-1999-1026 – Solaris 7.0 - aspppd Insecure Temporary File Creation
https://notcve.org/view.php?id=CVE-1999-1026
20 Dec 1996 — aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file. • https://www.exploit-db.com/exploits/19233 •

CVE-1999-0129
https://notcve.org/view.php?id=CVE-1999-0129
03 Dec 1996 — Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. • http://www.cert.org/advisories/CA-1996-25.html •

CVE-1999-0132
https://notcve.org/view.php?id=CVE-1999-0132
15 Aug 1996 — Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. • http://www.cert.org/advisories/CA-1996-19.html •

CVE-1999-1413 – Solaris 7.0 - 'Coredump' File Write
https://notcve.org/view.php?id=CVE-1999-1413
03 Aug 1996 — Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg. • https://www.exploit-db.com/exploits/19236 •

CVE-1999-0135
https://notcve.org/view.php?id=CVE-1999-0135
25 Jul 1996 — admintool in Solaris allows a local user to write to arbitrary files and gain root access. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0135 •

CVE-1999-0022
https://notcve.org/view.php?id=CVE-1999-0022
03 Jul 1996 — Local user gains root privileges via buffer overflow in rdist, via expstr() function. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/179 • CWE-125: Out-of-bounds Read •

CVE-1999-0241
https://notcve.org/view.php?id=CVE-1999-0241
01 Nov 1995 — Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0241 •

CVE-1999-0099
https://notcve.org/view.php?id=CVE-1999-0099
19 Oct 1995 — Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0099 •