
CVE-1999-0185
https://notcve.org/view.php?id=CVE-1999-0185
01 Oct 1997 — In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/156 •

CVE-1999-0295
https://notcve.org/view.php?id=CVE-1999-0295
01 Oct 1997 — Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/157 •

CVE-1999-0300
https://notcve.org/view.php?id=CVE-1999-0300
01 Oct 1997 — nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/155 •

CVE-1999-0024
https://notcve.org/view.php?id=CVE-1999-0024
13 Aug 1997 — DNS cache poisoning via BIND, by predictable query IDs. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0024 •

CVE-1999-0301 – SGI IRIX 6.5.4 / Solaris 2.5.1 - ps Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0301
01 Aug 1997 — Buffer overflow in SunOS/Solaris ps command. • https://www.exploit-db.com/exploits/19168 •

CVE-1999-1423 – Solaris 2.5.1 - 'Ping' System Panic (Denial of Service)
https://notcve.org/view.php?id=CVE-1999-1423
26 Jun 1997 — ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i. • https://www.exploit-db.com/exploits/19161 •

CVE-1999-0189
https://notcve.org/view.php?id=CVE-1999-0189
04 Jun 1997 — Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/142 •

CVE-1999-1191 – Solaris 2.5.0/2.5.1 ps / chkey - Data Buffer
https://notcve.org/view.php?id=CVE-1999-1191
19 May 1997 — Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. • https://www.exploit-db.com/exploits/332 •

CVE-1999-1402 – FreeBSD 3.1 / Solaris 2.6 - Domain Socket
https://notcve.org/view.php?id=CVE-1999-1402
17 May 1997 — The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket. • https://www.exploit-db.com/exploits/19346 •

CVE-1999-0040 – LibXt - 'XtAppInitialize()' Local Overflow *xterm
https://notcve.org/view.php?id=CVE-1999-0040
01 May 1997 — Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. • https://www.exploit-db.com/exploits/331 •