CVSS: 10.0EPSS: 4%CPEs: 31EXPL: 2CVE-1999-0003 – Xi Graphics Maximum CDE 1.2.3/TriTeal TED CDE 4.3/Sun Solaris 2.5.1 - ToolTalk RPC Service Overflow
https://notcve.org/view.php?id=CVE-1999-0003
Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). • https://www.exploit-db.com/exploits/19102 https://www.exploit-db.com/exploits/19101 ftp://patches.sgi.com/support/free/security/advisories/19981101-01-A ftp://patches.sgi.com/support/free/security/advisories/19981101-01-PX http://www.securityfocus.com/bid/122 •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1075
https://notcve.org/view.php?id=CVE-1999-1075
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd. • http://marc.info/?l=bugtraq&m=89025820612530&w=2 •
CVSS: 1.2EPSS: 0%CPEs: 9EXPL: 0CVE-1999-1486
https://notcve.org/view.php?id=CVE-1999-1486
sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack. • http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only http://www-1.ibm.com/support/search.wss?rs=0&q=IX76853&apar=only http://www.securityfocus.com/bid/408 https://exchange.xforce.ibmcloud.com/vulnerabilities/7675 •
CVSS: 5.0EPSS: 4%CPEs: 3EXPL: 0CVE-1999-0087
https://notcve.org/view.php?id=CVE-1999-0087
Denial of service in AIX telnet can freeze a system and prevent users from accessing the server. • http://www.osvdb.org/7992 •
CVSS: 7.2EPSS: 0%CPEs: 13EXPL: 1CVE-1999-0014 – HP HP-UX 10.20/11.0 / IBM AIX 4.3 / SCO Unixware 7.0 / Sun Solaris 2.6 - Change File Permission
https://notcve.org/view.php?id=CVE-1999-0014
Unauthorized privileged access or denial of service via dtappgather program in CDE. • https://www.exploit-db.com/exploits/19108 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/185 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-075 •