CVE-1999-0474

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Apr 5, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-04751.2A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running CVE-1999-04767.2A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.CVE-1999-04777.5The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, whichCVE-1999-04795.0Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.CVE-1999-04802.1Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.CVE-1999-04815.0Denial of service in "poll" in OpenBSD.CVE-1999-04825.0OpenBSD kernel crash through TSS handling, as caused by the crashme program.CVE-1999-04832.1OpenBSD crash using nlink value in FFS and EXT2FS filesystems.CVE-1999-04842.1Buffer overflow in OpenBSD ping.CVE-1999-04852.6Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.CVE-1999-04872.6The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.CVE-1999-04887.5Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a v
CVE-1999-0474: Medium severity, CVSS 5.0 | Vulnix