CVE-1999-0699

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Apr 11, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-07006.2Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.CVE-1999-07017.2After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local AdministratorCVE-1999-070210.0Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExCVE-1999-07033.6OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.CVE-1999-07049.3Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.CVE-1999-07057.5Buffer overflow in INN inews program.CVE-1999-07067.5Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.CVE-1999-07077.5The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.CVE-1999-07087.2Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.CVE-1999-07107.5The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remotCVE-1999-07114.6The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.CVE-1999-07122.1A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.
CVE-1999-0699: High severity, CVSS 7.5 | Vulnix