CVE-1999-0754

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: May 11, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-07555.0Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.CVE-1999-07565.0ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.CVE-1999-07572.1The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.CVE-1999-07585.0Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script CVE-1999-075910.0Buffer overflow in FuseMAIL POP service via long USER and PASS commands.CVE-1999-076010.0Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.CVE-1999-07617.2Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.CVE-1999-07622.6When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access CVE-1999-07636.4NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.CVE-1999-07646.4NetBSD allows ARP packets to overwrite static ARP entries.CVE-1999-076510.0SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.CVE-1999-07669.3The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.