CVE-1999-0817

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Sep 15, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-08187.2Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.CVE-1999-08195.0NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.CVE-1999-08204.6FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.CVE-1999-08214.6FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.CVE-1999-082210.0Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.CVE-1999-08234.6Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.CVE-1999-08244.6A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that CVE-1999-08253.6The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.CVE-1999-08264.6Buffer overflow in FreeBSD angband allows local users to gain privileges.CVE-1999-08272.6By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame s CVE-1999-08283.6UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.CVE-1999-08295.0HP Secure Web Console uses weak encryption.