CVE-1999-0842

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Nov 29, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-08435.0Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.CVE-1999-08445.0Denial of service in MDaemon WorldClient and WebConfig services via a long URL.CVE-1999-08457.2Buffer overflow in SCO su program allows local users to gain root access via a long username.CVE-1999-08465.0Denial of service in MDaemon 2.7 via a large number of connection attempts.CVE-1999-08475.0Buffer overflow in free internet chess server (FICS) program, xboard.CVE-1999-08485.0Denial of service in BIND named via consuming more than "fdmax" file descriptors.CVE-1999-08495.0Denial of service in BIND named via maxdname.CVE-1999-08503.6The default permissions for Endymion MailMan allow local users to read email or modify files.CVE-1999-08512.1Denial of service in BIND named via naptr.CVE-1999-08527.2IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.CVE-1999-085310.0Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic AuCVE-1999-08545.0Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the H
CVE-1999-0842: Medium severity, CVSS 5.0 | Vulnix