CVE-1999-0877

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Oct 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-087810.0Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.CVE-1999-087910.0Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.CVE-1999-08805.0Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.CVE-1999-08815.0Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-08825.0Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.CVE-1999-088310.0Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.CVE-1999-08845.0The Zeus web server administrative interface uses weak encryption for its passwords.CVE-1999-08853.6Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.CVE-1999-08869.0The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.CVE-1999-08875.0FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.CVE-1999-08884.6dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp useCVE-1999-08897.5Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
CVE-1999-0877: Medium severity, CVSS 4.3 | Vulnix