CVE-1999-0883

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-08845.0The Zeus web server administrative interface uses weak encryption for its passwords.CVE-1999-08853.6Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.CVE-1999-08869.0The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.CVE-1999-08875.0FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.CVE-1999-08884.6dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp useCVE-1999-08897.5Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.CVE-1999-08907.5iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.CVE-1999-08915.0The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.CVE-1999-08924.6Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.CVE-1999-08932.1userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.CVE-1999-089410.0Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.CVE-1999-08957.5Firewall-1 does not properly restrict access to LDAP attributes.