CVE-1999-0891

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-08924.6Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.CVE-1999-08932.1userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.CVE-1999-089410.0Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.CVE-1999-08957.5Firewall-1 does not properly restrict access to LDAP attributes.CVE-1999-089610.0Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username CVE-1999-08987.2Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooCVE-1999-08997.2The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to sCVE-1999-09007.2Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.CVE-1999-09017.2ypserv allows a local user to modify the GECOS and login shells of other users.CVE-1999-09027.2ypserv allows local administrators to modify password tables.CVE-1999-09037.5genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.CVE-1999-09045.0Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.
CVE-1999-0891: Medium severity, CVSS 5.0 | Vulnix