CVE-1999-0904

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Nov 3, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-09055.0Denial of service in Axent Raptor firewall via malformed zero-length IP options.CVE-1999-09067.2Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.CVE-1999-09072.1sccw allows local users to read arbitrary files.CVE-1999-09085.0Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls toCVE-1999-09097.5Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the CVE-1999-09105.0Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy andCVE-1999-091110.0Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that creaCVE-1999-09122.1FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.CVE-1999-091310.0dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.CVE-1999-09147.2Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.CVE-1999-09155.0URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-09162.1WebTrends software stores account names and passwords in a file which does not have restricted access permissions.