CVE-1999-0915

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Oct 28, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-09162.1WebTrends software stores account names and passwords in a file which does not have restricted access permissions.CVE-1999-09175.1The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.CVE-1999-09187.8Denial of service in various Windows systems via malformed, fragmented IGMP packets.CVE-1999-092010.0Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.CVE-1999-09215.0BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.CVE-1999-09225.0An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.CVE-1999-09237.5Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server CVE-1999-09245.0The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.CVE-1999-09255.0UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-092610.0Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.CVE-1999-09275.0NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-09285.0Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.
CVE-1999-0915: Medium severity, CVSS 5.0 | Vulnix