CVE-1999-0970

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Jun 5, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-09727.5Buffer overflow in Xshipwars xsw program.CVE-1999-097310.0Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in ver CVE-1999-097410.0Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.CVE-1999-09754.6The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT exten CVE-1999-09762.1Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting CVE-1999-097710.0Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.CVE-1999-09787.5htdig allows remote attackers to execute commands via filenames with shell metacharacters.CVE-1999-09797.2The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _CVE-1999-09805.0Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumera CVE-1999-09815.1Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to acces CVE-1999-09827.2The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.CVE-1999-09837.5Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.