CVE-1999-0981

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published: Dec 8, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-09827.2The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file.CVE-1999-09837.5Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.CVE-1999-09847.5Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.CVE-1999-09857.5CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.CVE-1999-09865.0The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.CVE-1999-098710.0Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name.CVE-1999-09887.2UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.CVE-1999-09897.5Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protoc CVE-1999-09902.1Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.CVE-1999-09915.0Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.CVE-1999-099210.0HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).CVE-1999-09937.5Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.