CVE-1999-1227

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.htmlVendor Advisory, URL Repurposed
http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.htmlVendor Advisory, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/3334
http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.htmlVendor Advisory, URL Repurposed
http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.htmlVendor Advisory, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/3334

Timeline

Published: Jul 30, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-12315.0ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts a CVE-1999-12337.5IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS CVE-1999-12345.0LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDom CVE-1999-12354.6Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the in CVE-1999-12364.6Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges CVE-1999-123710.0Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows rem CVE-1999-124110.0Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that CVE-1999-12447.2IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.CVE-1999-12455.0vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers CVE-1999-12467.5Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which CVE-1999-12477.2Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.CVE-1999-12545.0Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which cause