1999

NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.

Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of dat

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS pack

Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengt

Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file na

A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denia

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which cau

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times

Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a

The Debian mailman package uses weak authentication, which allows attackers to gain privileges.

Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with th

Denial of service in RAS/PPTP on NT systems.

Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpo

IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attac

Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected th

Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service a

dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read

Buffer overflow in Samba smbd program via a malformed message command.

Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.

Denial of service in Windows NT messenger service through a long username.

Denial of service in Gauntlet Firewall via a malformed ICMP packet.

Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remo

Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if th

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.

FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature fr

Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of

Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allo

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.

3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot

A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to con

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_al

Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and

Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform

Denial of service in Debian IRC Epic/epic4 client via a long string.

Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudor

A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with

The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirec

UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.

Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.

Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be c

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.

Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result o

Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabl

Arkiea nlservd allows remote attackers to conduct a denial of service.

Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.

Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.

TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2)