1999

Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute co

Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL with

NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via

Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and refere

Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "

Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .

The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to

HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that con

ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's

Denial of service in Axent Raptor firewall via malformed zero-length IP options.

The Zeus web server administrative interface uses weak encryption for its passwords.

Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a cal

Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion)

HP Secure Web Console uses weak encryption.

Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an err

Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.

Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.

FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.

Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file s

bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target fil

Denial of service in BIND named via consuming more than "fdmax" file descriptors.

Denial of service in BIND named via maxdname.

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and

Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user

Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed

Denial of service in Linux syslogd via a large number of connections.

Denial of service in MDaemon WorldClient and WebConfig services via a long URL.

Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of se

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.

Buffer overflow in free internet chess server (FICS) program, xboard.

NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.

Denial of service in MDaemon 2.7 via a large number of connection attempts.

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error wh

ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL.

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existen

Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Aut

Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.

ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (r

The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.

War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.

classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to cra