1999

Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long H

The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by mo

ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) vi

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.

nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the U

Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory ex

IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request

Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitiv

Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, whic

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute a

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could a

The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify

Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address,

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlie

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long U

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which red

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows lo

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an ad

lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line par

HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports

Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to o

Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many p

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Addr

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and

Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, whic

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .

SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, i

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.

IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a la

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does n

Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue n

Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectiv

An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view e

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.

Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and po

mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, w

Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such a

Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounti

Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.

Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain priv

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easi

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? obj

Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows loc

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG