1999

BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Ser

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the loc

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enf

Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32

Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large

Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functio

DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source addr

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allo

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has l

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts f

thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one

Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions o

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to by

Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to by

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IF

When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authenticati

PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user,

A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-bas

Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newlin

sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an inf

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS

The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system co

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gai

/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environmen

Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vector

Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitra

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not requir

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attac

Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET reque

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which i

CascadeView TFTP server allows local users to gain privileges via a symlink attack.