1999

Trn allows local users to overwrite other users' files via symlinks.

The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic link

Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load

Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.

Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.

Denial of service in AIX ptrace system call allows local users to crash the system.

OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to

Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local u

BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append

Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which cou

WebTrends software stores account names and passwords in a file which does not have restricted access permissions.

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempt

The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the ma

The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.

When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" prot

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows l

A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.

The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.

A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-reada

Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link wi

The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the p

A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the

Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.

talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.

64 bit Solaris 7 procfs allows local users to perform a denial of service.

IMail POP3 daemon uses weak encryption, which allows local users to read files.

Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.

The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.

OpenBSD crash using nlink value in FFS and EXT2FS filesystems.

Buffer overflow in OpenBSD ping.

Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.

Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.

xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.

A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial

Debian GNU/Linux cfengine package is susceptible to a symlink attack.

Vulnerability in Compaq Tru64 UNIX edauth command.

The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not delet

Lynx allows a local user to overwrite sensitive files through /tmp symlinks.

NetBSD netstat command allows local users to access kernel memory.

Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the

Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.

When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access

Solaris ff.core allows local users to modify files.

L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.

Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.

A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.

PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) f

Anonymous FTP is enabled.

ICMP echo (ping) is allowed from arbitrary hosts.