1999

Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then di

Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not e

Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attach

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-pa

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.

Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.

IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directo

DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) a

Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP paramet

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to cra

Cisco Cache Engine allows an attacker to replace content in the cache.

The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.

Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.

classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.

War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.

The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.

The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafi

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-si

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (r

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.

Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.

ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.

Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Aut

NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.

Denial of service in MDaemon 2.7 via a large number of connection attempts.

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error wh

ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL.

Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existen

FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.

Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.

Buffer overflow in FreeBSD angband allows local users to gain privileges.

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potent

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.

Buffer overflow in free internet chess server (FICS) program, xboard.

Denial of service in MDaemon WorldClient and WebConfig services via a long URL.

Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of se

Denial of service in Linux syslogd via a large number of connections.

ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to

Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.

Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user

Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed

tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inpu

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not

ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user log

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files

A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedd