1999

Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.

Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (

Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long H

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, w

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an inf

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS

The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.

VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accou

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code

rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.

Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.

The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox e

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Man

Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scr

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct reque

An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.

Denial of service in various Windows systems via malformed, fragmented IGMP packets.

A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.

Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "s

A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext netwo

Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments t

Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.

The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vu

Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet con

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name st

Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo fi

Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.

mSQL v2.0.1 and below allows remote execution through a buffer overflow.

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attack

A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in

A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x

A filter in a router or firewall allows unusual fragmented packets.

The rsh/rlogin service is running.

Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a l

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to re

WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled

In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl

A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in som

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1

The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authent

ACC Tigris allows public access without a login.

The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.

In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a pr

Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.

mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database name

Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading a

Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that a