1999

BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Ser

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enf

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts f

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to by

Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to by

PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user,

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not requir

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attac

Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET reque

The RPC portmapper service is running.

Windows NT automatically logs in an administrator upon rebooting.

The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the

HP-UX aserver program allows local users to gain privileges via a symlink attack.

Buffer overflow in the bootp server in the Debian Linux netstd package.

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.

Buffer overflow in Dosemu Slang library in Linux.

Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain device

Linux ftpwatch program allows local users to gain root privileges.

Buffer overflow in dtaction command gives root access.

ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.

Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line arg

Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing th

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.

Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute c

SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.

A buffer overflow in lsof allows local users to obtain root privilege.

Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.

Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.

SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to c

install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change

Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.

super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root acce

A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.

MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.

A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local use

The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs,

Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the te

The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers t

umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.

During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access

The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system op

IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file

The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files

The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local

Buffer overflow in Solaris dtprintinfo program.

Buffer overflow in Solaris lpset program allows local users to gain root access.

The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.