1999

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs th

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to s

The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's c

DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute command

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys