1999

Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after

Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.

Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.

Buffer overflow in FreeBSD gdc program.

FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /us

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.

Buffer overflow in UnixWare xauto program allows local users to gain root privilege.

UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.

The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable fi

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to rea

wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED

The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which a

The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by mo

Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows loc

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG

linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access

Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allo

The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system co

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gai

Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vector

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which i

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads a

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source

A system-critical NETBIOS/SMB share has inappropriate access control.

FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port

Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" comma

talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.

NetBSD allows ARP packets to overwrite static ARP entries.

Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat b

nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files an

Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.

Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-pa

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and

snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read

Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.

Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.

Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.

IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite

A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.

Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allo

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it repo

The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.

Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.