2000

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "T

netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot

Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authenticat

WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message

Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empt

The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attack

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireW

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP

Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a lon

annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP pac

Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.

search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories

FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.

Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD por

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a ..

YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting bef

Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a se

The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of p

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden for

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbit

Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a

explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintab

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, whi

mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in th

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, whic

The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ director

Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .js

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid pas

Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remot

Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allow

The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows

Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to

Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via

eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of servi

Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by floo

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allow

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for in

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via

The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an emp

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to re

Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSI