2000

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute ar

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman

Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long B

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrar

EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via l

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arb

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate i

authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters

SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the

Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary

Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the

Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute

Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which

The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constru

IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remot

GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attack

bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands

Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web si

cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unk

Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute a

SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attac

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restr

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP head

Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCAL

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate P

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH

Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) att

Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.

get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp p

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC

Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to exec

Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.

Buffer overflow in SCO scohelp program allows remote attackers to execute commands.

Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_

The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, si

Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.

NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.

The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot

Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.

Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.

procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alte

The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain pass

Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.

buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.

setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverr