2001

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered

Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathna

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathna

Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attac

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privilege

TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check th

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() fu

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote

Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a UR

Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissi

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to caus

prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid lang

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe,

dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that gen

ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) f

WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension,

Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file

By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name se

Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conv

ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data t

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV"

6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers

Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify

Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain

The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and pa

Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attacker

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allo

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows

Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.

ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a Zon

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for

script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardl

The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mo

Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via

Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryption Protocol

Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption

WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hija

Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoo

Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL t

Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows

Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target

The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict

The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict th

The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the len