2001

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary

rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a d

Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a den

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (mo

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the

Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server v

Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device nam

Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a

Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Tex

fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitr

The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which t

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileg

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows loca

Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by t

kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local us

Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers

cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pat

teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produce

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via

Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, make

vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary

Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting info

Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to c

Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request wh

banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change

Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null chara

Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the s

Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before

Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary file

Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet,

BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN

Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot

IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP r

Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot

Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain h

TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution

Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name

Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local use

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could all

telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large

bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, wh

The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service

Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web si

IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by rep

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetO

IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.

Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and send