2001

UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read th

Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can rea

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into

NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the stud

EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.

Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes

Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group ma

Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privilege

A buffer overflow in reggo.dll file used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5

Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environme

Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to exec

Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could

WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathor

Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.

Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.

Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument.

BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which ca

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain p

Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 1

Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbo

LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, w

Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files,

Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local

Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation faul

vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which

Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_H

Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Pr

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows loc

join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form vari

Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Ke

Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the

The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a l

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which al

klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filt

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly exec

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by i

Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arb

The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote d

popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands

Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional u

Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin

geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which

run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to exe

Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session

Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code

pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows l

Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.

The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a scr