2001

Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device nam

Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a

admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify th

PowerNet IX allows remote attackers to cause a denial of service via a port scan.

vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a

vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.

vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, po

SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory all

TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports whic

GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.

AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux direc

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling th

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w

Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.

The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obta

content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content dat

Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet

Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) bl

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting t

Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port

Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arb

poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by caus

Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial o

Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbit

Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to re

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by

Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of smal

Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a seri

IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 67

Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via

ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the passwor

PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malfor

Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary file

slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash)

Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings fo

Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconne

The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configura

MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with

netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain

Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to

Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial

Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large n

Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command tha

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption

Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a

Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a

Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to pro

Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection pac