2001

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whic

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malfo

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Expl

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.ht

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which al

rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wit

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service vi

gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot

The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensiti

Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the

Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connection

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users witho

FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malform

The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash

Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait"

The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to ide

BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a

Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL co

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive le

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base6

PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack contai

WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GE

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbi

CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TC

Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP ec

The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of servic

inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via a

Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, all

Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search re

ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/

Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending

Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.

The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.

Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of

An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm fil

The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.

Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a d

Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of s

IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of f

traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a la

traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets

Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.

Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data p