2001

Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.

Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows

Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly c

Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a

Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possi

WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number o

Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.

telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of s

The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connecti

Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of

Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands v

Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via

Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and passwo

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does

The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may

Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messeng

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier f

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the origina

The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently re

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new serve

SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attacke

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administra

Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.ph

Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to

Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via

Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database reque

Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applet

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as passwo

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whic

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malfo

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Expl

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.ht

Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arb

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedur

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a

Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which al