2001

Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary command

Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or ex

Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot)

PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in t

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands,

Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to exe

Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute ar

Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, an

Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, a

The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registr

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the F

Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in m

Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access.

ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that

Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the

The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4)

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use o

Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attack

Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibl

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary c

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers

Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly

Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbi

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access intern

udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary command

OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with

Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.

Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands vi

Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search pa

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then

Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via

Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encodi

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that gen

Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the

Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a l

Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary cod

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executa

AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the

Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers

Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of ser

INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_a

Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows

postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration

Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.

template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands

SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow re

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.