2001

Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.

Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of s

Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare

The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.

IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of f

cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passe

Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.

traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a la

traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets

A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an

Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.

Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove softwa

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command histo

The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify

Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" mes

NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which co

Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data p

Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without

PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP

rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctm

Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environment

Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile com

Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, w

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.

Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f p

gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.

rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.

getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.

ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash

Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a ..

Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long comman

exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL s

Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of s

Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions

Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possi

Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote a

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink

Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to

The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow re

Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Ma

The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeab

Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and

Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosi

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.