2001

Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaS

SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-0

DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a mal

ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the ser

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) cha

The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via

Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via

Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml a

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possib

The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario compu

Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could

POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to appe

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existe

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Co

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and rea

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, a

htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an al

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploa

The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must

Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directorie

CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate author

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate a

Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arb

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.

IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privile

Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.

Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, make

teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produce

ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink at

cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack.

fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack

initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to condu

Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denia

Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrar

Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwr

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows

Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.

ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a Zon

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for

script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardl

The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mo

Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via

Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call in

Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messeng