2003

Memory leak in eServ 2.9x allows remote attackers to cause a denial of service (memory exhaustion) via a large number of

3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote

PalmOS allows remote attackers to cause a denial of service (CPU consumption) via a flood of ICMP echo request (ping) pa

autohtml.php in php-proxima 6.0 and earlier allows remote attackers to read arbitrary files via the name parameter in a

The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certai

The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (cr

The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute

Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for v

The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CP

Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and poss

Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to r

Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn

The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether

Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or c

Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could all

Remote PC Access Server 2.2 allows remote attackers to cause a denial of service (crash) by receiving packets from the s

Directory traversal vulnerability in Son hServer 0.2 allows remote attackers to read arbitrary files via ".|." (modified

Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Intern

Solaris 8 with IPv6 enabled allows remote attackers to cause a denial of service (kernel panic) via a crafted IPv6 packe

ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not

lyskom-server 2.0.7 and earlier allows unauthenticated users to cause a denial of service (CPU consumption) via a large

Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared N

The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include porti

SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of serv

Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause

The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an

Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the

The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scannin

Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request con

Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request c

wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an ar

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashe

Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary

Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting c

Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createP

Adobe Acrobat Reader (acroread) 6, under certain circumstances when running with the "Certified plug-ins only" option di

The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier ver

The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a den

Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder

The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as oppose

Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial

Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service (crash) via a TypingUser message

NeoModus Direct Connect 1.0 build 9, and possibly other versions, allows remote attackers to cause a denial of service (

Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the

Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause

The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient san

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to

The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack modu

Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or