1999

mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, w

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an inf

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS

VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accou

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code

Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute a

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could a

Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address,

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long U

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which red

HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a

Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, whic

SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, i

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does n

Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue n

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easi

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute

Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From:

BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Ser

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enf

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts f

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to by

Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to by

PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user,

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not requir

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attac

Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET reque

Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows loc

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG

linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access

Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allo

The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system co

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gai

Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vector

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which i

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and

snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlie

Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and po

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the U

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory ex

IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request

Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, whic

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an ad

Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a