1999

Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.

An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.

Denial of service in RAS/PPTP on NT systems.

Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which cou

WebTrends software stores account names and passwords in a file which does not have restricted access permissions.

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a

MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (S

Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs

Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.

Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query p

Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with th

Buffer overflows in Red Hat net-tools package.

Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow lo

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which al

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads a

The KDE klock program allows local users to unlock a session using malformed input.

The Debian mailman package uses weak authentication, which allows attackers to gain privileges.

Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .

Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a

The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.

The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.

Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling

useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argum

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempt

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY comman

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which cau

A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denia

The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the ma

CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in

Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.

Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.

Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengt

Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file na

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty

nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files an

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS pack

Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of dat

Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.

The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.

Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.

Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD com

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary f

NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.

IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process m

The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.

When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" prot