1999

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct reque

In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl

Denial of service in Linux 2.2.0 running the ldd command on a core file.

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.

ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.

Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line arg

Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial

WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled

Buffer overflow in dtaction command gives root access.

Windows NT 4.0 beta allows users to read and delete shares.

Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.

Linux ftpwatch program allows local users to gain root privileges.

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read

Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary

By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of oth

When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.

Buffer overflow in Thomas Boutell's cgic library version up to 1.05.

Solaris ff.core allows local users to modify files.

Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain device

L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to re

Buffer overflow in Dosemu Slang library in Linux.

Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.

Buffer overflow in the bootp server in the Debian Linux netstd package.

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.

search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attac

The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the

HP-UX aserver program allows local users to gain privileges via a symlink attack.

wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.

IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" r

finger 0@host on some systems may print information on some user accounts.

finger .@host on some systems may print information on some user accounts.

Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP se

Attackers can do a denial of service of IRC by crashing the server.

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.

Linux cfingerd could be exploited to gain root access.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credent

Buffer overflow in ircd allows arbitrary command execution.

MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.

The Java Web Server would allow remote users to obtain the source code for CGI programs.

Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.

In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.

NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logg

Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.

DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.

The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext.

A service or application has a backdoor password that was placed there by the developer.

A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packet