1999

An application-critical Windows NT registry key has inappropriate permissions.

An application-critical Windows NT registry key has an inappropriate value.

Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.

Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.

mSQL v2.0.1 and below allows remote execution through a buffer overflow.

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attack

A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in

A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x

A filter in a router or firewall allows unusual fragmented packets.

The rsh/rlogin service is running.

Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a l

The RPC portmapper service is running.

Windows NT automatically logs in an administrator upon rebooting.

A system-critical NETBIOS/SMB share has inappropriate access control.

A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.

Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allo

Denial of service in Sendmail 8.6.11 and 8.6.12.

Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of s

Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.

Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of he

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol

The netstat service is running, which provides sensitive information to remote attackers.

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs th

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to s

The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's c

DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute command

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys

A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.

PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) f

Anonymous FTP is enabled.

ICMP echo (ping) is allowed from arbitrary hosts.

A network service is running on a nonstandard port.

The rpc.sprayd service is running.

The rstat/rstatd service is running.

The rpc.rquotad service is running.

The ident/identd service is running.

The echo service is running.

The systat service is running.

The daytime service is running.

The chargen service is running.

The UUCP service is running.

WinGate is being used.