1999

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many p

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Addr

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.

IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a la

An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view e

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.

Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.

DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source addr

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.

thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one

Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions o

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IF

When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authenticati

Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newlin

sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.

The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows lo

Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain priv

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? obj

Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.

The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the loc

CascadeView TFTP server allows local users to gain privileges via a symlink attack.

Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounti

Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitra

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite

lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line par

Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to o

Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectiv

Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such a

netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is s

gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a sy

Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32

Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large

Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functio

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has l

A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-bas

/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environmen

Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitiv

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.

ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) vi

nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.

Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long H

The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which a

The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by mo

Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial