1999

The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable an

Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the us

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.

Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumb

Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be c

Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.

Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2)

gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in

UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.

Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal

The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirec

The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to ex

Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.

A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with

E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the

Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudor

Denial of service in Debian IRC Epic/epic4 client via a long string.

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local

Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and

Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform

The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.

The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote att

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_al

Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental

A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to con

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variab

3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot

Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.

Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of

Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allo

sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.

Buffer overflow in ALMail32 POP3 client via From: or To: headers.

FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature fr

Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if th

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.

The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.

Buffer overflow in ToxSoft NextFTP client through CWD command.

Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.

FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the

Denial of service in Gauntlet Firewall via a malformed ICMP packet.

Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remo

Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file.

Denial of service in Windows NT messenger service through a long username.

Buffer overflow in Samba smbd program via a malformed message command.

Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.

dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read