1999

Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service a

MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.

Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected th

IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attac

Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpo

Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.

Denial of service in RAS/PPTP on NT systems.

Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with th

Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow lo

The KDE klock program allows local users to unlock a session using malformed input.

The Debian mailman package uses weak authentication, which allows attackers to gain privileges.

Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a

useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argum

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which cau

A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denia

Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.

Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengt

Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file na

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty

nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files an

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS pack

Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of dat

The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.

Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary f

NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.

Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to by

Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of servic

counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newl

counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.

BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command t

Buffer overflow in Windows NT 4.0 help file utility via a malformed help file.

Denial of service in Windows NT IIS server using ..\..

Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can

A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to

Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connect

Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.

The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.

Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache c

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it repo

Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat b