1999

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mech

Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after t

A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a lo

bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target fil

FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.

Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.

cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allo

A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may

Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password ar

Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands

Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execut

Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service

The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that

Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.

Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -

Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.

FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.

Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file s

Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.

Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.

AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to e

Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a vie

Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.

Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through t

Buffer overflow in SCO UnixWare Xsco command via a long argument.

runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allow

HP Secure Web Console uses weak encryption.

Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an err

Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the prog

By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option,

Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers

Buffer overflow in Skyfull mail server via MAIL FROM command.

Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion)

Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands tha

Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitra

genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.

Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a cal

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search e

The Zeus web server administrative interface uses weak encryption for its passwords.

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.

Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation.

ypserv allows a local user to modify the GECOS and login shells of other users.