1999

Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.

Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD com

IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process m

SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control

Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly

SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum

AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder t

The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the

Buffer overflow in Solaris lpset program allows local users to gain root access.

The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.

Buffer overflow in Solaris dtprintinfo program.

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a mal

Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long

The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote att

The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local

The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.

Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG

The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files

IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file

BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.

Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scr

Vulnerability in the Wguest CGI program.

Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in t

Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password.

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, p

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths reg

The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system op

OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.

umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.

During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access

The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers t

The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to chan

Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the te

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs,

The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.

Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbi

The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set th

The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.

A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.

MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.

A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local use

super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root acce

Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and th

Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.

Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that a

ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication re

install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change