1999

SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash

NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.

NetBSD allows ARP packets to overwrite static ARP entries.

Denial of service in in.comsat allows attackers to generate messages.

ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existe

The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.

An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private informat

quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access contr

The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name

Denial of service in Sendmail 8.8.6 in HPUX.

Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which

Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box

A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.

The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the

Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE)

The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tri

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.

vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could al

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.

In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filt

The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "t

Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture info

An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.

An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private informati

An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.

An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information.

An incorrect configuration of the Webcart CGI program could disclose private information.

BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.

Local users can gain privileges using the debug utility in the MPE/iX operating system.

Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, whi

FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.

Denial of service in "poll" in OpenBSD.

OpenBSD kernel crash through TSS handling, as caused by the crashme program.

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories

talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.

In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" fla

Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the

Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.

Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" comma

Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a

Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.

Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.

Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the

Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execu

Denial of service of Ascend routers through port 150 (remote administration).

Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.

Netmanager Chameleon SMTPd has several buffer overflows that cause a crash.

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read

In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer befor

When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and rep