1999

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading a

Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.

SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to c

A buffer overflow in lsof allows local users to obtain root privilege.

Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove

Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.

mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database name

Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.

rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force

In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a pr

The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.

ACC Tigris allows public access without a login.

SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.

The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authent

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.

Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute c

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing th

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D o

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entr

Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.

A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in som

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "abou

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct reque

In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.

ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption.

Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line arg

WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled

Buffer overflow in dtaction command gives root access.

Windows NT 4.0 beta allows users to read and delete shares.

Linux ftpwatch program allows local users to gain root privileges.

Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary

Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain device

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to re

Buffer overflow in Dosemu Slang library in Linux.

Buffer overflow in the bootp server in the Debian Linux netstd package.

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.

The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the

HP-UX aserver program allows local users to gain privileges via a symlink attack.

finger 0@host on some systems may print information on some user accounts.

finger .@host on some systems may print information on some user accounts.

Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP se

Attackers can do a denial of service of IRC by crashing the server.

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.

Linux cfingerd could be exploited to gain root access.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credent