1999

Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of ser

Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.

Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port.

Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, chan

Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.

ftp on HP-UX 11.00 allows local users to gain privileges.

Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.

SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service

Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's proc

InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.

Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector S

Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious prog

Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with a

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users t

Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry key

Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly exec

O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters

Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoo

FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by s

In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.

Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remo

nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.

WS_FTP server remote denial of service through cwd command.

IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags"

FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port

A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.

Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable an

IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.

Denial of service in Linux 2.2.0 running the ldd command on a core file.

Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read

By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of oth

Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.

Buffer overflow in Thomas Boutell's cgic library version up to 1.05.

search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attac

wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.

IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" r

A system-critical NETBIOS/SMB share has inappropriate access control.

A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.

Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allo

Denial of service in Sendmail 8.6.11 and 8.6.12.

Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of s

Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service.

Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of he

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol

The netstat service is running, which provides sensitive information to remote attackers.