1999

mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, w

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an inf

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS

Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute a

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could a

Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address,

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long U

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which red

HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a

Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, whic

SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, i

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does n

Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue n

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easi

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute

Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From:

BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Ser

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enf

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts f

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to by

Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to by

PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user,

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not requir

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attac

Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET reque

Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows loc

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG

linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access

Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges.

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allo

The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system co

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gai

Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vector

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which i

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.

Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long H

The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which a

The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by mo

Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (

Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.

WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server

The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via

glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

glFtpD includes a default glftpd user account with a default password and a UID of 0.

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.