1999

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and

snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlie

Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and po

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the U

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory ex

IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request

Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, whic

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an ad

Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many p

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Addr

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.

IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a la

An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view e

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.

Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.

DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source addr

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.

thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one

Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions o

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IF

When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authenticati

Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newlin

sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.

The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows lo

Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain priv

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? obj

Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.

The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the loc

CascadeView TFTP server allows local users to gain privileges via a symlink attack.

ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) vi

Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial

AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cg

Denial of service in Savant web server via a null character in the requested URL.

Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifie

resend command in Majordomo allows local users to gain privileges via shell metacharacters.

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.

IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.

InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.

Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.

Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the f

RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.

Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote at