2000

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands in

Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.

Dragon telnet server allows remote attackers to cause a denial of service via a long username.

CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attack

Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command

Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET reques

The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods wit

Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes int

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desk

GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attack

Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.

Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via

In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass throu

The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if thei

Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails th

SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configur

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices

The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows rem

The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by

userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via she

mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (do

Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variabl

Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variab

Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in

Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remot

Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denia

Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbit

IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provi

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides

The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP prog

The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malform

RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port

Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form fie

Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Se

Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary comm

The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users

A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote

Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands v

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a lon

The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows loca

eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords

Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a

Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Al

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allow

Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragm

The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame secur

Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GE

BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file w