2000

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot

Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a r

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at

Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet

Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a

Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprot

Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activi

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or

The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet

HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a deni

read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows

The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to c

Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that int

Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local use

Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.

Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly exec

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via

Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.

Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a docume

The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.

X fontserver xfs allows local users to cause a denial of service via malformed input to the server.

The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMa

Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or exec

The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.

The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configurat

The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in

IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped

The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows lo

The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a ..

Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form v

The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden

The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.

After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the

The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to

The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.

The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a

Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.

The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a lo

CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with acces

BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.

PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users an

BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the leng

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt

HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addre