2000

Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the

Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute

Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which

The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constru

IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remot

GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attack

bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands

Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web si

cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unk

Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute a

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY enviro

Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink a

Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack

GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.

Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands

Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via

Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information s

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker

WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a

Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users

Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attacke

Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attacker

Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local at

Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file

HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target fil

The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross s

Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the usernam

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone tran

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to r

Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory

QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read

Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to re

BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Au

IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form var

MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifyi

mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is e

OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a

Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files

Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files

Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read ar

Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier a

Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitr

The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with wo

Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embed

Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol wi