2000

Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands

Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via

Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information s

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker

WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a

Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users

Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attacke

Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attacker

Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local at

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as

Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to

Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arb

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote a

Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.

Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR qu

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary comma

Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibl

Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and a

Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attac

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, all

Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacke

Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a deni

Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service a

Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scrip

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial

Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and po

pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_opt

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which all

csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could a

Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in pla

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrar

add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attacker

The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remo

Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possi

Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibl

The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers t

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (poss

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus in

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDA

Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fun

dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to o

Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain ro

The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via

The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files v

Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mech