2000

ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which al

Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" ru

The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair gener

The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has

Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that

Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite file

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows rem

The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary file

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitiv

The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitiv

aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating

The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to

The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprot

The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to c

Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that int

Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local use

Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly exec

The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.

X fontserver xfs allows local users to cause a denial of service via malformed input to the server.

The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a lo

CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with acces

BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.

Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of serv

A remote attacker can read information from a Netscape user's cache via JavaScript.

Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a m

Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.

The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which a

Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers t

The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary file

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.

IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify

Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a lo

The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporar

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of servi

surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirec

Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.

A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be r

VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.

CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack.

AIX techlibss allows local users to overwrite files via a symlink attack.

The recover program in Solstice Backup allows local users to restore sensitive files.