2000

NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast ad

Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utili

The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a

Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of servi

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary file

Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows

The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged fu

Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, w

cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could a

Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain p

Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY envi

Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and tr

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line param

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attack

The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 befor

pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the re

Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX cont

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid pas

Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remot

Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allow

The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows

Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to

Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via

eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of servi

Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by floo

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allow

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for in

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via

The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an emp

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to re

Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSI

Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSI

Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attacke

Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to

Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers

Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to

Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to

The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to

pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote

Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a

ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" charact

Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration fi

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to

Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code