2000

MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote att

Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided

Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly s

A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list direc

Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.

HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named wind

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus i

The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to

The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial

Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrar

mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file

NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast ad

Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utili

The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a

Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of servi

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary file

Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows

The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged fu

Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, w

cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could a

Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain p

Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY envi

Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and tr

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line param

WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, w

glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attack

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as

The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 befor

Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to

Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arb

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote a

Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.

Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR qu

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary comma

Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibl

Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and a

Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attac

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, all

Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacke

Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a deni

Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service a

Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scrip

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial

Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and po

pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_opt