2000

iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal confi

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows loca

AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to g

quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters

The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java

Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute a

Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to c

Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary

Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2)

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a lon

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a lon

Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitr

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which

Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented T

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come f

The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote a

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and

Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrar

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capt

Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorizatio

Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or

Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers t

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME

Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary

The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remo

Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.

The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form

The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice

Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.

Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro e

Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.

Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long term

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users

The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may l

Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary comma

The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS

Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH

Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL

BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile an

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to co

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in

Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacter

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execut

Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbit

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MK

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote

Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a