2000

Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" com

Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .js

Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authenticat

kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modif

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change

The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attack

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireW

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP

Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a lon

annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP pac

Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.

search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories

FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.

Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD por

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a ..

YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting bef

Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a se

The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of p

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden for

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbit

Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a

explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintab

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, whi

mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in th

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, whic

The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ director

Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long W

Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empt

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not ex

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrict

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (d

The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.

VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Tro

The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows lo

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /t

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various f

Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a

Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatte

Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java ap

PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL,

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, whi