2000

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which all

csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could a

Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in pla

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrar

add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attacker

The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remo

Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possi

Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibl

The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers t

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (poss

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus in

CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDA

Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fun

dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to o

Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain ro

The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via

The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files v

Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mech

iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal confi

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows loca

pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the re

Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX cont

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid pas

Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remot

Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allow

The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows

Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to

Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via

eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of servi

Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by floo

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allow

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for in

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via

The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an emp

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to re

Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSI

Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSI

Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attacke

Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to

Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers

Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to

Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to

The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to