2000

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in

ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets wi

Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via

Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.

ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of s

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physi

GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which

Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot)

Worm HTTP server allows remote attackers to cause a denial of service via a long URL.

eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.

Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service

Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service

WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has

Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote at

Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute

The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by s

The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment t

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers

OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.

Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "T

netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot

Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authenticat

WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message

The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows lo

Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.

The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with consol

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user i

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.

The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying th

GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and U

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the p

The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Tr

Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace

Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat L

Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.

Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers

mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.

Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (c

The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll admi

pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display

The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial

AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) at

Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Re

Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary command