2000

pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote

Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a

ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" charact

Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration fi

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to

Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code

Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" com

NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sha

shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred f

nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial o

AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to g

Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .js

Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authenticat

quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters

The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java

Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute a

Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to c

Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary

Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2)

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a lon

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a lon

Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitr

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which

Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented T

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come f

The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote a

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and

Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrar

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capt

Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorizatio

Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or

Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers t

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME

Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary

The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remo

Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.

The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form

The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice

Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.

Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro e

Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.

Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long term

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users

kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modif

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change

The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attack