2000

Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.

Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allo

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's s

Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: ext

Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execut

BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database i

Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary

Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbi

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, wh

Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long

Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.

The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary comman

Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.

The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack

The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify fi

Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachmen

The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary comman

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, w

Savant web server allows remote attackers to execute arbitrary commands via a long GET request.

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remo

The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which co

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current direct

Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir param

makewhatis in Linux man package allows local users to overwrite files via a symlink attack.

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with

Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary com

Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port.

Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long

Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within Act

Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote att

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify

Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary comm

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.

BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attac

Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges

Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges

AIX cdmount allows local users to gain root privileges via shell metacharacters.

Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.

The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the

Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands in

Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET reques

The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods wit

GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attack

Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.

The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows rem

The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by