2000

Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireW

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP

Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a lon

annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP pac

Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.

search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories

FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.

Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD por

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a ..

YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting bef

Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a se

The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of p

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden for

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbit

Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a

explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintab

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, whi

mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in th

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, whic

The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ director

Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long W

LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processe

Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Med

The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a

Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network inte

LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world e

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is s

The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may l

Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empt

Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary comma

The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS

Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH

Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL

BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile an

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to co

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in

Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacter

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execut

Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbit

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MK

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote

Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a

The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (kl