2000

userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via she

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbit

IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provi

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides

The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP prog

Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary comm

The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users

A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote

Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands v

Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a

Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Al

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (

Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GE

BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file w

xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host d

A system does not present an appropriate legal message or warning to a user who is accessing it.

Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary comman

Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possi

Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute ar

Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in

Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request

Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the

The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitra

Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mai

Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.

Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.

Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary comm

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary co

Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is pro

The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attac

Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.

The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to acces

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPag

Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a

Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a den

Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause

Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands.

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX

xsoldier program allows local users to gain root access via a long argument.

Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.

Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.

Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response pa

The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary com

Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.

The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variabl

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.

The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded,

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which co

The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by