2000

The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privil

The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote att

sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which al

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access

Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the

The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which

String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows rem

Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attacke

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an atta

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote atta

Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote a

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests t

PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allow

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which al

Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attacker

admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to ga

Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a mal

Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary com

mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allow

Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileg

O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) create

Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or ex

Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.

Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and conne

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell meta

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make

The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, whi

pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which al

pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.

Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line

The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attac

suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report

Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the s

umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add

xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.

Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root priv

Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long comma

xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privile

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with phys

uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file w

Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs

Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.

Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.

Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.

Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not ex

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrict