2000

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (d

The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.

VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Tro

The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows lo

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /t

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various f

Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a

Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatte

Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java ap

PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL,

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, whi

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in

ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets wi

Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via

Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.

ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of s

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physi

GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.

news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which

Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot)

Worm HTTP server allows remote attackers to cause a denial of service via a long URL.

eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.

Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service

Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service

WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has

Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote at

Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute

The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by s

The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment t

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers

OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.

Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.

Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "T

netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot

Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authenticat

WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message

The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows lo

Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.

The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with consol

OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user i

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.

The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying th

GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and U

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the p

The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Tr