2000

Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determin

Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.

Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.

StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.

The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has b

Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands v

The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable pe

The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to d

Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file

Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeS

AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed A

The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the l

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the ap

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the serve

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name wit

Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery R

HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port

The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data t

The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 1

The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP

The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessio

InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client conf

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more in

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.

iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which co

The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets t

The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to exec

asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.

The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicio

Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security d

The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which a

The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that

Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connection

Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end o

The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service

Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET requ

Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST reque

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.

Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that

Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.

Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other we

The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed H

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Intern

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of tr

IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP p

The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.