2000

WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.

Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, w

glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a

NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sha

shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred f

nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial o

LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processe

Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Med

The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a

Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network inte

LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world e

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is s

inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on th

The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local us

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user cl

CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the fi

The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HT

A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, whic

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink atta

DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symli

FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF im

Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malfo

A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before th

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to

Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain she

Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service.

LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages

Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page w

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifie

Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key

A Windows NT administrator account has the default name of Administrator.

SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allo

IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local

Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command

SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configur

Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Se

eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords

The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame secur

Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the

Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session

The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pla

Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package P

Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memor

The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denia

NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in t