2001

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data d

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or

Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option ena

PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode

in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request

document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of th

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows re

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with

The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web

McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.

Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protec

Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that co

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that c

Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that

PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that cont

RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service vi

RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via

NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login reques

Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message t

Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files

Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the rema

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows

Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly c

Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possi

WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number o

telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of s

The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connecti

Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via

The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict

The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict th

The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the

The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict t

The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly rest

The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly rest

The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restr

Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full

cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY,

Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a direc

Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gai

Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a l

The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the searc

fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.

elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrit

GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.

Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/me

Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to

The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the

ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory,