2001

Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary comm

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arb

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL par

Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL

bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email

bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the ema

Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.

mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, whi

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via mal

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Servic

procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl file

procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a ja

GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could all

Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of serv

itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which

Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental v

Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earl

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups D

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel but

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allo

Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via

Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database reque

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.ph

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to

Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an

Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administra

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new serve

SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attacke

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and passwo

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Se

Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary comman

Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community nam

Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of servi

WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody gr

Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a lon

Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via

The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web

Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a

Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed

Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remot

Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and p

24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/."

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII ch

Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters

Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, wh

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allo