2001

Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands vi

Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search pa

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then

Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via

Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encodi

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that gen

Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the

Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a l

Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary cod

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executa

AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the

Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers

Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of ser

INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_a

Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows

postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration

Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.

template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands

SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow re

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.

index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, w

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute a

Vulnerability in WebCalendar 0.9.26 allows remote command execution.

Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary

Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary

Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.

Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.

Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitr

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute th

Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long c

Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d op

Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.

Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd wi

Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.

Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attack

Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line argum

Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via

Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml a

Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL)

Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly conne

Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename in

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read serv

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows r

TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows r

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding t

The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of ser

The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to ca

Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwi