2001

Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large numbe

Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL r

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a UR

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *"

Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a ..

Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (mod

man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).

Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of ser

Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via

Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (do

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary

rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a d

Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a den

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (mo

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the

Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server v

Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device nam

Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a

Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Tex

fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitr

The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which t

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileg

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows loca

Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by t

kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local us

Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version

readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local

sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users t

Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.

Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attac

pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers

cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pat

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remot

Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.

teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produce

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privile

ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.

diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allow

OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin

Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o

Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathna

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathna

Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the

The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4)

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use o