2001

bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, wh

fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell m

Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long

cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by ex

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via j

Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary command

Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or ex

Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot)

PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in t

FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands,

Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to exe

Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute ar

Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, an

Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, a

The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registr

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the F

Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.

Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.

The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service

Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web si

IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by rep

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetO

IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.

Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and send

Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by insert

Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (

Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) att

Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and

ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form paramete

Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary file

Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request

The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary direc

The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via th

iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP G

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary fi

FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including

The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of servi

inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which a

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTT

Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast addres

MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of servic

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm devi

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with inse

Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain pr

Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack c

ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generate

VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local user

Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which m