2001

Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that open

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password

Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary comma

VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L

mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privil

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Sc

Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to

Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.

Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.

Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.

Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.

The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS

Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).

Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denia

The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently

Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might all

Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a den

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process I

Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default p

The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.

Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a pa

Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers t

Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitra

Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileg

Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a

Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of

Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET reque

Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly exec

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow

Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malform

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote att

Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute ar

The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to ga

Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to g

The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhau

WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the

FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number

Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet pr

GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connecti

Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a

newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters.

eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to cr

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libr

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variabl