2001

Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows

oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which m

sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does

Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in o

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly co

Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via

Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted

Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could all

Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that open

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password

Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary comma

VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L

mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options

Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.

Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.

The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS

Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).

Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denia

The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently

Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might all

Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a den

eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to cr

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libr

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variabl

kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a pa

Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial o

Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is

webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink

The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the temp

The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command histo

The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify

The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeab

rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctm

gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.

rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.

getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.

exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary

Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.