2001

Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Pr

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows loc

join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form vari

Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Ke

Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the

Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service v

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and rea

Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -

Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to

Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_H

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stro

SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp)

Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrar

Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does

Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by n

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP ex

Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary

Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that

Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to stea

Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domain

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Co

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive file

Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd)

vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.

Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation faul

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors caus

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow

Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exh

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (mem

IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed reques

Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user emai

RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a

Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents vi

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via a

Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files,

Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local

Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denia

Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denia

LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service

3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attacker

Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with

Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and ins

Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary

Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with t

Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY