2001

BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a

Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL co

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive le

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base6

PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack contai

WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GE

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbi

CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TC

Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP ec

The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of servic

The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possi

Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE ele

The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead o

A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window,

APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary pr

IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.

Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows

periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary f

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as passwo

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedur

Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharact

everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharac

simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacte

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute a

Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrar

One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed id

Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary comm

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arb

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL par

Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL

bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email

bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the ema

Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.

mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, whi

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via mal

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Servic

procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl file

procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a ja

GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could all

Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of serv

itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which

Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental v

Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earl