2001

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups D

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel but

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allo

Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arb

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.

Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applet

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whic

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malfo

Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Expl

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.ht

Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a

BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which al

rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wit

Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service vi

gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot

The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensiti

Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the

Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connection

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users witho

FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malform

The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash

Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait"

CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could al

Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBA

Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to t

Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to

procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap o

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to re

dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attac

gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify

Buffer overflow in the find_default_type function in libsecure in NSA Security-enhanced Linux, which may allow attackers

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host

Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on th

Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.

The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local user

catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID tempo

Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via

Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database reque

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.ph

PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to

Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an

Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administra

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to