2001

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new serve

SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attacke

Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messeng

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the origina

The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently re

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier f

The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and passwo

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Se

Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary comman

Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community nam

Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of servi

WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody gr

Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a lon

Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via

The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web

Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a

Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed

Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remot

Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and p

24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/."

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII ch

Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters

Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, wh

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allo

Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary comman

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decryp

NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication pac

The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which a

Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote

ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" comma

IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitr

OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH ser

Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a l

Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary

Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..

Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of

Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands v

modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell meta

rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to g

Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.

Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a lo

Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via

Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.

Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables

restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which a

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when

Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.