2001

Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.

Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.

DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a mal

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows

Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call in

Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL t

Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows

Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data d

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or

Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option ena

PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode

in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request

document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of th

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows re

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with

The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web

McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.

Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protec

Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that co

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that c

Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that

PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that cont

RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service vi

RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via

NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login reques

Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message t

Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files

Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the rema

bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows

Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly c

Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possi

WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number o

telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of s

The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connecti

Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via

The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict

The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict th

The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the

The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict t

The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly rest

The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly rest

The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restr

Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full

cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY,

Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a direc

Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gai

Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a l