2001

Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that

Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .sht

The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time

Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, pos

Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files

Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to stea

Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domain

Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Co

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive file

Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd)

vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.

Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation faul

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors caus

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset

Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7)

Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary com

Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the loc

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain d

Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000

The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the se

Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to

Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attacker

Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPAT

Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exh

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (mem

IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed reques

Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user emai

RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a

Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents vi

split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via a

Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files,

Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local

IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid

Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consu

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (da

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM fil

WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to caus

Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and

Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denia

Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cau

Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access v

Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a deni

Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a UR

The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code b