2001

lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2

kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf

Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands

kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm ca

sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop pr

Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, w

The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood o

The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection pa

SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain p

Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a f

Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to re

Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to

Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to

Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial

Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large n

Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command tha

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption

Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a

Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a

Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to pro

Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection pac

Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed co

Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection

Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion o

Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, whic

Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding t

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the

NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses

netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain

OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbol

tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which

The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configura

MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with

ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink at

Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconne

slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash)

Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings fo

Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary file

ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the passwor

PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malfor

Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2

Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a seri

IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 67

Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of smal

Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by

Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to re

Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbit