2001

BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which ca

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain p

Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 1

Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbo

LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, w

Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to ove

Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.

Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file.

Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a serie

NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using

Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long comman

Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information

Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a

SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authenticatio

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessio

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which all

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for oth

Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow

Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the method

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the method

Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the lo

Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow lo

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (

Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.

Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.

Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in file

The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten acros

TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1)

Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Se

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a b

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed

AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv,

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (

Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attacker

AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets t

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP re

CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request

Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an

Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets

PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that s

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files fr

pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web s