2001

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privi

Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, whic

Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possi

Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorize

Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elev

Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attac

The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the

Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the gene

Vulnerability in the server for nPULSE before 0.53p4.

Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.

Vulnerability in IntraGnat before 1.4.

Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.

expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gai

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host a

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to exe

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows re

Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (

Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and po

xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe,

Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to e

iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possi

Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of servic

Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a den

Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute

IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via

Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possi

Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (cra

Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitra

Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cau

Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of servi

Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) an

Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute a

Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and

Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a

Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and poss

Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which al

AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to

The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain comman

Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zer

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain pr

Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) us

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to

Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a

The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows

Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1)