2001

RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then ca

Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web sc

smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink a

Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphan

The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list al

RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to

RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denia

Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal d

easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtai

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP add

ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP pack

Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which al

Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restric

Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on proces

Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the

Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by settin

Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as cert

Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very larg

Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or t

Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local

Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permiss

Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text

Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a syml

DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allo

apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary fil

Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) b

Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields b

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset

IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid

Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consu

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (da

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive

Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to ove

Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.

Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file.

Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a serie

Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow lo

Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on

Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attacker

Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on th

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir comma

libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the

ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, eve

The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.

msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink atta

Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service

process_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, whic