2002

filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and s

openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequence

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite ar

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by i

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, whic

Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote at

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers

Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privilege

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for cert

Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data hea

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code v

Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative user

The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows at

Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer a

Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username v

Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a

mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types with

Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to ca

vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature i

Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ

Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbit

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service an

Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attacke

Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.

Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as

Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote atta

Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or

Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with

The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified f

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attacke

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary dire

Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a lo

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for develop

Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute a

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing r

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information o

Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers t