2002

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request t

LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) vi

ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number

Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length packe

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number

Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with "SA1457 ou

Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modified

PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain s

FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.

Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other por

Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via

DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to

Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP

Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (t

Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary cod

Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitra

Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possi

ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET request

gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass acce

Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling l

The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, wh

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.

Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which

SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an

Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a lo

Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and

The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause

Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system

GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to

Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" chara

Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arb

Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the

PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physi

ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains

The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of conne

Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary fil

Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexi

Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript

The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which

InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in th

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows loca

Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML documen

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the

Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrar

Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and cras

GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which coul

Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable tempor