2002

tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is free

Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users

Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is insta

PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local

Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local

Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users

Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and p

Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial

Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems

Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.

EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su

Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granti

shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group pri

OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges b

simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allo

Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.

Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argume

Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strin

FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/nul

Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk o

Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to ca

BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specifie

bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to c

Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arb

Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by sp

Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a den

The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass a

Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal c

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary fil

Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identif

HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.a

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does no

OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a

An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS),

Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrit

Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients b

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on

An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security se

Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privil

Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as oth

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attachi

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creatin

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily

IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr pa

mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "10

Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumpti