2002

Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a lo

Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and

The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause

Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system

GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to

Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Fil

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to

Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shu

The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the

Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code

The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause

preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messen

Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposit

Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Comp

Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security res

Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposit

Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers

Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1

Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows re

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of us

Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script vi

Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an E

Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot d

Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allow

Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly exec

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a respon

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain inform

Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which co

Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a l

Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to re

Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long bounda

PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini fi

Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, whic

Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a lon

ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the curre

Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers

nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink att

uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file

Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -

Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privil

Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.

wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file.

Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-D

Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root pri

Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" chara

Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arb

Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via