2002

Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.

Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of se

Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to ca

Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan wit

Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containi

MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability

Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote a

ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a scri

Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of conn

Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissio

EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable pe

EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows

Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a lo

Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plain

Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users

efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which pr

CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.

Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the

Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary fi

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via

Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateE

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain

Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arb

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly

Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form

Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privi

Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a lo

Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media instal

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (

Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long

Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sess

cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of ser

Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read a

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide sup

bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary

In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domai

Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via m

Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote

File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-T

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that pr

Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by usin

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrar

Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote

SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properl

Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider

IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set