2002

Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which al

Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local us

The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the inter

Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filena

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by

Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to ca

Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisi

Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow loc

hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows loc

NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit exec

Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard

Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to,

Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a wor

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary p

Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web sc

BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same r

The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an info

The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM ob

HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weaknes

pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow loca

Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could all

BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by del

Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten"

BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that ar

Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrar

Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users t

Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by us

acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on t

The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not all

SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps a

SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to

Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Propert

Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid r

CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web

rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.

NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configura

Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain F

ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary fil

Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a d

Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, down

SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and wor

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, whic

The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute a

ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access

The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local user

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a