2003

Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3.9 allow attackers with

The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprint

Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows re

The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and

The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and

The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify th

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote atta

Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specif

The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin"

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted addre

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrar

parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote a

Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execu

Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Strea

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are

xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arb

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line

Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to exe

Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracl

The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain c

Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administ

The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and the

The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and the

The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape

The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape

Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possib

Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute

The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain chara

Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users

Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users

TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root

Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of se

The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen durin

Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is ret

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execut

Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly

Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one r

Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 all

Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows re

Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicio

The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols

The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local

Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code

uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users

Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or

Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long pat

Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows