Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.

get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program.

Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.

Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.

MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.

Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.

Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.

Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.

Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.

glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.

glFtpD includes a default glftpd user account with a default password and a UID of 0.

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.

Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.

resend command in Majordomo allows local users to gain privileges via shell metacharacters.

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."

InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.

Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.