Buffer overflow in BIND 8.2 via NXT records.

Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.

Denial of service in Linux syslogd via a large number of connections.

Buffer overflow in SCO UnixWare Xsco command via a long argument.

HP Secure Web Console uses weak encryption.

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.

Buffer overflow in FreeBSD angband allows local users to gain privileges.

The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.

Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.

Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.

FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.

FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.

NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.

Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.

Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.

The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024.

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.

Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.