OpenBSD crash using nlink value in FFS and EXT2FS filesystems.

OpenBSD kernel crash through TSS handling, as caused by the crashme program.

Denial of service in "poll" in OpenBSD.

Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.

Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.

Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.

The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.

A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.

A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.

The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.

The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.

The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.

A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.

Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.

Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.

The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.

The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.

Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.

Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.