A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.

A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.

The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.

The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.

The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.

A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.

Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.

Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.

The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.

The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.

Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.

Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.

Remote attackers can perform a denial of service using IRIX fcagent.

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.

Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.

Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.

L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.

Linux ftpwatch program allows local users to gain root privileges.