Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.

The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.

FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.

The Zeus web server administrative interface uses weak encryption for its passwords.

Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.

Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.

Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.

Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.

Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server.

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.

Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.

Denial of service in BIND named via maxdname.

Denial of service in BIND named via consuming more than "fdmax" file descriptors.

Buffer overflow in free internet chess server (FICS) program, xboard.

Denial of service in MDaemon 2.7 via a large number of connection attempts.

Denial of service in MDaemon WorldClient and WebConfig services via a long URL.

Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.

Denial of service in Linux syslogd via a large number of connections.