The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.

nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.

WS_FTP server remote denial of service through cwd command.

SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.

ACC Tigris allows public access without a login.

IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.

Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.

The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication.

FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client.

Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.

Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.

A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.

Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable.

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.

Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.

IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.

A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.