Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.

htmlscript CGI program allows remote read access to files.

Buffer overflow in SGI IRIX mailx program.

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.

Unauthorized privileged access or denial of service via dtappgather program in CDE.

Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system.

Progressive Networks Real Video server (pnserver) can be crashed remotely.

pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request.

sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.

Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script.

AIX routed allows remote users to modify sensitive files.

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver.

gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.

Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.

Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.

Denial of service through Solaris 2.5.1 telnet by sending ^D characters.

Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.

Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command.

AAA authentication on Cisco systems allows attackers to execute commands without authorization.