search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-06-04 2002-05-27 2002-11-15 VU#997403 Oracle Reports Server Reports Web Cartridge (RWCGI60) vulnerable to buffer overflow via database name parameter
2002-06-13 2002-05-27 2002-06-25 VU#855811 Microsoft Remote Access Service API contains additional buffer overflow vulnerability via phonebook entries
2002-07-23 2002-05-27 2003-04-11 VU#612843 Sun iPlanet and ONE Web Servers contain a buffer overflow in the search engine
2002-06-05 2002-05-29 2002-12-06 VU#779163 Microsoft Exchange 2000 exhausts server resources while attempting to process malformed mail attributes
2002-05-29 2002-05-29 2003-04-09 VU#703835 Macromedia JRun ISAPI DLL filter vulnerable to buffer overflow via request for long Host header field
2002-06-11 2002-05-29 2003-04-03 VU#159203 Novell NetWare default installation contains sample files that disclose sensitive server information
2002-06-11 2002-05-29 2002-06-11 VU#116963 Apache Tomcat default installation contains sample applications that disclose webroot path
2002-06-12 2002-06-04 2002-06-12 VU#440275 Microsoft Internet Explorer contains buffer overflow in handling of gopher replies
2002-07-11 2002-06-04 2002-07-11 VU#430419 SGI IRIX contains vulnerability in rpc.passwd allowing for root compromise
2002-07-09 2002-06-06 2002-08-16 VU#375859 Microsoft ASP.NET contains buffer overflow
2002-06-25 2002-06-12 2002-08-08 VU#139931 Microsoft SQLXML HTTP components vulnerable to cross-site scripting via root parameter
2002-10-11 2002-06-12 2003-08-05 VU#879386 Multiple buffer overflow vulnerabilities in QNX
2002-06-25 2002-06-12 2002-08-08 VU#811371 Microsoft SQLXML ISAPI filter vulnerable to buffer overflow via contenttype parameter
2002-06-13 2002-06-12 2004-02-23 VU#313819 Microsoft Internet Information Server (IIS) contains remote buffer overflow in chunked encoding data transfer mechanism for HTR
2002-07-25 2002-06-14 2003-02-05 VU#225555 Microsoft SQL Server contains buffer overflow in pwdencrypt() function

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis