search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-09-16 2002-07-27 2004-02-23 VU#377003 Hewlett Packard JetDirect-enabled printers disclose Telnet/HTTP passwords in hex format via "SNMP READ" request
2002-07-29 2002-07-29 2003-05-30 VU#405955 util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility
2002-07-30 2002-07-30 2002-09-30 VU#561275 OpenSSL servers contain a remotely exploitable buffer overflow vulnerability during the SSL3 handshake process
2002-07-30 2002-07-30 2002-09-30 VU#308891 OpenSSL contains multiple buffer overflows in buffers that are used to hold ASCII representations of integers
2002-07-30 2002-07-30 2002-09-30 VU#102795 OpenSSL servers contain a buffer overflow during the SSL2 handshake process
2002-07-30 2002-07-30 2002-09-30 VU#258555 OpenSSL clients contain a buffer overflow during the SSL3 handshake process
2002-07-30 2002-07-30 2002-09-30 VU#748355 ASN.1 parsing errors exist in implementations of SSL, TLS, S/MIME, PKCS#7 routines
2002-08-01 2002-07-31 2006-05-15 VU#192995 Integer overflow in xdr_array() function when deserializing the XDR stream
2002-09-20 2002-08-01 2002-09-20 VU#137555 HP Tru64 UNIX "chfn" contains buffer overflow (SSRT2259)
2002-09-05 2002-08-01 2002-09-05 VU#177067 HP Tru64 UNIX "passwd" contains buffer overflow (SSRT2192)
2003-03-21 2002-08-01 2003-04-15 VU#671627 HP Tru64 UNIX "dxchpwd" contains buffer overflow
2002-08-15 2002-08-11 2002-12-13 VU#259787 OpenBSD contains buffer overflow in "select" call
2002-08-12 2002-08-12 2002-09-09 VU#387387 Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) vulnerable to buffer overflow via _TT_CREATE_FILE()
2002-08-12 2002-08-14 2004-02-09 VU#287771 Multiple vendors' Internet Key Exchange (IKE) implementations do not properly handle IKE response packets
2002-08-16 2002-08-14 2002-08-22 VU#721611 Microsoft Windows Network Connection Manager (NCM) handler routine may execute code with LocalSystem privileges

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis