search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-12-18 2002-12-10 2002-12-18 VU#157961 PC-cillin "pop3trap.exe" vulnerable to buffer overflow via long string of characters
2002-12-10 2002-12-10 2003-04-14 VU#210148 wget contains directory traversal vulnerability
2002-12-10 2002-12-10 2003-03-14 VU#210409 Multiple FTP clients contain directory traversal vulnerabilities
2003-03-24 2002-12-13 2007-04-26 VU#495705 Multi-Tech ProxyServers ship with null password for administrative access
2002-12-16 2002-12-16 2003-06-18 VU#389665 Multiple vendors' SSH transport layer protocol implementations contain vulnerabilities in key exchange and initialization
2009-02-05 2002-12-17 2010-06-22 VU#124059 GoAhead WebServer information disclosure and authentication bypass vulnerabilities
2002-12-17 2002-12-17 2010-01-11 VU#975041 GoAhead Web Server discloses source code of ASP files via crafted URL
2002-12-19 2002-12-18 2002-12-19 VU#591890 Buffer overflow in Microsoft Windows Shell
2003-04-17 2002-12-20 2003-04-17 VU#485057 RealNetworks Helix Universal Server vulnerable to buffer overflow when supplied an overly long string for the "Describe" field
2003-04-17 2002-12-20 2003-04-17 VU#974689 RealNetworks Helix Universal Server vulnerable to buffer overflow when sent two simultaneous HTTP requests containing a long string of characters
2003-04-17 2002-12-20 2003-04-17 VU#329561 RealNetworks Helix Universal Server vulnerable to buffer overflow when supplied an overly long string within the "Transport" field of a SETUP RTSP request
2003-01-17 2002-12-23 2003-01-17 VU#518057 Sun Solaris AUTH_DES authentication contains vulnerability allowing user to gain escalated privileges
2005-08-02 2002-12-27 2005-08-31 VU#959203 Cisco IOS OSPF neighbor IO buffer overflow
2003-02-05 2003-01-02 2003-02-06 VU#855635 Sun Solaris lockd(1M) daemon vulnerable to DoS
2003-04-30 2003-01-03 2003-10-21 VU#944241 rpc.walld fails to properly validate messages before broadcasting to clients

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis