search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2004-04-30 2004-01-26 2004-05-06 VU#404470 Gaim contains an off-by-one buffer overflow vulnerability in the yahoo_decode() function
2004-04-30 2004-01-26 2004-05-06 VU#226974 Gaim contains an off-by-one buffer overflow vulnerability in the gaim_quotedp_decode() function
2004-05-10 2004-01-26 2004-05-10 VU#779614 Gaim contains an integer overflow vulnerability when parsing DirectIM packets
2004-05-06 2004-01-26 2004-05-06 VU#371382 Gaim fails to properly validate the "name" parameter in the Yahoo login webpage
2004-05-06 2004-01-26 2004-05-06 VU#503030 Gaim fails to properly parse cookies in Yahoo web connections
2004-03-08 2004-01-26 2004-03-19 VU#197318 IBM Net.Data db2www CGI interpreter fails to properly validate requested macro filenames
2004-05-06 2004-01-26 2004-05-06 VU#527142 Gaim contains a buffer overflow vulnerability in the yahoo_packet_read() function
2004-05-06 2004-01-26 2004-05-06 VU#871838 Gaim contains a buffer overflow vulnerability in the gaim_url_parse() function
2004-04-30 2004-01-26 2004-05-06 VU#190366 Gaim contains a buffer overflow vulnerability in the gaim_quotedp_decode() function
2004-05-10 2004-01-26 2004-05-10 VU#197142 Gaim contains a buffer overflow vulnerability in the Extract Info Field function
2004-04-30 2004-01-26 2004-05-06 VU#655974 Gaim contains a buffer overflow vulnerability in the yahoo_decode() function
2004-05-06 2004-01-26 2004-05-06 VU#297198 Gaim fails to properly validate the "value" parameter in the Yahoo login webpage
2004-04-12 2004-01-27 2004-04-14 VU#350350 BEA WebLogic Server stores administrator password in clear text in config.xml
2004-04-09 2004-01-27 2004-04-12 VU#858990 BEA WebLogic Server fails to properly associate the user identity on subsequent client connections
2004-03-08 2004-01-28 2004-03-15 VU#902374 Apple Mac OS X TruBlueEnvironment vulnerable to buffer overflow

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis