search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2001-02-06 2001-01-24 2001-02-06 VU#354648 Microsoft Windows NT 4.0/TSE Winsock2ProtocolCatalogMutex has insecure permissions (MS01-003)
2002-04-05 2001-01-24 2002-04-05 VU#541384 AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser
2001-11-29 2001-01-23 2001-12-17 VU#639760 WU-FTPD configured to use RFC 931 authentication running in debug mode contains format string vulnerability
2001-02-08 2001-01-23 2001-02-08 VU#666872 Buffer Overflow in Lotus Domino Mail Server
2001-06-13 2001-01-23 2001-06-18 VU#303080 AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack
2001-05-17 2001-01-23 2001-08-01 VU#982616 KDE2 kdesu 'keep password' option does not verify socket listener potentially exposing su password
2000-09-26 2001-01-18 2002-03-05 VU#786900 SSH host key authentication can be bypassed when DNS is used to resolve localhost
2000-09-26 2001-01-18 2002-03-05 VU#25309 Weak CRC allows RC4 encrypted SSH1 packets to be modified without notice
2000-11-03 2001-01-18 2001-10-25 VU#565052 Passwords sent via SSH encrypted with RC4 can be easily cracked
2001-01-31 2001-01-18 2001-03-29 VU#119952 HP-UX Support Tools Manager vulnerable to denial of service
2000-11-07 2001-01-18 2001-10-29 VU#684820 SSH-1 allows client authentication to be forwarded by a malicious server to another server
2001-01-18 2001-01-18 2002-03-05 VU#315308 Weak CRC allows last block of IDEA-encrypted SSH packet to be changed without notice
2001-05-14 2001-01-18 2001-06-20 VU#386504 glibc does not check SUID bit on libraries in /etc/ld.so.cache
2001-05-06 2001-01-18 2001-06-21 VU#178560 Dallas Semiconductor iButton DS1991 vulnerable to dictionary attack
2000-10-05 2001-01-18 2002-03-05 VU#665372 SSH connections using RC4 and password authentication can be replayed

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis