CERT Vulnerability Notes Database

Published	Public	Updated	ID	CVSS	Title
2006-09-19	2006-06-19	2011-07-22	VU#596848	0	gzip contains an infinite loop vulnerability in its LZH handling
2006-09-28	2006-09-28	2011-07-22	VU#547300		OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
2009-11-11	2009-11-05	2011-07-22	VU#120541	0	SSL and TLS protocols renegotiation vulnerability
2009-12-08	2009-12-08	2011-07-22	VU#568372		NTP mode 7 denial-of-service vulnerability
2008-10-30	2008-10-21	2011-07-22	VU#183657		libspf2 DNS TXT record parsing buffer overflow
2006-09-19	2006-06-19	2011-07-22	VU#933712		gzip NULL dereference in huft_build()
2006-09-28	2006-09-28	2011-07-22	VU#386964		OpenSSL SSLv2 client code fails to properly check for NULL
2008-03-19	2008-03-18	2011-07-22	VU#895609		MIT Kerberos krb4-enabled KDC contains multiple vulnerabilities
2008-03-18	2008-03-18	2011-07-22	VU#374121		MIT Kerberos contains array overrun in RPC library used by kadmind
2006-06-14	2006-06-14	2011-07-22	VU#146718		Sendmail fails to handle malformed multipart MIME messages
2007-06-01	2007-04-24	2011-07-22	VU#267289		IPv6 Type 0 Route Headers allow sender to control routing
2006-09-19	2006-06-19	2011-07-22	VU#381508		gzip contains an array out-of-bounds vulnerability in make_table()
2011-07-29	2011-05-16	2011-07-29	VU#690315		Avaya Secure Access Link (SAL) Gateway information disclosure vulnerability
2011-04-01	2011-04-01	2011-08-16	VU#668220		IPComp encapsulation nested payload vulnerability
2011-06-02	2011-05-31	2011-08-18	VU#127584		RSLinx Classic EDS Wizard buffer overflow vulnerability

Software Engineering Institute