search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-04-05 2000-10-03 2002-04-05 VU#683765 AOL Instant Messenger vulnerable to denial of service via crafted file name
2002-04-05 2000-12-12 2002-04-05 VU#474592 AOL Instant Messenger contains buffer overflows in parsing of AIM URI handler requests
2002-04-05 2001-01-24 2002-04-05 VU#541384 AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser
2002-03-07 2002-03-07 2002-04-02 VU#408419 OpenSSH contains a one-off overflow of an array in the channel handling code
2001-05-06 2001-03-13 2002-04-02 VU#154976 Sun Solaris SNMP proxy agent /opt/SUNWssp/bin/snmpd contains buffer overflow
2002-02-14 2002-02-11 2002-03-29 VU#932283 Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML <EMBED> directive
2002-03-29 2001-06-26 2002-03-29 VU#121099 ypbind contains buffer overflow
2002-03-29 2001-05-29 2002-03-29 VU#233200 GnuPG contains format-string vulnerability in handling of encrypted data filename
2002-03-29 2001-05-07 2002-03-29 VU#132099 Jana Server does not adequately validate user input thereby allowing directory traversal
2002-03-29 1999-08-21 2002-03-29 VU#12746 Microsoft scriptlet.typlib ActiveX object unsafe for scripting from Internet Explorer
2002-03-29 2002-03-29 2002-03-29 VU#585123 Microsoft Internet Explorer does not adequately evaluate malformed URLs
2001-11-28 2001-04-30 2002-03-28 VU#886083 WU-FTPD does not properly handle file name globbing
2002-02-28 2002-02-06 2002-03-15 VU#750299 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via HTTP request
2002-02-25 2002-02-06 2002-03-15 VU#805915 Oracle9i Application Server Apache PL/SQL module does not properly handle HTTP Authorization header
2002-02-28 2002-02-06 2002-03-15 VU#878603 Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via HTTP Authorization header

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis