search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-01-14 2002-01-09 2002-01-14 VU#968187 Cisco SN 5420 Storage Router vulnerable to DoS via HTTP request containing long headers
2002-01-14 2002-01-09 2002-01-14 VU#833459 Cisco SN 5420 Storage Router fails to properly authenticate user before granting read access to configuration file
2002-08-01 2002-01-09 2002-08-01 VU#181907 Directory-traversal vulnerability in Mike Spice's My Classifieds CGI script
2002-09-18 2002-01-09 2002-09-18 VU#250107 Mike Spice's Vote does not adequately validate user input
2002-01-14 2002-01-09 2002-01-14 VU#855195 Cisco SN 5420 Storage Router vulnerable to DoS via fragmented packet sent over Gigabit interface
2002-01-08 2002-01-08 2002-01-08 VU#985347 iPlanet Web Server Enterprise Edition and Netscape Enterprise Server Web Publisher command exposes server to brute force attack
2002-09-26 2002-01-08 2002-09-26 VU#575619 Allaire Forums does not verify user information stored in hidden form fields
2002-01-08 2002-01-08 2002-01-09 VU#191763 iPlanet Web Server Enterprise Edition and Netscape Enterprise Server malformed Web Publisher command causes denial-of-service
2002-01-15 2002-01-07 2002-01-24 VU#570167 ICQ contains a buffer overflow while processing Voice Video & Games feature requests
2002-01-04 2002-01-02 2002-07-05 VU#121891 Buffer overflow vulnerability in grpck command line utility
2002-01-04 2002-01-02 2002-07-05 VU#877811 Buffer overflow vulnerability in pwck command line utility
2002-01-03 2002-01-02 2002-01-16 VU#907819 AOL Instant Messenger client for Windows contains a buffer overflow while parsing TLV 0x2711 packets
2002-09-26 2001-12-31 2002-09-26 VU#764027 zml.cgi does not adequately validate user input thereby allowing directory traversal
2002-09-16 2001-12-30 2003-04-15 VU#216227 Vandyke Software SecureCRT contains buffer overflow vulnerability in password handling code
2002-09-24 2001-12-29 2002-09-24 VU#245795 Cherokee Web Server fails to drop privileges after daemon starts

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis