search menu icon-carat-right cmu-wordmark
Carnegie Mellon University
Please be aware that VINCE will be down for maintenance from 12 noon EST until 4 PM EST on November 19, 2025.

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-09-24 2001-09-13 2002-09-24 VU#711491 Textor Webmasters Ltd listrec.pl does not adequately validate user input thereby allowing arbitrary commands to be executed
2002-02-11 2001-09-12 2002-04-15 VU#390280 KTH Kerberos Telnet implementations do not strictly enforce client encryption request
2002-02-04 2001-09-12 2002-02-25 VU#774587 Kerberos Telnet protocol does not adequately protect authentication and encryption options
2001-09-13 2001-09-12 2001-09-13 VU#167739 Trend Micro InterScan eManager vulnerable to remotely exploitable buffer overflow
2001-10-16 2001-09-11 2002-01-03 VU#388183 IBM AIX line printer daemon contains a buffer overflow in kill_print()
2001-10-16 2001-09-11 2001-11-09 VU#722143 IBM AIX line printer daemon contains a buffer overflow in send_status()
2001-10-16 2001-09-11 2002-01-03 VU#466239 IBM AIX line printer daemon contains a buffer overflow in chk_fhost()
2001-11-15 2001-09-10 2002-09-10 VU#916443 HP Tru64 UNIX "msgchk" contains buffer overflow (SSRT2275)
2002-08-05 2001-09-10 2005-03-28 VU#177243 Mac OS X Finder creates world-readable ".FBCIndex" file thereby disclosing sensitive information
2001-11-15 2001-09-10 2001-11-15 VU#440539 Digital Unix msgchk vulnerable to file contents disclosure via symlink redirection of profile
2001-09-25 2001-09-08 2002-02-08 VU#798263 Taylor UUCP Package fails to properly filter command line arguments
2001-09-12 2001-09-06 2001-09-12 VU#111947 Microsoft Exchange Outlook Web Access fails to authenticate users when searching the Global Address List
2001-09-07 2001-09-05 2003-10-30 VU#548515 Multiple intrusion detection systems may be circumvented via %u encoding
2001-09-06 2001-09-04 2001-09-06 VU#206723 Network Associates CSMAP and smap/smapd vulnerable to buffer overflow thereby allowing arbitrary command execution
2003-10-30 2001-09-01 2003-10-30 VU#246147 Morpheus discloses username to remote users

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis