search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2002-09-27 2001-06-07 2002-09-27 VU#771771 Shambala FTP Server does not adequately validate user input thereby allowing directory traversal
2001-09-18 2001-06-07 2001-09-18 VU#648131 Microsoft Windows 2000 Telnet Service allows unprivileged local users to terminate sessions via unprotected system calls
2001-09-18 2001-06-07 2001-09-18 VU#405075 Microsoft Windows 2000 Telnet Service fails to reject oversized username input values
2001-09-18 2001-06-07 2001-09-18 VU#587587 Microsoft Windows 2000 Telnet Service uses named pipes with predictable names
2001-08-29 2001-06-06 2001-08-30 VU#149424 Outlook Web Access (OWA) executes scripts contained in email attachment opened via Microsoft Internet Explorer (IE)
2001-07-31 2001-06-04 2001-08-01 VU#127435 HPUX kmmodreg allows arbitrary file overwriting via symlink redirection of temporary file
2002-09-27 2001-06-02 2003-09-23 VU#255915 WebBoard does not adequately validate user input thereby permitting arbitrary JavaScript execution
2001-10-09 2001-05-31 2001-10-09 VU#747736 SCO OpenServer/UnixWare vi creates temporary files insecurely
2002-03-29 2001-05-29 2002-03-29 VU#233200 GnuPG contains format-string vulnerability in handling of encrypted data filename
2001-12-10 2001-05-29 2003-11-05 VU#403051 GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename
2001-09-26 2001-05-24 2001-09-26 VU#426459 Beck GmbH IPC@Chip FtpD allows an attacker to gain access to the device
2001-09-14 2001-05-24 2003-04-09 VU#574739 Beck GmbH IPC@Chip does not adequately validate user input thereby disclosing sensitive network data via crafted URL
2001-09-17 2001-05-24 2003-04-14 VU#756019 Beck IPC@Chip TelnetD vulnerable to account lockout via idle telnet connection
2001-09-27 2001-05-24 2001-09-27 VU#461219 Beck GmbH IPC@Chip TelnetD service ships with inadequately protected default account
2001-09-26 2001-05-24 2002-12-18 VU#198979 Beck GmbH IPC@Chip TelnetD vulnerable to brute-force password attack

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis