search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2001-09-20 1998-07-27 2003-04-11 VU#5648 Buffer Overflows in various email clients
2001-09-19 2000-06-05 2001-09-19 VU#22482 IE fails to check certificates properly if initial SSL connection originates in an IFRAME or Image
2001-09-18 2001-05-14 2001-09-18 VU#137544 Microsoft IIS FTP service searches all trusted domains for user accounts
2001-09-18 2001-03-01 2001-09-18 VU#796584 Microsoft Windows 2000 Internet Information Server (IIS) and Exchange 2000 vulnerable to DoS via malformed URL (MS01-014)
2001-09-18 2001-06-07 2001-09-18 VU#587587 Microsoft Windows 2000 Telnet Service uses named pipes with predictable names
2001-09-18 2001-06-07 2001-09-18 VU#215259 Microsoft Windows 2000 Telnet Service contains handle leak
2001-09-18 2001-06-07 2001-09-18 VU#405075 Microsoft Windows 2000 Telnet Service fails to reject oversized username input values
2001-09-18 2001-06-07 2001-09-18 VU#855723 Microsoft Windows 2000 Telnet Service fails to enforce timeouts on idle telnet sessions
2001-09-18 2001-06-07 2001-09-18 VU#648131 Microsoft Windows 2000 Telnet Service allows unprivileged local users to terminate sessions via unprotected system calls
2001-09-18 2001-06-07 2001-09-18 VU#573155 Microsoft Windows 2000 Telnet Service searches all trusted domains for user accounts
2001-09-18 2001-08-15 2001-09-18 VU#959211 Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests
2001-09-17 2001-04-15 2001-09-17 VU#401808 exuberant-ctags creates temporary files insecurely
2001-09-17 2001-04-23 2001-09-17 VU#670568 Samba creates temporary files insecurely
2001-09-17 2001-05-24 2003-04-14 VU#756019 Beck IPC@Chip TelnetD vulnerable to account lockout via idle telnet connection
2001-09-17 2001-08-03 2001-09-17 VU#314347 phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis