search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2001-05-30 2000-05-29 2001-05-30 VU#32448 Due to insecure creation of configuration files via KApplication-class, local users can create arbitrary files when running setuid root KDE programs
2001-05-30 2001-05-02 2001-05-30 VU#700216 KDE KFM creates temporary files insecurely
2001-05-25 2000-07-27 2002-09-13 VU#25701 Linux gpm daemon allows arbitrary file removal
2001-05-25 2000-05-11 2001-08-07 VU#35085 Microsoft Internet Information Server (IIS) discloses contents of files via crafted request for .htr file
2001-05-22 2001-05-10 2001-06-26 VU#655248 Microsoft Index Server contains buffer overflow
2001-05-21 2000-03-22 2001-06-01 VU#22091 gpm-root fails to correctly release GID 0 membership for user defined menus
2001-05-17 2001-01-23 2001-08-01 VU#982616 KDE2 kdesu 'keep password' option does not verify socket listener potentially exposing su password
2001-05-17 2000-08-31 2001-06-21 VU#686403 ld.so fails to unset LD_PRELOAD before executing suid root programs
2001-05-17 1999-09-17 2002-09-13 VU#846832 glibc unsetenv fails to properly handle environment variables passed more than once to a program
2001-05-17 2000-12-29 2001-06-20 VU#475645 Macromedia Flash plug-in contains buffer overflow
2001-05-17 2001-01-05 2001-06-20 VU#451096 Oliver Debon Flash plug-in vulnerable to buffer overflow processing incorrectly formatted sound file
2001-05-17 2001-05-17 2001-06-26 VU#399087 Internet Explorer incorrectly validates certificates when CRL checking is enabled
2001-05-17 2001-05-09 2001-06-26 VU#145904 Microsoft Windows 2000 Kerberos service vulnerable to DoS via repeated invalid requests
2001-05-16 2001-02-04 2001-06-26 VU#651994 SEDUM HTTP server permits directory traversal
2001-05-15 2001-05-14 2001-09-18 VU#789543 IIS decodes filenames superfluously after applying security checks

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis