search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2006-05-30 2006-05-30 2006-06-07 VU#288121 Secure Elements Class 5 AVR client fails to validate source address of messages
2006-06-06 2006-05-18 2006-06-07 VU#466428 Skype URI handler fails to properly parse parameters
2006-05-30 2006-05-30 2006-06-07 VU#566553 Secure Elements Class 5 AVR uses the same RSA key for all installations
2006-05-30 2006-05-30 2006-06-07 VU#135529 Secure Elements Class 5 AVR server sends messages in cleartext
2006-05-30 2006-05-30 2006-06-07 VU#764025 Secure Elements Class 5 AVR server fails to properly validate pathnames when downloading updates
2006-05-30 2006-05-30 2006-06-07 VU#207337 Secure Elements Class 5 AVR server fails to properly validate peer certificate when downloading updates
2006-05-30 2006-05-30 2006-06-07 VU#919345 Secure Elements Class 5 AVR server fails to validate source address of messages
2006-05-30 2006-05-30 2006-06-07 VU#397417 Secure Elements Class 5 AVR server fails to properly enforce access controls on console operations
2006-05-30 2006-05-30 2006-06-07 VU#584329 Secure Elements Class 5 AVR server contains hard-coded user ID and password
2006-05-30 2006-05-30 2006-06-07 VU#921017 Secure Elements Class 5 AVR client sends messages in cleartext
2006-05-30 2006-05-30 2006-06-07 VU#353945 Secure Elements Class 5 AVR client generates predictable CEIDs
2006-05-30 2006-05-30 2006-06-07 VU#873409 Secure Elements Class 5 AVR client fails to properly validate the size of EM_SET_CE_PARAMETER messages
2006-05-30 2006-05-30 2006-06-07 VU#227929 Secure Elements Class 5 AVR client fails to properly validate the size of EM_GET_CE_PARAMETER messages
2006-05-30 2006-05-30 2006-06-07 VU#912217 Secure Elements Class 5 AVR client fails to properly validate pathnames supplied in messages
2006-05-30 2006-05-30 2006-06-07 VU#635721 Secure Elements Class 5 AVR client fails to properly validate a messages target CEID

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis