CERT Vulnerability Notes Database

Published	Public	Updated	ID	CVSS	Title
2006-06-14	2006-06-14	2011-07-22	VU#146718		Sendmail fails to handle malformed multipart MIME messages
2008-03-18	2008-03-18	2011-07-22	VU#374121		MIT Kerberos contains array overrun in RPC library used by kadmind
2008-03-19	2008-03-18	2011-07-22	VU#895609		MIT Kerberos krb4-enabled KDC contains multiple vulnerabilities
2006-09-28	2006-09-28	2011-07-22	VU#386964		OpenSSL SSLv2 client code fails to properly check for NULL
2006-09-19	2006-06-19	2011-07-22	VU#933712		gzip NULL dereference in huft_build()
2008-10-30	2008-10-21	2011-07-22	VU#183657		libspf2 DNS TXT record parsing buffer overflow
2009-12-08	2009-12-08	2011-07-22	VU#568372		NTP mode 7 denial-of-service vulnerability
2009-11-11	2009-11-05	2011-07-22	VU#120541	0	SSL and TLS protocols renegotiation vulnerability
2006-09-28	2006-09-28	2011-07-22	VU#547300		OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
2006-09-19	2006-06-19	2011-07-22	VU#596848	0	gzip contains an infinite loop vulnerability in its LZH handling
2006-09-19	2006-06-19	2011-07-22	VU#554780		gzip contains a buffer underflow
2006-09-19	2006-06-19	2011-07-22	VU#773548		gzip contains a .bss buffer overflow in its LZH handling
2006-03-22	2006-03-22	2011-07-22	VU#834865		Sendmail signal I/O race condition
2011-07-05	2011-07-05	2011-07-20	VU#142646		ISC BIND 9 named denial of service vulnerability
2011-07-15	2011-07-15	2011-07-15	VU#122054		HP ArcSight Connector Appliance XSS vulnerability

Software Engineering Institute