search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2001-06-22 2001-05-08 2002-12-16 VU#795707 ScreamingMedia SITEware does not adequately validate user input thereby allowing arbitrary file disclosure via directory traversal
2001-06-21 2001-06-19 2001-08-31 VU#484011 Solaris Line Printer Daemon (in.lpd) vulnerable to buffer overflow via transfer job routine
2001-06-21 2001-06-08 2001-09-06 VU#952171 Hewlett Packard OpenView and Tivoli NetView do not adequately validate SNMP trap arguments
2001-06-19 2001-06-18 2001-08-16 VU#952336 Microsoft Index Server/Indexing Service used by IIS 4.0/5.0 contains unchecked buffer used when encoding double-byte characters
2001-06-18 1999-05-30 2005-11-15 VU#23495 DNS implementations vulnerable to denial-of-service attacks via malformed DNS queries
2001-06-18 2000-07-03 2001-06-18 VU#35842 man 'makewhatis' insecurely uses /tmp
2001-06-15 2001-01-08 2001-08-07 VU#264272 Microsoft Internet Information Server (IIS) discloses contents of files via crafted request containing "%3F+.htr"
2001-06-15 2000-07-14 2001-08-07 VU#28565 Microsoft Internet Information Server (IIS) discloses contents of files via crafted request containing "+.htr"
2001-06-13 2001-01-16 2001-10-25 VU#850440 SSH1 may generate weak passphrase when using Secure RPC
2001-06-13 2001-04-23 2001-06-13 VU#167464 Robtex Viking Web Server permits traversal out of HTTP docs root directory
2001-06-13 2001-01-23 2001-06-18 VU#303080 AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack
2001-06-08 2001-01-10 2001-06-22 VU#426456 gpm creates temporary files insecurely
2001-06-07 2001-05-17 2001-06-07 VU#988768 Microsoft Internet Explorer (IE) permits modification of URL displayed in address bar
2001-06-01 2001-04-25 2001-08-30 VU#310816 RIT Research Labs The Bat! does not properly parse <CR> characters not followed by a <LF> character
2001-06-01 2001-02-20 2001-08-30 VU#396624 Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly

Sponsored by CISA.