search menu icon-carat-right cmu-wordmark
Carnegie Mellon University

Software Engineering Institute

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2001-09-18 2001-06-07 2001-09-18 VU#855723 Microsoft Windows 2000 Telnet Service fails to enforce timeouts on idle telnet sessions
2001-09-18 2001-06-07 2001-09-18 VU#648131 Microsoft Windows 2000 Telnet Service allows unprivileged local users to terminate sessions via unprotected system calls
2001-09-18 2001-06-07 2001-09-18 VU#573155 Microsoft Windows 2000 Telnet Service searches all trusted domains for user accounts
2001-09-18 2001-05-14 2001-09-18 VU#137544 Microsoft IIS FTP service searches all trusted domains for user accounts
2001-09-18 2001-03-01 2001-09-18 VU#796584 Microsoft Windows 2000 Internet Information Server (IIS) and Exchange 2000 vulnerable to DoS via malformed URL (MS01-014)
2001-09-18 2001-08-15 2001-09-18 VU#959211 Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests
2001-05-15 2001-05-14 2001-09-18 VU#789543 IIS decodes filenames superfluously after applying security checks
2000-11-20 2000-10-10 2001-09-18 VU#111677 Microsoft IIS 4.0 / 5.0 vulnerable to directory traversal via extended unicode in url
2001-09-17 2001-04-15 2001-09-17 VU#401808 exuberant-ctags creates temporary files insecurely
2001-09-17 2001-04-23 2001-09-17 VU#670568 Samba creates temporary files insecurely
2001-09-17 2001-08-03 2001-09-17 VU#314347 phpBB does not adequately validate user input thereby allowing user to gain escalated privileges via manipulated SQL query
2001-07-27 2001-06-13 2001-09-17 VU#451275 Curses library vulnerable to buffer overflow
2001-04-10 2001-04-10 2001-09-14 VU#243592 Alcatel ADSL modems provide EXPERT administrative account with an easily reversible encrypted password
2001-03-26 2001-03-15 2001-09-14 VU#648304 Sun Solaris DMI to SNMP mapper daemon snmpXdmid contains buffer overflow
2001-09-10 2001-08-03 2001-09-13 VU#920931 phpBB does not adequately validate user input for language selection thereby allowing user to execute arbitrary php code

Sponsored by CISA.

Download PGP Key

Read CERT/CC Blog

Learn about Vulnerability Analysis