cve.bz

debian debian linux vulnerabilities, newest first, page 199

Filter
  1. –CVE-2003-0361EPSS 2.0%

    gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.

  2. –CVE-2003-0360EPSS 2.1%

    Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.

  3. –CVE-2003-0358ExploitEPSS 1.2%

    Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line option.

  4. –CVE-2003-0308EPSS 0.4%

    The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.

  5. –CVE-2003-0098EPSS 5.1%

    Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.

  6. –CVE-2002-2185EPSS 2.5%

    The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending repo…

  7. 7.5CVE-2002-1372EPSS 3.0%

    Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing fil…

  8. –CVE-2002-1235EPSS 15%

    The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heim…

  9. –CVE-2002-1232EPSS 3.3%

    Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.

  10. –CVE-2002-0839EPSS 0.9%

    The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other beh…

  11. –CVE-2002-0912EPSS 2.7%

    in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.

  12. –CVE-2002-0875ExploitEPSS 1.0%

    Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.

  13. –CVE-2002-0392ExploitEPSS 95%

    Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.

  14. 7.5CVE-2002-0401EPSS 5.5%

    SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.

  15. 7.8CVE-2002-0184ExploitEPSS 1.2%

    Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

  16. –CVE-2002-0062EPSS 0.5%

    Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."

  17. –CVE-2002-0004ExploitEPSS 1.3%

    Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.

  18. –CVE-2002-0044EPSS 0.4%

    GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.

  19. –CVE-2001-1561ExploitEPSS 1.2%

    Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.

  20. –CVE-2001-0886EPSS 0.6%

    Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character.

  21. –CVE-2001-0834EPSS 2.6%

    htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a larg…

  22. –CVE-2001-0763ExploitEPSS 17%

    Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.

  23. –CVE-2001-0755EPSS 2.2%

    Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.

  24. –CVE-2001-0738EPSS 2.6%

    LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.

  25. –CVE-2001-0690ExploitEPSS 12%

    Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.

  26. –CVE-2001-0554ExploitEPSS 39%

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

  27. –CVE-2001-0977EPSS 4.1%

    slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.

  28. –CVE-2001-0430EPSS 0.4%

    Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.

  29. –CVE-2001-0458EPSS 2.4%

    Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.

  30. –CVE-2001-0457EPSS 1.7%

    man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).

  31. –CVE-2001-0456EPSS 5.9%

    postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended.

  32. –CVE-2001-0441EPSS 2.7%

    Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.

  33. –CVE-2001-1331EPSS 0.3%

    mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.

  34. –CVE-2001-0279ExploitEPSS 0.9%

    Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.

  35. –CVE-2001-0193ExploitEPSS 1.1%

    Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.

  36. –CVE-2001-0235EPSS 0.4%

    Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running.

  37. –CVE-2001-0233ExploitEPSS 15%

    Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.

  38. 7.8CVE-2001-0195EPSS 0.3%

    sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.

  39. –CVE-2001-0170ExploitEPSS 0.8%

    glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

  40. –CVE-2001-0925ExploitEPSS 75%

    The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be misha…

  41. –CVE-2001-0139EPSS 0.3%

    inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

  42. –CVE-2001-0138EPSS 0.3%

    privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

  43. –CVE-2001-0136ExploitEPSS 45%

    Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.

  44. –CVE-2001-0131EPSS 2.3%

    htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.

  45. –CVE-2001-0128EPSS 0.4%

    Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.

  46. –CVE-2001-0125EPSS 0.3%

    exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.

  47. –CVE-2001-0112ExploitEPSS 1.2%

    Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.

  48. –CVE-2001-0111ExploitEPSS 1.3%

    Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.

  49. –CVE-2000-0315EPSS 1.8%

    traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.

  50. –CVE-2000-0314EPSS 1.8%

    traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.