cve.bz

mandrakesoft mandrake linux vulnerabilities, newest first, page 3

Filter
  1. –CVE-2001-0138EPSS 0.3%

    privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

  2. –CVE-2001-0136EPSS 45%

    Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.

  3. –CVE-2001-0128EPSS 0.4%

    Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.

  4. –CVE-2001-0125EPSS 0.3%

    exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.

  5. –CVE-2001-0120EPSS 0.3%

    useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.

  6. –CVE-2001-0119EPSS 0.3%

    getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.

  7. –CVE-2001-0118EPSS 0.3%

    rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.

  8. –CVE-2001-0117EPSS 0.4%

    sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.

  9. –CVE-2001-0116EPSS 0.3%

    gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.

  10. –CVE-2001-0108EPSS 1.8%

    PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.

  11. –CVE-2001-1385EPSS 1.6%

    The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.

  12. –CVE-2000-1134EPSS 1.4%

    Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of othe…

  13. –CVE-2000-1095EPSS 1.1%

    modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.

  14. –CVE-2000-1059EPSS 0.4%

    The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.

  15. –CVE-2000-1043EPSS 1.8%

    Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

  16. –CVE-2000-1042EPSS 2.0%

    Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

  17. –CVE-2000-0883EPSS 9.5%

    The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.

  18. –CVE-2000-0867EPSS 0.4%

    Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

  19. –CVE-2000-0844EPSS 16%

    Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

  20. –CVE-2000-0718EPSS 0.3%

    A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.

  21. –CVE-2000-0633EPSS 0.4%

    Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.

  22. –CVE-2000-0594EPSS 9.9%

    BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.

  23. –CVE-2000-0566EPSS 0.4%

    makewhatis in Linux man package allows local users to overwrite files via a symlink attack.

  24. –CVE-2000-0607EPSS 1.1%

    Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.

  25. –CVE-2000-0606EPSS 0.6%

    Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.

  26. –CVE-2000-0454EPSS 0.9%

    Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.

  27. –CVE-1999-1008EPSS 0.7%

    xsoldier program allows local users to gain root access via a long argument.

  28. –CVE-2000-0336EPSS 0.9%

    Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

  29. –CVE-2000-0184EPSS 0.4%

    Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.

  30. –CVE-2000-0186EPSS 0.4%

    Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.

  31. –CVE-2000-0052EPSS 0.9%

    Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.

  32. –CVE-1999-1477EPSS 1.1%

    Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.

  33. –CVE-1999-1572EPSS 0.6%

    cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite …

  34. –CVE-2000-0508EPSS 8.6%

    rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.