Browse CVEs

MEDIUM 6.4 CVE-2001-0834 htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, w… Linux after 3.1.5 Fix from $1,6002001-12-06 HIGH 7.5 CVE-2001-0690EPSS 12% Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execu… Linux after 3.22 Fix from $1,9502001-09-20 HIGH 7.2 CVE-2001-1374 expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Troja… Linux Patch available Fix from $1,9502001-07-19 HIGH 7.5 CVE-2001-0439 licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Linux after 1.0.2 Fix from $1,9502001-07-02 HIGH 7.5 CVE-2001-0440 Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary comman… Linux after 1.0.2 Fix from $1,9502001-07-02 HIGH 7.5 CVE-2001-0473 Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. Linux after 1.2.5 Fix from $1,9502001-06-27 MEDIUM 5.0 CVE-2001-0136EPSS 45% Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the… Linux No fix yet Fix from $1,6002001-03-12 HIGH 7.2 CVE-2000-1095 modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. Linux Patch available Fix from $1,9502001-01-09 HIGH 7.2 CVE-2000-1134 Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka… Linux Patch available Fix from $1,9502001-01-09 HIGH 10.0 CVE-2000-0844EPSS 15% Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to exe… Linux Patch available Fix from $1,9502000-11-14 HIGH 10.0 CVE-2000-0747 The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. Linux Patch available Fix from $1,9502000-10-20 MEDIUM 5.0 CVE-2000-0668EPSS 7% pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm ha… Linux Patch available Fix from $1,6002000-07-27 HIGH 10.0 CVE-2000-0666EPSS 26% rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers t… Linux Patch available Fix from $1,9502000-07-16