Browse CVEs

MEDIUM 5.0 CVE-2001-0457 man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion). Debian Linux Patch available Fix from $1,6002001-06-27 HIGH 7.2 CVE-2001-0193 Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter. Debian Linux Patch available Fix from $1,9502001-05-03 HIGH 7.2 CVE-2001-0279 Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges. Debian Linux Patch available Fix from $1,9502001-05-03 HIGH 10.0 CVE-2001-0233EPSS 15% Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a… Debian Linux after 0.4.6 Fix from $1,9502001-03-26 HIGH 7.8 CVE-2001-0195 sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileg… Debian Linux Patch available Fix from $1,9502001-03-26 HIGH 7.2 CVE-2001-0111 Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument. Debian Linux Patch available Fix from $1,9502001-03-12 HIGH 7.2 CVE-2001-0112 Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands. Debian Linux after 1.6.4 Fix from $1,9502001-03-12 MEDIUM 5.0 CVE-2000-0314 traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, whi… Debian Linux after 1.3.3 Fix from $1,6002001-03-12 MEDIUM 5.0 CVE-2000-0315 traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoo… Debian Linux after 1.3.3 Fix from $1,6002001-03-12 MEDIUM 5.0 CVE-2000-0888EPSS 8% named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug." Debian Linux Mitigation only Fix from $1,6002000-12-19 HIGH 7.2 CVE-2000-0867 Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by tr… Debian Linux Mitigation only Fix from $1,9502000-11-14 HIGH 10.0 CVE-2000-0584EPSS 6% Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group nam… Debian Linux Mitigation only Fix from $1,9502000-07-02 HIGH 7.2 CVE-2000-0606 Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage pa… Debian Linux Mitigation only Fix from $1,9502000-06-21 HIGH 7.2 CVE-2000-0607 Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing … Debian Linux Mitigation only Fix from $1,9502000-06-21 MEDIUM 5.0 CVE-2000-0510 CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request. Debian Linux Patch available Fix from $1,6002000-06-21 MEDIUM 5.0 CVE-2000-0511 CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request. Debian Linux Patch available Fix from $1,6002000-06-21 MEDIUM 5.0 CVE-2000-0513 CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does… Debian Linux Patch available Fix from $1,6002000-06-21 MEDIUM 5.0 CVE-2000-0512 CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of servi… Debian Linux Patch available Fix from $1,6002000-06-16 MEDIUM 5.0 CVE-2000-0289 IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP addres… Debian Linux Patch available Fix from $1,6002000-03-27 HIGH 7.2 CVE-2000-0229 gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root. Debian Linux Mitigation only Fix from $1,9502000-03-22 HIGH 7.2 CVE-2000-0112 The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during th… Debian Linux Mitigation only Fix from $1,9502000-02-02 HIGH 7.2 CVE-2000-0107 Linux apcd program allows local attackers to modify arbitrary files via a symlink attack. Debian Linux Mitigation only Fix from $1,9502000-02-01 HIGH 10.0 CVE-2000-1221EPSS 17% The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the … Debian Linux Patch available Fix from $1,9502000-01-08 HIGH 7.5 CVE-1999-0978 htdig allows remote attackers to execute commands via filenames with shell metacharacters. Debian Linux Mitigation only Fix from $1,9501999-12-09 MEDIUM 5.0 CVE-1999-0986 The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. Debian Linux Mitigation only Fix from $1,6001999-12-08 MEDIUM 5.0 CVE-1999-0831 Denial of service in Linux syslogd via a large number of connections. Debian Linux Mitigation only Fix from $1,6001999-11-19 HIGH 10.0 CVE-1999-0832 Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. Debian Linux Mitigation only Fix from $1,9501999-11-09 MEDIUM 5.0 CVE-1999-0939 Denial of service in Debian IRC Epic/epic4 client via a long string. Debian Linux No fix yet Fix from $1,6001999-08-26 HIGH 7.2 CVE-1999-0769 Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. Debian Linux Mitigation only Fix from $1,9501999-08-25 HIGH 7.2 CVE-1999-0872 Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. Debian Linux Mitigation only Fix from $1,9501999-08-25