Browse CVEs

HIGH 7.2 CVE-2004-0619 Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and … Fedora Core Patch available Fix from $1,9502004-12-06 HIGH 7.5 CVE-2004-0494 Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions vi… Enterprise Linux Patch available Fix from $1,9502004-11-23 HIGH 7.5 CVE-2004-0750 Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent t… Enterprise Linux Patch available Fix from $1,9502004-10-20 MEDIUM 5.0 CVE-2004-1613 Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains … Enterprise Linux Patch available Fix from $1,6002004-10-18 HIGH 10.0 CVE-2004-0234EPSS 10% Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow… Lha Patch available Fix from $1,9502004-08-18 MEDIUM 6.4 CVE-2004-0235 Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containin… Lha Patch available Fix from $1,6002004-08-18 MEDIUM 5.0 CVE-2004-0421 The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image fil… Libpng Patch available Fix from $1,6002004-08-18 HIGH 10.0 CVE-2004-0460EPSS 45% Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial … Fedora Core Patch available Fix from $1,9502004-08-06 HIGH 10.0 CVE-2004-0461EPSS 17% The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C includ… Fedora Core Patch available Fix from $1,9502004-08-06 MEDIUM 6.8 CVE-2004-0595EPSS 45% The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input … Fedora Core Patch available Fix from $1,6002004-07-27 MEDIUM 5.0 CVE-2004-0111 gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file. Gdk Pixbuf Patch available Fix from $1,6002004-04-15 HIGH 7.5 CVE-2004-0104EPSS 26% Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. Enterprise Linux after 2.7 Fix from $1,9502004-03-03 HIGH 7.5 CVE-2004-0105EPSS 8% Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. Enterprise Linux after 2.7 Fix from $1,9502004-03-03 HIGH 7.2 CVE-2004-0077 The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value f… Bigmem Kernel Patch available Fix from $1,9502004-03-03 HIGH 7.5 CVE-2003-0700 The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses secur… Kernel after 2.4.21 Fix from $1,9502004-02-17 HIGH 7.5 CVE-2003-0989EPSS 5% tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than … Tcpdump after 3.8.0 Fix from $1,9502004-02-17 HIGH 7.5 CVE-2003-0962EPSS 21% Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape … Rsync Patch available Fix from $1,9502003-12-15 MEDIUM 5.0 CVE-2003-1138EPSS 5% The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto index… Interchange No fix yet Fix from $1,6002003-10-27 HIGH 7.5 CVE-2003-0686EPSS 27% Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary … Pam Smb Patch available Fix from $1,9502003-10-20 HIGH 7.5 CVE-2003-0689 The getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a denial of service (segmentation fault) and execute arbitr… Enterprise Linux Patch available Fix from $1,9502003-10-20 MEDIUM 5.0 CVE-2003-0688 The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allow… Sendmail Patch available Fix from $1,6002003-10-20 CRITICAL 9.8 CVE-2003-0466EPSS 78% Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demon… Wu Ftpd after 5.0 Fix from $2,3002003-08-27 HIGH 7.5 CVE-2003-0546 up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed f… Up2date Mitigation only Fix from $1,9502003-08-27 HIGH 7.5 CVE-2003-0699 The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may… Enterprise Linux Patch available Fix from $1,9502003-08-27 MEDIUM 5.0 CVE-2003-0459 KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer hea… Analog Real Time Synthesizer Patch available Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0548 The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a cho… Kdebase Patch available Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0549 The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a shor… Kdebase Patch available Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0550 The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology. Linux Patch available Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0551 The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service. Linux Patch available Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0552 Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target. Linux Patch available Fix from $1,6002003-08-27