Browse CVEs

MEDIUM 5.0 CVE-2001-1013EPSS 66% Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html di… Linux Patch available Fix from $1,6002001-09-12 HIGH 7.5 CVE-2001-1002EPSS 9% The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed b… Linux Patch available Fix from $1,9502001-08-31 HIGH 7.5 CVE-2001-1030 Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off … Linux Patch available Fix from $1,9502001-07-18 MEDIUM 5.0 CVE-2001-0309 inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cau… Linux Patch available Fix from $1,6002001-06-02 HIGH 7.2 CVE-2001-1028 Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges. Linux Patch available Fix from $1,9502001-05-28 HIGH 10.0 CVE-2001-0197EPSS 13% Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands. Linux after 1.3.8_beta2 Fix from $1,9502001-03-26 HIGH 7.2 CVE-2001-0128 Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. Linux Powertools after 2.2.4 Fix from $1,9502001-03-12 HIGH 7.2 CVE-2000-1125 restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain r… Linux No fix yet Fix from $1,9502001-01-09 HIGH 7.2 CVE-2000-1189 Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. Linux Patch available Fix from $1,9502001-01-09 HIGH 10.0 CVE-2000-0917EPSS 79% Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. Linux Patch available Fix from $1,9502000-12-19 HIGH 7.2 CVE-2000-0934 Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Linux Patch available Fix from $1,9502000-12-19 HIGH 10.0 CVE-2000-1010 Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user na… Linux Patch available Fix from $1,9502000-12-11 HIGH 7.2 CVE-2000-1009 dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modi… Linux Patch available Fix from $1,9502000-12-11 HIGH 7.5 CVE-2000-0750 Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. Linux Patch available Fix from $1,9502000-10-20 HIGH 7.5 CVE-2000-0751 mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute… Linux Patch available Fix from $1,9502000-10-20 MEDIUM 6.2 CVE-2000-0031 The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack. Linux Mitigation only Fix from $1,6002000-10-20 HIGH 7.5 CVE-2000-1213 ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring… Linux after 2000-10-10 Fix from $1,9502000-10-18 HIGH 7.2 CVE-2000-1207 userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and … Linux Patch available Fix from $1,9502000-09-30 HIGH 7.2 CVE-2000-0566 makewhatis in Linux man package allows local users to overwrite files via a symlink attack. Linux Mitigation only Fix from $1,9502000-07-03 HIGH 7.5 CVE-2000-0483 The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. Linux Powertools Patch available Fix from $1,9502000-06-15 HIGH 10.0 CVE-2000-0389EPSS 17% Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. Linux No fix yet Fix from $1,9502000-05-16 HIGH 10.0 CVE-2000-0390 Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. Linux Mitigation only Fix from $1,9502000-05-16 HIGH 10.0 CVE-2000-0391 Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. Linux Mitigation only Fix from $1,9502000-05-16 HIGH 7.2 CVE-2000-0392 Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. Linux Mitigation only Fix from $1,9502000-05-16 HIGH 7.2 CVE-2000-0378 The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can … Linux Mitigation only Fix from $1,9502000-05-03 HIGH 7.5 CVE-1999-0706 Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. Linux Mitigation only Fix from $1,9502000-04-27 HIGH 10.0 CVE-2000-0248EPSS 74% The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to … Linux Patch available Fix from $1,9502000-04-24 HIGH 10.0 CVE-2000-0322EPSS 42% The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. Linux Patch available Fix from $1,9502000-04-24 HIGH 7.2 CVE-2000-0230 Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. Linux Mitigation only Fix from $1,9502000-03-13 HIGH 7.5 CVE-2000-0196 Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. Linux Mitigation only Fix from $1,9502000-02-28