GNU
Page 13 of 13 — GNU CVEs from a corpus of 1285, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2004-1702 | | 2004-08-09 | The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which… | |
CVE-2004-1701 | | 2004-08-09 | Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code vi… | |
CVE-2004-0581 | | 2004-08-06 | ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files i… | |
CVE-2004-0548 | | 2004-08-06 | Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long e… | |
CVE-2004-0422 | | 2004-07-07 | flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack. | |
CVE-2004-0182 | | 2004-06-01 | Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field. | |
CVE-2004-0131 | | 2004-03-03 | The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP pa… | |
CVE-2003-0991 | | 2004-03-03 | Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail co… | |
CVE-2003-0992 | | 2004-02-17 | Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users. | |
CVE-2003-0965 | | 2004-02-17 | Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthor… | |
CVE-2004-2093 | | 2004-02-09 | Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and possibly ex… | |
CVE-2003-0978 | | 2004-01-05 | Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote atta… | |
CVE-2003-1232 | | 2003-12-31 | Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to… | |
CVE-2003-0972 | | 2003-12-15 | Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of… | |
CVE-2003-0971 | | 2003-12-15 | GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, whic… | |
CVE-2003-0859 | | 2003-12-15 | The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the… | |
CVE-2003-0858 | | 2003-12-15 | Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netli… | |
CVE-2003-0795 | | 2003-12-15 | The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which a… | |
CVE-2003-0854 | | 2003-11-17 | ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via appl… | |
CVE-2003-0853 | | 2003-11-17 | An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w va… | |
CVE-2003-0849 | | 2003-11-17 | Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which… | |
CVE-2003-0826 | | 2003-10-06 | lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is pr… | |
CVE-2003-0367 | | 2003-07-02 | znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files. | |
CVE-2003-0255 | | 2003-05-27 | The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the… | |
CVE-2003-0028 | | 2003-03-25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, includin… | |
CVE-2003-0038 | | 2003-02-07 | Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2)… | |
CVE-2002-2099 | | 2002-12-31 | Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environme… | |
CVE-2002-1344 | | 2002-12-18 | Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1)… | |
CVE-2002-1265 | | 2002-11-12 | The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote at… | |
CVE-2002-1216 | | 2002-10-28 | GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification th… | |
CVE-2002-1146 | | 2002-10-11 | The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instea… | |
CVE-2002-0399 | | 2002-10-10 | Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive… | |
CVE-2002-0855 | | 2002-09-05 | Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription optio… | |
CVE-2002-0684 | | 2002-08-12 | Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allo… | |
CVE-2002-0435 | | 2002-07-26 | Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete di… | |
CVE-2002-0389 | | 2002-06-18 | Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing… | |
CVE-2002-0388 | | 2002-06-18 | Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index… | |
CVE-2002-0178 | | 2002-05-29 | uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could… | |
CVE-2002-0204 | | 2002-05-16 | Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application… | |
CVE-2002-1602 | | 2002-04-23 | Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code. | |
CVE-2002-0062 | | 2002-03-08 | Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines fo… | |
CVE-2001-1377 | | 2002-03-04 | Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of… | |
CVE-2001-1376 | | 2002-03-04 | Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arb… | |
CVE-2002-0003 | | 2002-02-27 | Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system. | |
CVE-2002-0044 | | 2002-01-31 | GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files. | |
CVE-2001-0884 | | 2001-12-21 | Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a m… | |
CVE-2001-1228 | | 2001-11-18 | Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP… | |
CVE-2001-1132 | | 2001-09-05 | Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not prope… | |
CVE-2001-1036 | | 2001-08-31 | GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an e… | |
CVE-2001-0522 | | 2001-08-14 | Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the origina… | |
CVE-2001-1301 | | 2001-08-07 | rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users v… | |
CVE-2001-1022 | | 2001-07-26 | Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and exec… | |
CVE-2001-1267 | | 2001-07-12 | Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose… | |
CVE-2001-0290 | | 2001-05-03 | Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords. | |
CVE-2001-0191 | | 2001-05-03 | gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attacker… | |
CVE-2001-0072 | | 2001-02-12 | gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which… | |
CVE-2001-0071 | | 2001-02-12 | gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detectio… | |
CVE-2000-1137 | | 2001-01-09 | GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack. | |
CVE-2000-0974 | | 2000-12-19 | GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents… | |
CVE-2000-0963 | | 2000-12-19 | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. | |
CVE-2000-0959 | | 2000-12-19 | glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow loca… | |
CVE-2000-0947 | | 2000-12-19 | Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH com… | |
CVE-2000-0803 | | 2000-12-19 | GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a maliciou… | |
CVE-2000-0861 | | 2000-11-14 | Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion. | |
CVE-2000-0824 | | 2000-11-14 | The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local… | |
CVE-2000-1219 | | 2000-11-01 | The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnera… | |
CVE-2000-0786 | | 2000-10-20 | GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and a… | |
CVE-2000-0701 | | 2000-10-20 | The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. | |
CVE-2000-0335 | | 2000-05-03 | The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. | |
CVE-2000-0271 | | 2000-04-18 | read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwor… | |
CVE-2000-0270 | | 2000-04-18 | The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. | |
CVE-2000-0269 | | 2000-04-18 | Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications bet… | |
CVE-2000-0151 | | 2000-02-01 | GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. | |
CVE-1999-0719 | | 1999-08-05 | The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code. | |
CVE-1999-1165 | | 1999-07-21 | GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious… | |
CVE-1999-0491 | | 1999-04-20 | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. | |
CVE-1999-0402 | | 1999-01-02 | wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-0016 | | 1997-12-01 | Land IP denial of service. | |
CVE-1999-0216 | | 1997-11-01 | Denial of service of inetd on Linux through SYN and RST packets. | |
CVE-1999-0150 | | 1997-07-01 | The Perl fingerd program allows arbitrary command execution from remote users. | |
CVE-1999-0035 | Medium | 5.4 | 1997-05-29 | Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. |
CVE-1999-0612 | | 1997-03-01 | A version of finger is running that exposes valid user information to any entity on the network. | |
CVE-1999-0041 | | 1997-02-13 | Buffer overflow in NLS (Natural Language Service). | |
CVE-1999-1383 | | 1996-09-13 | (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can c… |