Red Hat
Page 60 of 61 — Red Hat CVEs from a corpus of 6097, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2003-0194 | | 2003-06-09 | tcpdump does not properly drop privileges to the pcap user when starting up. | |
CVE-2003-0188 | | 2003-06-09 | lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files… | |
CVE-2003-0135 | | 2003-04-11 | vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed as a standalone service, which inadvertently prevents… | |
CVE-2002-1509 | | 2003-03-03 | A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which… | |
CVE-2003-0041 | | 2003-02-19 | Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client. | |
CVE-2003-0019 | | 2003-02-19 | uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by… | |
CVE-2002-1160 | | 2003-02-19 | The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by steali… | |
CVE-2002-2204 | | 2002-12-31 | The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote at… | |
CVE-2002-2185 | | 2002-12-31 | The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address inst… | |
CVE-2002-1890 | | 2002-12-31 | rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file. | |
CVE-2002-1814 | | 2002-12-31 | Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments. | |
CVE-2002-1323 | | 2002-12-11 | Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using… | |
CVE-2002-1232 | | 2002-11-04 | Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consu… | |
CVE-2002-0836 | | 2002-10-28 | dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands v… | |
CVE-2002-0835 | | 2002-10-04 | Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phon… | |
CVE-2002-0874 | | 2002-09-05 | Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files. | |
CVE-2002-0638 | | 2002-08-12 | setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when m… | |
CVE-2002-0506 | | 2002-08-12 | Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in… | |
CVE-2000-1208 | | 2002-08-12 | Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper sys… | |
CVE-2002-0169 | | 2002-05-29 | The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files ou… | |
CVE-2002-0083 | Critical | 9.8 | 2002-03-15 | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. |
CVE-2002-0080 | | 2002-03-15 | rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local use… | |
CVE-2002-0069 | | 2002-03-08 | Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service. | |
CVE-2002-0068 | | 2002-03-08 | Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a la… | |
CVE-2002-0067 | | 2002-03-08 | Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass… | |
CVE-2002-0062 | | 2002-03-08 | Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines fo… | |
CVE-2002-0004 | | 2002-02-27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same… | |
CVE-2002-0045 | | 2002-01-31 | slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values… | |
CVE-2002-0044 | | 2002-01-31 | GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files. | |
CVE-2002-0002 | | 2002-01-31 | Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbit… | |
CVE-2001-0886 | | 2001-12-21 | Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that end… | |
CVE-2001-0872 | | 2001-12-21 | OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain r… | |
CVE-2001-0869 | | 2001-12-21 | Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to… | |
CVE-2001-0889 | | 2001-12-19 | Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow… | |
CVE-2001-0859 | | 2001-12-06 | 2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable perm… | |
CVE-2001-0852 | | 2001-12-06 | TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header. | |
CVE-2001-0946 | | 2001-12-04 | apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWE… | |
CVE-2001-0868 | | 2001-11-28 | Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status. | |
CVE-2001-0923 | | 2001-10-25 | RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried. | |
CVE-2001-0787 | | 2001-10-18 | LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevat… | |
CVE-2001-0736 | | 2001-10-18 | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink at… | |
CVE-2001-1383 | | 2001-09-26 | initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files. | |
CVE-2001-0690 | | 2001-09-20 | Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitra… | |
CVE-2001-0641 | | 2001-09-20 | Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option. | |
CVE-2001-1013 | | 2001-09-12 | Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory an… | |
CVE-2001-1002 | | 2001-08-31 | The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, whi… | |
CVE-2001-0635 | | 2001-08-14 | Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by readin… | |
CVE-2001-1375 | | 2001-07-19 | tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arb… | |
CVE-2001-1374 | | 2001-07-19 | expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse li… | |
CVE-2001-1030 | | 2001-07-18 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings a… | |
CVE-2001-0977 | | 2001-07-16 | slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BE… | |
CVE-2001-0439 | | 2001-07-02 | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | |
CVE-2001-0496 | | 2001-06-27 | kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges. | |
CVE-2001-0473 | | 2001-06-27 | Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. | |
CVE-2001-0441 | | 2001-06-27 | Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a lon… | |
CVE-2001-0309 | | 2001-06-02 | inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denia… | |
CVE-2001-1028 | | 2001-05-28 | Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges. | |
CVE-2001-0233 | | 2001-03-26 | Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Desc… | |
CVE-2001-0197 | | 2001-03-26 | Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands. | |
CVE-2001-0170 | | 2001-03-26 | glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid program… | |
CVE-2001-0169 | | 2001-03-26 | When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID… | |
CVE-2001-0143 | | 2001-03-12 | vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0142 | | 2001-03-12 | squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2001-0140 | | 2001-03-12 | arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2001-0139 | | 2001-03-12 | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2001-0138 | | 2001-03-12 | privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0128 | | 2001-03-12 | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. | |
CVE-2001-0120 | | 2001-03-12 | useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0119 | | 2001-03-12 | getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0118 | | 2001-03-12 | rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0117 | | 2001-03-12 | sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. | |
CVE-2001-0116 | | 2001-03-12 | gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2000-0315 | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attac… | |
CVE-2000-0314 | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not… | |
CVE-2000-1189 | | 2001-01-09 | Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. | |
CVE-2000-1134 | | 2001-01-09 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-docu… | |
CVE-2000-1125 | | 2001-01-09 | restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privil… | |
CVE-2000-1095 | | 2001-01-09 | modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0963 | | 2000-12-19 | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. | |
CVE-2000-0934 | | 2000-12-19 | Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. | |
CVE-2000-0917 | | 2000-12-19 | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. | |
CVE-2000-1010 | | 2000-12-11 | Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that co… | |
CVE-2000-1009 | | 2000-12-11 | dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the… | |
CVE-2000-0867 | | 2000-11-14 | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering m… | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0829 | | 2000-11-14 | The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply ne… | |
CVE-2000-0751 | | 2000-10-20 | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary… | |
CVE-2000-0750 | | 2000-10-20 | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. | |
CVE-2000-0701 | | 2000-10-20 | The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. | |
CVE-2000-0031 | | 2000-10-20 | The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack. | |
CVE-2000-1214 | | 2000-10-18 | Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating… | |
CVE-2000-1213 | | 2000-10-18 | ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw soc… | |
CVE-2000-0816 | | 2000-10-06 | Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters. | |
CVE-2000-1207 | | 2000-09-30 | userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the… | |
CVE-2000-0668 | | 2000-07-27 | pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP en… | |
CVE-2000-0633 | | 2000-07-18 | Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. | |
CVE-2000-0666 | | 2000-07-16 | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain roo… | |
CVE-2000-0566 | | 2000-07-03 | makewhatis in Linux man package allows local users to overwrite files via a symlink attack. | |
CVE-2000-0607 | | 2000-06-21 | Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARS… | |
CVE-2000-0606 | | 2000-06-21 | Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter. |