Red Hat
Page 61 of 61 — Red Hat CVEs from a corpus of 6097, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0604 | | 2000-06-21 | gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp. | |
CVE-2000-0483 | | 2000-06-15 | The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. | |
CVE-2000-0392 | | 2000-05-16 | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. | |
CVE-2000-0391 | | 2000-05-16 | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. | |
CVE-2000-0390 | | 2000-05-16 | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. | |
CVE-2000-0389 | | 2000-05-16 | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. | |
CVE-2000-0378 | | 2000-05-03 | The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintai… | |
CVE-1999-0706 | | 2000-04-27 | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. | |
CVE-2000-0322 | | 2000-04-24 | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0248 | | 2000-04-24 | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute ar… | |
CVE-2000-0336 | | 2000-04-21 | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. | |
CVE-2000-0286 | | 2000-04-16 | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. | |
CVE-2000-0263 | | 2000-04-16 | The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. | |
CVE-2000-0289 | | 2000-03-27 | IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port… | |
CVE-2000-0229 | | 2000-03-22 | gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root. | |
CVE-2000-0230 | | 2000-03-13 | Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. | |
CVE-2000-0184 | | 2000-03-09 | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. | |
CVE-2000-0196 | | 2000-02-28 | Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. | |
CVE-2000-0186 | | 2000-02-28 | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. | |
CVE-2000-0170 | | 2000-02-26 | Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. | |
CVE-2000-0219 | | 2000-02-23 | Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt. | |
CVE-2000-0093 | | 2000-01-21 | An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5. | |
CVE-2000-1221 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local mach… | |
CVE-2000-1220 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute… | |
CVE-2000-0052 | | 2000-01-04 | Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack. | |
CVE-1999-0894 | | 2000-01-04 | Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals. | |
CVE-1999-1335 | | 1999-12-31 | snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information. | |
CVE-1999-1333 | | 1999-12-31 | automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharac… | |
CVE-1999-1332 | | 1999-12-31 | gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. | |
CVE-1999-1331 | | 1999-12-31 | netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a… | |
CVE-1999-1330 | | 1999-12-31 | The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a… | |
CVE-1999-1329 | | 1999-12-31 | Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges. | |
CVE-1999-1328 | | 1999-12-31 | linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack. | |
CVE-1999-1327 | | 1999-12-31 | Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable. | |
CVE-2000-0017 | | 1999-12-21 | Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter. | |
CVE-1999-0997 | | 1999-12-20 | wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does… | |
CVE-1999-0986 | | 1999-12-08 | The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. | |
CVE-2000-0358 | | 1999-12-03 | ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program. | |
CVE-2000-0357 | | 1999-12-03 | ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys. | |
CVE-2000-0531 | | 1999-11-23 | Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. | |
CVE-1999-0832 | | 1999-11-09 | Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. | |
CVE-2000-0356 | | 1999-10-13 | Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts. | |
CVE-1999-1347 | | 1999-10-07 | Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or an… | |
CVE-1999-1346 | | 1999-10-07 | PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access… | |
CVE-1999-1542 | | 1999-10-04 | RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command. | |
CVE-1999-0704 | | 1999-09-16 | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | |
CVE-1999-0705 | | 1999-09-01 | Buffer overflow in INN inews program. | |
CVE-1999-0872 | | 1999-08-25 | Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. | |
CVE-1999-0769 | | 1999-08-25 | Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. | |
CVE-1999-0768 | | 1999-08-25 | Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. | |
CVE-2000-0355 | | 1999-08-21 | pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files. | |
CVE-1999-0740 | | 1999-08-19 | Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable. | |
CVE-1999-0814 | | 1999-08-11 | Red Hat pump DHCP client allows remote attackers to gain root access in some configurations. | |
CVE-1999-0710 | | 1999-07-25 | The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use… | |
CVE-1999-1348 | | 1999-06-30 | Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial… | |
CVE-1999-0748 | | 1999-06-24 | Buffer overflows in Red Hat net-tools package. | |
CVE-2000-0118 | | 1999-06-09 | The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brut… | |
CVE-1999-1496 | | 1999-06-08 | Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a… | |
CVE-2000-0365 | | 1999-06-01 | Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices. | |
CVE-2000-0364 | | 1999-06-01 | screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys. | |
CVE-1999-0804 | | 1999-06-01 | Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths. | |
CVE-1999-0434 | | 1999-03-30 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privilege… | |
CVE-1999-0433 | | 1999-03-21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privil… | |
CVE-1999-0405 | | 1999-02-18 | A buffer overflow in lsof allows local users to obtain root privilege. | |
CVE-1999-0368 | | 1999-02-09 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. | |
CVE-1999-0390 | | 1999-01-04 | Buffer overflow in Dosemu Slang library in Linux. | |
CVE-1999-0798 | | 1998-12-04 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. | |
CVE-1999-1288 | | 1998-11-19 | Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows loc… | |
CVE-1999-0002 | | 1998-10-12 | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. | |
CVE-1999-1048 | | 1998-09-05 | Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is ins… | |
CVE-1999-1406 | | 1998-07-29 | dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to t… | |
CVE-1999-1490 | | 1998-05-28 | xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable. | |
CVE-1999-0011 | Medium | 5.4 | 1998-04-08 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
CVE-1999-0010 | | 1998-04-08 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-1407 | | 1998-03-09 | ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file. | |
CVE-1999-0502 | | 1998-03-01 | A Unix account has a default, null, blank, or missing password. | |
CVE-1999-0125 | | 1998-01-25 | Buffer overflow in SGI IRIX mailx program. | |
CVE-1999-0192 | | 1997-10-18 | Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable. | |
CVE-1999-1095 | | 1997-10-06 | sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as obse… | |
CVE-1999-1182 | | 1997-07-17 | Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a lon… | |
CVE-1999-0034 | | 1997-05-29 | Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. | |
CVE-1999-0037 | | 1997-05-21 | Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail. | |
CVE-1999-0042 | | 1997-04-07 | Buffer overflow in University of Washington's implementation of IMAP and POP servers. | |
CVE-1999-0318 | | 1997-03-01 | Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. | |
CVE-1999-0868 | | 1997-02-20 | ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN. | |
CVE-1999-0041 | | 1997-02-13 | Buffer overflow in NLS (Natural Language Service). | |
CVE-1999-1299 | | 1997-02-03 | rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpre… | |
CVE-1999-0297 | | 1996-12-12 | Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable. | |
CVE-1999-0043 | Critical | 9.8 | 1996-12-04 | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. |
CVE-1999-0130 | | 1996-11-16 | Local users can start Sendmail in daemon mode and gain root privileges. | |
CVE-1999-0234 | | 1996-10-08 | Bash treats any character with a value of 255 as a command separator. | |
CVE-1999-0131 | | 1996-09-11 | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. | |
CVE-1999-1572 | | 1996-07-16 | cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, whi… | |
CVE-1999-1491 | | 1996-02-02 | abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path t… | |
CVE-1999-1186 | | 1996-01-02 | rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root… | |
CVE-2000-0508 | | 1994-12-19 | rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request. |