Red Hat
Page 73 of 74 — Red Hat CVEs from a corpus of 7330, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0120 | | 2001-03-12 | useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0119 | | 2001-03-12 | getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0118 | | 2001-03-12 | rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0117 | | 2001-03-12 | sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. | |
CVE-2001-0116 | | 2001-03-12 | gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2000-0315 | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attac… | |
CVE-2000-0314 | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not… | |
CVE-2000-1189 | | 2001-01-09 | Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. | |
CVE-2000-1134 | | 2001-01-09 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-docu… | |
CVE-2000-1125 | | 2001-01-09 | restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privil… | |
CVE-2000-1095 | | 2001-01-09 | modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0963 | | 2000-12-19 | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. | |
CVE-2000-0934 | | 2000-12-19 | Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. | |
CVE-2000-0917 | | 2000-12-19 | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. | |
CVE-2000-1010 | | 2000-12-11 | Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that co… | |
CVE-2000-1009 | | 2000-12-11 | dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the… | |
CVE-2000-0867 | | 2000-11-14 | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering m… | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0829 | | 2000-11-14 | The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply ne… | |
CVE-2000-0751 | | 2000-10-20 | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary… | |
CVE-2000-0750 | | 2000-10-20 | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. | |
CVE-2000-0701 | | 2000-10-20 | The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. | |
CVE-2000-0031 | | 2000-10-20 | The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack. | |
CVE-2000-1214 | | 2000-10-18 | Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating… | |
CVE-2000-1213 | | 2000-10-18 | ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw soc… | |
CVE-2000-0816 | | 2000-10-06 | Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters. | |
CVE-2000-1207 | | 2000-09-30 | userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the… | |
CVE-2000-0668 | | 2000-07-27 | pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP en… | |
CVE-2000-0633 | | 2000-07-18 | Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. | |
CVE-2000-0666 | | 2000-07-16 | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain roo… | |
CVE-2000-0566 | | 2000-07-03 | makewhatis in Linux man package allows local users to overwrite files via a symlink attack. | |
CVE-2000-0607 | | 2000-06-21 | Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARS… | |
CVE-2000-0606 | | 2000-06-21 | Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter. | |
CVE-2000-0604 | | 2000-06-21 | gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp. | |
CVE-2000-0483 | | 2000-06-15 | The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. | |
CVE-2000-0392 | | 2000-05-16 | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. | |
CVE-2000-0391 | | 2000-05-16 | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. | |
CVE-2000-0390 | | 2000-05-16 | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. | |
CVE-2000-0389 | | 2000-05-16 | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. | |
CVE-2000-0378 | | 2000-05-03 | The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintai… | |
CVE-1999-0706 | | 2000-04-27 | Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables. | |
CVE-2000-0322 | | 2000-04-24 | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0248 | | 2000-04-24 | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute ar… | |
CVE-2000-0336 | | 2000-04-21 | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. | |
CVE-2000-0286 | | 2000-04-16 | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. | |
CVE-2000-0263 | | 2000-04-16 | The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. | |
CVE-2000-0289 | | 2000-03-27 | IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port… | |
CVE-2000-0229 | | 2000-03-22 | gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root. | |
CVE-2000-0230 | | 2000-03-13 | Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. | |
CVE-2000-0184 | | 2000-03-09 | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. | |
CVE-2000-0196 | | 2000-02-28 | Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. | |
CVE-2000-0186 | | 2000-02-28 | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. | |
CVE-2000-0170 | | 2000-02-26 | Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. | |
CVE-2000-0219 | | 2000-02-23 | Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt. | |
CVE-2000-0093 | | 2000-01-21 | An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5. | |
CVE-2000-1221 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local mach… | |
CVE-2000-1220 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute… | |
CVE-2000-0052 | | 2000-01-04 | Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack. | |
CVE-1999-0894 | | 2000-01-04 | Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals. | |
CVE-1999-1335 | | 1999-12-31 | snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information. | |
CVE-1999-1333 | | 1999-12-31 | automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharac… | |
CVE-1999-1332 | | 1999-12-31 | gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. | |
CVE-1999-1331 | | 1999-12-31 | netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a… | |
CVE-1999-1330 | | 1999-12-31 | The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a… | |
CVE-1999-1329 | | 1999-12-31 | Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges. | |
CVE-1999-1328 | | 1999-12-31 | linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack. | |
CVE-1999-1327 | | 1999-12-31 | Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable. | |
CVE-2000-0017 | | 1999-12-21 | Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter. | |
CVE-1999-0997 | | 1999-12-20 | wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does… | |
CVE-1999-0986 | | 1999-12-08 | The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option. | |
CVE-2000-0358 | | 1999-12-03 | ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program. | |
CVE-2000-0357 | | 1999-12-03 | ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys. | |
CVE-2000-0531 | | 1999-11-23 | Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. | |
CVE-1999-0832 | | 1999-11-09 | Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. | |
CVE-2000-0356 | | 1999-10-13 | Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts. | |
CVE-1999-1347 | | 1999-10-07 | Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or an… | |
CVE-1999-1346 | | 1999-10-07 | PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access… | |
CVE-1999-1542 | | 1999-10-04 | RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command. | |
CVE-1999-0704 | | 1999-09-16 | Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others. | |
CVE-1999-0705 | | 1999-09-01 | Buffer overflow in INN inews program. | |
CVE-1999-0872 | | 1999-08-25 | Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. | |
CVE-1999-0769 | | 1999-08-25 | Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. | |
CVE-1999-0768 | | 1999-08-25 | Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable. | |
CVE-2000-0355 | | 1999-08-21 | pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files. | |
CVE-1999-0740 | | 1999-08-19 | Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable. | |
CVE-1999-0814 | | 1999-08-11 | Red Hat pump DHCP client allows remote attackers to gain root access in some configurations. | |
CVE-1999-0710 | | 1999-07-25 | The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use… | |
CVE-1999-1348 | | 1999-06-30 | Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial… | |
CVE-1999-0748 | | 1999-06-24 | Buffer overflows in Red Hat net-tools package. | |
CVE-2000-0118 | | 1999-06-09 | The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brut… | |
CVE-1999-1496 | | 1999-06-08 | Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a… | |
CVE-2000-0365 | | 1999-06-01 | Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices. | |
CVE-2000-0364 | | 1999-06-01 | screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys. | |
CVE-1999-0804 | | 1999-06-01 | Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths. | |
CVE-1999-0434 | | 1999-03-30 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privilege… | |
CVE-1999-0433 | | 1999-03-21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privil… | |
CVE-1999-0405 | | 1999-02-18 | A buffer overflow in lsof allows local users to obtain root privilege. | |
CVE-1999-0368 | | 1999-02-09 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. | |
CVE-1999-0390 | | 1999-01-04 | Buffer overflow in Dosemu Slang library in Linux. | |
CVE-1999-0798 | | 1998-12-04 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. |