Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2007-4129

coolkey file and directory permission flaw

CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Coolkey Enterprise Linux
CVE-2007-4130

panic caused by set_mempolicy with MPOL_BIND

The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during NUMA memory access, which allows local users to cause a denial of service (panic) via invalid arguments to set_mempolicy in an MPOL_BIND operation.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop
CVE-2007-4131

tar directory traversal vulnerability

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Gnu Redhat Rpath
Products
Tar Enterprise Linux Enterprise Linux Desktop and 1 more
CVE-2007-4133

prio_tree unit kernel panic

The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2007-4134

star directory traversal vulnerability

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

CVSS 2.0 · 6.8 Medium EPSS 3.0% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Fedora
CVE-2007-4135

nfs-utils-lib NFSv4 user id mapping flaw

The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Nfsv4 Redhat
Products
Nfsidmap Enterprise Linux
CVE-2007-4137

QT off by one buffer overflow

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Conectiva Gentoo Mandrakesoft and 3 more
Products
Linux Linux Mandrake Linux and 5 more
CVE-2007-4138

samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin

The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Samba
Products
Enterprise Linux Samba
CVE-2007-4211

Dovecot possible privilege ascalation in ACL plugin

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.

CVSS 2.0 · 6.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Dovecot Redhat
Products
Dovecot Enterprise Linux
CVE-2007-4224

URL spoof in address bar

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Kde Redhat
Products
Konqueror Enterprise Linux
CVE-2007-4308

kernel: Missing ioctl() permission checks in aacraid driver

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Adaptec Linux Redhat
Products
Aacraid Controller Linux Kernel Enterprise Linux
CVE-2007-4351

cups boundary error

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.

CVSS 2.0 · 10.0 Critical EPSS 7.4% KEV · Not listed
Vendors
Cups Redhat
Products
Cups Enterprise Linux
CVE-2007-4352

DCTStream:: readProgressiveDataUnit()

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.

CVSS 2.0 · 7.6 High EPSS 7.0% KEV · Not listed
Vendors
Redhat Xpdf
Products
Enterprise Linux Xpdf
CVE-2007-4465

mod_autoindex XSS

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

CVSS 3.1 · 6.1 Medium EPSS 26.2% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Certificate System Enterprise Linux and 3 more
CVE-2007-4476

tar/cpio stack crashing in safer_name_suffix

Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."

CVSS 2.0 · 7.5 High EPSS 14.9% KEV · Not listed
Vendors
Canonical Debian Gnu and 1 more
Products
Ubuntu Linux Debian Linux Tar and 1 more
CVE-2007-4559

python: tarfile module directory traversal

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

CVSS 3.1 · 9.8 Critical EPSS 27.1% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux Rhel Eus and 1 more
CVE-2007-4565

Fetchmail NULL pointer dereference

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Fetchmail Redhat
Products
Fetchmail Enterprise Linux
CVE-2007-4567

kernel: ipv6_hop_jumbo remote system crash

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.

CVSS 2.0 · 7.8 High EPSS 14.3% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus
CVE-2007-4568

xfs integer overflow in the build_range function

Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X Font Server
CVE-2007-4569

kdm password-less login vulnerability

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.0% KEV · Not listed
Vendors
Kde Redhat
Products
Kde Enterprise Linux