CVE-2002-1369

security flaw

jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed

Vendors

Apple Easy Software Products Redhat

Products

Mac Os X Cups Linux

CVE-2005-2098

security flaw

The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2000-0668

security flaw

pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed

Vendors

Conectiva Michael K. Johnson Redhat

Products

Linux Pam Console Linux

CVE-2005-1918

tar archive path traversal issue

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

CVSS 2.0 · 2.6 Low EPSS 2.9% KEV · Not listed

Vendors

Gnu Redhat

Products

Tar Enterprise Linux Enterprise Linux Desktop and 1 more

CVE-2002-1368

security flaw

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.

CVSS 2.0 · 7.5 High EPSS 15.5% KEV · Not listed

Vendors

Apple Easy Software Products Redhat

Products

Mac Os X Cups Linux

CVE-2005-1768

security flaw

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.

CVSS 2.0 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2001-0889

security flaw

Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters.

CVSS 2.0 · 7.5 High EPSS 6.4% KEV · Not listed

Vendors

Redhat University Of Cambridge

Products

Linux Powertools Exim

CVE-2002-1374

security flaw

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.

CVSS 2.0 · 7.5 High EPSS 20.5% KEV · Not listed

Vendors

Oracle Redhat Symantec Veritas

Products

Mysql Enterprise Linux Linux and 2 more

CVE-2005-1767

security flaw

traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Novell Redhat Suse

Products

Linux Desktop Open Enterprise Server Enterprise Linux and 1 more

CVE-2002-1367

security flaw

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.

CVSS 2.0 · 10.0 Critical EPSS 3.7% KEV · Not listed

Vendors

Apple Easy Software Products Redhat

Products

Mac Os X Cups Linux

CVE-2005-1763

security flaw

Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Novell Redhat Suse

Products

Linux Desktop Enterprise Linux Suse Linux

CVE-2005-1762

security flaw

The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) via a "non-canonical" address.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2002-1366

security flaw

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Apple Easy Software Products Redhat

Products

Mac Os X Cups Linux

CVE-2005-1761

security flaw

Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Novell Redhat Suse

Products

Linux Desktop Open Enterprise Server Enterprise Linux and 1 more

CVE-2001-0887

security flaw

xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.

CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed

Vendors

Oliver Rauch Redhat

Products

Xsane Linux Powertools

CVE-2005-1760

security flaw

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Enterprise Linux Desktop Linux Advanced Workstation and 1 more

CVE-2005-1267

security flaw

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

CVSS 2.0 · 5.0 Medium EPSS 13.5% KEV · Not listed

Vendors

Gentoo Lbl Mandrakesoft and 2 more

Products

Linux Tcpdump Mandrake Linux and 3 more

CVE-2002-1365

security flaw

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.

CVSS 2.0 · 7.5 High EPSS 5.4% KEV · Not listed

Vendors

Fetchmail Redhat

Products

Fetchmail Enterprise Linux Linux

CVE-2000-0666

security flaw

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

CVSS 2.0 · 10.0 Critical EPSS 26.3% KEV · Not listed

Vendors

Conectiva Debian Redhat and 2 more

Products

Linux Debian Linux Linux and 2 more

CVE-2005-1265

security flaw

The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux