security flaw

Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths.

security flaw

Denial of service in Linux syslogd via a large number of connections.

security flaw

Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.

Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.

Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.

Denial of service in Debian IRC Epic/epic4 client via a long string.

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.

Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

Linux ftpwatch program allows local users to gain root privileges.

Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.

Debian GNU/Linux cfengine package is susceptible to a symlink attack.

super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.

Buffer overflow in the bootp server in the Debian Linux netstd package.

A buffer overflow in lsof allows local users to obtain root privilege.

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.

Buffer overflow in xlock program allows local users to execute commands as root.

Buffer overflow of rlogin program using TERM environmental variable.

Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.

bluez: BlueZ allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.