CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Debian » Debian Linux : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2012-5519 264 2012-11-19 2013-06-05
7.2
 None Local Low Not required Complete Complete Complete
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
2 CVE-2007-5365 119 1 DoS Exec Code Overflow 2007-10-11 2011-08-02
7.2
 None Local Low Not required Complete Complete Complete
Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.
3 CVE-2007-2833 DoS 2007-06-21 2008-09-05
7.8
 None Remote Low Not required None None Complete
Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrated via a GIF image in vm mode, related to image size calculation.
4 CVE-2007-0956 Bypass 2007-04-05 2010-09-15
7.6
 Admin Remote High Not required Complete Complete Complete
The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.
5 CVE-2007-0454 Exec Code 2007-02-05 2010-09-15
7.5
 User Remote Low Not required Partial Partial Partial
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
6 CVE-2006-5873 DoS Overflow 2006-12-11 2008-09-05
7.8
 None Remote Low Not required None None Complete
Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet.
7 CVE-2006-1772 2006-04-13 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/database_admin_pass record, which allows local users to view the password.
8 CVE-2006-1244 2006-03-15 2008-09-05
7.6
 None Remote High Not required Complete Complete Complete
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.
9 CVE-2005-0206 Overflow 2005-04-27 2010-08-21
7.5
 User Remote Low Not required Partial Partial Partial
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
10 CVE-2005-0076 Exec Code Overflow 2005-05-02 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library.
11 CVE-2005-0005 Exec Code Overflow 2005-05-02 2010-08-21
7.5
 User Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.
12 CVE-2004-1176 DoS Exec Code 2005-04-14 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
13 CVE-2004-1175 Exec Code 2005-04-14 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
fish.c in midnight commander allows remote attackers execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
14 CVE-2004-1076 Exec Code Overflow 2005-01-10 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.
15 CVE-2004-1051 Exec Code 2005-03-01 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.
16 CVE-2004-1005 Overflow 2005-04-14 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
17 CVE-2004-1004 2005-04-14 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
18 CVE-2004-0986 2005-03-01 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
19 CVE-2004-0833 2004-12-23 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages.
20 CVE-2004-0579 Exec Code 2004-08-06 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
21 CVE-2004-0456 Exec Code Overflow 2004-12-06 2008-09-10
7.6
 Admin Remote High Not required Complete Complete Complete
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
22 CVE-2003-0385 Overflow +Priv 2003-07-02 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.
23 CVE-2003-0361 2003-06-09 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.
24 CVE-2003-0360 DoS Exec Code Overflow 2003-06-09 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.
25 CVE-2003-0308 +Priv 2003-05-15 2008-11-11
7.2
 Admin Local Low Not required Complete Complete Complete
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via (1) expn, (2) checksendmail, or (3) doublebounce.pl.
26 CVE-2002-0062 Overflow +Priv 2002-03-08 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."
27 CVE-2002-0004 Exec Code Mem. Corr. 2002-02-27 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
28 CVE-2001-1561 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.
29 CVE-2001-0763 Exec Code Overflow 2001-10-18 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.
30 CVE-2001-0755 DoS Exec Code Overflow 2001-10-18 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.
31 CVE-2001-0690 Exec Code 2001-09-20 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.
32 CVE-2001-0458 Exec Code Overflow 2001-06-27 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
33 CVE-2001-0456 2001-06-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended.
34 CVE-2001-0441 Exec Code Overflow 2001-06-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.
35 CVE-2001-0279 Overflow +Priv 2001-05-03 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
36 CVE-2001-0193 +Priv 2001-05-03 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
37 CVE-2001-0128 +Priv Bypass 2001-03-12 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
38 CVE-2001-0112 Exec Code Overflow 2001-03-12 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.
39 CVE-2001-0111 Exec Code 2001-03-12 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.
40 CVE-2000-0867 +Priv 2000-11-14 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.
41 CVE-2000-0607 Overflow +Priv 2000-06-21 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.
42 CVE-2000-0606 Overflow +Priv 2000-06-21 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.
43 CVE-2000-0229 +Priv 2000-03-22 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
44 CVE-2000-0145 2000-02-05 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
45 CVE-2000-0112 2000-02-02 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.
46 CVE-2000-0107 2000-02-01 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
47 CVE-1999-1411 1998-11-26 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp.
48 CVE-1999-1390 +Priv 1998-04-28 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line.
49 CVE-1999-1276 +Priv 1998-12-07 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device.
50 CVE-1999-1182 Overflow +Priv 1997-07-17 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error.
Total number of vulnerabilities : 62   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.