CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Redhat » Linux : Security Vulnerabilities (CVSS score >= 9)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2007-2834 189 Exec Code Overflow 2007-09-18 2011-10-11
9.3
 Admin Remote Medium Not required Complete Complete Complete
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
2 CVE-2005-3625 399 DoS 2005-12-31 2010-10-18
10.0
 None Remote Low Not required Complete Complete Complete
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
3 CVE-2004-1026 DoS Exec Code Overflow 2005-01-10 2010-08-21
10.0
 Admin Remote Low Not required Complete Complete Complete
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
4 CVE-2004-1025 DoS Exec Code Overflow 2005-01-10 2010-08-21
10.0
 Admin Remote Low Not required Complete Complete Complete
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
5 CVE-2004-0904 Exec Code Overflow 2004-12-31 2010-08-21
10.0
 Admin Remote Low Not required Complete Complete Complete
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
6 CVE-2004-0903 Exec Code Overflow 2005-01-27 2010-08-21
10.0
 Admin Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.
7 CVE-2004-0902 DoS Exec Code Overflow 2005-01-27 2010-08-21
10.0
 Admin Remote Low Not required Complete Complete Complete
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
8 CVE-2003-0248 2003-06-16 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
9 CVE-2003-0041 Exec Code 2003-02-19 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
10 CVE-2002-0083 189 +Priv 2002-03-15 2008-11-20
10.0
 Admin Remote Low Not required Complete Complete Complete
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
11 CVE-2001-0233 DoS Exec Code Overflow 2001-03-26 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.
12 CVE-2001-0197 Exec Code 2001-03-26 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
13 CVE-2000-1221 Bypass 2000-01-08 2009-02-28
10.0
 Admin Remote Low Not required Complete Complete Complete
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
14 CVE-2000-1220 Exec Code +Priv 2000-01-08 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
15 CVE-2000-1010 Exec Code 2000-12-11 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
16 CVE-2000-0917 Exec Code 2000-12-19 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
17 CVE-2000-0844 264 Exec Code 2000-11-14 2009-01-20
10.0
 Admin Remote Low Not required Complete Complete Complete
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
18 CVE-2000-0666 +Priv 2000-07-16 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
19 CVE-2000-0391 Overflow +Priv 2000-05-16 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
20 CVE-2000-0390 Overflow +Priv 2000-05-16 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
21 CVE-2000-0389 Overflow +Priv 2000-05-16 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
22 CVE-2000-0322 2000-04-24 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execure arbitrary commands via shell metacharacters.
23 CVE-2000-0248 Exec Code 2000-04-24 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
24 CVE-2000-0093 2000-01-21 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
25 CVE-2000-0017 Overflow +Priv 1999-12-21 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
26 CVE-1999-1542 Exec Code 1999-10-04 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.
27 CVE-1999-1299 1997-02-03 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.
28 CVE-1999-0894 2000-01-04 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
29 CVE-1999-0832 Exec Code Overflow 1999-11-09 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
30 CVE-1999-0814 1999-08-11 2008-09-09
10.0
 None Remote Low Not required Complete Complete Complete
Red Hat pump DHCP client allows remote attackers to gain root access in some configurations.
31 CVE-1999-0798 Overflow 1998-12-04 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
32 CVE-1999-0704 Overflow 1999-09-16 2008-09-09
9.3
 Admin Remote Medium Not required Complete Complete Complete
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
33 CVE-1999-0368 Overflow 1999-02-09 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
34 CVE-1999-0192 Overflow 1997-10-18 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.
35 CVE-1999-0043 Exec Code 1996-12-04 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
36 CVE-1999-0042 Overflow 1997-04-07 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
37 CVE-1999-0011 DoS 1998-04-08 2008-09-09
10.0
 None Remote Low Not required Complete Complete Complete
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
38 CVE-1999-0009 Overflow 1998-04-08 2008-09-09
10.0
 Admin Remote Low Not required Complete Complete Complete
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
39 CVE-1999-0002 119 Overflow 1998-10-12 2009-01-26
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.
Total number of vulnerabilities : 39   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.