9.1 * PPC * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2004-2396		2004-12-31	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.
2	CVE-2004-2395	DoS	2004-12-31	2017-07-11	2.1	None	Local	Low	Not required	None	None	Partial
Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.
3	CVE-2004-2394		2004-12-31	2017-07-11	2.1	None	Local	Low	Not required	None	Partial	None
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.
4	CVE-2004-0834	Exec Code	2004-12-23	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
5	CVE-2004-0581		2004-08-06	2017-07-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
6	CVE-2004-0535	Overflow	2004-08-06	2017-10-11	2.1	None	Local	Low	Not required	Partial	None	None
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
7	CVE-2004-0488	Exec Code Overflow	2004-07-07	2021-06-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
8	CVE-2004-0461	DoS Exec Code Overflow	2004-08-06	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
9	CVE-2004-0460	DoS Exec Code Overflow	2004-08-06	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
10	CVE-2003-1020	DoS	2004-01-05	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).

Total number of vulnerabilities : 10 Page : 1 (This Page)