ML
Product
Mandrake Linux
134
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add Mandrake Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2001-0139 | – | Mar 12 | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2001-0138 | – | Mar 12 | privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2001-0136 | – | Mar 12 | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly… Affected: 7.2 |
| CVE-2001-0128 | – | Mar 12 | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges Affected: 7.1; 7.2 |
| CVE-2001-0125 | – | Mar 12 | exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2001-0120 | – | Mar 12 | useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2001-0119 | – | Mar 12 | getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2001-0118 | – | Mar 12 | rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2001-0117 | – | Mar 12 | sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2001-0108 | – | Mar 12 | PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use… Affected: 7.2 |
| CVE-2001-1385 | – | Jan 12 | The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause… Affected: 7.2 |
| CVE-2000-1134 | – | Jan 9 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here… Affected: 6.0; 6.1; 7.0; 7.1; 7.2 |
| CVE-2000-1095 | – | Jan 9 | modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters Affected: 7.2 |
| CVE-2000-1042 | – | Dec 11 | Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a… Affected: 6.1; 7.0; 7.1 |
| CVE-2000-1059 | – | Dec 11 | The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows… Affected: 7.0; 7.1 |
| CVE-2000-1043 | – | Dec 11 | Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is… Affected: 6.1; 7.0; 7.1 |
| CVE-2000-0867 | – | Nov 14 | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel… Affected: 6.0; 6.1; 7.0; 7.1 |
| CVE-2000-0883 | – | Nov 14 | The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list… Affected: 6.1; 7.0; 7.1 |
| CVE-2000-0844 | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… Affected: 7.0; 7.1 |
| CVE-2000-0718 | – | Oct 20 | A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed Affected: 6.0; 6.1; 7.0; 7.1 |
| CVE-2000-0633 | – | Jul 18 | Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system Affected: 7.1 |
| CVE-2000-0594 | – | Jul 4 | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes… Affected: 2007 |
| CVE-2000-0566 | – | Jul 3 | makewhatis in Linux man package allows local users to overwrite files via a symlink attack Affected: 6.0; 6.1; 7.0; 7.1 |
| CVE-2000-0606 | – | Jun 21 | Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter Affected: 6.1; 7.0; 7.1 |
| CVE-2000-0607 | – | Jun 21 | Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or… Affected: 6.1; 7.0; 7.1 |
| CVE-2000-0454 | – | May 29 | Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter Affected: 7.0 |
| CVE-1999-1008 | – | May 17 | xsoldier program allows local users to gain root access via a long argument Affected: 7.0 |
| CVE-2000-0336 | – | Apr 21 | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack Affected: 6.1; 7.0 |
| CVE-2000-0184 | – | Mar 9 | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords Affected: 7.0 |
| CVE-2000-0186 | – | Feb 28 | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument Affected: 6.1; 7.0 |
| CVE-2000-0052 | – | Jan 4 | Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a Affected: 6.0; 6.1 |
| CVE-1999-1477 | – | Sep 23 | Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack Affected: 6.0 |
| CVE-1999-1572 | – | Jul 16 | cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files… Affected: 9.2; 10.0; 10.1; cs2.1; cs3.0 |
| CVE-2000-0508 | – | Dec 19 | rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request Affected: 6.0; 6.1; 7.0 |