Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable

Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords

Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument

Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message

Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable

Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt

An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname…

The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary…

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a

Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable

snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of…

gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file

netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service…

The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly…

Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges

linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack

Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option

ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program

ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys

Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets

Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname

Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts

Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm

PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin…

RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command

Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others

Buffer overflow in INN inews program

Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable

Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file

Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable

pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files

Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable

Red Hat pump DHCP client allows remote attackers to gain root access in some configurations

The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an…

Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service

Buffer overflows in Red Hat net-tools package

The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password…

Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which…

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices

Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial…

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a…

A buffer overflow in lsof allows local users to obtain root privilege

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a