PR
Product
Propack
54
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Propack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 2.3; 2.4; 3.0 |
| CVE-2006-1167 | – | Feb 6 | SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information Affected: 3 |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: 3.0 |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: 3.0 |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: 3.0 |
| CVE-2005-1859 | – | Jul 12 | Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on… Affected: 3.0; 3.0; 4.0 |
| CVE-2005-0005 | – | May 2 | Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a… Affected: 3.0 |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: 3.0 |
| CVE-2005-1043 | – | Apr 14 | exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes… Affected: 3.0 |
| CVE-2005-0761 | – | Mar 23 | Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file Affected: 3.0 |
| CVE-2005-0759 | – | Mar 23 | ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag Affected: 3.0 |
| CVE-2005-0398 | – | Mar 14 | The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets Affected: 3.0 |
| CVE-2005-0605 | – | Mar 2 | scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow Affected: 3.0 |
| CVE-2005-0156 | – | Feb 7 | Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG… Affected: 3.0 |
| CVE-2004-1184 | – | Jan 21 | The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters Affected: 3.0 |
| CVE-2004-1471 | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… Affected: 2.4; 3.0 |
| CVE-2004-1307 | – | Dec 21 | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS… Affected: 3.0 |
| CVE-2004-1142 | – | Dec 15 | Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet Affected: 3.0 |
| CVE-2004-1145 | – | Dec 15 | Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java… Affected: 3.0 |
| CVE-2004-1139 | – | Dec 15 | Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash) Affected: 3.0 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 2.3; 2.4; 3.0 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 2.3; 2.4; 3.0 |
| CVE-2004-1613 | – | Oct 18 | Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3)… Affected: 3.0 |
| CVE-2004-0519 | – | Aug 18 | Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication… Affected: 3.0 |
| CVE-2004-0226 | – | Aug 18 | Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code Affected: 2.3; 2.4 |
| CVE-2004-0231 | – | Aug 18 | Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations." Affected: 2.3; 2.4 |
| CVE-2004-0232 | – | Aug 18 | Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code Affected: 2.3; 2.4 |
| CVE-2004-0233 | – | Aug 18 | Utempter allows device names that contain Affected: 2.4; 3.0 |
| CVE-2004-0234 | – | Aug 18 | Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local… Affected: 2.4; 3.0 |
| CVE-2004-0235 | – | Aug 18 | Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) Affected: 2.4; 3.0 |
| CVE-2004-0504 | – | Aug 18 | Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients Affected: 2.4; 3.0 |
| CVE-2004-0505 | – | Aug 18 | The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors Affected: 2.4; 3.0 |
| CVE-2004-0506 | – | Aug 18 | The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference Affected: 2.4; 3.0 |
| CVE-2004-0507 | – | Aug 18 | Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code Affected: 2.4; 3.0 |
| CVE-2004-0520 | – | Aug 18 | Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as… Affected: 3.0 |
| CVE-2004-0521 | – | Aug 18 | SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php Affected: 3.0 |
| CVE-2004-0523 | – | Aug 18 | Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root Affected: 2.4; 3.0 |
| CVE-2004-0418 | – | Aug 6 | serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds"… Affected: 2.4; 3.0 |
| CVE-2004-0639 | – | Aug 6 | Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in… Affected: 3.0 |
| CVE-2004-0492 | – | Aug 6 | Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute… Affected: 2.4 |
| CVE-2004-0414 | – | Aug 6 | CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial… Affected: 2.4; 3.0 |
| CVE-2004-0417 | – | Aug 6 | Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a… Affected: 2.4; 3.0 |
| CVE-2004-0416 | – | Aug 6 | Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code Affected: 2.4; 3.0 |
| CVE-2004-0424 | – | Jul 7 | Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute… Affected: 3.0 |
| CVE-2004-0107 | – | Apr 15 | The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability… Affected: 2.3; 2.4 |
| CVE-2004-0148 | – | Apr 15 | wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home… Affected: 2.3; 2.4 |
| CVE-2004-0111 | – | Apr 15 | gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file Affected: 2.3; 2.4 |
| CVE-2004-0108 | – | Apr 15 | The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than… Affected: 2.3; 2.4 |
| CVE-2004-0110 | – | Mar 15 | Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL Affected: 2.3; 2.4 |
| CVE-2004-0104 | – | Mar 3 | Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code Affected: 2.3; 2.4 |