SL
Product
Suse Linux
207
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Suse Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2001-0872 | – | Dec 21 | OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges Affected: 6.4; 7.0; 7.1; 7.2; 7.3 |
| CVE-2001-0869 | – | Dec 21 | Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary… Affected: 7.0; 7.1; 7.2; 7.3 |
| CVE-2001-0834 | – | Dec 6 | htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1)… Affected: 6.3; 6.4; 7.0; 7.1; 7.2; 7.3 |
| CVE-2001-0851 | – | Dec 6 | Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie Affected: 6.3; 6.4; 7.0; 7.1; 7.2; 7.3 |
| CVE-2001-0918 | – | Nov 22 | Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely Affected: 7.2; 7.3 |
| CVE-2001-0914 | – | Nov 21 | Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to… Affected: 7.3 |
| CVE-2001-0763 | – | Oct 18 | Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the… Affected: 6.0; 6.1; 6.2; 6.3; 6.4; 7.0; +2 more |
| CVE-2001-0641 | – | Sep 20 | Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option Affected: 6.0; 6.1; 6.2; 6.3; 6.4; 7.0; +1 more |
| CVE-2001-1012 | – | Sep 5 | Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/ Affected: 6.3; 6.4; 7.0; 7.1; 7.2 |
| CVE-2001-0525 | – | Aug 14 | Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line… Affected: 6.3; 6.4; 7.0 |
| CVE-2001-0610 | – | Aug 2 | kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp Affected: 7.0; 7.0; 7.0; 7.0 |
| CVE-2001-1130 | – | Aug 2 | Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters,… Affected: 6.0; 6.3; 6.4; 7.0; 7.1; 7.2 |
| CVE-2001-0388 | – | Jun 27 | time server daemon timed allows remote attackers to cause a denial of service via malformed packets Affected: 6.1; 6.2; 6.3; 6.4; 7.0; 7.1 |
| CVE-2001-0458 | – | Jun 27 | Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands Affected: 6.3; 6.4; 7.0; 7.1 |
| CVE-2001-0193 | – | May 3 | Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter Affected: 6.3; 6.4; 7.0 |
| CVE-2001-0172 | – | Mar 26 | Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name Affected: 7.0 |
| CVE-2001-0178 | – | Mar 26 | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and… Affected: 6.0; 6.1; 6.2; 6.3; 6.4; 7.0 |
| CVE-2001-0109 | – | Mar 12 | rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file Affected: 6.1; 6.2; 6.3; 6.4; 7.0 |
| CVE-2000-1107 | – | Jan 9 | in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and… Affected: 6.0; 6.1; 6.2; 6.3; 6.4; 7.0 |
| CVE-2000-1134 | – | Jan 9 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here… Affected: 7.0 |
| CVE-2000-1095 | – | Jan 9 | modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters Affected: 6.4; 7.0 |
| CVE-2000-1040 | – | Dec 11 | Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service Affected: 6.2; 6.3; 6.4; 7.0 |
| CVE-2000-1044 | – | Dec 11 | Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges Affected: 6.2; 6.3; 6.4; 7.0 |
| CVE-2000-1016 | – | Dec 11 | The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain… Affected: 6.3; 6.4 |
| CVE-2000-0844 | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… Affected: 6.1; 6.2; 6.3; 6.4; 7.0 |
| CVE-2000-0869 | – | Nov 14 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method Affected: 6.0; 6.1; 6.1; 6.2; 6.3; 6.3; +5 more |
| CVE-2000-0868 | – | Nov 14 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with… Affected: 6.3; 6.4 |
| CVE-2000-0800 | – | Oct 20 | String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges Affected: 6.1; 6.1; 6.2; 6.3; 6.3; 6.3; +3 more |
| CVE-2000-0666 | – | Jul 16 | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges Affected: 6.3; 6.3; 6.3; 6.4; 6.4; 6.4; +1 more |
| CVE-2000-0614 | – | Jul 10 | Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed… Affected: 6.3; 6.3; 6.3; 6.4 |
| CVE-2000-0491 | – | May 24 | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long… Affected: 6.2; 6.4 |
| CVE-2000-0438 | – | May 22 | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter Affected: 4.2; 4.3; 4.4; 4.4.1; 5.0; 5.1; +8 more |
| CVE-2000-0433 | – | May 2 | The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user… Affected: 6.1; 6.1; 6.2; 6.3; 6.3; 6.3; +1 more |
| CVE-2000-0293 | – | May 2 | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then… Affected: 6.0; 6.1; 6.1; 6.2; 6.3; 6.3; +2 more |
| CVE-2000-0340 | – | Apr 29 | Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable Affected: 6.3; 6.4 |
| CVE-2000-0229 | – | Mar 22 | gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root Affected: 5.3; 6.0; 6.1; 6.2; 6.3 |
| CVE-2000-0231 | – | Mar 16 | Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges Affected: 6.0; 6.1; 6.2; 6.3 |
| CVE-2000-0218 | – | Feb 3 | Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname Affected: All versions, or not specified |
| CVE-2000-0361 | – | Dec 14 | The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login… Affected: All versions, or not specified |
| CVE-1999-0831 | – | Nov 19 | Denial of service in Linux syslogd via a large number of connections Affected: 6.2; 6.3 |
| CVE-2000-0362 | – | Oct 22 | Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges Affected: 6.1; 6.2 |
| CVE-2000-0363 | – | Oct 22 | Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory Affected: 6.1; 6.2 |
| CVE-1999-0906 | – | Sep 23 | Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable Affected: 6.2 |
| CVE-1999-0768 | – | Aug 25 | Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable Affected: 6.0; 6.1 |
| CVE-2000-0355 | – | Aug 21 | pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files Affected: 6.2 |
| CVE-1999-0746 | – | Aug 16 | A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service Affected: 4.4; 4.4.1; 5.0; 5.1; 5.2; 5.3; +3 more |
| CVE-1999-0804 | – | Jun 1 | Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths Affected: 6.1 |
| CVE-1999-0434 | – | Mar 30 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial… Affected: 5.3 |
| CVE-1999-0433 | – | Mar 21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a… Affected: 5.1; 5.2; 6.0; 6.1 |
| CVE-1999-0462 | – | Mar 17 | suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g Affected: 5.3 |