SL
Product
Secure Linux
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add Secure Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0686 | – | Jul 27 | Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors Affected: 1.5; 2.0; 2.1 |
| CVE-2004-0600 | – | Jul 27 | Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP… Affected: 1.5; 2.0; 2.1 |
| CVE-2004-2044 | – | Jun 1 | PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP… Affected: 2.0; 2.1 |
| CVE-2004-0077 | – | Mar 3 | The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function… Affected: 1.5; 2.0 |
| CVE-2002-1319 | – | Dec 11 | The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly… Affected: 1.1; 1.2; 1.5 |
| CVE-2001-1030 | – | Jul 18 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which… Affected: 1.1; 1.01; 1.2 |
| CVE-2001-0169 | – | Mar 26 | When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could… Affected: 1.1; 1.2 |
| CVE-2001-0142 | – | Mar 12 | squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations Affected: 1.1; 1.2 |
| CVE-2001-0117 | – | Mar 12 | sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack Affected: 1.1; 1.2 |
| CVE-2000-0917 | – | Dec 19 | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands Affected: 1.0; 1.1 |
| CVE-2000-1009 | – | Dec 11 | dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to… Affected: 1.1 |
| CVE-2000-0844 | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… Affected: 1.0; 1.1 |
| CVE-2000-0867 | – | Nov 14 | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel… Affected: 1.1 |
| CVE-2000-0791 | – | Oct 20 | Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse Affected: 1.1 |
| CVE-2000-0666 | – | Jul 16 | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges Affected: 1.0; 1.1 |