CO
Vendor
Conectiva
63
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2005-3624 | LI Linux Conectiva | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… |
| CVE-2005-3626 | LI Linux Conectiva | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… |
| CVE-2005-3625 | LI Linux Conectiva | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… |
| CVE-2005-0207 | LI Linux Conectiva | – | May 2 | Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT |
| CVE-2005-0754 | LI Linux Conectiva | – | Apr 22 | Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code |
| CVE-2004-1235 | LI Linux Conectiva | – | Apr 14 | Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute… |
| CVE-2005-1043 | LI Linux Conectiva | – | Apr 14 | exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes… |
| CVE-2005-0750 | LI Linux Conectiva | – | Mar 27 | The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or… |
| CVE-2005-0736 | LI Linux Conectiva | – | Mar 9 | Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events |
| CVE-2005-0699 | LI Linux Conectiva | – | Mar 8 | Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute… |
| CVE-2004-1029 | LI Linux Conectiva | – | Mar 1 | The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java… |
| CVE-2004-0884 | LI Linux Conectiva | – | Jan 27 | The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users… |
| CVE-2004-0930 | LI Linux Conectiva | – | Jan 27 | The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request… |
| CVE-2004-0903 | LI Linux Conectiva | – | Jan 27 | Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows… |
| CVE-2004-0902 | LI Linux Conectiva | – | Jan 27 | Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of… |
| CVE-2004-0882 | LI Linux Conectiva | – | Jan 27 | Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a… |
| CVE-2004-1012 | LI Linux Conectiva | – | Jan 10 | The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that… |
| CVE-2004-1013 | LI Linux Conectiva | – | Jan 10 | The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1)… |
| CVE-2004-1011 | LI Linux Conectiva | – | Jan 10 | Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY… |
| CVE-2004-0817 | LI Linux Conectiva | – | Dec 31 | Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file |
| CVE-2004-0904 | LI Linux Conectiva | – | Dec 31 | Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute… |
| CVE-2004-0802 | LI Linux Conectiva | – | Dec 31 | Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than… |
| CVE-2004-1337 | LI Linux Conectiva | – | Dec 23 | The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which… |
| CVE-2004-1307 | LI Linux Conectiva | – | Dec 21 | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS… |
| CVE-2004-1142 | LI Linux Conectiva | – | Dec 15 | Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet |
| CVE-2004-1145 | LI Linux Conectiva | – | Dec 15 | Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java… |
| CVE-2004-1139 | LI Linux Conectiva | – | Dec 15 | Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash) |
| CVE-2004-0497 | LI Linux Conectiva | – | Dec 6 | Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4 |
| CVE-2004-0626 | LI Linux Conectiva | – | Dec 6 | The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU… |
| CVE-2005-0373 | LI Linux Conectiva | – | Oct 7 | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows… |
| CVE-2004-0801 | LI Linux Conectiva | – | Sep 16 | Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands |
| CVE-2004-0827 | LI Linux Conectiva | – | Sep 16 | Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and… |
| CVE-2004-0905 | LI Linux Conectiva | – | Sep 14 | Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute… |
| CVE-2004-0807 | LI Linux Conectiva | – | Sep 13 | Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be… |
| CVE-2004-0557 | LI Linux Conectiva | – | Aug 6 | Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain… |
| CVE-2004-0495 | LI Linux Conectiva | – | Aug 6 | Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool |
| CVE-2004-0554 | LI Linux Conectiva | – | Aug 6 | Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain… |
| CVE-2004-0535 | LI Linux Conectiva | – | Aug 6 | The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory |
| CVE-2003-0780 | LI Linux Conectiva | – | Sep 22 | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a… |
| CVE-2003-0468 | LI Linux Conectiva | – | Aug 27 | Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the… |
| CVE-2003-0540 | LI Linux Conectiva | – | Aug 27 | The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would… |
| CVE-2002-0083 | LI Linux Conectiva | 9.8 | Mar 15 | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges |
| CVE-2001-0834 | LI Linux Conectiva | – | Dec 6 | htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1)… |
| CVE-2001-0690 | LI Linux Conectiva | – | Sep 20 | Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format… |
| CVE-2001-1375 | LI Linux Conectiva | – | Jul 19 | tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a… |
| CVE-2001-1374 | LI Linux Conectiva | – | Jul 19 | expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is… |
| CVE-2001-0439 | LI Linux Conectiva | – | Jul 2 | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL |
| CVE-2001-0440 | LI Linux Conectiva | – | Jul 2 | Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands |
| CVE-2001-0473 | LI Linux Conectiva | – | Jun 27 | Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands |
| CVE-2001-0178 | LI Linux Conectiva | – | Mar 26 | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and… |
| CVE-2001-0170 | LI Linux Conectiva | – | Mar 26 | glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow… |
| CVE-2001-0136 | LI Linux Conectiva | – | Mar 12 | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly… |
| CVE-2001-0128 | LI Linux Conectiva | – | Mar 12 | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges |
| CVE-2000-1095 | LI Linux Conectiva | – | Jan 9 | modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters |
| CVE-2000-1134 | LI Linux Conectiva | – | Jan 9 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here… |
| CVE-2000-0844 | LI Linux Conectiva | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… |
| CVE-2000-0715 | LI Linux Conectiva | – | Oct 20 | DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file |
| CVE-2000-0747 | LI Linux Conectiva | – | Oct 20 | The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it |
| CVE-2000-0701 | LI Linux Conectiva | – | Oct 20 | The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges |
| CVE-2000-0668 | LI Linux Conectiva | – | Jul 27 | pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled |