Cfengine (Gnu) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 29 known versions, newest CVE from 2005-10-05. Vendor: Gnu.

CVEs of Cfengine

• CVE-2005-3137 - CVSS 2.1 (low), 2005-10-05: The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a…
• CVE-2005-2960 - CVSS 2.1 (low), 2005-10-05: cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability…
• CVE-2004-1701 - CVSS 10 (critical), 2004-08-09: Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code…
• CVE-2004-1702 - CVSS 5 (medium), 2004-08-09: The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function,…
• CVE-2003-0849 - CVSS 7.5 (high), 2003-11-17: Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values,…
• CVE-2000-0947 - CVSS 10 (critical), 2000-12-19: Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH…