Secure Linux (Trustix) - vulnerabilities (CVEs)

65 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2007-02-13. Vendor: Trustix.

CVEs of Secure Linux

• CVE-2007-0907 - CVSS 5 (medium), 2007-02-13: Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.
• CVE-2007-0906 - CVSS 7.5 (high), 2007-02-13: Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the…
• CVE-2007-0910 - CVSS 10 (critical), 2007-02-13: Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.
• CVE-2007-0905 - CVSS 7.5 (high), 2007-02-13: PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension. NOTE: it is possible…
• CVE-2007-0909 - CVSS 7.5 (high), 2007-02-13: Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the…
• CVE-2005-3626 - CVSS 5 (medium), 2005-12-31: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash)…
• CVE-2005-3625 - CVSS 10 (critical), 2005-12-31: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service…
• CVE-2005-3624 - CVSS 5 (medium), 2005-12-31: The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to…
• CVE-2005-1267 - CVSS 5 (medium), 2005-06-10: The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to…
• CVE-2005-1410 - CVSS 2.1 (low), 2005-05-03: The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as…
• CVE-2005-0001 - CVSS 6.9 (medium), 2005-05-02: Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines,…
• CVE-2005-0988 - CVSS 3.7 (low), 2005-05-02: Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard…
• CVE-2005-0384 - CVSS 5 (medium), 2005-03-15: Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client.
• CVE-2004-0990 - CVSS 10 (critical), 2005-03-01: Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly…
• CVE-2004-0989 - CVSS 10 (critical), 2005-03-01: Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a…
• CVE-2004-1051 - CVSS 7.2 (high), 2005-03-01: sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as…
• CVE-2004-0941 - CVSS 10 (critical), 2005-02-09: Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files…
• CVE-2004-0940 - CVSS 7.8 (high), 2005-02-09: Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as…
• CVE-2004-0977 - CVSS 2.1 (low), 2005-02-09: The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.
• CVE-2004-0957 - CVSS 6.8 (medium), 2005-02-09: Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges…
• CVE-2005-0156 - CVSS 2.1 (low), 2005-02-07: Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by…
• CVE-2004-0918 - CVSS 5 (medium), 2005-01-27: The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service…
• CVE-2004-0886 - CVSS 5 (medium), 2005-01-27: Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that…
• CVE-2004-1019 - CVSS 10 (critical), 2005-01-10: The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via…
• CVE-2004-1071 - CVSS 7.2 (high), 2005-01-10: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function,…
• CVE-2004-1154 - CVSS 10 (critical), 2005-01-10: Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application…
• CVE-2004-0949 - CVSS 6.4 (medium), 2005-01-10: The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets…
• CVE-2004-1013 - CVSS 10 (critical), 2005-01-10: The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain…
• CVE-2004-1070 - CVSS 7.2 (high), 2005-01-10: The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return…
• CVE-2004-1073 - CVSS 2.1 (low), 2005-01-10: The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable…
• CVE-2004-0883 - CVSS 6.4 (medium), 2005-01-10: Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain…
• CVE-2004-1012 - CVSS 10 (critical), 2005-01-10: The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain…
• CVE-2004-1065 - CVSS 10 (critical), 2005-01-10: Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long…
• CVE-2004-1072 - CVSS 7.2 (high), 2005-01-10: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL…
• CVE-2004-1304 - CVSS 10 (critical), 2005-01-10: Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.
• CVE-2004-1011 - CVSS 10 (critical), 2005-01-10: Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code…
• CVE-2004-2546 - CVSS 6.4 (medium), 2004-12-31: Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).
• CVE-2004-0803 - CVSS 7.5 (high), 2004-12-23: Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow…
• CVE-2004-0685 - CVSS 4.6 (medium), 2004-12-23: Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive…
• CVE-2004-0497 - CVSS 2.1 (low), 2004-12-06: Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
• CVE-2004-0565 - CVSS 2.1 (low), 2004-12-06: Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users…
• CVE-2004-0415 - CVSS 2.1 (low), 2004-11-23: Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.
• CVE-2004-0801 - CVSS 7.5 (high), 2004-09-16: Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
• CVE-2004-0809 - CVSS 5 (medium), 2004-09-16: The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK…
• CVE-2004-0432 - CVSS 7.5 (high), 2004-08-18: ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended…
• CVE-2004-0421 - CVSS 5 (medium), 2004-08-18: The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that…
• CVE-2004-0493 - CVSS 6.4 (medium), 2004-08-06: The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer…
• CVE-2004-0594 - CVSS 5.1 (medium), 2004-07-27: The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows…
• CVE-2004-0686 - CVSS 5 (medium), 2004-07-27: Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack…
• CVE-2004-0600 - CVSS 10 (critical), 2004-07-27: Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64…
• CVE-2004-0595 - CVSS 6.8 (medium), 2004-07-27: The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to…
• CVE-2004-2044 - CVSS 7.5 (high), 2004-06-01: PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly…
• CVE-2004-0077 - CVSS 7.2 (high), 2004-03-03: The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the…
• CVE-2002-1319 - CVSS 2.1 (low), 2002-12-11: The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode,…
• CVE-2002-0083 - CVSS 9.8 (critical), 2002-03-15: Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
• CVE-2001-1030 - CVSS 7.5 (high), 2001-07-18: Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings…
• CVE-2001-0169 - CVSS 2.1 (low), 2001-03-26: When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also…
• CVE-2001-0142 - CVSS 1.2 (low), 2001-03-12: squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
• CVE-2001-0117 - CVSS 1.2 (low), 2001-03-12: sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
• CVE-2000-0917 - CVSS 10 (critical), 2000-12-19: Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
• CVE-2000-1009 - CVSS 7.2 (high), 2000-12-11: dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the…
• CVE-2000-0844 - CVSS 10 (critical), 2000-11-14: Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute…
• CVE-2000-0867 - CVSS 7.2 (high), 2000-11-14: Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering…
• CVE-2000-0791 - CVSS 4.6 (medium), 2000-10-20: Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.
• CVE-2000-0666 - CVSS 10 (critical), 2000-07-16: rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain…