Caldera Openlinux Edesktop vulnerabilities
8 vulnerabilities
Known vulnerabilities in Caldera Openlinux Edesktop, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2001-0851calderaopenlinux+6
EPSS score3.09%
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.CVE-2001-0178calderaopenlinux_edesktop+4EPSS score0.36%
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.CVE-2001-0139calderaopenlinux_desktop+6EPSS score0.34%
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0181calderaopenlinux_desktop+2EPSS score5.20%
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.CVE-2000-1134calderaopenlinux_edesktop+7EPSS score1.42%
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.CVE-2000-1195calderaopenlinux_edesktop+1EPSS score2.11%
telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.CVE-2000-0917calderaopenlinux_ebuilder+4EPSS score78.66%
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.CVE-2000-0594calderaopenlinux_desktop+5EPSS score9.87%
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.