CveMateVulnerability intelligence

Conectiva Linux vulnerabilities, page 2

60 vulnerabilities

Known vulnerabilities in Conectiva Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2005-3626conectivalinux+3120y ago06-01-2006 22:00

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.CVE-2000-1134calderaopenlinux_edesktop+725y ago19-12-2000 05:00

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.CVE-2000-1095conectivalinux+425y ago22-01-2001 05:00

modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.CVE-2000-0844calderaopenlinux_ebuilder+1425y ago22-01-2001 05:00

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.CVE-2000-0668conectivalinux+226y ago13-10-2000 04:00

pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.CVE-2000-0666conectivalinux+426y ago13-10-2000 04:00

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.CVE-2000-0667conectivalinux26y ago03-08-2000 04:00

Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service.CVE-2000-0633conectivalinux+226y ago13-10-2000 04:00

Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.CVE-2000-0715conectivalinux+126y ago21-09-2000 04:00

DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file.CVE-2000-0701conectivalinux+126y ago21-09-2000 04:00

The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.CVE-2000-0747conectivalinux22y ago01-09-2004 04:00

The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it.CVE-2004-1145altlinuxalt_linux+821y ago31-12-2004 05:00

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.CVE-2004-1142altlinuxalt_linux+921y ago31-12-2004 05:00

Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.CVE-2004-1013carnegie_mellon_universitycyrus_imap_server+621y ago01-12-2004 05:00

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.CVE-2004-1337conectivalinux+221y ago06-01-2005 05:00

The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.CVE-2004-1029conectivalinux+621y ago24-11-2004 05:00

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.CVE-2004-1235avayaconverged_communications_server+1621y ago20-01-2005 05:00

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.CVE-2004-1307applemac_os_x+1421y ago04-05-2005 04:00

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.CVE-2004-1011carnegie_mellon_universitycyrus_imap_server+521y ago01-12-2004 05:00

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.CVE-2004-1139altlinuxalt_linux+821y ago31-12-2004 05:00

Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).