Engardelinux vulnerabilities
8 vulnerabilities
Known vulnerabilities in Engardelinux products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Secure Linux7 vulnerabilities
- Secure Community2 vulnerabilities
- Guardian Digital Webtool1 vulnerabilities
CVE-2003-0101debianwebmin+3
EPSS score15.47%
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.CVE-2003-0962andrew_tridgellrsync+7EPSS score23.54%
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.CVE-2001-1240engardelinuxsecure_linuxEPSS score1.84%
The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.CVE-2001-0739engardelinuxsecure_linuxEPSS score0.39%
Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.CVE-2001-0736engardelinuxsecure_linux+5EPSS score0.81%
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.CVE-2004-0535conectivalinux+9EPSS score0.47%
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.CVE-2002-0083conectivalinux+10EPSS score14.69%
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.CVE-2002-0002engardelinuxsecure_linux+3EPSS score5.28%
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.