Engardelinux Secure Linux vulnerabilities
7 vulnerabilities
Known vulnerabilities in Engardelinux Secure Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2003-0962andrew_tridgellrsync+7
EPSS score21.16%
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.CVE-2001-1240engardelinuxsecure_linuxEPSS score1.84%
The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.CVE-2001-0739engardelinuxsecure_linuxEPSS score0.39%
Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.CVE-2001-0736engardelinuxsecure_linux+5EPSS score0.81%
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.CVE-2004-0535conectivalinux+9EPSS score0.47%
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.CVE-2002-0083conectivalinux+10EPSS score14.69%
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.CVE-2002-0002engardelinuxsecure_linux+3EPSS score5.28%
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.