CveMateVulnerability intelligence

Gentoo vulnerabilities, page 4

97 vulnerabilities

Known vulnerabilities in Gentoo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 29 products.

CVE-2004-0932archive_ziparchive_zip+2221y ago19-11-2004 05:00

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.CVE-2004-0557conectivalinux+922y ago02-08-2004 04:00

Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.CVE-2004-0667gentoolinux+122y ago13-07-2004 04:00

Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges.CVE-2004-0232debianmc+422y ago05-05-2004 04:00

Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.CVE-2004-0548debianaspell+222y ago11-06-2004 04:00

Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.CVE-2004-0935archive_ziparchive_zip+2221y ago19-11-2004 05:00

Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.CVE-2004-0746gentoolinux+422y ago14-09-2004 04:00

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.CVE-2004-0554avayaconverged_communications_server+1022y ago15-06-2004 04:00

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.CVE-2004-0880gentoolinux+222y ago24-09-2004 04:00

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.CVE-2004-0432gentoolinux+222y ago05-05-2004 04:00

ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.CVE-2004-0809apachehttp_server+1222y ago17-09-2004 04:00

The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.CVE-2004-0414cvscvs+522y ago11-06-2004 04:00

CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.CVE-2004-0417cvscvs+522y ago11-06-2004 04:00

Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.CVE-2004-0493apachehttp_server+822y ago30-06-2004 04:00

The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.CVE-2004-0418cvscvs+522y ago11-06-2004 04:00

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.CVE-2004-0419gentoolinux+222y ago03-06-2004 04:00

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.CVE-2004-0881gentoolinux+222y ago24-09-2004 04:00

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.CVE-2004-0495avayaconverged_communications_server+1022y ago23-06-2004 04:00

Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.CVE-2004-0231debianmc+422y ago05-05-2004 04:00

Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."CVE-2004-0604gentoolinux+122y ago30-06-2004 04:00

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.