Mandrakesoft vulnerabilities
139 vulnerabilities
Known vulnerabilities in Mandrakesoft products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.
Products
6- Mandrake Linux134 vulnerabilities
- Mandrake Linux Corporate Server53 vulnerabilities
- Mandrake Multi Network Firewall16 vulnerabilities
- Mandrake Single Network Firewall5 vulnerabilities
- Mandrake Lam Runtime1 vulnerabilities
- Mandrake Linuxsoft 20070 vulnerabilities
CVE-2003-1020irssiirssi+1
EPSS score1.35%
The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).CVE-2003-0462linuxlinux_kernel+3EPSS score0.65%
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).CVE-2003-0041mandrakesoftmandrake_linux+2EPSS score3.54%
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.CVE-2003-0434adobeacrobat+7EPSS score40.94%
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.CVE-2007-1351debianfreetype+15EPSS score5.59%
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.CVE-2007-1352debianlibxfont+12EPSS score1.52%
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.CVE-2007-0454debiansamba+4EPSS score6.46%
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.CVE-2007-5116debianperl+10EPSS score4.83%
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.CVE-2007-6284debianlibxml2+8EPSS score2.57%
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.CVE-2001-1385mandrakesoftmandrake_linux+1EPSS score1.61%
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.CVE-2001-1030calderaopenlinux_server+7EPSS score1.96%
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.CVE-2001-1449apachehttp_server+3EPSS score7.80%
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.CVE-2001-1190mandrakesoftmandrake_linuxEPSS score0.40%
The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.CVE-2001-0458debiandebian_linux+3EPSS score2.40%
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.CVE-2001-0473immuniximmunix+3EPSS score2.06%
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.CVE-2001-0136debiandebian_linux+2EPSS score44.94%
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.CVE-2001-0118immuniximmunix+2EPSS score0.30%
rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0117immuniximmunix+4EPSS score0.37%
sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.CVE-2001-0440conectivalinux+2EPSS score4.63%
Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands.CVE-2001-0439conectivalinux+5EPSS score2.40%
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.