Mandrakesoft Mandrake Linux vulnerabilities
134 vulnerabilities
Known vulnerabilities in Mandrakesoft Mandrake Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2003-1020irssiirssi+1
EPSS score1.35%
The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).CVE-2003-0462linuxlinux_kernel+3EPSS score0.65%
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).CVE-2003-0041mandrakesoftmandrake_linux+2EPSS score3.54%
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.CVE-2003-0434adobeacrobat+7EPSS score40.94%
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.CVE-2007-0454debiansamba+4EPSS score6.46%
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.CVE-2007-6284debianlibxml2+8EPSS score2.57%
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.CVE-2001-1385mandrakesoftmandrake_linux+1EPSS score1.61%
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.CVE-2001-1030calderaopenlinux_server+7EPSS score1.96%
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.CVE-2001-1449apachehttp_server+3EPSS score7.80%
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.CVE-2001-1190mandrakesoftmandrake_linuxEPSS score0.40%
The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.CVE-2001-0458debiandebian_linux+3EPSS score2.40%
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.CVE-2001-0473immuniximmunix+3EPSS score2.06%
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.CVE-2001-0136debiandebian_linux+2EPSS score44.94%
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.CVE-2001-0118immuniximmunix+2EPSS score0.30%
rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0117immuniximmunix+4EPSS score0.37%
sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.CVE-2001-0440conectivalinux+2EPSS score4.63%
Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands.CVE-2001-0439conectivalinux+5EPSS score2.40%
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2001-0178calderaopenlinux_edesktop+4EPSS score0.36%
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.CVE-2001-0279debiandebian_linux+2EPSS score0.86%
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.CVE-2001-0474brian_paulmesa+1EPSS score0.34%
Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file.