Mandrakesoft Mandrake Linux vulnerabilities, page 2
134 vulnerabilities
Known vulnerabilities in Mandrakesoft Mandrake Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2001-0169mandrakesoftmandrake_linux+4
EPSS score0.86%
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.CVE-2001-0142immuniximmunix+4EPSS score0.30%
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0736engardelinuxsecure_linux+5EPSS score0.81%
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.CVE-2001-0119immuniximmunix+2EPSS score0.30%
getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0138debiandebian_linux+4EPSS score0.30%
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0116immuniximmunix+2EPSS score0.30%
gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0140immuniximmunix+2EPSS score0.30%
arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0977debiandebian_linux+5EPSS score4.09%
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.CVE-2001-0139calderaopenlinux_desktop+6EPSS score0.34%
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0481mandrakesoftmandrake_linuxEPSS score0.42%
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.CVE-2001-0388freebsdfreebsd+2EPSS score2.75%
time server daemon timed allows remote attackers to cause a denial of service via malformed packets.CVE-2001-0416debiansgml-tools+2EPSS score0.44%
sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools.CVE-2001-0125debiandebian_linux+3EPSS score0.30%
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.CVE-2001-0128conectivalinux+6EPSS score0.42%
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.CVE-2001-0441debiandebian_linux+3EPSS score2.70%
Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.CVE-2001-0912mandrakesoftmandrake_linuxEPSS score0.38%
Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges.CVE-2001-0496mandrakesoftmandrake_linux+1EPSS score0.39%
kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.CVE-2001-0120immuniximmunix+2EPSS score0.30%
useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.CVE-2001-0108mandrakesoftmandrake_linux+1EPSS score1.83%
PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.CVE-2005-2377mandrakesoftmandrake_linuxEPSS score2.51%
nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service (crond and other application crash) if they can cause an LDAP server to become unavailable. NOTE: it is not clear whether this attack scenario is sufficient to include this item in CVE.