Mandrakesoft Mandrake Linux vulnerabilities, page 3
134 vulnerabilities
Known vulnerabilities in Mandrakesoft Mandrake Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2005-1267debiantcpdump+8
EPSS score13.50%
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.CVE-2005-0503debianuim+2EPSS score0.36%
uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.CVE-2005-0003avayaconverged_communications_server+11EPSS score0.51%
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.CVE-2005-0020debianplaymidi+3EPSS score0.51%
Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.CVE-2005-0473mandrakesoftmandrake_linux+4EPSS score3.48%
The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208.CVE-2005-0605altlinuxalt_linux+79EPSS score4.51%
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.CVE-2005-0472debiangaim+5EPSS score5.30%
Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.CVE-2005-0085debianhtdig+8EPSS score2.27%
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.CVE-2005-3624conectivalinux+31EPSS score2.30%
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.CVE-2005-3625conectivalinux+31EPSS score3.82%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."CVE-2005-3626conectivalinux+31EPSS score3.38%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.CVE-2008-0595debiandbus+8EPSS score0.40%
dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.CVE-2000-1059mandrakesoftmandrake_linuxEPSS score0.41%
The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges.CVE-2000-1042mandrakesoftmandrake_linuxEPSS score1.97%
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.CVE-2000-1043mandrakesoftmandrake_linuxEPSS score1.83%
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.CVE-2000-1134calderaopenlinux_edesktop+7EPSS score1.42%
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.CVE-2000-1095conectivalinux+4EPSS score1.11%
modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.CVE-2000-0184mandrakesoftmandrake_linux+1EPSS score0.38%
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.CVE-2000-0336mandrakesoftmandrake_linux+3EPSS score0.90%
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-0844calderaopenlinux_ebuilder+14EPSS score15.63%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.