Mandrakesoft Mandrake Linux vulnerabilities, page 4
134 vulnerabilities
Known vulnerabilities in Mandrakesoft Mandrake Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-0186freebsdfreebsd+3
EPSS score0.42%
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.CVE-2000-0594calderaopenlinux_desktop+5EPSS score9.87%
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.CVE-2000-0633conectivalinux+2EPSS score0.39%
Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.CVE-2000-0566calderaopenlinux+2EPSS score0.40%
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.CVE-2000-0867debiandebian_linux+3EPSS score0.41%
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.CVE-2000-0508debiandebian_linux+2EPSS score8.59%
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.CVE-2000-0454mandrakesoftmandrake_linuxEPSS score0.89%
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.CVE-2000-0606debiandebian_linux+2EPSS score0.56%
Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.CVE-2000-0883mandrakesoftmandrake_linuxEPSS score9.45%
The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.CVE-2000-0052mandrakesoftmandrake_linux+2EPSS score0.89%
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.CVE-2000-0607debiandebian_linux+2EPSS score1.11%
Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.CVE-2000-0718mandrakesoftmandrake_linuxEPSS score0.26%
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.CVE-1999-1572debiancpio+8EPSS score0.55%
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.CVE-1999-1477gnomegnome_libs+1EPSS score1.08%
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.CVE-1999-1008freebsdfreebsd+1EPSS score0.73%
xsoldier program allows local users to gain root access via a long argument.CVE-2004-2395mandrakesoftmandrake_linux+2EPSS score0.34%
Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.CVE-2004-2394mandrakesoftmandrake_linux+2EPSS score0.36%
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.CVE-2004-2392mandrakesoftmandrake_linux+1EPSS score1.54%
libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.CVE-2004-1187mandrakesoftmandrake_linux+3EPSS score5.18%
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.CVE-2004-1098mandrakesoftmandrake_linux+3EPSS score1.58%
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.