Mandrakesoft Mandrake Linux Corporate Server vulnerabilities
53 vulnerabilities
Known vulnerabilities in Mandrakesoft Mandrake Linux Corporate Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2003-0462linuxlinux_kernel+3
EPSS score0.65%
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).CVE-2003-0434adobeacrobat+7EPSS score40.94%
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.CVE-2007-0454debiansamba+4EPSS score6.46%
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.CVE-2007-6284debianlibxml2+8EPSS score2.57%
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.CVE-2001-1030calderaopenlinux_server+7EPSS score1.96%
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.CVE-2001-1449apachehttp_server+3EPSS score7.80%
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.CVE-2001-0117immuniximmunix+4EPSS score0.37%
sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.CVE-2001-0439conectivalinux+5EPSS score2.40%
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2001-0178calderaopenlinux_edesktop+4EPSS score0.36%
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.CVE-2001-0279debiandebian_linux+2EPSS score0.86%
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.CVE-2001-0169mandrakesoftmandrake_linux+4EPSS score0.86%
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.CVE-2001-0736engardelinuxsecure_linux+5EPSS score0.81%
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.CVE-2001-0138debiandebian_linux+4EPSS score0.30%
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0977debiandebian_linux+5EPSS score4.09%
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.CVE-2001-0125debiandebian_linux+3EPSS score0.30%
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.CVE-2001-0441debiandebian_linux+3EPSS score2.70%
Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.CVE-2005-0003avayaconverged_communications_server+11EPSS score0.51%
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.CVE-2005-0020debianplaymidi+3EPSS score0.51%
Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.CVE-2005-0473mandrakesoftmandrake_linux+4EPSS score3.48%
The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208.CVE-2005-0605altlinuxalt_linux+79EPSS score4.51%
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.