Mandrakesoft Mandrake Single Network Firewall vulnerabilities
5 vulnerabilities
Known vulnerabilities in Mandrakesoft Mandrake Single Network Firewall, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2001-1030calderaopenlinux_server+7
EPSS score1.96%
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.CVE-2001-1449apachehttp_server+3EPSS score7.80%
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.CVE-2001-0977debiandebian_linux+5EPSS score4.09%
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.CVE-2002-0083conectivalinux+10EPSS score14.69%
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.CVE-2002-0638hpsecure_os+4EPSS score0.53%
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.