Redhat Linux vulnerabilities, page 3
218 vulnerabilities
Known vulnerabilities in Redhat Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2001-0169mandrakesoftmandrake_linux+4
EPSS score0.86%
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.CVE-2001-0142immuniximmunix+4EPSS score0.30%
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0736engardelinuxsecure_linux+5EPSS score0.81%
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.CVE-2001-0852redhatlinuxEPSS score8.65%
TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.CVE-2001-0119immuniximmunix+2EPSS score0.30%
getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0138debiandebian_linux+4EPSS score0.30%
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0859redhatlinuxEPSS score1.83%
2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions.CVE-2001-0116immuniximmunix+2EPSS score0.30%
gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0140immuniximmunix+2EPSS score0.30%
arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0977debiandebian_linux+5EPSS score4.09%
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.CVE-2001-0309redhatlinuxEPSS score1.44%
inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services.CVE-2001-0886debiandebian_linux+1EPSS score0.61%
Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character.CVE-2001-0139calderaopenlinux_desktop+6EPSS score0.34%
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0233debiandebian_linux+2EPSS score14.55%
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.CVE-2001-0641immuniximmunix+2EPSS score1.26%
Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option.CVE-2001-0869calderaopenlinux_eserver+4EPSS score3.00%
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.CVE-2001-0946redhatlinuxEPSS score0.41%
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.CVE-2001-0143immuniximmunix+1EPSS score0.34%
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0128conectivalinux+6EPSS score0.42%
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.CVE-2001-0635redhatlinuxEPSS score0.38%
Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords.