Redhat Linux vulnerabilities, page 5
218 vulnerabilities
Known vulnerabilities in Redhat Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-0336mandrakesoftmandrake_linux+3
EPSS score0.90%
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-0289debiandebian_linux+2EPSS score2.62%
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.CVE-2000-0917calderaopenlinux_ebuilder+4EPSS score78.66%
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.CVE-2000-0844calderaopenlinux_ebuilder+14EPSS score15.63%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.CVE-2000-0390cygnuscygnus_network_security+4EPSS score4.03%
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-0196nmhnmh+2EPSS score3.01%
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.CVE-2000-0829redhatlinux+1EPSS score0.98%
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/.CVE-2000-0356redhatlinuxEPSS score0.40%
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.CVE-2000-0391cygnuscygnus_network_security+4EPSS score4.03%
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-0358redhatlinuxEPSS score1.94%
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.CVE-2000-0816redhatlinuxEPSS score0.90%
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.CVE-2000-0031redhatlinuxEPSS score0.33%
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.CVE-2000-0355bent_baggerpbpg+2EPSS score1.18%
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.CVE-2000-0315debiandebian_linux+4EPSS score1.75%
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.CVE-2000-0668conectivalinux+2EPSS score7.24%
pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.CVE-2000-0263redhatlinuxEPSS score1.02%
The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.CVE-2000-0314debiandebian_linux+4EPSS score1.75%
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.CVE-2000-0322redhatlinuxEPSS score41.63%
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.CVE-2000-0666conectivalinux+4EPSS score26.32%
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.CVE-2000-0750netbsdnetbsd+2EPSS score2.33%
Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.