Trustix vulnerabilities, page 4

65 vulnerabilities

Known vulnerabilities in Trustix products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

6.8CVE-2004-0595avayaconverged_communications_server+6
EPSS score
45.16%
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
10CVE-2004-0600debiansamba+2
EPSS score
29.44%
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
10CVE-2004-0990debianlibgd+5
EPSS score
28.26%
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
2.1CVE-2002-1319linuxlinux_kernel+1
EPSS score
0.37%
The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.
10CVE-2002-0083conectivalinux+10
EPSS score
14.69%
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.