Turbolinux vulnerabilities
38 vulnerabilities
Known vulnerabilities in Turbolinux products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
Products
9- Turbolinux Server25 vulnerabilities
- Turbolinux Workstation20 vulnerabilities
- Turbolinux15 vulnerabilities
- Turbolinux Desktop8 vulnerabilities
- Turbolinux Appliance Server4 vulnerabilities
- Turbolinux Advanced Server2 vulnerabilities
- Turbolinux Home0 vulnerabilities
- Turbolinux Multimedia0 vulnerabilities
- Turbolinux Personal0 vulnerabilities
CVE-2003-0681applemac_os_x+14
EPSS score22.36%
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.CVE-2003-0694applemac_os_x+18EPSS score66.18%
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.CVE-2003-0370applesafari+5EPSS score2.06%
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.CVE-2007-1352debianlibxfont+12EPSS score1.52%
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.CVE-2001-0169mandrakesoftmandrake_linux+4EPSS score0.86%
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.CVE-2005-0988debiangzip+11EPSS score0.66%
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.CVE-2005-3624conectivalinux+31EPSS score2.30%
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.CVE-2005-3625conectivalinux+31EPSS score3.82%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."CVE-2005-3626conectivalinux+31EPSS score3.38%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.CVE-2000-0336mandrakesoftmandrake_linux+3EPSS score0.90%
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-0844calderaopenlinux_ebuilder+14EPSS score15.63%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.CVE-2000-0196nmhnmh+2EPSS score3.01%
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.CVE-2000-0186freebsdfreebsd+3EPSS score0.42%
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.CVE-2000-0172matt_kimball_and_roger_wolffmtr+1EPSS score0.82%
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.CVE-2000-0438calderaopenlinux+3EPSS score1.08%
Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.CVE-2000-0052mandrakesoftmandrake_linux+2EPSS score0.89%
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.CVE-2000-0170redhatlinux+1EPSS score1.99%
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.CVE-1999-0949sgiirix+3EPSS score0.69%
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.CVE-1999-0948sgiirix+3EPSS score0.69%
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.CVE-2004-1092debianmc+7EPSS score1.67%
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.