Turbolinux vulnerabilities
15 vulnerabilities
Known vulnerabilities in Turbolinux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2001-0169mandrakesoftmandrake_linux+4
EPSS score0.86%
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.CVE-2005-3624conectivalinux+31EPSS score2.30%
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.CVE-2005-3625conectivalinux+31EPSS score3.82%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."CVE-2005-3626conectivalinux+31EPSS score3.38%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.CVE-2000-0336mandrakesoftmandrake_linux+3EPSS score0.90%
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-0844calderaopenlinux_ebuilder+14EPSS score15.63%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.CVE-2000-0196nmhnmh+2EPSS score3.01%
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.CVE-2000-0186freebsdfreebsd+3EPSS score0.42%
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.CVE-2000-0172matt_kimball_and_roger_wolffmtr+1EPSS score0.82%
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.CVE-2000-0438calderaopenlinux+3EPSS score1.08%
Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.CVE-2000-0052mandrakesoftmandrake_linux+2EPSS score0.89%
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.CVE-2000-0170redhatlinux+1EPSS score1.99%
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.CVE-1999-0949sgiirix+3EPSS score0.69%
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.CVE-1999-0948sgiirix+3EPSS score0.69%
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.CVE-2004-0827conectivalinux+20EPSS score5.51%
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.