CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Redhat : Security Vulnerabilities

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
3901 CVE-2000-0607 Overflow +Priv 2000-06-21 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.
3902 CVE-2000-0606 Overflow +Priv 2000-06-21 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.
3903 CVE-2000-0604 2000-06-21 2008-09-10
4.6
None Local Low Not required Partial Partial Partial
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp.
3904 CVE-2000-0566 2000-07-03 2018-05-03
7.2
None Local Low Not required Complete Complete Complete
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
3905 CVE-2000-0531 DoS 1999-11-23 2017-12-19
2.1
None Local Low Not required None None Partial
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
3906 CVE-2000-0508 DoS 1994-12-19 2017-10-10
5.0
None Remote Low Not required None None Partial
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
3907 CVE-2000-0483 2000-06-15 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
3908 CVE-2000-0392 Overflow +Priv 2000-05-16 2020-01-21
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
3909 CVE-2000-0391 Overflow +Priv 2000-05-16 2020-01-21
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
3910 CVE-2000-0390 Overflow +Priv 2000-05-16 2020-01-21
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
3911 CVE-2000-0389 Overflow +Priv 2000-05-16 2020-01-21
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
3912 CVE-2000-0378 2000-05-03 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
3913 CVE-2000-0365 1999-06-01 2016-10-18
4.6
None Local Low Not required Partial Partial Partial
Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.
3914 CVE-2000-0364 1999-06-01 2016-10-18
4.6
None Local Low Not required Partial Partial Partial
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
3915 CVE-2000-0358 1999-12-03 2008-09-10
5.0
None Remote Low Not required None None Partial
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
3916 CVE-2000-0357 1999-12-03 2008-09-10
7.5
None Remote Low Not required Partial Partial Partial
ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
3917 CVE-2000-0356 1999-10-13 2008-09-10
4.6
None Local Low Not required Partial Partial Partial
Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
3918 CVE-2000-0355 1999-08-21 2008-09-10
7.5
None Remote Low Not required Partial Partial Partial
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
3919 CVE-2000-0336 2000-04-21 2008-09-10
2.1
None Local Low Not required None Partial None
Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
3920 CVE-2000-0322 Exec Code 2000-04-24 2016-09-17
10.0
None Remote Low Not required Complete Complete Complete
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
3921 CVE-2000-0315 2001-03-12 2016-10-18
5.0
None Remote Low Not required None Partial None
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
3922 CVE-2000-0314 2001-03-12 2016-10-18
5.0
None Remote Low Not required None None Partial
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
3923 CVE-2000-0289 2000-03-27 2008-09-10
5.0
None Remote Low Not required Partial None None
IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.
3924 CVE-2000-0286 DoS 2000-04-16 2008-09-10
2.1
None Local Low Not required None None Partial
X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
3925 CVE-2000-0263 DoS 2000-04-16 2008-09-10
2.1
None Local Low Not required None None Partial
The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
3926 CVE-2000-0248 Exec Code 2000-04-24 2008-09-10
10.0
None Remote Low Not required Complete Complete Complete
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
3927 CVE-2000-0230 Overflow +Priv 2000-03-13 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
3928 CVE-2000-0229 +Priv 2000-03-22 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
3929 CVE-2000-0219 264 2000-02-23 2015-11-04
7.2
None Local Low Not required Complete Complete Complete
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
3930 CVE-2000-0196 Exec Code Overflow 2000-02-28 2008-09-10
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
3931 CVE-2000-0186 Overflow +Priv 2000-02-28 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
3932 CVE-2000-0184 2000-03-09 2008-09-10
2.1
None Local Low Not required Partial None None
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
3933 CVE-2000-0170 Overflow +Priv 2000-02-26 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
3934 CVE-2000-0118 1999-06-09 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
3935 CVE-2000-0093 2000-01-21 2008-09-10
10.0
None Remote Low Not required Complete Complete Complete
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
3936 CVE-2000-0052 2000-01-04 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.
3937 CVE-2000-0031 +Priv 2000-10-20 2008-09-10
6.2
None Local High Not required Complete Complete Complete
The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
3938 CVE-2000-0017 Overflow +Priv 1999-12-21 2008-09-10
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
3939 CVE-1999-1572 1996-07-16 2017-10-19
2.1
None Local Low Not required Partial None None
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
3940 CVE-1999-1542 Exec Code 1999-10-04 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command.
3941 CVE-1999-1496 1999-06-08 2017-12-19
2.1
None Local Low Not required Partial None None
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.
3942 CVE-1999-1491 Exec Code 1996-02-02 2016-10-18
7.2
None Local Low Not required Complete Complete Complete
abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program.
3943 CVE-1999-1490 1998-05-28 2016-10-18
7.2
None Local Low Not required Complete Complete Complete
xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.
3944 CVE-1999-1407 1998-03-09 2016-10-18
2.1
None Local Low Not required None Partial None
ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file.
3945 CVE-1999-1406 DoS 1998-07-29 2016-10-18
2.1
None Local Low Not required None None Partial
dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.
3946 CVE-1999-1348 DoS 1999-06-30 2016-10-18
2.1
None Local Low Not required None None Partial
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service.
3947 CVE-1999-1347 Bypass 1999-10-07 2016-10-18
4.6
None Local Low Not required Partial Partial Partial
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.
3948 CVE-1999-1346 1999-10-07 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file.
3949 CVE-1999-1335 1999-12-31 2017-10-10
6.4
None Remote Low Not required Partial Partial None
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.
3950 CVE-1999-1333 Exec Code 1999-12-31 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
Total number of vulnerabilities : 3974   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 (This Page)80
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.