1.4 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2006-1390			Exec Code Overflow	2006-03-25	2018-10-18	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks.
2	CVE-2005-0005			Exec Code Overflow	2005-05-02	2017-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.
3	CVE-2004-1983			DoS	2004-05-02	2017-07-11	2.1	None	Local	Low	Not required	None	None	Partial
The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.
4	CVE-2004-1901				2004-12-31	2017-07-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.
5	CVE-2004-1737			Exec Code Sql Bypass	2004-08-16	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
6	CVE-2004-1471			DoS Exec Code	2004-12-31	2017-07-11	7.1	None	Remote	High	???	Complete	Complete	Complete
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
7	CVE-2004-1452			Exec Code	2004-12-31	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.
8	CVE-2004-1096			Bypass	2005-01-10	2021-04-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
9	CVE-2004-1055			XSS	2005-03-01	2017-07-11	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.
10	CVE-2004-0937			Bypass	2005-02-09	2021-04-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
11	CVE-2004-0936			Bypass	2005-01-27	2021-04-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
12	CVE-2004-0935			Bypass	2005-01-27	2021-04-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
13	CVE-2004-0934			Bypass	2005-01-27	2021-04-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
14	CVE-2004-0933			Bypass	2005-01-27	2021-04-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
15	CVE-2004-0932			Bypass	2005-01-27	2021-04-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
16	CVE-2004-0891			DoS Exec Code Overflow	2005-01-27	2017-10-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
17	CVE-2004-0881				2005-01-27	2017-07-11	2.1	None	Local	Low	Not required	None	Partial	None
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.
18	CVE-2004-0880				2005-01-27	2017-07-11	1.2	None	Local	High	Not required	None	Partial	None
getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.
19	CVE-2004-0834			Exec Code	2004-12-23	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
20	CVE-2004-0809			DoS	2004-09-16	2021-06-06	5.0	None	Remote	Low	Not required	None	None	Partial
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
21	CVE-2004-0749				2004-12-23	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
22	CVE-2004-0746				2004-10-20	2017-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
23	CVE-2004-0700		1		2004-07-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
24	CVE-2004-0667			+Priv	2004-08-06	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges.
25	CVE-2004-0649			Exec Code Overflow	2004-08-06	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.
26	CVE-2004-0608			Exec Code	2004-12-06	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.
27	CVE-2004-0604			DoS	2004-12-06	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.
28	CVE-2004-0557			Exec Code Overflow	2004-08-06	2017-10-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
29	CVE-2004-0554			DoS	2004-08-06	2017-10-11	2.1	None	Local	Low	Not required	None	None	Partial
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
30	CVE-2004-0548			Exec Code Overflow	2004-08-06	2016-11-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.
31	CVE-2004-0535			Overflow	2004-08-06	2017-10-11	2.1	None	Local	Low	Not required	Partial	None	None
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
32	CVE-2004-0500			DoS Exec Code Overflow	2004-09-28	2017-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.
33	CVE-2004-0495			+Priv	2004-08-06	2017-10-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
34	CVE-2004-0493			DoS Overflow	2004-08-06	2021-06-06	6.4	None	Remote	Low	Not required	None	Partial	Partial
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
35	CVE-2004-0488			Exec Code Overflow	2004-07-07	2021-06-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
36	CVE-2004-0456			Exec Code Overflow	2004-12-06	2017-07-11	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
37	CVE-2004-0432			Bypass	2004-08-18	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
38	CVE-2004-0419				2004-08-18	2017-10-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
39	CVE-2004-0418			Exec Code	2004-08-06	2018-05-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.
40	CVE-2004-0417			Overflow	2004-08-06	2018-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
41	CVE-2004-0416	119		Exec Code Overflow	2004-08-06	2018-05-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.
42	CVE-2004-0414			DoS Exec Code	2004-08-06	2018-05-03	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
43	CVE-2004-0386			Exec Code Overflow	2004-05-04	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.
44	CVE-2004-0333			Exec Code Overflow	2004-11-23	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
45	CVE-2004-0232			DoS Exec Code	2004-08-18	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
46	CVE-2004-0231				2004-08-18	2017-07-11	2.1	None	Local	Low	Not required	None	Partial	None
Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."
47	CVE-2004-0229				2004-08-18	2017-07-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.
48	CVE-2004-0226			DoS Exec Code Overflow	2004-08-18	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
49	CVE-2004-0224			Exec Code Overflow	2004-04-15	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."

Total number of vulnerabilities : 49 Page : 1 (This Page)