Redhat Linux vulnerabilities

CVE-2000-0633 [LOW] CVE-2000-0633: Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.

CVE-1999-1406 [LOW] CVE-1999-1406: dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.

CVE-1999-1331 [LOW] CVE-1999-1331: netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface.

CVE-2001-1383 [MEDIUM] CVE-2001-1383: initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files.

CVE-2001-0140 [LOW] CVE-2001-0140: arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configur arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

CVE-2001-0119 [LOW] CVE-2001-0119: getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.

CVE-2001-0118 [LOW] CVE-2001-0118: rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.

CVE-1999-1496 [LOW] CVE-1999-1496: Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitr Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist.

CVE-2003-0461 [LOW] CVE-2003-0461: /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.

CVE-1999-1332 [LOW] CVE-1999-1332: gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.

CVE-2000-0184 [LOW] CVE-2000-0184: Linux printtool sets the permissions of printer configuration files to be world-readable, which allo Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.

CVE-2007-3379 [LOW] CVE-2007-3379: Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64 platform Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64 platform allows local users to cause a denial of service (OOPS) via unspecified vectors related to the get_gate_vma function and the fuser command.

CVE-2001-0117 [LOW] CVE-2001-0117: sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.