Redhat Linux vulnerabilities

CVE-2002-1155 [HIGH] CVE-2002-1155: Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a lo Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.

CVE-1999-1490 [HIGH] CVE-1999-1490: xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental va xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable.

CVE-2000-0219 [HIGH] CWE-264 CVE-2000-0219: Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the pass Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.

CVE-2000-0230 [HIGH] CVE-2000-0230: Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script an Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.

CVE-2000-0118 [HIGH] CVE-2000-0118: The Red Hat Linux su program does not log failed password guesses if the su process is killed before The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.

CVE-2004-0903 [CRITICAL] CVE-2004-0903: Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.

CVE-2003-0442 [MEDIUM] CVE-2003-0442: Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4. Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.

CVE-2000-1009 [HIGH] CVE-2000-1009: dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which all dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.

CVE-2000-0607 [HIGH] CVE-2000-0607: Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to g Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.

CVE-2000-0052 [HIGH] CVE-2000-0052: Red Hat userhelper program in the usermode package allows local users to gain root access via PAM an Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.

CVE-1999-0034 [HIGH] CVE-1999-0034: Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.

CVE-2000-1125 [HIGH] CVE-2000-1125: restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environment restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.

CVE-1999-0769 [HIGH] CVE-1999-0769: Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.

CVE-1999-0405 [HIGH] CVE-1999-0405: A buffer overflow in lsof allows local users to obtain root privilege. A buffer overflow in lsof allows local users to obtain root privilege.

CVE-2000-1010 [CRITICAL] CVE-2000-1010: Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote atta Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.

CVE-2000-0390 [CRITICAL] CVE-2000-0390: Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.

CVE-2000-0391 [CRITICAL] CVE-2000-0391: Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.

CVE-2001-0852 [MEDIUM] CVE-2001-0852: TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.

CVE-2018-17962 [HIGH] CWE-119 CVE-2018-17962: Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.

CVE-2004-0904 [CRITICAL] CVE-2004-0904: Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.