Redhat Linux vulnerabilities

CVE-2001-0869 [HIGH] CVE-2001-0869: Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyr Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.

CVE-2001-0473 [HIGH] CVE-2001-0473: Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute ar Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.

CVE-2000-0093 [CRITICAL] CVE-2000-0093: An installation of Red Hat uses DES password encryption with crypt() for the initial password, inste An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.

CVE-2004-1025 [CRITICAL] CVE-2004-1025: Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and sever Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.

CVE-2004-1026 [CRITICAL] CVE-2004-1026: Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrel Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.

CVE-2000-0336 [LOW] CVE-2000-0336: Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

CVE-2002-0067 [HIGH] CVE-2002-0067: Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified i Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.

CVE-2004-0079 [HIGH] CWE-476 CVE-2004-0079: The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVE-2004-1335 [LOW] CVE-2004-1335: Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to c Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.

CVE-2001-0736 [LOW] CVE-2001-0736: Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local user Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.

CVE-1999-1299 [CRITICAL] CVE-1999-1299: rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file.

CVE-2007-5079 [MEDIUM] CVE-2007-5079: Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platfo Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions.

CVE-1999-1333 [HIGH] CVE-1999-1333: automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote a automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.

CVE-2001-0441 [HIGH] CVE-2001-0441: Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allo Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.

CVE-2000-0263 [LOW] CVE-2000-0263: The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a mal The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.

CVE-2000-0531 [LOW] CVE-2000-0531: Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.

CVE-1999-0832 [CRITICAL] CVE-1999-0832: Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.

CVE-2023-5981 [MEDIUM] CWE-208 CVE-2023-5981: A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExcha A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

CVE-2003-0354 [HIGH] CVE-2003-0354: Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.

CVE-2000-0829 [LOW] CVE-2000-0829: The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows loc The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/.