Redhat Linux vulnerabilities

CVE-2000-1214 [MEDIUM] CVE-2000-1214: Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as dist Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges.

CVE-2000-0816 [LOW] CVE-2000-0816: Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files who Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.

CVE-2000-0668 [MEDIUM] CVE-2000-0668: pam_console PAM module in Linux systems allows a user to access the system console and reboot the sy pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.

CVE-2000-0633 [LOW] CVE-2000-0633: Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.

CVE-2000-0666 [CRITICAL] CVE-2000-0666: rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untruste rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

CVE-2000-0566 [HIGH] CVE-2000-0566: makewhatis in Linux man package allows local users to overwrite files via a symlink attack. makewhatis in Linux man package allows local users to overwrite files via a symlink attack.

CVE-2000-0607 [HIGH] CVE-2000-0607: Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to g Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.

CVE-2000-0606 [HIGH] CVE-2000-0606: Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to g Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter.

CVE-2000-0604 [MEDIUM] CVE-2000-0604: gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modif gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp.

CVE-2000-0389 [CRITICAL] CVE-2000-0389: Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root priv Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

CVE-2000-0390 [CRITICAL] CVE-2000-0390: Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.

CVE-2000-0391 [CRITICAL] CVE-2000-0391: Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.

CVE-2000-0392 [HIGH] CVE-2000-0392: Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.

CVE-2000-0378 [HIGH] CVE-2000-0378: The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, b The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.

CVE-1999-0706 [HIGH] CVE-1999-0706: Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH envir Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.

CVE-2000-0248 [CRITICAL] CVE-2000-0248: The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a b The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.

CVE-2000-0322 [CRITICAL] CVE-2000-0322: The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execu The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.

CVE-2000-0336 [LOW] CVE-2000-0336: Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.

CVE-2000-0263 [LOW] CVE-2000-0263: The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a mal The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.

CVE-2000-0286 [LOW] CVE-2000-0286: X fontserver xfs allows local users to cause a denial of service via malformed input to the server. X fontserver xfs allows local users to cause a denial of service via malformed input to the server.