Suse Linux Openexchange Server vulnerabilities

3 known vulnerabilities affecting suse/suse_linux_openexchange_server.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2007-2654MEDIUMCVSS 4.4v4.02007-05-14

CVE-2007-2654 [MEDIUM] CWE-362 CVE-2007-2654: xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.

CVE-2005-4772MEDIUMCVSS 6.4v4.02005-12-31

CVE-2005-4772 [MEDIUM] CVE-2005-4772: liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and o liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.

CVE-2003-1538MEDIUMCVSS 6.4v4.02003-12-31

CVE-2003-1538 [MEDIUM] CWE-20 CVE-2003-1538: susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not p susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.