Linux

CVEs (212)

• CVE-2002-0083CriMar 15, 2002
  Mandrakesoft

  Mandrake Linux
  risk 0.68cvss 9.8epss 0.15

  Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

• CVE-1999-0426CriMar 1, 1999
  Linux

  Kernel
  risk 0.68cvss 9.8epss 0.11

  The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.

• CVE-2004-0940HigFeb 9, 2005
  Apache

  Apache
  risk 0.54cvss 7.8epss 0.05

  Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

• CVE-2008-0063HigMar 19, 2008
  Mit

  Kerberos 5
  risk 0.49cvss 7.5epss 0.03

  The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."

• CVE-2024-12087MedJan 14, 2025
  Rsync

  Rsync
  risk 0.43cvss 6.5epss 0.02

  A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive`…

• CVE-2024-12085HigJan 14, 2025
  Samba (software)

  Rsync
  risk 0.43cvss 7.5epss 0.09

  A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a…

• CVE-2024-12086MedJan 14, 2025
  Rsync

  Rsync
  risk 0.40cvss 6.1epss 0.02

  A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the…

• CVE-2004-0932Jan 27, 2005
  McAfee

  Antivirus Engine
  risk 0.08cvss —epss 0.66

  McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…

• CVE-2000-0869Nov 14, 2000
  Apache

  HTTP Server
  risk 0.07cvss —epss 0.51

  The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.

• CVE-2004-0990Mar 1, 2005
  Libgd

  Libgd
  risk 0.05cvss —epss 0.28

  Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the…

• CVE-2004-0933Jan 27, 2005
  Ca

  eTrust Antivirus
  risk 0.05cvss —epss 0.21

  Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass…

• CVE-2000-0666Jul 16, 2000
  Linux

  nfs-utils
  risk 0.05cvss —epss 0.26

  rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.

• CVE-2004-0937Feb 9, 2005
  Sophos

  Small Business Suite
  risk 0.04cvss —epss 0.15

  Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being…

• CVE-2004-0936Jan 27, 2005
  RAV

  antivirus
  risk 0.04cvss —epss 0.15

  RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

• CVE-2004-0935Jan 27, 2005
  Eset

  Anti-Virus
  risk 0.04cvss —epss 0.15

  Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

• CVE-2004-0934Jan 27, 2005
  Kaspersky Lab

  Kaspersky
  risk 0.04cvss —epss 0.15

  Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

• CVE-2004-1096Jan 10, 2005
  Perl Foundation

  Archive::Zip
  risk 0.04cvss —epss 0.17

  Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on…

• CVE-2004-1170Jan 10, 2005
  GNU

  A2ps
  risk 0.04cvss —epss 0.16

  a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

• CVE-2004-1491Dec 31, 2004
  Opera

  Opera
  risk 0.04cvss —epss 0.13

  Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.

• CVE-2004-0460Aug 6, 2004
  Isc

  DHCP
  risk 0.04cvss —epss 0.45

  Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3)…