VYPR

Ubuntu Linux

by Canonical

CVEs (4,123)

  • CVE-2005-0758May 13, 2005
    risk 0.00cvss —epss 0.01

    zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

  • CVE-2004-1063Jan 10, 2005
    risk 0.00cvss —epss 0.04

    PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory…

  • CVE-2004-1064Jan 10, 2005
    risk 0.00cvss —epss 0.04

    The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is…

Page 207 of 207