Vendor CVEs
GNU
All CVEs
1,358 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2000-0364 | 0.00 | — | 0.00 | Jun 1, 1999 | screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys. | |||
| CVE-1999-0402 | 0.00 | — | 0.01 | Jan 2, 1999 | wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself. | |||
| CVE-1999-0017 | 0.00 | — | 0.02 | Dec 10, 1997 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |||
| CVE-1999-0216 | 0.00 | — | 0.03 | Nov 1, 1997 | Denial of service of inetd on Linux through SYN and RST packets. | |||
| CVE-1999-0150 | 0.00 | — | 0.04 | Jul 1, 1997 | The Perl fingerd program allows arbitrary command execution from remote users. | |||
| CVE-1999-0202 | 0.00 | — | 0.02 | Jan 1, 1997 | The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. | |||
| CVE-1999-1383 | 0.00 | — | 0.00 | Sep 13, 1996 | (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in… | |||
| CVE-1999-1572 | 0.00 | — | 0.01 | Jul 16, 1996 | cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files. |
- CVE-2000-0364Jun 1, 1999risk 0.00cvss —epss 0.00
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
- CVE-1999-0402Jan 2, 1999risk 0.00cvss —epss 0.01
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
- CVE-1999-0017Dec 10, 1997risk 0.00cvss —epss 0.02
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
- CVE-1999-0216Nov 1, 1997risk 0.00cvss —epss 0.03
Denial of service of inetd on Linux through SYN and RST packets.
- CVE-1999-0150Jul 1, 1997risk 0.00cvss —epss 0.04
The Perl fingerd program allows arbitrary command execution from remote users.
- CVE-1999-0202Jan 1, 1997risk 0.00cvss —epss 0.02
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
- CVE-1999-1383Sep 13, 1996risk 0.00cvss —epss 0.00
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in…
- CVE-1999-1572Jul 16, 1996risk 0.00cvss —epss 0.01
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
Page 28 of 28