Vulnerabilities
Vulnerable Software
Redhat:  >> Linux  Security Vulnerabilities
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.
CVSS Score
7.5
EPSS Score
0.008
Published
2001-06-27
kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.
CVSS Score
4.6
EPSS Score
0.001
Published
2001-06-27
inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services.
CVSS Score
5.0
EPSS Score
0.008
Published
2001-06-02
Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
CVSS Score
7.2
EPSS Score
0.002
Published
2001-05-28
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
CVSS Score
2.1
EPSS Score
0.001
Published
2001-03-26
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
CVSS Score
2.1
EPSS Score
0.003
Published
2001-03-26
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
CVSS Score
10.0
EPSS Score
0.095
Published
2001-03-26
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.
CVSS Score
10.0
EPSS Score
0.148
Published
2001-03-26
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
CVSS Score
5.0
EPSS Score
0.003
Published
2001-03-12
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
CVSS Score
5.0
EPSS Score
0.004
Published
2001-03-12


Contact Us

Shodan ® - All rights reserved