gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
CVSS Score
7.2
EPSS Score
0.001
Published
2000-03-22
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
CVSS Score
7.2
EPSS Score
0.001
Published
2000-03-13
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
CVSS Score
2.1
EPSS Score
0.001
Published
2000-03-09
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
CVSS Score
7.2
EPSS Score
0.001
Published
2000-02-28
Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
CVSS Score
7.5
EPSS Score
0.013
Published
2000-02-28
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
CVSS Score
7.2
EPSS Score
0.002
Published
2000-02-26
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
CVSS Score
7.2
EPSS Score
0.004
Published
2000-02-23
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
CVSS Score
10.0
EPSS Score
0.003
Published
2000-01-21
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
CVSS Score
10.0
EPSS Score
0.031
Published
2000-01-08
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
CVSS Score
10.0
EPSS Score
0.122
Published
2000-01-08