Debian: >> Debian Linux >> 2.3 Security Vulnerabilities
xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.
CVSS Score
2.1
EPSS Score
0.001
Published
2007-08-27
Multiple stack-based buffer overflows in (1) CCE_pinyin.c and (2) xl_pinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable.
CVSS Score
6.8
EPSS Score
0.001
Published
2007-07-03
Buffer overflow in Eterm 0.9.2 allows local users to gain privileges via a long ETERMPATH environment variable.
CVSS Score
4.6
EPSS Score
0.001
Published
2003-07-02
Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.
CVSS Score
3.6
EPSS Score
0.003
Published
2001-07-02
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
CVSS Score
2.1
EPSS Score
0.003
Published
2001-03-26
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
CVSS Score
10.0
EPSS Score
0.009
Published
2000-11-14
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.346
Published
2000-07-16
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request.
CVSS Score
5.0
EPSS Score
0.008
Published
2000-06-21
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request.
CVSS Score
5.0
EPSS Score
0.008
Published
2000-06-21
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password.
CVSS Score
5.0
EPSS Score
0.008
Published
2000-06-21