Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.
CVSS Score
7.5
EPSS Score
0.013
Published
2000-02-28
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
CVSS Score
10.0
EPSS Score
0.003
Published
2000-01-21
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.
CVSS Score
10.0
EPSS Score
0.031
Published
2000-01-08
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.
CVSS Score
10.0
EPSS Score
0.122
Published
2000-01-08
Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.
CVSS Score
10.0
EPSS Score
0.004
Published
2000-01-04
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.
CVSS Score
7.2
EPSS Score
0.003
Published
2000-01-04
Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
CVSS Score
10.0
EPSS Score
0.03
Published
1999-12-21
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
CVSS Score
7.5
EPSS Score
0.038
Published
1999-12-20
ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
CVSS Score
7.5
EPSS Score
0.004
Published
1999-12-03
ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
CVSS Score
5.0
EPSS Score
0.007
Published
1999-12-03