| CVE-2003-0548 | MEDIO5.0 | The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549. | 27/08/2003 |
| CVE-2003-0547 | BAJO2.1 | GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file. | 27/08/2003 |
| CVE-2003-0546 | ALTO7.5 | up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised. | 27/08/2003 |
| CVE-2003-0466 | CRÍTICO9.8 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) D | 27/08/2003 |
| CVE-2003-0459 | MEDIO5.0 | KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites. | 27/08/2003 |
| CVE-2003-0539 | MEDIO4.6 | skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files. | 18/08/2003 |
| CVE-2003-0194 | MEDIO4.6 | tcpdump does not properly drop privileges to the pcap user when starting up. | 09/06/2003 |
| CVE-2003-0188 | ALTO7.2 | lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories. | 09/06/2003 |
| CVE-2002-2204 | ALTO7.5 | The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source. | 31/12/2002 |
| CVE-2002-1890 | BAJO2.1 | rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file. | 31/12/2002 |
| CVE-2002-0835 | MEDIO5.0 | Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones. | 04/10/2002 |
| CVE-2002-0874 | MEDIO5.0 | Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files. | 05/09/2002 |
| CVE-2002-0169 | MEDIO4.6 | The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier. | 29/05/2002 |
| CVE-2001-0869 | ALTO7.5 | Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands. | 21/12/2001 |
| CVE-2001-0868 | MEDIO5.0 | Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status. | 28/11/2001 |
| CVE-2001-0923 | ALTO7.2 | RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried. | 25/10/2001 |
| CVE-2001-0128 | ALTO7.2 | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. | 12/03/2001 |
| CVE-2000-0829 | BAJO2.1 | The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/. | 14/11/2000 |
| CVE-2000-0483 | ALTO7.5 | The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. | 15/06/2000 |