CVE-2004-1901

Mô tả

Tham khảo

• secunia.com/advisories/11305 · Broken Link
• security.gentoo.org/glsa/glsa-200404-01.xml · Vendor Advisory
• securityfocus.com/bid/10060 · Broken Link
• exchange.xforce.ibmcloud.com/vulnerabilities/15754 · Third Party Advisory

Lỗ hổng khác của portage

• CVE-2016-20021NGHIÊM TRỌNG 9.8In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file b…
• CVE-2019-20384TRUNG BÌNH 5.5Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging acc…
• CVE-2013-2100NGHIÊM TRỌNG 9.3The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL…
• CVE-2008-4394TRUNG BÌNH 6.9Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, wh…
• CVE-2007-6249THẤP 2.1etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissi…