Skip to contentGentoo vulnerabilities
Newest
- gentoo linux, app-crypt pinentry +1 moreThe ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs,...CVE-2006-00716.6 Medium
- gentoo nview, xnview +1 moreUntrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows...CVE-2005-45957.2 High
- gentoo qt-unixodbcUntrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local...CVE-2005-42797.2 High
- gentoo linux eixSecond-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows...CVE-2005-37855.0 Medium
- mantis, debian linux +1 moreCross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3...CVE-2005-2557Public exploit4.3 Medium
- lbl tcpdump, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreThe bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the...CVE-2005-1267Public exploitFix availableEPSS 13.5%5.0 Medium
- gentoo linux webapp-configThe fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to...CVE-2005-1707Public exploit4.6 Medium
- gentoo rootkit hunterThe (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create...CVE-2005-1270Fix available2.1 Low
- kde, conectiva linux, kde quanta +1 more +3 moreKommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user,...CVE-2005-07547.5 High
- gentoo linux, igor khasilev oops proxy server +1 moreFormat string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and...CVE-2005-1121Fix available5.0 Medium
- gnu gzip, freebsd, gentoo linux +9 more +11 moreRace condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local...CVE-2005-0988Fix available3.7 Low
- sylpheed, altlinux alt linux, gentoo linux +4 more +6 moreBuffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers...CVE-2005-0667Fix available5.1 Medium
- mediawiki, gentoo linux +1 moreCross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta...CVE-2005-0535Fix available7.5 High
- wpa supplicant supplicant, gentoo linux +1 moreBuffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of...CVE-2005-04705.0 Medium
- gentoo webminThe ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the...CVE-2005-04275.0 Medium
- debian linux, xpdf, ascii ptex +15 more +17 moreThe patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete...CVE-2005-0206Fix available7.5 High
- easy software products cups, kde kpdf, libextractor +24 more +26 moreXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and...CVE-2005-3626Fix available5.0 Medium
- easy software products cups, kde kpdf, libextractor +24 more +26 moreXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and...CVE-2005-3625Fix available10.0 High
- easy software products cups, kde kpdf, libextractor +24 more +26 moreThe CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler...CVE-2005-3624Fix available5.0 Medium
- debian linux, redhat enterprise linux, enterprise linux desktop +2 moreThe DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a...CVE-2005-0077Fix available2.1 Low
- gentoo poppassd pampoppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user...CVE-2005-000210.0 High
- imagemagick, debian linux, graphicsmagick +1 more +3 moreHeap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions...CVE-2005-0005Fix available7.5 High
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreBuffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers...CVE-2004-1176Fix available7.5 High
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 morefish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure...CVE-2004-1175Fix available7.5 High
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moredirentry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of...CVE-2004-1174Fix available5.0 Medium
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1093Fix available5.0 Medium
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1092Fix available5.0 Medium
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1091Fix available5.0 Medium
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1090Fix available5.0 Medium
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1009Fix available5.0 Medium
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMultiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to...CVE-2004-1005Fix available7.5 High
- midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMultiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote...CVE-2004-1004Fix available7.5 High
- gentoo portage, linux +1 morePortage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack...CVE-2004-19015.5 Medium
- gentoo linux, kde, opera browser +2 moreOpera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote...CVE-2004-1491Public exploitEPSS 12.6%5.0 Medium
- cvs, freebsd, gentoo linux +3 more +5 moreFormat string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16...CVE-2004-1471Public exploitFix available7.1 High
- gentoo linuxTomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as...CVE-2004-14527.2 High
- debian tetex-bin, gentoo linux +1 moreThe xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names,...CVE-2004-13362.1 Low
- file, gentoo linux, trustix secure linux +2 moreStack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers...CVE-2004-1304Public exploitFix availableEPSS 11.4%10.0 High
- libtiff, apple mac os x, mac os x server +15 more +17 moreInteger overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows...CVE-2004-1307Fix available7.5 High
- enlightenment imlib, gentoo linux +1 moreMultiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and...CVE-2004-102510.0 High
- gentoo mirrorselectmirrorselect before 0.89 creates temporary files in a world-writable location with predictable...CVE-2004-11675.0 Medium
- scponly, gentoo linux +1 moreThe unison command in scponly before 4.0 does not properly restrict programs that can be run,...CVE-2004-11627.5 High
- rssh, gentoo linux +1 morerssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow...CVE-2004-1161Public exploit7.5 High
- enlightenment imlib, gentoo linux +1 moreMultiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by...CVE-2004-1026Fix available10.0 High
- gentoo linux, lesstif, redhat fedora core +1 more +3 moreMultiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages,...CVE-2004-0914Fix available10.0 High
- gentoo linuxThe init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges...CVE-2004-11177.2 High
- gentoo linuxThe init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user...CVE-2004-11167.2 High
- gentoo linuxThe init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier...CVE-2004-11157.2 High
- jean-jacques sarton mtink, gentoo linux +1 moreThe mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite...CVE-2004-1110Fix available2.1 Low
- gentoo linuxqpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a...CVE-2004-11082.1 Low
- Show moreLoading…