Mandrakesoft vulnerabilities

Products

• Mandrake Linux 134
• Mandrake Linux Corporate Server 54
• Mandrake Multi Network Firewall 16
• Mandrake Single Network Firewall 5

Newest

• freedesktop dbus, fedoraproject fedora, mandrakesoft mandrake linux +1 more +3 more dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes... CVE-2008-0595 Fix available 4.6 MediumFebruary 29, 2008
• debian linux, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 more The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause... CVE-2007-6284 Fix available 5.0 MediumJanuary 12, 2008
• larry wall perl, mandrakesoft mandrake multi network firewall, openpkg +1 more +3 more Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in... CVE-2007-5116 Fix available 7.5 HighNovember 6, 2007
• x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 more Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows... CVE-2007-1352 Fix available 3.8 LowApril 6, 2007
• x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 more Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before... CVE-2007-1351 Fix available 8.5 HighApril 6, 2007
• samba, debian linux, mandrakesoft mandrake linux +2 more +4 more Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows... CVE-2007-0454 Fix available 7.5 HighFebruary 5, 2007
• x.org x11r6, x11r7, mandrakesoft mandrake linux +3 more +5 more X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the... CVE-2006-0745 Public exploitFix available 7.2 HighMarch 21, 2006
• mandrakesoft mandrake linux, mandrake linux corporate server +1 more nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and... CVE-2005-2377 5.0 MediumJuly 26, 2005
• lbl tcpdump, gentoo linux, mandrakesoft mandrake linux +2 more +4 more The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the... CVE-2005-1267 Public exploitFix available EPSS 13.5% 5.0 MediumJune 10, 2005
• mandrakesoft mandrake lam-runtime The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi... CVE-2005-1379 4.6 MediumMay 2, 2005
• altlinux alt linux, lesstif, mandrakesoft mandrake linux +7 more +9 more scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value... CVE-2005-0605 Fix available 7.5 HighMarch 2, 2005
• uim, mandrakesoft mandrake linux +1 more uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid... CVE-2005-0503 Fix available 4.6 MediumFebruary 21, 2005
• rob flynn gaim, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 more The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of... CVE-2005-0473 5.0 MediumFebruary 19, 2005
• rob flynn gaim, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 more Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via... CVE-2005-0472 Fix available 5.0 MediumFebruary 19, 2005
• debian linux, xpdf, ascii ptex +15 more +17 more The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete... CVE-2005-0206 Fix available 7.5 HighFebruary 15, 2005
• htdig, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 more Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote... CVE-2005-0085 Fix available 6.8 MediumFebruary 14, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3626 Fix available 5.0 MediumJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3625 Fix available 10.0 HighJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler... CVE-2005-3624 Fix available 5.0 MediumJanuary 25, 2005
• linux kernel, avaya converged communications server, intuity audix +12 more +14 more The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not... CVE-2005-0003 2.1 LowJanuary 20, 2005
• conectiva linux, linux kernel, avaya converged communications server +14 more +16 more Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux... CVE-2004-1235 Public exploit 6.2 MediumJanuary 20, 2005
• playmidi, mandrakesoft mandrake linux, mandrake linux corporate server +2 more Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code. CVE-2005-0020 Fix available 7.2 HighJanuary 17, 2005
• mandrakesoft mandrake linux, mandrake linux corporate server, mandrake multi network firewall +2 more Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption)... CVE-2004-2395 2.1 LowDecember 31, 2004
• mandrakesoft mandrake linux, mandrake linux corporate server, mandrake multi network firewall +2 more Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use... CVE-2004-2394 2.1 LowDecember 31, 2004
• mandrakesoft mandrake linux, mandrake linux corporate server +1 more libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via... CVE-2004-2392 5.0 MediumDecember 31, 2004
• mplayer, xine, mandrakesoft mandrake linux +1 more +3 more The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that... CVE-2004-1188 10.0 HighDecember 22, 2004
• mplayer, xine, mandrakesoft mandrake linux +1 more +3 more Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such... CVE-2004-1187 10.0 HighDecember 22, 2004
• libtiff, apple mac os x, mac os x server +15 more +17 more Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows... CVE-2004-1307 Fix available 7.5 HighDecember 21, 2004
• kde, mandrakesoft mandrake linux, redhat fedora core +2 more KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the... CVE-2004-1171 2.1 LowDecember 10, 2004
• kde konqueror, mandrakesoft mandrake linux, redhat fedora core +2 more Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof... CVE-2004-1158 7.5 HighDecember 10, 2004
• nfs nfs-utils, debian linux, mandrakesoft mandrake linux +3 more +5 more statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote... CVE-2004-1014 Fix available 5.0 MediumDecember 8, 2004
• roaring penguin mimedefang, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 more MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via... CVE-2004-1098 7.5 HighDecember 1, 2004
• broadcom brightstor arcserve backup, etrust antivirus, etrust antivirus gateway +15 more +17 more Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows... CVE-2004-1096 Public exploitFix available EPSS 18.5% 7.5 HighDecember 1, 2004
• kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 more Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0,... CVE-2004-0937 Public exploit EPSS 14.9% 7.5 HighNovember 19, 2004
• archive zip zip, broadcom brightstor arcserve backup, etrust antivirus +16 more +18 more RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with... CVE-2004-0936 Public exploit EPSS 14.9% 7.5 HighNovember 19, 2004
• kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 more Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus... CVE-2004-0935 Public exploit EPSS 15.5% 7.5 HighNovember 19, 2004
• archive zip zip, broadcom brightstor arcserve backup, etrust antivirus +16 more +18 more Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file... CVE-2004-0934 Public exploit EPSS 14.9% 7.5 HighNovember 19, 2004
• broadcom etrust antivirus, etrust intrusion detection, etrust secure content manager +16 more +18 more Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus... CVE-2004-0933 Public exploit EPSS 20.9% 7.5 HighNovember 19, 2004
• kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 more McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver... CVE-2004-0932 Public exploit EPSS 63.6% 7.5 HighNovember 19, 2004
• todd miller sudo, debian linux, mandrakesoft mandrake linux +3 more +5 more sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style... CVE-2004-1051 Fix available 7.2 HighNovember 18, 2004
• yukihiro matsumoto ruby, gentoo linux, mandrakesoft mandrake linux +1 more +3 more The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a... CVE-2004-0983 Fix available 5.0 MediumNovember 8, 2004
• postgresql, mandrakesoft mandrake linux, mandrake linux corporate server +3 more +5 more The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite... CVE-2004-0977 Fix available 2.1 LowOctober 20, 2004
• gentoo linux, openssl, mandrakesoft mandrake linux +2 more +4 more The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other... CVE-2004-0975 Fix available 2.1 LowOctober 20, 2004
• mandrakesoft mandrake linux, mandrake linux corporate server, netatalk open source apple file share protocol suite +1 more +3 more The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating... CVE-2004-0974 Fix available 2.1 LowOctober 20, 2004
• speedtouch usb driver, gentoo linux, mandrakesoft mandrake linux +2 more +4 more Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute... CVE-2004-0834 7.2 HighOctober 20, 2004
• libtiff, apple mac os x, mac os x server +10 more +12 more Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial... CVE-2004-0886 Fix available 5.0 MediumOctober 15, 2004
• libtiff, apple mac os x, mac os x server +10 more +12 more Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier,... CVE-2004-0803 Fix available 7.5 HighOctober 15, 2004
• mpg123, mandrakesoft mandrake linux, mandrake linux corporate server +2 more Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to... CVE-2004-0805 Fix available 7.5 HighOctober 13, 2004
• enlightenment imlib, imlib2, conectiva linux +11 more +13 more Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute... CVE-2004-0802 Fix available 5.1 MediumSeptember 22, 2004
• enlightenment imlib, conectiva linux, enlightenment imlib2 +11 more +13 more Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to... CVE-2004-0817 Fix available 7.5 HighSeptember 17, 2004
• Show olderLoading…