Ubuntu Linux vulnerabilities

• ubuntu linux The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on... CVE-2010-0834 9.3 HighAugust 9, 2010
• ubuntu linux GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and ... CVE-2009-0578 Fix available 6.2 MediumMarch 5, 2009
• ubuntu linux nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which... CVE-2009-0365 Fix available 4.6 MediumMarch 5, 2009
• openbsd, debian linux, redhat enterprise linux +3 more +5 more Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0... CVE-2007-5365 Public exploitFix available EPSS 80.3% 7.2 HighOctober 11, 2007
• ubuntu linux A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to... CVE-2007-4601 Fix available 5.0 MediumAugust 30, 2007
• x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 more Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows... CVE-2007-1352 Fix available 3.8 LowApril 6, 2007
• x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 more Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before... CVE-2007-1351 Fix available 8.5 HighApril 6, 2007
• ubuntu linux Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource... CVE-2006-5648 4.6 MediumDecember 14, 2006
• ubuntu linux Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS,... CVE-2006-5649 4.6 MediumDecember 10, 2006
• gnu privacy guard, gpg4win, redhat enterprise linux +4 more +6 more A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0... CVE-2006-6235 Fix available 10.0 HighDecember 7, 2006
• rpm package manager, ubuntu linux +1 more Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4... CVE-2006-5466 Fix available 5.4 MediumNovember 6, 2006
• ubuntu linux passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it... CVE-2006-3597 7.2 HighJuly 14, 2006
• ubuntu linux passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag... CVE-2006-3378 Fix available 7.2 HighJuly 6, 2006
• ubuntu linux The Ubuntu 5.10 installer does not properly clear passwords from the installer log file ... CVE-2006-1183 Public exploit 7.2 HighMarch 13, 2006
• todd miller sudo, ubuntu linux +1 more sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows... CVE-2006-0151 Fix available 7.2 HighJanuary 9, 2006
• ubuntu linux SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is... CVE-2005-0106 Fix available 4.6 MediumMay 3, 2005
• kde, conectiva linux, kde quanta +1 more +3 more Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user,... CVE-2005-0754 7.5 HighApril 22, 2005
• gnu gzip, freebsd, gentoo linux +9 more +11 more Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local... CVE-2005-0988 Fix available 3.7 LowApril 6, 2005
• conectiva linux, linux kernel, redhat enterprise linux +2 more +4 more The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1... CVE-2005-0750 Public exploit 7.2 HighMarch 27, 2005
• suse linux, redhat enterprise linux, trustix secure linux +2 more Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to... CVE-2005-0384 5.0 MediumMarch 15, 2005
• freebsd, redhat enterprise linux, enterprise linux desktop +5 more +7 more Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel... CVE-2005-0109 5.6 MediumMarch 5, 2005
• debian linux, xpdf, ascii ptex +15 more +17 more The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete... CVE-2005-0206 Fix available 7.5 HighFebruary 15, 2005
• larry wall perl, ibm aix, redhat enterprise linux +5 more +7 more Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support ... CVE-2005-0156 Public exploitFix available 2.1 LowFebruary 7, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3626 Fix available 5.0 MediumJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3625 Fix available 10.0 HighJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler... CVE-2005-3624 Fix available 5.0 MediumJanuary 25, 2005
• debian linux, redhat enterprise linux, enterprise linux desktop +2 more The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a... CVE-2005-0077 Fix available 2.1 LowJanuary 25, 2005
• conectiva linux, linux kernel, avaya converged communications server +14 more +16 more Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux... CVE-2004-1235 Public exploit 6.2 MediumJanuary 20, 2005
• gnu mailman, ubuntu linux +1 more The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error... CVE-2005-0080 5.0 MediumJanuary 19, 2005
• conectiva linux, gnu realtime linux security module +1 more The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle... CVE-2004-1337 7.2 HighDecember 23, 2004
• php, openpkg, trustix secure linux +1 more +3 more Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2... CVE-2004-1065 EPSS 10.0% 10.0 HighDecember 22, 2004
• linux kernel, ubuntu linux +1 more Race condition in Linux kernel 2.6 allows local users to read the environment variables of... CVE-2004-1058 1.2 LowDecember 22, 2004
• linux kernel, ubuntu linux +1 more Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock,... CVE-2004-1056 6.4 MediumDecember 22, 2004
• php, openpkg, trustix secure linux +1 more +3 more The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to... CVE-2004-1019 10.0 HighDecember 22, 2004
• linux kernel, ubuntu linux +1 more Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x... CVE-2004-1137 Public exploit EPSS 20.8% 10.0 HighDecember 15, 2004
• linux kernel, ubuntu linux +1 more The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9... CVE-2004-1016 Public exploit 2.1 LowDecember 15, 2004
• carnegie mellon university cyrus imap server, redhat fedora core, ubuntu linux +2 more Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads... CVE-2004-1067 10.0 HighDecember 10, 2004
• linux kernel, ubuntu linux +1 more Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in... CVE-2004-1151 7.2 HighDecember 8, 2004
• oracle mysql, suse linux +1 more MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via... CVE-2004-0956 5.0 MediumDecember 5, 2004
• linux kernel, ubuntu linux +1 more Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service ... CVE-2004-1069 1.2 LowDecember 1, 2004
• ubuntu linux, linux kernel, redhat enterprise linux +2 more +4 more A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier,... CVE-2004-1068 6.2 MediumDecember 1, 2004
• carnegie mellon university cyrus imap server, redhat fedora core, ubuntu linux +2 more Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option... CVE-2004-1015 10.0 HighDecember 1, 2004
• carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus... CVE-2004-1011 10.0 HighDecember 1, 2004
• linux kernel, suse linux, redhat enterprise linux +4 more +6 more The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6... CVE-2004-0949 6.4 MediumDecember 1, 2004
• linux kernel, suse linux, redhat enterprise linux +4 more +6 more Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote... CVE-2004-0883 6.4 MediumDecember 1, 2004
• carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote... CVE-2004-1013 Fix available 10.0 HighNovember 25, 2004
• carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote... CVE-2004-1012 Fix available 10.0 HighNovember 25, 2004
• samba, conectiva linux, redhat enterprise linux +3 more +5 more Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow... CVE-2004-0882 Fix available EPSS 13.7% 10.0 HighNovember 19, 2004
• todd miller sudo, debian linux, mandrakesoft mandrake linux +3 more +5 more sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style... CVE-2004-1051 Fix available 7.2 HighNovember 18, 2004
• yukihiro matsumoto ruby, gentoo linux, mandrakesoft mandrake linux +1 more +3 more The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a... CVE-2004-0983 Fix available 5.0 MediumNovember 8, 2004
• Show olderLoading…