Enterprise Linux Desktop
Approved changes feed: RSS · Atom
cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*
part: o version: 5 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Enterprise Linux Desktop (7e773912-d839-52e1-9ad7-86d4d77ab763) |
| Edition | client |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2904 |
not_vulnerable | 2026-06-08 04:51:31.271702 |
Details available
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.
Published: 2009-10-01T15:00:00.000Z
Updated: 2024-08-07T06:07:37.284Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3844 |
not_vulnerable | 2026-06-08 04:50:36.860884 |
Details available
Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.389Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1767 |
vulnerable | 2026-06-08 04:50:21.827836 |
Details available
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.
Published: 2008-05-23T14:00:00.000Z
Updated: 2024-08-07T08:32:01.141Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0411 |
not_vulnerable | 2026-06-08 04:50:10.980224 |
Details available
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
Published: 2008-02-28T21:00:00.000Z
Updated: 2024-08-07T07:46:54.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5496 |
not_vulnerable | 2026-06-08 04:50:06.213592 |
Details available
Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.
Published: 2008-05-23T14:00:00.000Z
Updated: 2024-08-07T15:31:58.835Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5495 |
not_vulnerable | 2026-06-08 04:50:06.212126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.