MandrakeSoft Mandrake Linux 9.1

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

Published: 2007-04-06T01:00:00.000Z
Updated: 2024-08-07T12:50:35.267Z

passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.

Published: 2005-08-17T04:00:00.000Z
Updated: 2024-08-08T01:22:13.939Z

Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.

Published: 2005-08-17T04:00:00.000Z
Updated: 2024-08-08T01:22:13.698Z

Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.

Published: 2005-08-17T04:00:00.000Z
Updated: 2024-08-08T01:22:13.912Z

libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.

Published: 2005-08-17T04:00:00.000Z
Updated: 2024-08-08T01:22:13.810Z

Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.

Published: 2004-10-20T04:00:00.000Z
Updated: 2024-08-08T00:31:47.532Z

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.

Published: 2004-06-23T04:00:00.000Z
Updated: 2024-08-08T00:24:26.288Z

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.

Published: 2004-07-08T04:00:00.000Z
Updated: 2024-08-08T00:24:25.856Z

The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.

Published: 2004-06-08T04:00:00.000Z
Updated: 2024-08-08T00:24:26.913Z

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Published: 2004-07-06T04:00:00.000Z
Updated: 2024-08-08T00:17:15.122Z

Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.

Published: 2004-07-06T04:00:00.000Z
Updated: 2024-08-08T00:17:15.052Z

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.

Published: 2004-06-24T04:00:00.000Z
Updated: 2024-08-08T00:17:15.144Z

Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.

Published: 2004-06-24T04:00:00.000Z
Updated: 2024-08-08T00:17:15.127Z

The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).

Published: 2003-12-23T05:00:00.000Z
Updated: 2024-08-08T02:12:35.400Z

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Published: 2003-06-18T04:00:00.000Z
Updated: 2024-08-08T01:50:48.159Z