Product:

Linux

(Redhat)
Repositories https://github.com/mjg59/linux
#Vulnerabilities 232
Date Id Summary Products Score Patch Annotated
2000-09-30 CVE-2000-1207 userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844). Linux N/A
2001-01-09 CVE-2000-1189 Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. Linux N/A
2001-01-09 CVE-2000-1134 Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack. Openlinux, Openlinux_edesktop, Openlinux_eserver, Linux, Hp\-Ux, Immunix, Mandrake_linux, Linux, Suse_linux N/A
2001-01-09 CVE-2000-1125 restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program. Linux N/A
2001-01-09 CVE-2000-1095 modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. Linux, Immunix, Mandrake_linux, Linux, Suse_linux N/A
2000-12-11 CVE-2000-1010 Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters. Openbsd, Linux N/A
2000-12-11 CVE-2000-1009 dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program. Linux, Secure_linux N/A
2000-12-19 CVE-2000-0934 Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Linux N/A
2000-12-19 CVE-2000-0917 Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. Openlinux, Openlinux_ebuilder, Openlinux_edesktop, Openlinux_eserver, Linux, Secure_linux N/A
2000-11-14 CVE-2000-0867 Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. Debian_linux, Mandrake_linux, Linux, Slackware_linux, Secure_linux N/A