Page 293 of 2989 results (0.016 seconds)

CVSS: 10.0EPSS: 0%CPEs: 47EXPL: 0

31 Dec 2002 — Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors. • http://linux.bkbits.net:8080/linux-2.4/cset%403d6badc0mxsPaOTT_GuPVxCp1_ormw •

CVSS: 6.2EPSS: 0%CPEs: 47EXPL: 0

31 Dec 2002 — The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers. • http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6 •

CVSS: 2.1EPSS: 0%CPEs: 49EXPL: 0

31 Dec 2002 — ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap. • http://archives.neohapsis.com/archives/bugtraq/2002-07/0279.html •

CVSS: 7.5EPSS: 0%CPEs: 66EXPL: 0

31 Dec 2002 — The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted. • http://archives.neohapsis.com/archives/bugtraq/2002-12/0025.html • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 10.0EPSS: 0%CPEs: 47EXPL: 0

31 Dec 2002 — Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling." • http://linux.bkbits.net:8080/linux-2.4/cset%403d6aadcbBIDX67Zl6zZnVKRcsilCVQ •

CVSS: 5.5EPSS: 0%CPEs: 23EXPL: 2

23 Dec 2002 — Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface. El kernel de Linux 2.2x permite a usuarios locales causar una denegación de servicio (caída) usando la función nmap() con un parámetro PROT_READ para acceder páginas de memoria no legibles mediante el interfaz /proc/pid/mem. • https://www.exploit-db.com/exploits/22105 •

CVSS: 5.5EPSS: 0%CPEs: 31EXPL: 0

11 Dec 2002 — The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs. El kernel de Linux 2.4.20 y anteriores, y 2.5.x, cuando se ejecuta en sistemas x86, permite a usuarios locales causar una denegación de servicio (cuelgue) mediante el modo de emulación, que no borra adecuadamente los marcadores (flags) TF y NT EFLAGs. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000553 •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

12 Aug 2002 — The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall). • http://marc.info/?l=bugtraq&m=101561298818888&w=2 •

CVSS: 7.5EPSS: 1%CPEs: 7EXPL: 0

26 Jul 2002 — The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages. • http://marc.info/?l=bugtraq&m=102088521517722&w=2 • CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer •

CVSS: 7.1EPSS: 0%CPEs: 39EXPL: 0

11 Jun 2002 — The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key. • http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html •