Page 342 of 3494 results (0.018 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

12 Aug 2002 — The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall). • http://marc.info/?l=bugtraq&m=101561298818888&w=2 •

CVSS: 7.5EPSS: 1%CPEs: 7EXPL: 0

26 Jul 2002 — The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages. • http://marc.info/?l=bugtraq&m=102088521517722&w=2 • CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer •

CVSS: 7.1EPSS: 0%CPEs: 39EXPL: 0

11 Jun 2002 — The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key. • http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html •

CVSS: 8.2EPSS: 0%CPEs: 19EXPL: 0

11 Jun 2002 — The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux. La implementación de UDP en los kernels 2.4.x de Linux mantiene el campo de identificación de IP a 0 en todos los paquetes no fragmentados, lo que permite a atacantes remotos determinar que el sistema está ejecutando Linux. • http://www.iss.net/security_center/static/8588.php •

CVSS: 5.5EPSS: 0%CPEs: 42EXPL: 2

11 Jun 2002 — The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories. • https://www.exploit-db.com/exploits/21353 •

CVSS: 9.1EPSS: 1%CPEs: 1EXPL: 0

08 Mar 2002 — IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions. El módulo de ayuda de seguimiento de conexión IRC en el subsistema netfilter en Linux 2.4.18-pre9 y anteriores no establece adecuadamente la máscara para 'conntrack' esperadas para conexiones DCC, lo que podría perimitir a atacantes remotos evitar ... • http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

31 Jan 2002 — Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet. El kernel de Linux, y posíblemente de otros sistemas operativos, permite a atacantes remotos leer porciones de memoria mediante una serie de paquetes ICMP fragmentados que generan una respuesta ICMP de TTL Excedido (time-to-live) , que incluye porciones de memor... • http://www.osvdb.org/5394 •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 1

31 Dec 2001 — The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets. • http://archives.neohapsis.com/archives/bugtraq/2001-10/0057.html •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

31 Dec 2001 — Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs. • http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html •

CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0

21 Dec 2001 — Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character. Desbordamiento de buffer en la función glob de glibc para Red Hat Linux 6.2 a 7.2, y otros sistemas operativos, permite a atacantes causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrarios mediante un patrón de glob que acaba en una llave "{" • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000447 •