CVSS: 2.1EPSS: 0%CPEs: 6EXPL: 2CVE-2004-0233 – UTempter 0.5.x - Multiple Local Vulnerabilities
https://notcve.org/view.php?id=CVE-2004-0233
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files. Utempter permite nombres de dispositivo que contengan secuencias de cruce de directorios ".." (punto punto), lo que permite a usuarios locles sobreesciribir ficheros de su elección mediante un ataque de enlaces simbólicos en nombres de dispositivos en combinación con una aplicación que confíe en ficheros utmp o wtmp. • https://www.exploit-db.com/exploits/24027 http://security.gentoo.org/glsa/glsa-200405-05.xml http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1 http://www.mandriva.com/security/advisories?name=MDKSA-2004:031 http://www.redhat.com/support/errata/RHSA-2004-174.html http://www.redhat.com/support/errata/RHSA-2004-175.html http://www.securityfocus.com/bid/10178 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389 •
CVSS: 7.5EPSS: 35%CPEs: 31EXPL: 0CVE-2003-0962
https://notcve.org/view.php?id=CVE-2003-0962
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail. Desbordamiento de búfer en el montón en rsync anteriores a 2.5.7, cuando se ejecuta en modo servidor, permite a atacantes remotos ejecutar código arbitrario y posiblemente escapar del confinamiento chroot. • ftp://patches.sgi.com/support/free/security/advisories/20031202-01-U http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000794 http://marc.info/?l=bugtraq&m=107055681311602&w=2 http://marc.info/?l=bugtraq&m=107055684711629&w=2 http://marc.info/?l=bugtraq&m=107055702911867&w=2 http://marc.info/? •
CVSS: 7.5EPSS: 9%CPEs: 13EXPL: 0CVE-2003-0977
https://notcve.org/view.php?id=CVE-2003-0977
CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests. Vulnerabilidad desconocida en servidores CVS anteriores a 1.11.10 puede permitir a atacantes causar que el servidor CVS cree directorios y ficheros en el directorio raíz del sistema de ficheros. • ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808 http://marc.info/?l=bugtraq&m=107168035515554&w=2 http://marc.info/?l=bugtraq&m=107540163908129&w=2 http://secunia.com/advisories/10601 http://www.debian.org/security/2004/dsa-422 http&# •
CVSS: 5.0EPSS: 5%CPEs: 2EXPL: 2CVE-2003-0195 – CUPS 1.1.x - Cupsd Request Method Denial of Service
https://notcve.org/view.php?id=CVE-2003-0195
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out. CUPS anterior a la 1.1.19 permite que atacantes remotos causen una denegación de servicio por media de una petición parcial de impresión al puerto IPP (631), que nunca finalizará. • https://www.exploit-db.com/exploits/22619 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000678 http://marc.info/?l=bugtraq&m=105427288724449&w=2 http://www.debian.org/security/2003/dsa-317 http://www.mandriva.com/security/advisories?name=MDKSA-2003:062 http://www.novell.com/linux/security/advisories/2003_028.html http://www.redhat.com/support/errata/RHSA-2003-171.html http://www.securityfocus.com/bid/7637 http://www.turbolinux.com/security/TLSA-2003-33. •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2003-0335
https://notcve.org/view.php?id=CVE-2003-0335
rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec. • http://marc.info/?l=bugtraq&m=105361968110719&w=2 •