Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mandrakesoft mandrake linux 9.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows malicious users to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integ...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorEasy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Koffice 1.4.2Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Kde Koffice 1.4.1Tetex Tetex 2.0Tetex Tetex 2.0.1
NA
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, a...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorKde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Easy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0
NA
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
Easy Software Products Cups 1.1.22 Rc1Easy Software Products Cups 1.1.23Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 3.0Xpdf Xpdf 3.0Easy Software Products Cups 1.1.23 Rc1Kde Kdegraphics 3.2Kde Kword 1.4.2Poppler Poppler 0.4.2Conectiva Linux 10.0Libextractor LibextractorKde Kdegraphics 3.4.3Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Easy Software Products Cups 1.1.22Kde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Tetex Tetex 2.0.2
NA
CVE-2005-0085
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) prior to 3.1.6-r7 allows remote malicious users to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
Htdig Htdig 3.2.0b3Htdig Htdig 3.2.0b4Htdig Htdig 3.1.5Htdig Htdig 3.1.5 7Htdig Htdig 3.2.0b5Htdig Htdig 3.2.0b6Htdig Htdig 3.1.5 8Htdig Htdig 3.1.6Htdig Htdig 3.2.0Htdig Htdig 3.2.0b2Mandrakesoft Mandrake Linux Corporate Server 2.1Suse Suse Linux 8.2Suse Suse Linux 9.0Mandrakesoft Mandrake Linux Corporate Server 3.0Suse Suse Linux 9.1Mandrakesoft Mandrake Linux 10.0Redhat Fedora Core Core 3.0Suse Suse Linux 8.0Suse Suse Linux 9.2Mandrakesoft Mandrake Linux 10.1Suse Suse Linux 8.1
NA
CVE-2005-0206
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Easy Software Products Cups 1.0.4Easy Software Products Cups 1.0.4 8Easy Software Products Cups 1.1.1Easy Software Products Cups 1.1.17Easy Software Products Cups 1.1.18Easy Software Products Cups 1.1.4 5Easy Software Products Cups 1.1.6Kde Koffice 1.3.3Kde Koffice 1.3 Beta1Pdftohtml Pdftohtml 0.33aPdftohtml Pdftohtml 0.34Tetex Tetex 2.0.1Tetex Tetex 2.0.2Xpdf Xpdf 2.0Xpdf Xpdf 2.1Ascii Ptex 3.1.4Cstex Cstetex 2.0.2Easy Software Products Cups 1.1.15Easy Software Products Cups 1.1.16Easy Software Products Cups 1.1.4 2Easy Software Products Cups 1.1.4 3Kde Koffice 1.3
NA
CVE-2004-1235
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 up to and including 2.429-rc2 and 2.6 up to and including 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
Avaya Network RoutingAvaya Converged Communications Server 2.0Linux Linux Kernel 2.4.0Linux Linux Kernel 2.4.15Linux Linux Kernel 2.4.16Linux Linux Kernel 2.4.18Linux Linux Kernel 2.4.19Linux Linux Kernel 2.4.21Linux Linux Kernel 2.4.22Linux Linux Kernel 2.4.26Linux Linux Kernel 2.4.27Linux Linux Kernel 2.4.3Linux Linux Kernel 2.4.4Linux Linux Kernel 2.6.0Avaya Mn100Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Linux Linux Kernel 2.6.8Mandrakesoft Mandrake Linux 10.1Mandrakesoft Mandrake Linux 9.2Redhat Enterprise Linux 4.0Redhat Linux 7.3
NA
CVE-2005-0003
The 64 bit ELF support in Linux kernel 2.6 prior to 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF ...
Linux Linux Kernel 2.4.18Linux Linux Kernel 2.4.15Linux Linux Kernel 2.4.0Linux Linux Kernel 2.4.11Mandrakesoft Mandrake Linux Corporate Server 2.1Redhat Enterprise Linux Desktop 3.0Linux Linux Kernel 2.4.27Linux Linux Kernel 2.4.26Redhat Enterprise Linux 3.0Linux Linux Kernel 2.4.19Linux Linux Kernel 2.4.21Linux Linux Kernel 2.4.12Linux Linux Kernel 2.4.13Mandrakesoft Mandrake Linux 9.2Linux Linux Kernel 2.4.17Avaya Modular Messaging Message Storage Server 2.0Linux Linux Kernel 2.4.23 Ow2Linux Linux Kernel 2.4.23Linux Linux Kernel 2.4.29Mandrakesoft Mandrake Linux 10.1Linux Linux Kernel 2.4.7Avaya S8710 R2.0.1
NA
CVE-2005-0605
scan.c for LibXPM may allow malicious users to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
X.org X11r6 6.8X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Sgi Propack 3.0X.org X11r6 6.7.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.94Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.3.0.1
NA
CVE-2004-0983
The CGI module in Ruby 1.6 prior to 1.6.8, and 1.8 prior to 1.8.2, allows remote malicious users to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
Yukihiro Matsumoto Ruby 1.8.2 Pre2Yukihiro Matsumoto Ruby 1.6.7Yukihiro Matsumoto Ruby 1.8Yukihiro Matsumoto Ruby 1.6Yukihiro Matsumoto Ruby 1.8.1Yukihiro Matsumoto Ruby 1.8.2 Pre1Mandrakesoft Mandrake Linux 9.2Mandrakesoft Mandrake Linux Corporate Server 2.1Mandrakesoft Mandrake Linux 10.0Mandrakesoft Mandrake Linux 10.1Ubuntu Ubuntu Linux 4.1Gentoo Linux
NA
CVE-2004-1051
sudo prior to 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.
Todd Miller Sudo 1.5.8Todd Miller Sudo 1.5.9Todd Miller Sudo 1.6.3 P4Todd Miller Sudo 1.6.3 P5Todd Miller Sudo 1.6.5 P1Todd Miller Sudo 1.6.5 P2Todd Miller Sudo 1.5.6Todd Miller Sudo 1.5.7Todd Miller Sudo 1.6.3 P1Todd Miller Sudo 1.6.3 P2Todd Miller Sudo 1.6.3 P3Todd Miller Sudo 1.6.4 P2Todd Miller Sudo 1.6.5Mandrakesoft Mandrake Multi Network Firewall 8.2Todd Miller Sudo 1.6.2Todd Miller Sudo 1.6.3Todd Miller Sudo 1.6.4Todd Miller Sudo 1.6.4 P1Todd Miller Sudo 1.6.8Todd Miller Sudo 1.6.8 P1Todd Miller Sudo 1.6Todd Miller Sudo 1.6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook