Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux server 4.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-1268
Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote malicious users to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
Apache Http ServerRedhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Server 3.0Debian Debian Linux 3.1
7.8
CVSSv3
CVE-2009-2692
The Linux kernel 2.6.0 up to and including 2.6.30.4, and 2.4.4 up to and including 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap t...
Linux Linux KernelDebian Debian Linux 4.0Suse Linux Enterprise Real Time 10Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Server Aus 5.3Redhat Enterprise Linux Eus 5.3Redhat Enterprise Linux Eus 4.8
7.5
CVSSv3
CVE-2009-1837
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 prior to 3.0.11 might allow remote malicious users to execute arbitrary code via a page transition during Java applet loading, related to a use-afte...
Mozilla FirefoxDebian Debian Linux 5.0Fedoraproject Fedora 10Fedoraproject Fedora 9Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux 4.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Server Aus 5.3Redhat Enterprise Linux Eus 5.3Redhat Enterprise Linux Eus 4.8
7.5
CVSSv3
CVE-2007-1285
The Zend Engine in PHP 4.x prior to 4.4.7, and 5.x prior to 5.2.2, allows remote malicious users to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
Php PhpCanonical Ubuntu Linux 7.10Novell Suse Linux 10.0Novell Suse Linux 10.1Suse Linux Enterprise Server 10Suse Linux Enterprise Server 8Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Server 3.0Redhat Enterprise Linux Server 2.0Redhat Enterprise Linux Workstation 2.0
7.8
CVSSv3
CVE-2009-2698
The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel prior to 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE fl...
Linux Linux KernelCanonical Ubuntu Linux 6.06Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 8.10Suse Linux Enterprise Server 9Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 10Fedoraproject Fedora 10Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Server Aus 5.3Redhat Enterprise Linux Eus 5.3Redhat Enterprise Linux Eus 4.8Vmware Esxi 4.0Vmware Vcenter Server 4.0
NA
CVE-2006-5752
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors in...
Apache Http ServerCanonical Ubuntu Linux 7.04Canonical Ubuntu Linux 6.10Canonical Ubuntu Linux 6.06Fedoraproject Fedora 7Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Server 3.0Redhat Enterprise Linux Eus 4.5
NA
CVE-2005-2970
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote malicious users to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
Apache Http ServerCanonical Ubuntu Linux 4.10Canonical Ubuntu Linux 5.04Canonical Ubuntu Linux 5.10Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Server 3.0Fedoraproject Fedora Core 4
8.8
CVSSv3
CVE-2021-3621
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an malicious user to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root ...
Fedoraproject Sssd 2.6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Virtualization Host 4.0Redhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Fedoraproject Fedora 34
NA
CVE-2007-1349
PerlRun.pm in Apache mod_perl prior to 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote malicious users to cause a denial of service (resource consumption) via a crafted URI.
Apache Mod PerlCanonical Ubuntu Linux 6.06Canonical Ubuntu Linux 6.10Canonical Ubuntu Linux 7.04Redhat Satellite 5.1Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 4.5Redhat Enterprise Linux Server 3.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 5.0
NA
CVE-2008-2364
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a la...
Apache Http ServerCanonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06Fedoraproject Fedora 9Fedoraproject Fedora 8Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 4.7Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Server 3.0Redhat Enterprise Linux Eus 5.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook