redhat enterprise linux as 4 vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries prior to 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and prior to 1-31.el5_2.1 in RHEL 5, allows local users to gain privile...

Redhat Enterprise Linux 4 Redhat Enterprise Linux 5

5

CVSSv2

functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote malicious users to cause a denial of service (disk consumption) by making many IMAP login attempts with diff...

Redhat Enterprise Linux 4 Squirrelmail Squirrelmail -Redhat Enterprise Linux 5

7.2

CVSSv2

There is a possible tty hijacking in shadow 4.x prior to 4.1.5 and sudo 1.x prior to 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next proces...

Debian Shadow Sudo Project Sudo Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Redhat Enterprise Linux 5 Redhat Enterprise Linux 4 Redhat Enterprise Linux 6.0

2 Github repositories

2.1

CVSSv2

The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system...

Linux Linux Kernel Redhat Enterprise Mrg 2.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0

7.2

CVSSv2

The Linux kernel 2.6.0 up to and including 2.6.30.4, and 2.4.4 up to and including 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap t...

Linux Linux Kernel Debian Debian Linux 4.0 Suse Linux Enterprise Real Time 10 Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 4.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Server 4.0 Redhat Enterprise Linux Workstation 4.0 Redhat Enterprise Linux Server Aus 5.3 Redhat Enterprise Linux Eus 5.3 Redhat Enterprise Linux Eus 4.8

8 EDB exploits4 Github repositories

2.1

CVSSv2

Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 up to and including 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack. NO...

Linux Linux Kernel Redhat Enterprise Linux 4.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 5.0

5

CVSSv2

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox...

7.2

CVSSv2

A flaw was found in grub2 in versions before 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an malicious user ...

1 Github repository

6.8

CVSSv2

Integer overflow in the wrestool program in icoutils prior to 0.31.1 allows remote malicious users to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.

Icoutils Project Icoutils Debian Debian Linux 8.0 Redhat Enterprise Linux Server Tus 7.6 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server Aus 7.3 Redhat Enterprise Linux Server Aus 7.4 Redhat Enterprise Linux Server Aus 7.6 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server Eus 7.4 Redhat Enterprise Linux Server Eus 7.6 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Eus 7.3 Redhat Enterprise Linux Server Eus 7.5 Redhat Enterprise Linux Server Tus 7.3

6.4

CVSSv2

urllib in Python 2.x up to and including 2.7.16 supports the local_file: scheme, which makes it easier for remote malicious users to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook