Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat fedora core core 3.0 vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv2
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked.
Redhat Fedora Core Core 5.0Redhat Enterprise Linux 3.0Redhat Enterprise Linux 4.0Redhat Enterprise Linux 2.1
10
CVSSv2
CVE-2004-0557
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 up to and including 12.17.4 allow remote malicious users to execute arbitrary code via certain WAV file header fields.
Sox Sox 12.17.4Conectiva Linux 10.0Sox Sox 12.17.2Sox Sox 12.17.3Conectiva Linux 8.0Conectiva Linux 9.0Gentoo Linux 1.4Redhat Enterprise Linux 3.0Redhat Enterprise Linux Desktop 3.0Redhat Fedora Core Core 1.0Redhat Fedora Core Core 2.0
10
CVSSv2
CVE-2004-0882
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x up to and including 3.0.7 may allow remote malicious users to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.
Samba Samba 3.0.0Samba Samba 3.0.5Samba Samba 3.0.6Samba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 3.0.1Samba Samba 3.0.2Samba Samba 3.0.7Conectiva Linux 10.0Samba Samba 3.0.4Redhat Enterprise Linux 2.1Redhat Fedora Core Core 3.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux 3.0Ubuntu Ubuntu Linux 4.1Redhat Enterprise Linux Desktop 3.0Redhat Fedora Core Core 2.0
5
CVSSv2
CVE-2004-0930
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
Samba Samba 3.0.7Sgi Samba 3.0.1Sgi Samba 3.0Conectiva Linux 10.0Samba Samba 3.0.5Samba Samba 3.0.6Sgi Samba 3.0.6Sgi Samba 3.0.7Samba Samba 3.0.0Sgi Samba 3.0.2Sgi Samba 3.0.3Samba Samba 3.0.3Samba Samba 3.0.4Sgi Samba 3.0.4Sgi Samba 3.0.5Redhat Enterprise Linux 2.1Redhat Enterprise Linux 3.0Redhat Linux Advanced Workstation 2.1Redhat Fedora Core Core 3.0Gentoo LinuxRedhat Enterprise Linux Desktop 3.0Redhat Fedora Core Core 2.0
5
CVSSv2
CVE-2005-2970
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote malicious users to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
Apache Http ServerCanonical Ubuntu Linux 4.10Canonical Ubuntu Linux 5.04Canonical Ubuntu Linux 5.10Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux Server 4.0Redhat Enterprise Linux Workstation 4.0Redhat Enterprise Linux Workstation 3.0Redhat Enterprise Linux Server 3.0Fedoraproject Fedora Core 4
5
CVSSv2
CVE-2004-1613
Mozilla allows remote malicious users to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstr...
Mozilla Mozilla 1.0Mozilla Mozilla 1.1Mozilla Mozilla 1.3Mozilla Mozilla 1.3.1Mozilla Mozilla 1.5Mozilla Mozilla 1.6Mozilla Mozilla 1.4Mozilla Mozilla 1.4.1Mozilla Mozilla 1.7Mozilla Mozilla 1.7.1Mozilla Mozilla 1.0.1Mozilla Mozilla 1.0.2Mozilla Mozilla 1.2Mozilla Mozilla 1.8Sgi Propack 3.0Mozilla Mozilla 1.2.1Mozilla Mozilla 1.4.2Mozilla Mozilla 1.4.4Mozilla Mozilla 1.7.2Mozilla Mozilla 1.7.3Redhat Enterprise Linux 2.1Redhat Linux 7.3
5
CVSSv2
CVE-2004-0960
FreeRADIUS prior to 1.0.1 allows remote malicious users to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.
Freeradius Freeradius 0.3Freeradius Freeradius 0.4Freeradius Freeradius 0.9.3Freeradius Freeradius 1.0.0Freeradius Freeradius 0.5Freeradius Freeradius 0.8Freeradius Freeradius 0.8.1Freeradius Freeradius 0.9Freeradius Freeradius 0.2Freeradius Freeradius 0.9.1Freeradius Freeradius 0.9.2Redhat Enterprise Linux 3.0Redhat Fedora Core Core 2.0
5
CVSSv2
CVE-2004-0961
Memory leak in FreeRADIUS prior to 1.0.1 allows remote malicious users to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.
Freeradius Freeradius 0.4Freeradius Freeradius 0.5Freeradius Freeradius 1.0.0Freeradius Freeradius 0.8Freeradius Freeradius 0.8.1Freeradius Freeradius 0.9Freeradius Freeradius 0.9.1Freeradius Freeradius 0.2Freeradius Freeradius 0.3Freeradius Freeradius 0.9.2Freeradius Freeradius 0.9.3Redhat Enterprise Linux 3.0Redhat Fedora Core Core 2.0
5
CVSSv2
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows malicious users to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integ...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorEasy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Koffice 1.4.2Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Kde Koffice 1.4.1Tetex Tetex 2.0Tetex Tetex 2.0.1
10
CVSSv2
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows malicious users to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, a...
Kde Kdegraphics 3.2Kde Kdegraphics 3.4.3Easy Software Products Cups 1.1.22Easy Software Products Cups 1.1.22 Rc1Kde Kpdf 3.2Kde Kpdf 3.4.3Tetex Tetex 2.0.2Tetex Tetex 3.0Kde Koffice 1.4Sgi Propack 3.0Tetex Tetex 1.0.7Libextractor LibextractorKde Koffice 1.4.1Kde Koffice 1.4.2Tetex Tetex 2.0Tetex Tetex 2.0.1Easy Software Products Cups 1.1.23Easy Software Products Cups 1.1.23 Rc1Kde Kword 1.4.2Poppler Poppler 0.4.2Xpdf Xpdf 3.0Conectiva Linux 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook